https://www.theiphonewiki.com/w/api.php?action=feedcontributions&feedformat=atom&user=Nathulal 2026-05-26T12:12:18Z User contributions MediaWiki 1.31.14 https://www.theiphonewiki.com/w/index.php?title=PMB8878&diff=3526 2009-04-15T04:01:11Z

<p>Nathulal: /* Known Firmware Versions */</p> <hr /> <div>This is the baseband processor used in the iPhone 3G. It is upgraded with [[BBUpdaterExtreme]]. It is also known as the PMB8878.<br /> <br /> ==Datasheet==<br /> Anyone got one? Infineon provides [http://www.infineon.com/dgdl/X-GOLD608_XMM6080.pdf?location=Products.Mobile_Phone_Baseband_ICs.WCDMA___HSDPA.X-GOLD__608_-_PMB_8878.PRODUCT_TYPE_DOCUMENTS.X-GOLD608_XMM6080.pdf&amp;folderId=db3a304312fcb1bc0113000c158f0004&amp;fileId=db3a30431936bc4b011957c66fee3850 this], which isn't really useful.<br /> <br /> ==Secpack 2.0==<br /> This is the security region in the files sent to the [[X-Gold 608]]. This is the first 0xCF8 is new fls and eep files.<br /> <br /> ===Layout===<br /> 0x634--Memory Map<br /> 0x714--Descriptor<br /> 0xCD4--Post secpack pointer to name<br /> 0xCEC--Data length<br /> <br /> ==Endpack==<br /> The fls and eep files also have a footer tacked onto the end containing the loader and signature.<br /> <br /> ==Memory Map==<br /> FLASH 0x20000000 0x1000000<br /> CODE 0x20000000 0x40000 0b0010(bootstrapper)<br /> CODE 0x20040000 0xDC0000 0b0100(main firmware)<br /> FFS 0x20A00000 0x100000 0b1100(empty)<br /> DYNFFS 0x20A00000 0x100000 0b1100(empty)<br /> FFS 0x20B00000 0x40000 0b1011(empty)<br /> DYN_EEP 0x20E40000 0x80000 0b0110<br /> SECPACK 0x20EC0000 0x40000<br /> SECZONE 0x20F80000 0x40000<br /> STATIC_EEP 0x20FC0000 0x40000 0b0111<br /> RAM 0x40000000 0x800000<br /> <br /> ==MMU relocation table==<br /> ===Bootloader===<br /> [[Image:Bltbl.png]]<br /> <br /> ===Firmware===<br /> [[Image:Bbmmu.png]]<br /> <br /> ==Complete memory dump==<br /> [http://depositfiles.com/files/i5119hpzm 0x00000000-0x0001FFFF]<br /> <br /> [http://depositfiles.com/files/mxslfu4dp 0x20000000-0x20FFFFFF]<br /> <br /> [http://depositfiles.com/files/6wiet73wn 0x40000000-0x407FFFFF]<br /> <br /> [http://depositfiles.com/files/fioppsphe 0xFFFF0000-0xFFFFFFFF]<br /> <br /> == Known Firmware Versions ==<br /> [[1.43.00]] 2.0 (Build 5A331 - Internal Beta)<br /> [[1.45.00]] 2.0 (Build 5A347 - Gold Master)<br /> [[1.48.02]] 2.0.1 (Build 5B108)<br /> [[2.04.03]] 2.1 (Build 5F90)<br /> [[2.08.01]] 2.0.2 (Build 5C1)<br /> [[2.11.07]] 2.1 (Build 5F136)<br /> [[2.28.00]] 2.2 (Build 5G77)<br /> [[2.30.03]] 2.2.1 (Build 5H11)<br /> [[4.20.01]] 3.0 beta 1 (Build 7A238j)<br /> [[4.22.01]] 3.0 beta 2 (Build 7A259g)<br /> [[4.24.02]] 3.0 beta 3 (Build 7A280f)<br /> <br /> ==Accessing Interactive Mode==<br /> Interactive mode isn't accessed by sending characters to the baseband. Instead a GPIO pin is raised with a kernel call to preupdate reset.<br /> result = IOConnectCallScalarMethod(conn, 0, 0, 0, 0, 0); //reset<br /> result = IOConnectCallScalarMethod(conn, 1, 0, 0, 0, 0); //power set<br /> result = IOConnectCallScalarMethod(conn, 2, 0, 0, 0, 0); //configuring mux<br /> result = IOConnectCallScalarMethod(conn, 7, 0, 0, 0, 0); //powercycle<br /> result = IOConnectCallScalarMethod(conn, 8, 0, 0, 0, 0); //preupdate reset<br /> <br /> <br /> <br /> [[Category:Baseband]]</div>

Nathulal