Nintendo Switch Brew - User contributions [en]

EMMC pinout

2020-06-18T23:07:36Z

Stuckpixel: add reset pin to eMMC connector pinout.

=== Front ===
[[File:HAC-EMMC-Side-B.png|600px]]

=== Back ===
[[File:HAC-EMMC-Side-A.png|600px]]

Supply power via the VCC 3.3V and 1.8V pins, and solder the CLK, CMD, and DAT0 pins to an SD Card reader in order to extract the data off the eMMC chip.

=== eMMC Connector ===

[[File:Jackpinassignment.png|200px|thumb|right|eMMC Board Connector Pinout]]
[[File:Plugpinassignment.png|200px|thumb|right|eMMC Motherboard connector pinout]]

{| class="wikitable" border="1"
! Pin #
! Name
! Type
|-
| 1
| 3.3v
| PWR
|-
| 2
| GND
| PWR
|-
| 3
| CMD
| BI
|-
| 4
| GND
| PWR
|-
| 5
| DAT_STRB(?)
| OUT
|-
| 6
| GND
| PWR
|-
| 7
| DAT4
| BI
|-
| 8
| GND
| PWR
|-
| 9
| DAT5
| BI
|-
| 10
| GND
| PWR
|-
| 11
| DAT6
| BI
|-
| 12
| GND
| PWR
|-
| 13
| DAT7
| BI
|-
| 14
| GND
| PWR
|-
| 15
| 1.8v
| PWR
|-
| 16
| 1.8v
| PWR
|-
| 17
| GND
| PWR
|-
| 18
| GND
| PWR
|-
| 19
| DAT2
| BI
|-
| 20
| GND
| PWR
|-
| 21
| DAT1
| BI
|-
| 22
| GND
| PWR
|-
| 23
| DAT0
| BI
|-
| 24
| GND
| PWR
|-
| 25
| DAT3
| BI
|-
| 26
| GND
| PWR
|-
| 27
| CLK
| IN
|-
| 28
| GND
| PWR
|-
| 29
| RESET
| IN
|-
| 30
| 3.3v
| PWR
|}

The eMMC connector plug on the board mates with the receptacle on the Switch motherboard. The receptacle is a [http://www.molex.com/molex/products/datasheet.jsp?part=active/5009130302_PCB_RECEPTACLES.xml&channel=Products&Lang=en-US Molex 5009130302], and is available from retailers such as [https://www.digikey.com/product-detail/en/molex-llc/5009130302/WM6833CT-ND/3045233 Digi-Key].

Testpads

2020-03-11T20:56:40Z

Stuckpixel:

The Nintendo Switch mainboard has a series of testpads on the front and back, presumably used in factory test, diagnostics, and early board bringup procedures.

== Raw Logic captures ==

These are reference materials, taken from poking at I/O on various testpads. https://github.com/hedgeberg/Switch-Logic-Captures

== Photos ==

[[File:Switchre_side1.jpg|200px]]
[[File:Switchre_side2.jpg|200px]]

== Pinouts ==

=== Cluster A ===

{| class=wikitable
! Pad # || Name || Type || Levels || Continuity || Frequency || Comment
|-
| 1 || Batt GND? || || || || ||
|-
| 2 || Battery pulse? || Pulse train || 0-3.3V || L-5? || ||
|-
| 3 || Battery Vdd || || || || ||
|-
| 4 || Speaker R + || Square wave || 0-3.3V || || || Speaker Right +
|-
| 5 || Speaker R - || Square wave || 0-3.3V || || || Speaker Right -
|-
| 6 || Weak GND? || || || || ||
|-
| 7 || SDA || I2C || 0-1.8V || || ||
|-
| 8 || SCL || I2C || 0-1.8V || || ||
|-
| 9 || USB-PWR-WAVE? || Square wave || 0-3.3V || K-4, K-5? || ~11 Hz ||
|-
| 10 || USB-PWR-WAVE? || Square wave || 0-3.3V || K-4, K-5? || ~11 Hz ||
|}

=== Cluster B ===

{| class=wikitable
! Pad # || Name || Type || Levels || Continuity || Frequency || Comment
|-
| 1 || || DBVDD || || || || from ALC5639 pin 43
|-
| 2 || D+ || USB-C || || || || Cluster B - 3
|-
| 3 || D- || USB-C || || || || Cluster B - 2
|-
| 4 || +3.3V || XRST || || || || from M92T36 pin 4
|-
| 5 || +3.3V || VSVR || || || || from M92T36 pin 6
|-
| 5(b) || VUSB || VB || || || || from M92T36 pin 9
|-
| 6 || GND || || || || ||
|}

=== Cluster C ===

{| class=wikitable
! Pad # || Name || Type || Levels || Continuity || Frequency || Comment
|-
| 1 || ?? || || 0-1.8V || || || No clue. This is definitely important, we just have no idea how. May need to interface with dock for comms.
|-
| 2 || UART-A RX || || 0-1.8V || || || UART input
|-
| 3 || UART-A TX || || 0-1.8V || || || UART output
|-
| 4 || ?? || || 0-1.8V || || ||
|-
| 5 || ?? || || 0-1.8V || || ||
|-
| 6 || UART-A RTS || || 0-1.8V || || || UART-A Flow control
|-
| 7 || ?? || || 0-1.8V || || ||
|-
| 8 || UART-A CTS || || 0-1.8V || || || UART-A Flow control
|-
| 9 || ?? || || 0-1.8V || || ||
|-
| 10 || ?? || || 0-1.8V || || ||
|-
| 11 || +1.8V || || 0-1.8V || || ||
|}

=== Cluster D ===

{| class=wikitable
! Pad # || Name || Type || Levels || Continuity || Frequency || Comment
|-
| 1 || GND || || || || ||
|-
| 4 || Seaker L + || || || || || Speaker Left +
|-
| 5 || Seaker L - || || || || || Speaker Left -
|}

=== Cluster E ===

{| class=wikitable
! Pad # || Name || Type || Levels || Continuity || Frequency || Comment
|-
| 1 || Vol (-) || || || || || Button Vol (-)
|-
| 10 || Reset || || || || ||
|-
| 11 || Vdd Referance|| || || || ||
|}

=== Cluster G ===

{| class=wikitable
! Pad # || Name || Type || Levels || Continuity || Frequency || Comment
|-
| 2 || GND || || || || ||
|-
| 4 || Vol(+) || || || || || Button Vol (+)
|-
| 5 || Li-Ion Batt Vdd Mirror || || || || || Power Supply
|-
| 9 || BUTTON_HOME || || || || || RCM strap
|}

