https://www.theiphonewiki.com/w/api.php?action=feedcontributions&feedformat=atom&user=IAnonymous The iPhone Wiki - User contributions [en] 2026-04-24T12:28:23Z User contributions MediaWiki 1.31.14 https://www.theiphonewiki.com/w/index.php?title=PMB8878&diff=14169 PMB8878 2010-12-12T23:33:20Z <p>IAnonymous: </p> <hr /> <div>This is the baseband processor used in the [[N82ap|iPhone 3G]], [[N88ap|iPhone 3GS]] and [[K48ap|iPad]] (3G version). It is upgraded with [[BBUpdaterExtreme]]. It is also known as the PMB8878 and is also used on the LG KM900 ARENA. There is a [http://arenoid.com team] working on how to port Android on LG ARENA.<br /> <br /> ==Datasheet==<br /> Anyone got one? Infineon provides [http://www.infineon.com/dgdl/X-GOLD608_XMM6080.pdf?location=Products.Mobile_Phone_Baseband_ICs.WCDMA___HSDPA.X-GOLD__608_-_PMB_8878.PRODUCT_TYPE_DOCUMENTS.X-GOLD608_XMM6080.pdf&amp;folderId=db3a304312fcb1bc0113000c158f0004&amp;fileId=db3a30431936bc4b011957c66fee3850 this], which isn't really useful.<br /> <br /> <br /> View Pinouts from Apple iPhone 3G Schematic - http://img218.imageshack.us/img218/149/baseband.jpg<br /> <br /> The firmware is a version of [http://www.mentor.com/products/embedded_software/nucleus_rtos/ Nucleos OS], a realtime OS for embedded platforms. The parser for the AT commands is generated from GNU bison.<br /> <br /> ==Secpack 2.0==<br /> This is the security region in the files sent to the [[X-Gold 608]]. This is the first 0xCF8 is new fls and eep files.<br /> <br /> ===Layout===<br /> 0x634--Memory Map<br /> 0x714--Descriptor<br /> 0xCD4--Post secpack pointer to name<br /> 0xCEC--Data length<br /> <br /> ==Endpack==<br /> The fls and eep files also have a footer tacked onto the end containing the loader and signature.<br /> <br /> ==Memory Map==<br /> FLASH 0x20000000 0x1000000<br /> CODE 0x20000000 0x40000 0b0010(bootstrapper)<br /> CODE 0x20040000 0xDC0000 0b0100(main firmware)<br /> FFS 0x20A00000 0x100000 0b1100(empty)<br /> DYNFFS 0x20A00000 0x100000 0b1100(empty)<br /> FFS 0x20B00000 0x40000 0b1011(empty)<br /> DYN_EEP 0x20E40000 0x80000 0b0110<br /> SECPACK 0x20EC0000 0x40000<br /> SECZONE 0x20F80000 0x40000<br /> STATIC_EEP 0x20FC0000 0x40000 0b0111<br /> RAM 0x40000000 0x800000<br /> <br /> ==MMU relocation table==<br /> ===Bootloader===<br /> [[Image:Bltbl.png]]<br /> <br /> ===Firmware===<br /> [[Image:Bbmmu.png]]<br /> <br /> == Known [[iPhone]] (3G and 3GS) Firmware Versions ==<br /> [[1.43.00]] 2.0 (Build 5A331 - Internal Beta)<br /> [[1.45.00]] 2.0 (Build 5A347 - Gold Master)<br /> [[1.48.02]] 2.0.1 (Build 5B108)<br /> [[2.04.03]] 2.1 (Build 5F90)<br /> [[2.08.01]] 2.0.2 (Build 5C1)<br /> [[2.11.07]] 2.1 (Build 5F136)<br /> [[2.28.00]] 2.2 (Build 5G77)<br /> [[2.30.03]] 2.2.1 (Build 5H11)<br /> [[4.20.01]] 3.0 beta 1 (Build 7A238j)<br /> [[4.22.01]] 3.0 beta 2 (Build 7A259g)<br /> [[4.24.02]] 3.0 beta 3 (Build 7A280f)<br /> [[4.26.08]] 3.0 (Build 7A341) and 3.0.1 (Build 7A400)<br /> [[5.08.01]] 3.1 beta 1 (Build 7C97d)<br /> [[5.10.01]] 3.1 beta 2 (Build 7C106c)<br /> [[5.11.04]] 3.1 beta 3 (Build 7C116a)<br /> [[5.11.07]] 3.1 (Build 7C144) and 3.1.2 (Build 7D11)<br /> [[5.12.01]] 3.1.3 (Build 7E18)<br /> [[5.13.03]] 4.0 beta 1 (Build 8A230m) and 4.0 beta 2 (Build 8A248c)<br /> [[5.13.04]] 4.0 (Build 8A293), 4.0.1 (Build 8A306), and 4.0.2 (Build 8A400)<br /> [[5.14.01]] 4.1 beta 2 (Build 8B5091b)<br /> [[5.14.02]] 4.1 (Build 8B117)<br /> [[5.15.05]] 4.2GM (Build 8c134)<br /> <br /> == Known [[iPad]] Firmware Versions ==<br /> [[6.15.00]] 3.2 (Build 7B367), 3.2.1 (Build 7B405), and 3.2.2 (Build 7B500)<br /> [[7.08.00]] 4.2 beta 1 (Build 8C5091e)<br /> [[7.09.00]] 4.2 beta 2 (Build 8C5101)<br /> [[7.10.00]] 4.2.1 (Build 8C148)<br /> <br /> ==Accessing [[Interactive Mode]]==<br /> Interactive mode isn't accessed by sending characters to the baseband. Instead a GPIO pin is raised with a kernel call to preupdate reset.<br /> result = IOConnectCallScalarMethod(conn, 0, 0, 0, 0, 0); //reset(kAppleBasebandConnectMethodResetModem)<br /> result = IOConnectCallScalarMethod(conn, 1, 0, 0, 0, 0); //power set(kAppleBasebandConnectMethodRadioOn)<br /> result = IOConnectCallScalarMethod(conn, 2, ?, 0, 0, 0); //configuring mux<br /> result = IOConnectCallScalarMethod(conn, 7, 0, 0, 0, 0); //powercycle<br /> result = IOConnectCallScalarMethod(conn, 8, 0, 0, 0, 0); //preupdate reset<br /> result = IOConnectCallScalarMethod(conn, 9, 0, 0, 0, 0); //kAppleBasebandConnectMethodNotifyBasebandPoweringDown<br /> <br /> [[Category:Baseband]]</div> IAnonymous