Difference between revisions of "Wrigley 3G"

From MILEDROPEDIA
Jump to: navigation, search
(Created page with 'It is a custom digital baseband architecture (DBB). It consist from: 1) DSP Processor - TMS320C55x+ - based 2) MCU (general purpose processor) - ARM9 - based Both communicated…')
 
(Mentioned radare2 as C55x+ reverse engineering tool.)
 
(4 intermediate revisions by 3 users not shown)
Line 2: Line 2:
 
It consist from:
 
It consist from:
  
1) DSP Processor - TMS320C55x+ - based
+
# DSP Processor - TMS320C55x+ - based
 
+
# MCU (general purpose processor) - ARM9 - based
2) MCU (general purpose processor) - ARM9 - based
+
  
 
Both communicated with each other over the shared memory
 
Both communicated with each other over the shared memory
  
{{:hardware:wrigley3g-2.png|}}
+
[[File:gsm-modem.png|800px]]
  
Source DIA file: [[http://droid-developers.org/files/diagrams/Wrigley3G.dia|Wrigley3G]]
+
Source DIA file: [http://droid-developers.org/files/diagrams/Wrigley3G.dia Wrigley3G]
  
 
As and AP (OMAP3430) Wrigley3G use one memory chip, but another partition.
 
As and AP (OMAP3430) Wrigley3G use one memory chip, but another partition.
 +
 +
== Reverse engineering ==
 +
 +
You can use [http://rada.re/ radare2] tool for both c55x+ and arm disassembly.
 +
For example:
 +
 +
  $ r2 -a c55x+ some_c55x_plus_binary.bin
 +
 +
It do basic jump analysis too.

Latest revision as of 23:09, 15 May 2013

It is a custom digital baseband architecture (DBB). It consist from:

  1. DSP Processor - TMS320C55x+ - based
  2. MCU (general purpose processor) - ARM9 - based

Both communicated with each other over the shared memory

Gsm-modem.png

Source DIA file: Wrigley3G

As and AP (OMAP3430) Wrigley3G use one memory chip, but another partition.

Reverse engineering

You can use radare2 tool for both c55x+ and arm disassembly. For example:

 $ r2 -a c55x+ some_c55x_plus_binary.bin

It do basic jump analysis too.