=== Cluster H ===

{| class=wikitable
! Pad # || Name || Type || Levels || Continuity || Frequency || Comment
|-
| 1 || || || || || ||
|-
| 2 || || || || || ||
|-
| 3 || || || || || ||
|-
| 4 || Screen_on || On/Off || 0-1.8v || I-2 || || Screen power state, active high
|-
| 5 || || Flow control || 0-1.8V || I-5 || Flow control for pad I-4? ||
|-
| 6 || || || || || ||
|-
| 7 || || UART || 0-1.8V || I-4 || 1.5MBaud?||
|-
| 8 || || UART || 0-1.8V || I-3 || 1.5MBaud?||
|-
| 9 || || || || || ||
|-
| 10 || || || || || H-12 || On the same trace
|-
| 11 || || || || || || Goes to a small ceramic cap near WiFi/BT IC?
|-
| 12 || || || || H-10 || || On the same trace
|}

=== Cluster I ===

{| class=wikitable
! Pad # || Name || Type || Levels || Continuity || Frequency || Comment
|-
| 1 || GND || || || || ||
|-
| 2 || Screen_on || On/Off || 0-1.8V || || || Screen power state, active high
|-
| 3 || || UART || 0-1.8V || || 1.5MBaud? ||
|-
| 4 || || UART || 0-1.8V || || 1.5MBaud? ||
|-
| 5 || || Flow control || 0-1.8V || || || Flow control for pad I-4?
|-
| 6 || || || 0-1.8V || || || Needs testing with chip/touch screen interface board plugged in
|}

=== Cluster J ===

{| class=wikitable
! Pad # || Name || Type || Levels || Continuity || Frequency || Comment
|-
| 1 || ? || Edge || 0-1.8V || || || Turns on around same time as pad J-3
|-
| 2 || GND || || || || ||
|-
| 3 || ? || Edge || 0-1.8V || || || Turns on around same time as pad J-1, slightly after
|-
| 4 || Power button || Pushbutton || 4V-0V || || || Active low
|-
| 5 || ? || Constant? || 0V || Ground?-NT || ||
|-
| 6 || ? || Edge || 0-1.8V || || || Turns on with pad J-6, ~1s after J-1/J-3
|-
| 7 || ? || Edge || 0-1.8V || || || Turns on with pad J-5, ~1s after J-1/J-3
|-
| 8 || ? || Edge? || 0-1.8V || || || Turns on ~1s after J-6/J-7, turns off at unknown point
|}

=== Cluster K ===

{| class=wikitable
! Pad # || Name || Type || Levels || Continuity || Frequency || Comment
|-
| 1 || GND || || || || ||
|-
| 2 || D- || USB-C || || || || Cluster B - 3
|-
| 3 || D+ || USB-C || || || || Cluster B - 2
|-
| 4 || USB-PWR-WAVE? || Square wave || 0V-3.3V || A-9, A-10? || ~11 Hz ||
|-
| 5 || USB-PWR-WAVE? || Square wave || 0V-3.3V || A-9, A-10? || ~11 Hz || Appears to mirror K4. Duty cycle 66.67%. Low on screen lock. Off until first interaction.
|-
| 6 || USB-C V+ || Supply power || || || || support fast charger : "normal mode = 5V+" "Fast changer = 12V+"
|-
| 7 || BQ24193 VBUS + M92T36 VEX || Power supply? || ~3V-0V || None known || N/A || 0 when usb-c not plugged in, falls slowly on first interaction if USB-C plugged in. Power draw related?
|}

=== Cluster L ===

TODO: Update diagram

{| class=wikitable
! Pad # || Name || Type || Levels || Continuity || Frequency || Comment
|-
| 1 || Li-Ion Batt Vdd Mirror || Power Supply || Std. Li-Ion || || ||
|-
| 2 || GND || || || || ||
|-
| 3 || Li-Ion Batt Vdd || Battery Input || Std. Li-Ion || || ||
|-
| 4 || Mirrored Ground? || || || || || Holds steady @ 0, looks like a decoupled isolated ground
|-
| 5 || Battery pulse? || || || || <1 Hz || Duty cycle ~0%
|-
| 6 || GND || || || || ||
|}

EMMC pinout

2020-01-10T22:29:02Z

Stuckpixel: Add full eMMC connector pinout

=== Front ===
[[File:HAC-EMMC-Side-B.png|600px]]

=== Back ===
[[File:HAC-EMMC-Side-A.png|600px]]

Supply power via the VCC 3.3V and 1.8V pins, and solder the CLK, CMD, and DAT0 pins to an SD Card reader in order to extract the data off the eMMC chip.

=== eMMC Connector ===

[[File:Jackpinassignment.png|200px|thumb|right|eMMC Board Connector Pinout]]
[[File:Plugpinassignment.png|200px|thumb|right|eMMC Motherboard connector pinout]]

{| class="wikitable" border="1"
! Pin #
! Name
! Type
|-
| 1
| 3.3v
| PWR
|-
| 2
| GND
| PWR
|-
| 3
| CMD
| BI
|-
| 4
| GND
| PWR
|-
| 5
| DAT_STRB(?)
| OUT
|-
| 6
| GND
| PWR
|-
| 7
| DAT4
| BI
|-
| 8
| GND
| PWR
|-
| 9
| DAT5
| BI
|-
| 10
| GND
| PWR
|-
| 11
| DAT6
| BI
|-
| 12
| GND
| PWR
|-
| 13
| DAT7
| BI
|-
| 14
| GND
| PWR
|-
| 15
| 1.8v
| PWR
|-
| 16
| 1.8v
| PWR
|-
| 17
| GND
| PWR
|-
| 18
| GND
| PWR
|-
| 19
| DAT2
| BI
|-
| 20
| GND
| PWR
|-
| 21
| DAT1
| BI
|-
| 22
| GND
| PWR
|-
| 23
| DAT0
| BI
|-
| 24
| GND
| PWR
|-
| 25
| DAT3
| BI
|-
| 26
| GND
| PWR
|-
| 27
| CLK
| IN
|-
| 28
| GND
| PWR
|-
| 29
| NC(?)
|
|-
| 30
| 3.3v
| PWR
|}

The eMMC connector plug on the board mates with the receptacle on the Switch motherboard. The receptacle is a [http://www.molex.com/molex/products/datasheet.jsp?part=active/5009130302_PCB_RECEPTACLES.xml&channel=Products&Lang=en-US Molex 5009130302], and is available from retailers such as [https://www.digikey.com/product-detail/en/molex-llc/5009130302/WM6833CT-ND/3045233 Digi-Key].

