Replicant

h1. ModemFirmwarePartitions

h2. Modem partitions

|_. Name |_. Content |_. GT-I9100 |_. GT-N7000 |_. GT-I9250 |_. GT-I9300 |_. GT-N7100 |_. GT-P3100 |_. GT-N5100 |_. GT-P5100 |

| TOC | Partition table |\3. None |\4. [ 0x0 -> 0xfff ] |TODO |

| PSIRAM | First stage bootloader |\3. [ 0x0 -> 0xefff ] |\5. [ 0x1000 -> 0xefff ] |

| EBL | Second stage bootloader ? |\8. [ 0xF000 -> 0x27fff ] |

| MAIN | ? |\3. [ 0x28000 -> 0x9fffff ] |\5. [ 0x28000 -> 0x9ff7ff ] |

| SECPACK | ? |\8. [ 0x9ff800 -> 0x9fffff ] |

| NV | nvdata default values |\8. [ 0xa00000 -> 0xbfffff ] |

|_. Name |_. Content |_. aries |

| TOC | Partition table | None |

| PSIRAM | First stage bootloader | [ 0x0-> 0x4fff ] |

| MAIN? | Modem firmware? Is it splitable? | [ 0x5000 -> 0x9fffff ] |

| NV | ? (/efs/nv_data.bin loaded instead) | |

|\2. Filled with only 0xffff | [ 0xa00000 -> 0xbfffff ] |

|\2. Modem firmware size | 12 MiB | 

|_. Name |_. Content |_. crespo |

| TOC | Partition table |\ None |

| PSIRAM | First stage bootloader | [ 0x0-> 0x4fff ] |

| MAIN? | Modem firmware? Is it splitable? | [ 0x5000 -> 0x9fffff ] |

| NV | ? (/efs/nv_data.bin loaded instead) |

| Beside very few data (144 bytes starting at 0xc00000 ), it's filled with 0xFFs | [ 0xa00000 -> 0xd7ffff ] |

|\2. Modem firmware size | 13.5 MiB |

And the respective libsamsung-ipc functions: 

|_. Partition |_. Content |_. aries |_. crespo |_. GT-I9100 |_. GT-N7000 |_. GT-I9250 |_. GT-I9300 |_. GT-N7100 |_. GT-P3100 |_. GT-P5100 |_. GT-N5100 |

| PSIRAM | First stage bootloader |\2. xmm616_psi_send |\2. xmm626_hsic_psi_send | xmm626_mipi_psi_send |\2. xmm626_hsic_psi_send |\2. xmm626_mipi_psi_send | xmm626_hsic_psi_send |

| EBL | Second stage bootloader ? |\2. ? |\2. xmm626_hsic_ebl_send | xmm626_mipi_ebl_send |\2. xmm626_hsic_ebl_send |\2. xmm626_mipi_ebl_send | xmm626_hsic_ebl_send |

| MAIN | ? |\2. xmm616_firmware_send |\2. xmm626_hsic_firmware_send | xmm626_mipi_firmware_send |\2. xmm626_hsic_firmware_send |\2. xmm626_mipi_firmware_send | xmm626_hsic_firmware_send |

| SECPACK | ? |\2. ? |\2. xmm626_hsic_sec_start_send | xmm626_mipi_sec_start_send |\2. xmm626_hsic_sec_start_send |\2. xmm626_mipi_sec_start_send | xmm626_hsic_sec_start_send |

| NV |nvdata default values |\2. xmm616_nv_data_send |\2. xmm626_hsic_nv_data_send | xmm626_mipi_nv_data_send |\2. xmm626_hsic_nv_data_send |\2. xmm626_mipi_nv_data_send | xmm626_hsic_nv_data_send |

At least some of these functions can be merged together if we have a modem_data_send function:

* The only difference between xmm626_mipi_nv_data_send and xmm626_mipi_hsic_data_send is the use of xmm626_mipi_modem_data_send vs xmm626_hsic_modem_data_send

TODO: find the place in libsamsung-ipc source mentioning that

References for the table:

* https://git.replicant.us/replicant/hardware_replicant_libsamsung-ipc/tree/samsung-ipc/devices/i9300/i9300.h?id=9ff9785a7f48e32f107ca7fb2e298b1320ad4cbc

* https://git.replicant.us/replicant/hardware_replicant_libsamsung-ipc/tree/samsung-ipc/devices/n7100/n7100.h?id=9ff9785a7f48e32f107ca7fb2e298b1320ad4cbc

* Verified on GT-I9300 and GT-N7100 modem partition table

h4. GT-I9300, GT-N7100, GT-P3100 modem partition table dump

TODO:

* Send patch for the "modem-partition-tool":https://git.replicant.us/contrib/GNUtoo/hardware_replicant_libsamsung-ipc/tree/tools/modem-image-tool.c?h=patches-todo/modem-tools#n33

* Make sure that we know the device from the command line

* Understand the field depths along the way when supporting more devices

* Document all other devices that don't have this partition table

* Find the name of this partition table

<pre>

$ hexdump -C RADIO.img

00000000  50 53 49 52 41 4d 00 00  00 00 00 00 00 10 00 00  |PSIRAM..........|

00000010  00 00 00 00 00 e0 00 00  00 00 00 00 00 00 00 00  |................|

00000020  45 42 4c 00 00 00 00 00  00 00 00 00 00 f0 00 00  |EBL.............|

00000030  00 00 00 60 00 90 01 00  00 00 00 00 00 00 00 00  |...`............|

00000040  4d 41 49 4e 00 00 00 00  00 00 00 00 00 80 02 00  |MAIN............|

00000050  00 00 30 60 00 78 9d 00  00 00 00 00 00 00 00 00  |..0`.x..........|

00000060  53 45 43 50 41 43 4b 00  00 00 00 00 00 f8 9f 00  |SECPACK.........|

00000070  00 00 00 00 00 08 00 00  00 00 00 00 00 00 00 00  |................|

00000080  4e 56 00 00 00 00 00 00  00 00 00 00 00 00 a0 00  |NV..............|

00000090  00 00 e8 60 00 00 20 00  00 00 00 00 00 00 00 00  |...`.. .........|

000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

*

[...]

</pre>

h3. Devices with a different partition table

* The devices with a Qualcomm modem like the GT-I9305 and the GT-N7105 have individual files inside the vfat modem partition. See the "Samsung_Midas_4G":https://osmocom.org/projects/quectel-modems/wiki/Samsung_Midas_4G on the quectel-modems osmocom project for more details.

h3. Unknown

We would need to get a device and dump the modem firmware to check, but given the offset of the PSIRAM, it probably contains the same header:

* Galaxy Note 8.0

* GT-P5100 is untested but but it's probably similar to the GT-P3100