Mediatek modem firmwares can be fully reversed.
This was recently demonstrated by this ultra wide range receiver hack which directly sampled the data from the modem ADCs.