File:Plugpinassignment.png

2020-01-10T22:03:55Z

Stuckpixel: Switch motherboard eMMC connector pin numbers

== Summary ==
Switch motherboard eMMC connector pin numbers

File:Jackpinassignment.png

2020-01-10T21:58:01Z

Stuckpixel: pin numbering of eMMC board.

== Summary ==
pin numbering of eMMC board.

PCV services

2019-04-21T02:43:19Z

Stuckpixel: clear up some inaccuracies

= bpc =
This is "nn::bpc::IBoardPowerControlManager".

{| class="wikitable" border="1"
|-
! Cmd || Name
|-
| 0 || ShutdownSystem
|-
| 1 || RebootSystem
|-
| 2 || GetWakeupReason
|-
| 3 || GetShutdownReason
|-
| 4 || GetAcOk
|-
| 5 || GetBoardPowerControlEvent
|-
| 6 || [2.0.0+] GetSleepButtonState
|-
| 7 || [2.0.0+] GetPowerEvent
|-
| 8 || [2.0.0+]
|-
| 9 || [2.0.0+]
|-
| 10 || [2.0.0+]
|-
| 11 || [3.0.0+]
|-
| 12 || [3.0.0+]
|-
| 13 || [3.0.0+]
|-
| 14 || [6.0.0+]
|}

= bpc:r =
This is "nn::bpc::IRtcManager".

{| class="wikitable" border="1"
|-
! Cmd || Name
|-
| 0 || GetExternalRtcValue
|-
| 1 || SetExternalRtcValue
|-
| 2 || ReadExternalRtcResetFlag
|-
| 3 || [2.0.0+] ClearExternalRtcResetFlag
|-
| 4 || [3.0.0+]
|}

GetExternalRtcValue / SetExternalRtcValue directly accesses the max77620_rtc0 device.

= pcv =
This is "nn::pcv::detail::IPcvService".

{| class="wikitable" border="1"
|-
! Cmd || Name
|-
| [1.0.0-7.0.1] 0 || SetPowerEnabled
|-
| [1.0.0-7.0.1] 1 || SetClockEnabled
|-
| [1.0.0-7.0.1] 2 || SetClockRate
|-
| [1.0.0-7.0.1] 3 || GetClockRate
|-
| [1.0.0-7.0.1] 4 || GetState
|-
| [1.0.0-7.0.1] 5 || GetPossibleClockRates
|-
| [1.0.0-7.0.1] 6 || SetMinVClockRate
|-
| [1.0.0-7.0.1] 7 || SetReset
|-
| [1.0.0-7.0.1] 8 || SetVoltageEnabled
|-
| [1.0.0-7.0.1] 9 || GetVoltageEnabled
|-
| [1.0.0-7.0.1] 10 || GetVoltageRange
|-
| [1.0.0-7.0.1] 11 || SetVoltageValue
|-
| [1.0.0-7.0.1] 12 || GetVoltageValue
|-
| [1.0.0-7.0.1] 13 || GetTemperatureThresholds
|-
| [1.0.0-7.0.1] 14 || SetTemperature
|-
| [1.0.0-5.1.0] 15 || Initialize
|-
| [1.0.0-5.1.0] 16 || IsInitialized
|-
| [1.0.0-5.1.0] 17 || Finalize
|-
| [3.0.0-7.0.1] 18 || PowerOn
|-
| [3.0.0-7.0.1] 19 || PowerOff
|-
| [3.0.0-7.0.1] 20 || ChangeVoltage
|-
| [3.0.0-7.0.1] 21 || GetPowerClockInfoEvent
|-
| [3.0.0-7.0.1] 22 || GetOscillatorClock
|-
| [3.0.0-7.0.1] 23 || GetDvfsTable
|-
| [3.0.0-7.0.1] 24 || GetModuleStateTable
|-
| [3.0.0-7.0.1] 25 || GetPowerDomainStateTable
|-
| 26 || [3.0.0+] GetFuseInfo
|-
| 27 || [5.0.0+]
|-
| [6.0.0-7.0.1] 28 ||
|-
| [6.0.0-7.0.1] 29 ||
|}

[7.0.0+] The type-0xA output buffers were replaced with type-0x22 output buffers, for the following: GetDvfsTable, GetModuleStateTable, and GetPowerDomainStateTable.

