PHY firmware.

[Decrypt]

Hello out there. Wondering how deep of a look at the PHY and FE the community has taken. Interested in repurposing user terminals into raw iq/if sample receivers for passive radar, and possibly even TX power on radar as well. I see the RFFE bus does control for the FE and RF module. Looking to see what possible debug or raw modes they may have left available, or possibly looking into the FE modules for  direct sampling.

[Oleg Kutkov]

Hello. RFFE bus controls FEM connected to DBF chip. Each DBF has its own RFFE bus.
Also, each DBF is running firmware on its DSP core. The core type is ST xp70. I can probably share the firmware hex file, but I can't see any use for it because no XP70 binary tools are available.
This XP70 firmware controls the operations of the DBF chip. It's highly specialized for Starlink tasks (channeling, beamforming).
DBF is connected to the modem in SoC via a custom high-speed bus.