5 replies to this topic

[trinca]

Updated: The WiFi module actually is not present! Please see the reply to the thread below

Despite all the controversy regarding the widely commented issues of $ingular-AT&T  disabling WiFi in the i607, I decided to do some research on my own, this is  what I have found so far:
The first thing I have  done is to get the internal pictures from the FCC, I have not disassembled the  phone, but I am pretty sure some of you guys have done that and maybe with  better definition pictures.
  
  https://gullfoss2.fc...tive_or_pdf=pdf

    comparing the pictures  with the schematic and block diagrams I have found here:

            http://rapi .co...l_1221.pdf.html  (you all know what the "+"s mean)
  
  I came to the conclusion  that the IC in the corner marked MOD205 in the I600 schematic (the WiFi module), also exists in  the i607.
Then I had the need to  try this hypothesis out. So looking for utilities I found wtestlauncher.exe in  the ROM dumps for i600, you can grab a copy here:

    http://www.modaco.co...l&showfile=2321

        Running the utility in  the i607 does nothing when you select WiFi, however diagnoses your Bluetooth.
Nothing strange so far,  if the WiFi module is there it may not have the device drivers in place. Next  question is: What those device drivers are? Back to the schematic in the i600. According  to it this module is labeled SWL-2560S, and the purpose of it is disclosed  here:

    http://www.sem.samsu.../...N&tmp02=app

    Next I wanted to see what  the firmware for i600 does in my i607, and I heard the stories of apocalypses  narrated by other fellow members, I though the best way to deal with it is to  get the utility that flashes the sections separately, you can grab a copy from  here:

    http://www.modaco.co...l&showfile=2323

        To get the individual pda  ROM from the upgrade file for the latest i600 unbranded (XXGD1), I used an HEX  editor, knowing the PDA ROM starts with HEX 4230303046460A0000 and  the phone ROM starts with HEX 060000EA3B00EA3B00 … ,  when located these code  boundaries I was able to practicate surgery and extract out the pda ROM, using  the above utility I flashed just this portion in the i607
With this arrangement the  phone works perfect, the boot loader remains intact, so you can re-flash back  if you want.
There are some things that do not work:

• Camera
  
• Vibrator motor
  
• Bluetooth
  
• WiFi

    However this last one now  appears at the configuration manager, but you can't turn it on.
So I run the utility wtestlauncher.exe  (this version of PDA ROM has it under the windows directory) and this is what came out:

    [2007.7.7 4:19]
>>SGH-i600 WLANTEST
  Build:Oct 24 2006 18:46:27
  TEST Start
  UART path to PDA - 2
  Retry binding
  Retry binding
  Retry binding
  Retry binding
  Retry binding
  Retry binding
  Retry binding
  Retry binding
  Retry binding
  SEMCO Library binding failed
  MAC ADDRESS : 000278f0f0f0
  Port(COM2:38400) is inititialized
  READY read command
  Message log dump complete.

    SEMCO stands for Samsung Electro Mechanics Co.
Now, guys: Where do you  think the MAC address come from??? If there is no device  this MAC address will never show! The utility  has queried the MAC address via a device driver! A quick look at the first 3  octets at http://standards.iee...search?00-02-78  gives this info:

00-02-78   (hex)        Samsung Electro-Mechanics Co., Ltd.
000278 (base 16)   Samsung Electro-Mechanics Co., Ltd.
  314, Mae-tan-dong,
   Pai-dal-gu, Kyoung-gi-do,
   Suwon Suwon KOREA
   KOREA, REPUBLIC OF

Any doubts now? This PDA ROM  (i600) has a device driver, and the name is SWLD25SPT-T1710.dll. A look with  pget from itsutils at http://wiki.xda-deve...gename=XdaUtils  shows it is loaded in memory and the  utility reports the library is not binding, probably to the protocol or the  transport layer. It has dependencies to  CEDDK.DLL,  CCCORE.DLL, which are also present. Maybe is a problem of registry settings, I  am trying to find. The same thing may happen to camera and vibrator. I will  continue with this research and keep you posted. I invite all other forum  members with WM SDK, programming and other skills to join this thread and help  the Reverse Engineering process.

Edited by trinca, 17 July 2007 - 02:44 AM.

[mbranscum]

A MAC address can be put on anything that can put out a signal.

[trinca]

mbranscum, on Jul 8 2007, 20:19, said:

A MAC address can be put on anything that can put out a signal.

True. THe Samsung SWL-2560S may be the WiFi module inside the SGH-i607. I have seen very good pictures in one of the forums showing the board and the ICs. The pictures presented at the FCC are that bad to the point the names of the components can't be seen. Anybody knows where those pictures taken by forum dwelers may be seen?

[trinca]

trinca, on Jul 7 2007, 03:14, said:

Updated: The WiFi module actually is not present! Please see the reply tho the thread below

Not good news.
As I haven't found pictures of the back of the i607 board, I decided to open the phone and take a look.
Unfortunately I was not able to neither a WiFi chip nor a WiFi micro-antenna. I did find the bluetooth
chip for this device being a BTTM46C2SA. The camera chip is also different. THis may explain why neither of
2 two thingsw do not work flashing the i600 ROM in the i607. THe BTTM46C25A implements also the functions of
handset ansd speaker. Maybe the driver is different comparing one file with the other have different sizes.
I will exchange this file and give it a try! The chip isa actually an implementation of the CSR BC04 bluetooth stack.


Updated: Bluetooth device part# changed to BTTM46C2SA, the original post had a typo   -Jul 15 2007-

Edited by trinca, 17 July 2007 - 02:43 AM.

[mrgoldielocks]

I know this post is kind of old but i still have some questions.  you are positive that the i607 does not have the wifi module? it does not have any of the following wifi chips in it? SWL-2470 , SWL-2560S ,  SWL-2480 , SWL-2580S.  i am very interested in this topic, i actually have the i617 (BJ2) and the only thing i wish this phone had was a wifi connection.

[shobaky]

hey guys

this mean no way to flash the phone i607 back to make it work again ?