== User Name to Block Maps ==
=== Power Switch / Clocking / Reset ===
{| class="wikitable" border="1"
|-
! Name || Block || Rail || Notes
|-
| 0 || CpuBus || vdd_cpu ||
|-
| 1 || GPU || vdd_gpu ||
|-
| 2 || I2S1 || vdd_soc ||
|-
| 3 || I2S2 || vdd_soc ||
|-
| 4 || I2S3 || vdd_soc ||
|-
| 5 || PWM || vdd_soc ||
|-
| 6 || I2C1 || vdd_soc ||
|-
| 7 || I2C2 || vdd_soc ||
|-
| 8 || I2C3 || vdd_soc ||
|-
| 9 || I2C4 || vdd_soc ||
|-
| 10 || I2C5 || vdd_soc ||
|-
| 11 || I2C6 || vdd_soc ||
|-
| 12 || SPI1 || vdd_soc ||
|-
| 13 || SPI2 || vdd_soc ||
|-
| 14 || SPI3 || vdd_soc ||
|-
| 15 || SPI4 || vdd_soc ||
|-
| 16 || DISP1 || vdd_soc ||
|-
| 17 || DISP2 || vdd_soc ||
|-
| 20 || SDMMC1 || vdd_soc ||
|-
| 21 || SDMMC2 || vdd_soc ||
|-
| 22 || SDMMC3 || vdd_soc ||
|-
| 23 || SDMMC4 || vdd_soc ||
|-
| 24 || - || - || Not actual block. Used for debug and stuff.
|-
| 25 || CSITE || vdd_soc ||
|-
| 26 || TSEC || vdd_soc ||
|-
| 27 || MSELECT || vdd_soc ||
|-
| 28 || HDA2CODEC_2X || vdd_soc ||
|-
| 29 || ACTMON || vdd_soc ||
|-
| 30 || I2C_SLOW || vdd_soc ||
|-
| 31 || SOR1 || vdd_soc ||
|-
| 33 || HDA || vdd_soc ||
|-
| 34 || XUSB_CORE_HOST || vdd_soc ||
|-
| 35 || XUSB_FALCON || vdd_soc ||
|-
| 36 || XUSB_FS || vdd_soc ||
|-
| 37 || XUSB_CORE_DEV || vdd_soc ||
|-
| 38 || XUSB_SS_HOSTDEV || vdd_soc ||
|-
| 39 || UARTA || vdd_soc ||
|-
| 40 || UARTB || vdd_soc ||
|-
| 41 || UARTC || vdd_soc ||
|-
| 42 || UARTD || vdd_soc ||
|-
| 43 || HOST1X || vdd_soc ||
|-
| 44 || ENTROPY || vdd_soc ||
|-
| 45 || SOC_THERM || vdd_soc ||
|-
| 46 || VIC || vdd_soc ||
|-
| 47 || NVENC || vdd_soc ||
|-
| 48 || NVJPG || vdd_soc ||
|-
| 49 || NVDEC || vdd_soc ||
|-
| 50 || QSPI || vdd_soc ||
|-
| 52 || TSECB || vdd_soc ||
|-
| 53 || APE || vdd_soc ||
|-
| 54 || ACLK || vdd_soc ||
|-
| 55 || UARTAPE || vdd_soc ||
|-
| 56 || EMC || vdd_soc ||
|-
| 57 || PLLE0 || vdd_soc ||
|-
| 58 || PLLE0 || vdd_soc ||
|-
| 59 || DSI || vdd_soc ||
|-
| 60 || MAUD || vdd_soc ||
|-
| 61 || DPAUX1 || vdd_soc ||
|-
| 62 || MIPI_CAL || vdd_soc ||
|-
| 63 || UART_FST_MIPI_CAL || vdd_soc ||
|-
| 64 || OSC || vdd_soc ||
|-
| 65 || SCLK || vdd_soc ||
|-
| 66 || SOR_SAFE || vdd_soc ||
|-
| 67 || XUSB_SS || vdd_soc ||
|-
| 68 || XUSB_HOST || vdd_soc ||
|-
| 69 || XUSB_DEV || vdd_soc ||
|-
| 70 || EXTPERIPH1 || vdd_soc ||
|-
| 71 || AHUB || vdd_soc ||
|-
| 72 || HDA2HDMICODEC || vdd_soc ||
|-
| 73 || PLLP5 || vdd_soc ||
|-
| 74 || USBD || vdd_soc ||
|-
| 75 || USB2 || vdd_soc ||
|-
| 76 || PCIE || vdd_soc ||
|-
| 77 || AFI || vdd_soc ||
|-
| 78 || PCIEXCLK || vdd_soc ||
|-
| 79 || PEX_USB_UPHY || vdd_soc ||
|-
| 80 || XUSB_PADCTL || vdd_soc ||
|-
| 81 || APBDMA || vdd_soc ||
|-
| 82 || USB2_TRK || vdd_soc ||
|-
| 83 || PLLE0 || vdd_soc ||
|-
| 84 || PLLE0 || vdd_soc ||
|-
| 85 || CEC || vdd_soc ||
|-
| [6.0.0+] 86 || EXTPERIPH2 || vdd_soc ||
|}

=== Voltage ===
{| class="wikitable" border="1"
|-
! Name || Block || Notes
|-
| 0 || max77620_sd0 ||
|-
| 1 || max77620_sd1 ||
|-
| 2 || max77620_sd2 ||
|-
| 3 || max77620_sd3 ||
|-
| 4 || max77620_ldo0 || 1.2v
|-
| 5 || max77620_ldo1 ||
|-
| 6 || max77620_ldo2 || SDcard power, 1.8v - 3.3v
|-
| 7 || max77620_ldo3 || GC ASIC 3.1v
|-
| 8 || max77620_ldo4 || RTC power, 0.85v
|-
| 9 || max77620_ldo5 || GC ASIC 1.8v
|-
| 10 || max77620_ldo6 || AVDD touchscreen, 2.9v
|-
| 11 || max77620_ldo7 ||
|-
| 12 || max77620_ldo8 || DisplayPort, 1.05v
|-
| 13 || max77621_cpu ||
|-
| 14 || max77621_gpu ||
|}

Note: max77620 GPIOs are only used internally by the driver during init, and not exposed via an API.

= pcv:arb =
This is "nn::pcv::IArbitrationManager".

This service no longer exists in [8.0.0+].

{| class="wikitable" border="1"
|-
! Cmd || Name
|-
| 0 || ReleaseControl
|}

= pcv:imm =
This is "nn::pcv::IImmediateManager".

This service no longer exists in [8.0.0+].

{| class="wikitable" border="1"
|-
! Cmd || Name
|-
| 0 || SetClockRate
|}

= clkrst, clkrst:i =
These are "nn::clkrst::IClkrstManager" and "nn::clkrst::IClkrstImmediateManager".

These were added with [8.0.0+].

{| class="wikitable" border="1"
|-
! Cmd || Name
|-
| 0 || OpenSession
|-
| 1 || GetTemperatureThresholds
|-
| 2 || SetTemperature
|-
| 3 || GetPossibleClockRates
|-
| 4 || GetPowerClockInfoEvent
|-
| 5 ||
|}

== IClkrstSession ==
This is "nn::clkrst::IClkrstSession".

{| class="wikitable" border="1"
|-
! Cmd || Name
|-
| 0 || SetClockEnabled
|-
| 1 || SetClockDisabled
|-
| 2 || SetResetAsserted
|-
| 3 || SetResetDeasserted
|-
| 4 || SetPowerEnabled
|-
| 5 || SetPowerDisabled
|-
| 6 || GetState
|-
| 7 || SetClockRate
|-
| 8 || GetClockRate
|-
| 9 || SetMinVClockRate
|-
| 10 || GetPossibleClockRates
|-
| 11 || GetDvfsTable
|}

= clkrst:a =
This is "nn::clkrst::IClkrstArbitrationManager".

This was added with [8.0.0+].

{| class="wikitable" border="1"
|-
! Cmd || Name
|-
| 0 ||
|}

= rgltr =
This is "nn::regulator::IRegulatorManager".

This was added with [8.0.0+].

{| class="wikitable" border="1"
|-
! Cmd || Name
|-
| 0 || OpenSession
|-
| 1 ||
|-
| 2 ||
|-
| 3 ||
|}

== IRegulatorSession ==
This is "nn::regulator::IRegulatorSession".

{| class="wikitable" border="1"
|-
! Cmd || Name
|-
| 0 || [[#SetVoltageEnabled]]
|-
| 1 ||
|-
| 2 || [[#GetVoltageEnabled]]
|-
| 3 || GetVoltageRange
|-
| 4 || GetVoltageValue
|-
| 5 || [[#SetVoltageValue]]
|-
| 6 ||
|}

=== SetVoltageEnabled ===
Takes a bool. Enables/disables the LDO this session was opened for.

=== GetVoltageEnabled ===
Returns a bool. True if voltage is enabled, false if not.

=== SetVoltageValue ===
Takes in a voltage in microvolts and sets the LDO to this voltage.

= rtc =
This was added with [8.0.0+].

{| class="wikitable" border="1"
|-
! Cmd || Name
|-
| 0 ||
|-
| 1 ||
|-
| 2 ||
|-
| 3 ||
|-
| 4 ||
|}

= time:u, time:a, time:s =
This is "nn::timesrv::detail::service::IStaticService".

{| class="wikitable" border="1"
|-
! Cmd || Name || Notes
|-
| 0 || GetStandardUserSystemClock || Returns an [[#ISystemClock]].
|-
| 1 || GetStandardNetworkSystemClock || Returns an [[#ISystemClock]].
|-
| 2 || GetStandardSteadyClock || Returns an [[#ISteadyClock]].
|-
| 3 || GetTimeZoneService || Returns an [[#ITimeZoneService]].
|-
| 4 || GetStandardLocalSystemClock || Returns an [[#ISystemClock]].
|-
| 5 || [4.0.0+] GetEphemeralNetworkSystemClock || Returns an [[#ISystemClock]].
|-
| 20 || [6.0.0+] GetSharedMemoryNativeHandle ||
|-
| 30 || [6.0.0+] GetStandardNetworkClockOperationEventReadableHandle ||
|-
| 31 || [6.0.0+] GetEphemeralNetworkClockOperationEventReadableHandle ||
|-
| 50 || [4.0.0+] SetStandardSteadyClockInternalOffset ||
|-
| 100 || IsStandardUserSystemClockAutomaticCorrectionEnabled ||
|-
| 101 || SetStandardUserSystemClockAutomaticCorrectionEnabled ||
|-
| 102 || [5.0.0+] GetStandardUserSystemClockInitialYear ||
|-
| 200 || [3.0.0+] IsStandardNetworkSystemClockAccuracySufficient ||
|-
| 201 || [6.0.0+] GetStandardUserSystemClockAutomaticCorrectionUpdatedTime ||
|-
| 300 || [4.0.0+] CalculateMonotonicSystemClockBaseTimePoint ||
|-
| 400 || [4.0.0+] GetClockSnapshot ||
|-
| 401 || [4.0.0+] GetClockSnapshotFromSystemClockContext ||
|-
| 500 || [4.0.0+] CalculateStandardUserSystemClockDifferenceByUser ||
|-
| 501 || [4.0.0+] CalculateSpanBetween ||
|}

== ISteadyClock ==
This is "nn::timesrv::detail::service::ISteadyClock".

{| class="wikitable" border="1"
|-
! Cmd || Name || Notes
|-
| 0 || GetCurrentTimePoint || No input, returns an output [[#SteadyClockTimePoint]].
|-
| 2 || GetTestOffset || No input, returns an output [[#TimeSpanType]].
|-
| 3 || SetTestOffset || Takes an input [[#TimeSpanType]], no output.
|-
| 100 || [2.0.0+] GetRtcValue || No input, returns an output s64.
|-
| 101 || [2.0.0+] IsRtcResetDetected || No input, returns an output u8 bool.
|-
| 102 || [2.0.0+] GetSetupResultValue || No input, returns an output u32.
|-
| 200 || [3.0.0+] GetInternalOffset || No input, returns an output [[#TimeSpanType]].
|-
| 201 || [3.0.0-3.0.2] SetInternalOffset || Takes an input [[#TimeSpanType]], no output.
|}

=== SteadyClockTimePoint ===
{| class="wikitable" border="1"
|-
! Offset || Size || Description
|-
| 0x0 || 0x8|| A u64 representing a point in time.
|-
| 0x8 || 0x10 || An ID representing the clock source.
|}

This is a 0x18-byte struct.

=== TimeSpanType ===
This is an u64.

== ISystemClock ==
This is "nn::timesrv::detail::service::ISystemClock".

{| class="wikitable" border="1"
|-
! Cmd || Name || Notes
|-
| 0 || GetCurrentTime || Returns an output [[#PosixTime]].
|-
| 1 || SetCurrentTime || Takes an input [[#PosixTime]].
|-
| 2 || GetSystemClockContext || Returns an output [[#SystemClockContext]].
|-
| 3 || SetSystemClockContext || Takes an input [[#SystemClockContext]].
|}

=== PosixTime ===
This is an u64 for UTC POSIX time.

=== SystemClockContext ===
This is an 0x20-byte struct.

{| class="wikitable" border="1"
|-
! Offset || Size || Description
|-
| 0x0 || 0x8|| a [[#PosixTime]] representing the system clock epoch.
|-
| 0x8 || 0x18 || a [[#SteadyClockTimePoint]]
|}

== ITimeZoneService ==
This is "nn::timesrv::detail::service::ITimeZoneService".

{| class="wikitable" border="1"
|-
! Cmd || Name || Notes
|-
| 0 || GetDeviceLocationName || No input, returns an output [[#LocationName]].
|-
| 1 || SetDeviceLocationName || Takes an input [[#LocationName]], no output.
|-
| 2 || GetTotalLocationNameCount || No input, returns an output s32.
|-
| 3 || LoadLocationNameList ||
|-
| 4 || LoadTimeZoneRule || Takes an input [[#LocationName]] and a type-0x16 output buffer for [[#TimeZoneRule]], no output.
|-
| 5 || [2.0.0+] GetTimeZoneRuleVersion || No input, returns an output [[#TimeZoneRuleVersion]].
|-
| 6 || [5.0.0+] GetDeviceLocationNameAndUpdatedTime ||
|-
| 100 || ToCalendarTime || Takes an input [[#PosixTime]] and a type-0x15 input buffer for [[#TimeZoneRule]], returns an output [[#CalendarTime]] and [[#CalendarAdditionalInfo]].
|-
| 101 || ToCalendarTimeWithMyRule || Takes an input [[#PosixTime]], returns an output [[#CalendarTime]] and [[#CalendarAdditionalInfo]].
|-
| 201 || ToPosixTime || Takes an input [[#CalendarTime]], a type-0x15 input buffer for [[#TimeZoneRule]], an type-0xA output buffer for [[#PosixTime]] array, and returns an output s32.
|-
| 202 || ToPosixTimeWithMyRule || Takes an input [[#CalendarTime]], an type-0xA output buffer for [[#PosixTime]] array, and returns an output s32.
|}

=== LoadLocationNameList ===
Takes an input s32 LocationName_index and a type-0x6 output buffer for [[#LocationName]], returns an output s32 for total output entries.

=== LocationName ===
This contains a TimeZone location string with a max size of 0x24 bytes.

=== TimeZoneRule ===
This is an 0x4000-byte struct. Official sw uses fixed-size 0x4000 for the buffer size with the above commands.

This is loaded from the [[Title_list|TimeZoneBinary]] title with the specified LocationName under the zoneinfo/ directory, the content is then converted into this TimeZoneRule structure.

=== TimeZoneRuleVersion ===
This is an u128.

=== CalendarTime ===
{| class="wikitable" border="1"
|-
! Offset || Size || Description
|-
| 0x0 || 0x2 || Year
|-
| 0x2 || 0x1 || Month
|-
| 0x3 || 0x1 || Day
|-
| 0x4 || 0x1 || Hour
|-
| 0x5 || 0x1 || Minute
|-
| 0x6 || 0x1 || Second
|-
| 0x7 || 0x1 || Padding / unknown?
|}

This is an 0x8-byte struct.

=== CalendarAdditionalInfo ===
{| class="wikitable" border="1"
|-
! Offset || Size || Description
|-
| 0x0 || 0x4 || 0-based day-of-week.
|-
| 0x4 || 0x4 || 0-based day-of-year.
|-
| 0x8 || 0x8 || Timezone name string.
|-
| 0x10 || 0x4 || 0 = no DST, 1 = DST.
|-
| 0x14 || 0x4 || s32 seconds relative to UTC for this timezone.
|}

This is an 0x18-byte struct. This stores timezone info.

[[Category:Services]]

PCV services

2019-04-20T09:23:08Z

Stuckpixel: Add unofficial IRegulatorSession names + notes.

= bpc =
This is "nn::bpc::IBoardPowerControlManager".

{| class="wikitable" border="1"
|-
! Cmd || Name
|-
| 0 || ShutdownSystem
|-
| 1 || RebootSystem
|-
| 2 || GetWakeupReason
|-
| 3 || GetShutdownReason
|-
| 4 || GetAcOk
|-
| 5 || GetBoardPowerControlEvent
|-
| 6 || [2.0.0+] GetSleepButtonState
|-
| 7 || [2.0.0+] GetPowerEvent
|-
| 8 || [2.0.0+]
|-
| 9 || [2.0.0+]
|-
| 10 || [2.0.0+]
|-
| 11 || [3.0.0+]
|-
| 12 || [3.0.0+]
|-
| 13 || [3.0.0+]
|-
| 14 || [6.0.0+]
|}

= bpc:r =
This is "nn::bpc::IRtcManager".

{| class="wikitable" border="1"
|-
! Cmd || Name
|-
| 0 || GetExternalRtcValue
|-
| 1 || SetExternalRtcValue
|-
| 2 || ReadExternalRtcResetFlag
|-
| 3 || [2.0.0+] ClearExternalRtcResetFlag
|-
| 4 || [3.0.0+]
|}

GetExternalRtcValue / SetExternalRtcValue directly accesses the max77620_rtc0 device.

= pcv =
This is "nn::pcv::detail::IPcvService".

{| class="wikitable" border="1"
|-
! Cmd || Name
|-
| [1.0.0-7.0.1] 0 || SetPowerEnabled
|-
| [1.0.0-7.0.1] 1 || SetClockEnabled
|-
| [1.0.0-7.0.1] 2 || SetClockRate
|-
| [1.0.0-7.0.1] 3 || GetClockRate
|-
| [1.0.0-7.0.1] 4 || GetState
|-
| [1.0.0-7.0.1] 5 || GetPossibleClockRates
|-
| [1.0.0-7.0.1] 6 || SetMinVClockRate
|-
| [1.0.0-7.0.1] 7 || SetReset
|-
| [1.0.0-7.0.1] 8 || SetVoltageEnabled
|-
| [1.0.0-7.0.1] 9 || GetVoltageEnabled
|-
| [1.0.0-7.0.1] 10 || GetVoltageRange
|-
| [1.0.0-7.0.1] 11 || SetVoltageValue
|-
| [1.0.0-7.0.1] 12 || GetVoltageValue
|-
| [1.0.0-7.0.1] 13 || GetTemperatureThresholds
|-
| [1.0.0-7.0.1] 14 || SetTemperature
|-
| [1.0.0-5.1.0] 15 || Initialize
|-
| [1.0.0-5.1.0] 16 || IsInitialized
|-
| [1.0.0-5.1.0] 17 || Finalize
|-
| [3.0.0-7.0.1] 18 || PowerOn
|-
| [3.0.0-7.0.1] 19 || PowerOff
|-
| [3.0.0-7.0.1] 20 || ChangeVoltage
|-
| [3.0.0-7.0.1] 21 || GetPowerClockInfoEvent
|-
| [3.0.0-7.0.1] 22 || GetOscillatorClock
|-
| [3.0.0-7.0.1] 23 || GetDvfsTable
|-
| [3.0.0-7.0.1] 24 || GetModuleStateTable
|-
| [3.0.0-7.0.1] 25 || GetPowerDomainStateTable
|-
| 26 || [3.0.0+] GetFuseInfo
|-
| 27 || [5.0.0+]
|-
| [6.0.0-7.0.1] 28 ||
|-
| [6.0.0-7.0.1] 29 ||
|}

[7.0.0+] The type-0xA output buffers were replaced with type-0x22 output buffers, for the following: GetDvfsTable, GetModuleStateTable, and GetPowerDomainStateTable.

== User Name to Block Maps ==
=== Power Switch / Clocking / Reset ===
{| class="wikitable" border="1"
|-
! Name || Block || Rail || Notes
|-
| 0 || CpuBus || vdd_cpu ||
|-
| 1 || GPU || vdd_gpu ||
|-
| 2 || I2S1 || vdd_soc ||
|-
| 3 || I2S2 || vdd_soc ||
|-
| 4 || I2S3 || vdd_soc ||
|-
| 5 || PWM || vdd_soc ||
|-
| 6 || I2C1 || vdd_soc ||
|-
| 7 || I2C2 || vdd_soc ||
|-
| 8 || I2C3 || vdd_soc ||
|-
| 9 || I2C4 || vdd_soc ||
|-
| 10 || I2C5 || vdd_soc ||
|-
| 11 || I2C6 || vdd_soc ||
|-
| 12 || SPI1 || vdd_soc ||
|-
| 13 || SPI2 || vdd_soc ||
|-
| 14 || SPI3 || vdd_soc ||
|-
| 15 || SPI4 || vdd_soc ||
|-
| 16 || DISP1 || vdd_soc ||
|-
| 17 || DISP2 || vdd_soc ||
|-
| 20 || SDMMC1 || vdd_soc ||
|-
| 21 || SDMMC2 || vdd_soc ||
|-
| 22 || SDMMC3 || vdd_soc ||
|-
| 23 || SDMMC4 || vdd_soc ||
|-
| 24 || - || - || Not actual block. Used for debug and stuff.
|-
| 25 || CSITE || vdd_soc ||
|-
| 26 || TSEC || vdd_soc ||
|-
| 27 || MSELECT || vdd_soc ||
|-
| 28 || HDA2CODEC_2X || vdd_soc ||
|-
| 29 || ACTMON || vdd_soc ||
|-
| 30 || I2C_SLOW || vdd_soc ||
|-
| 31 || SOR1 || vdd_soc ||
|-
| 33 || HDA || vdd_soc ||
|-
| 34 || XUSB_CORE_HOST || vdd_soc ||
|-
| 35 || XUSB_FALCON || vdd_soc ||
|-
| 36 || XUSB_FS || vdd_soc ||
|-
| 37 || XUSB_CORE_DEV || vdd_soc ||
|-
| 38 || XUSB_SS_HOSTDEV || vdd_soc ||
|-
| 39 || UARTA || vdd_soc ||
|-
| 40 || UARTB || vdd_soc ||
|-
| 41 || UARTC || vdd_soc ||
|-
| 42 || UARTD || vdd_soc ||
|-
| 43 || HOST1X || vdd_soc ||
|-
| 44 || ENTROPY || vdd_soc ||
|-
| 45 || SOC_THERM || vdd_soc ||
|-
| 46 || VIC || vdd_soc ||
|-
| 47 || NVENC || vdd_soc ||
|-
| 48 || NVJPG || vdd_soc ||
|-
| 49 || NVDEC || vdd_soc ||
|-
| 50 || QSPI || vdd_soc ||
|-
| 52 || TSECB || vdd_soc ||
|-
| 53 || APE || vdd_soc ||
|-
| 54 || ACLK || vdd_soc ||
|-
| 55 || UARTAPE || vdd_soc ||
|-
| 56 || EMC || vdd_soc ||
|-
| 57 || PLLE0 || vdd_soc ||
|-
| 58 || PLLE0 || vdd_soc ||
|-
| 59 || DSI || vdd_soc ||
|-
| 60 || MAUD || vdd_soc ||
|-
| 61 || DPAUX1 || vdd_soc ||
|-
| 62 || MIPI_CAL || vdd_soc ||
|-
| 63 || UART_FST_MIPI_CAL || vdd_soc ||
|-
| 64 || OSC || vdd_soc ||
|-
| 65 || SCLK || vdd_soc ||
|-
| 66 || SOR_SAFE || vdd_soc ||
|-
| 67 || XUSB_SS || vdd_soc ||
|-
| 68 || XUSB_HOST || vdd_soc ||
|-
| 69 || XUSB_DEV || vdd_soc ||
|-
| 70 || EXTPERIPH1 || vdd_soc ||
|-
| 71 || AHUB || vdd_soc ||
|-
| 72 || HDA2HDMICODEC || vdd_soc ||
|-
| 73 || PLLP5 || vdd_soc ||
|-
| 74 || USBD || vdd_soc ||
|-
| 75 || USB2 || vdd_soc ||
|-
| 76 || PCIE || vdd_soc ||
|-
| 77 || AFI || vdd_soc ||
|-
| 78 || PCIEXCLK || vdd_soc ||
|-
| 79 || PEX_USB_UPHY || vdd_soc ||
|-
| 80 || XUSB_PADCTL || vdd_soc ||
|-
| 81 || APBDMA || vdd_soc ||
|-
| 82 || USB2_TRK || vdd_soc ||
|-
| 83 || PLLE0 || vdd_soc ||
|-
| 84 || PLLE0 || vdd_soc ||
|-
| 85 || CEC || vdd_soc ||
|-
| [6.0.0+] 86 || EXTPERIPH2 || vdd_soc ||
|}

=== Voltage ===
{| class="wikitable" border="1"
|-
! Name || Block || Notes
|-
| 0 || max77620_sd0 ||
|-
| 1 || max77620_sd1 ||
|-
| 2 || max77620_sd2 ||
|-
| 3 || max77620_sd3 ||
|-
| 4 || max77620_ldo0 || 1.2v
|-
| 5 || max77620_ldo1 ||
|-
| 6 || max77620_ldo2 || SDcard power, 1.8v - 3.3v
|-
| 7 || max77620_ldo3 || GC ASIC 3.1v
|-
| 8 || max77620_ldo4 || RTC power, 0.85v
|-
| 9 || max77620_ldo5 || GC ASIC 1.8v
|-
| 10 || max77620_ldo6 || AVDD touchscreen, 2.9v
|-
| 11 || max77620_ldo7 ||
|-
| 12 || max77620_ldo8 || DisplayPort, 1.05v
|-
| 13 || max77621_cpu ||
|-
| 14 || max77621_gpu ||
|}

Note: max77620 GPIOs are only used internally by the driver during init, and not exposed via an API.

= pcv:arb =
This is "nn::pcv::IArbitrationManager".

This service no longer exists in [8.0.0+].

{| class="wikitable" border="1"
|-
! Cmd || Name
|-
| 0 || ReleaseControl
|}

= pcv:imm =
This is "nn::pcv::IImmediateManager".

This service no longer exists in [8.0.0+].

{| class="wikitable" border="1"
|-
! Cmd || Name
|-
| 0 || SetClockRate
|}

= clkrst, clkrst:i =
These are "nn::clkrst::IClkrstManager" and "nn::clkrst::IClkrstImmediateManager".

These were added with [8.0.0+].

{| class="wikitable" border="1"
|-
! Cmd || Name
|-
| 0 || OpenSession
|-
| 1 ||
|-
| 2 ||
|-
| 3 ||
|-
| 4 ||
|-
| 5 ||
|}

== IClkrstSession ==
This is "nn::clkrst::IClkrstSession".

{| class="wikitable" border="1"
|-
! Cmd || Name
|-
| 0 || SetClockEnabled
|-
| 1 ||
|-
| 2 || SetReset
|-
| 3 ||
|-
| 4 || SetPowerEnabled
|-
| 5 ||
|-
| 6 ||
|-
| 7 ||
|-
| 8 ||
|-
| 9 ||
|-
| 10 ||
|-
| 11 ||
|}

= clkrst:a =
This is "nn::clkrst::IClkrstArbitrationManager".

This was added with [8.0.0+].

{| class="wikitable" border="1"
|-
! Cmd || Name
|-
| 0 ||
|}

= rgltr =
This is "nn::regulator::IRegulatorManager".

This was added with [8.0.0+].

{| class="wikitable" border="1"
|-
! Cmd || Name
|-
| 0 || OpenSession
|-
| 1 ||
|-
| 2 ||
|-
| 3 ||
|}

== IRegulatorSession ==
This is "nn::regulator::IRegulatorSession".

{| class="wikitable" border="1"
|-
! Cmd || Name || Notes
|-
| 0 || SetLdoEnabled || Takes a bool. Enables the LDO this session was opened for.
|-
| 1 || ||
|-
| 2 || GetLdoEnabled || Returns a bool. True if voltage is enabled, false if not.
|-
| 3 || ||
|-
| 4 || ||
|-
| 5 || SetLdoVoltage || Takes in a voltage and sets the LDO to this voltage.
|-
| 6 || ||
|}

= rtc =
This was added with [8.0.0+].

{| class="wikitable" border="1"
|-
! Cmd || Name
|-
| 0 ||
|-
| 1 ||
|-
| 2 ||
|-
| 3 ||
|-
| 4 ||
|}

= time:u, time:a, time:s =
This is "nn::timesrv::detail::service::IStaticService".

{| class="wikitable" border="1"
|-
! Cmd || Name || Notes
|-
| 0 || GetStandardUserSystemClock || Returns an [[#ISystemClock]].
|-
| 1 || GetStandardNetworkSystemClock || Returns an [[#ISystemClock]].
|-
| 2 || GetStandardSteadyClock || Returns an [[#ISteadyClock]].
|-
| 3 || GetTimeZoneService || Returns an [[#ITimeZoneService]].
|-
| 4 || GetStandardLocalSystemClock || Returns an [[#ISystemClock]].
|-
| 5 || [4.0.0+] GetEphemeralNetworkSystemClock || Returns an [[#ISystemClock]].
|-
| 20 || [6.0.0+] GetSharedMemoryNativeHandle ||
|-
| 30 || [6.0.0+] GetStandardNetworkClockOperationEventReadableHandle ||
|-
| 31 || [6.0.0+] GetEphemeralNetworkClockOperationEventReadableHandle ||
|-
| 50 || [4.0.0+] SetStandardSteadyClockInternalOffset ||
|-
| 100 || IsStandardUserSystemClockAutomaticCorrectionEnabled ||
|-
| 101 || SetStandardUserSystemClockAutomaticCorrectionEnabled ||
|-
| 102 || [5.0.0+] GetStandardUserSystemClockInitialYear ||
|-
| 200 || [3.0.0+] IsStandardNetworkSystemClockAccuracySufficient ||
|-
| 201 || [6.0.0+] GetStandardUserSystemClockAutomaticCorrectionUpdatedTime ||
|-
| 300 || [4.0.0+] CalculateMonotonicSystemClockBaseTimePoint ||
|-
| 400 || [4.0.0+] GetClockSnapshot ||
|-
| 401 || [4.0.0+] GetClockSnapshotFromSystemClockContext ||
|-
| 500 || [4.0.0+] CalculateStandardUserSystemClockDifferenceByUser ||
|-
| 501 || [4.0.0+] CalculateSpanBetween ||
|}

== ISteadyClock ==
This is "nn::timesrv::detail::service::ISteadyClock".

{| class="wikitable" border="1"
|-
! Cmd || Name || Notes
|-
| 0 || GetCurrentTimePoint || No input, returns an output [[#SteadyClockTimePoint]].
|-
| 2 || GetTestOffset || No input, returns an output [[#TimeSpanType]].
|-
| 3 || SetTestOffset || Takes an input [[#TimeSpanType]], no output.
|-
| 100 || [2.0.0+] GetRtcValue || No input, returns an output s64.
|-
| 101 || [2.0.0+] IsRtcResetDetected || No input, returns an output u8 bool.
|-
| 102 || [2.0.0+] GetSetupResultValue || No input, returns an output u32.
|-
| 200 || [3.0.0+] GetInternalOffset || No input, returns an output [[#TimeSpanType]].
|-
| 201 || [3.0.0-3.0.2] SetInternalOffset || Takes an input [[#TimeSpanType]], no output.
|}

=== SteadyClockTimePoint ===
{| class="wikitable" border="1"
|-
! Offset || Size || Description
|-
| 0x0 || 0x8|| A u64 representing a point in time.
|-
| 0x8 || 0x10 || An ID representing the clock source.
|}

This is a 0x18-byte struct.

=== TimeSpanType ===
This is an u64.

== ISystemClock ==
This is "nn::timesrv::detail::service::ISystemClock".

{| class="wikitable" border="1"
|-
! Cmd || Name || Notes
|-
| 0 || GetCurrentTime || Returns an output [[#PosixTime]].
|-
| 1 || SetCurrentTime || Takes an input [[#PosixTime]].
|-
| 2 || GetSystemClockContext || Returns an output [[#SystemClockContext]].
|-
| 3 || SetSystemClockContext || Takes an input [[#SystemClockContext]].
|}

=== PosixTime ===
This is an u64 for UTC POSIX time.

=== SystemClockContext ===
This is an 0x20-byte struct.

{| class="wikitable" border="1"
|-
! Offset || Size || Description
|-
| 0x0 || 0x8|| a [[#PosixTime]] representing the system clock epoch.
|-
| 0x8 || 0x18 || a [[#SteadyClockTimePoint]]
|}

== ITimeZoneService ==
This is "nn::timesrv::detail::service::ITimeZoneService".

{| class="wikitable" border="1"
|-
! Cmd || Name || Notes
|-
| 0 || GetDeviceLocationName || No input, returns an output [[#LocationName]].
|-
| 1 || SetDeviceLocationName || Takes an input [[#LocationName]], no output.
|-
| 2 || GetTotalLocationNameCount || No input, returns an output s32.
|-
| 3 || LoadLocationNameList ||
|-
| 4 || LoadTimeZoneRule || Takes an input [[#LocationName]] and a type-0x16 output buffer for [[#TimeZoneRule]], no output.
|-
| 5 || [2.0.0+] GetTimeZoneRuleVersion || No input, returns an output [[#TimeZoneRuleVersion]].
|-
| 6 || [5.0.0+] GetDeviceLocationNameAndUpdatedTime ||
|-
| 100 || ToCalendarTime || Takes an input [[#PosixTime]] and a type-0x15 input buffer for [[#TimeZoneRule]], returns an output [[#CalendarTime]] and [[#CalendarAdditionalInfo]].
|-
| 101 || ToCalendarTimeWithMyRule || Takes an input [[#PosixTime]], returns an output [[#CalendarTime]] and [[#CalendarAdditionalInfo]].
|-
| 201 || ToPosixTime || Takes an input [[#CalendarTime]], a type-0x15 input buffer for [[#TimeZoneRule]], an type-0xA output buffer for [[#PosixTime]] array, and returns an output s32.
|-
| 202 || ToPosixTimeWithMyRule || Takes an input [[#CalendarTime]], an type-0xA output buffer for [[#PosixTime]] array, and returns an output s32.
|}

=== LoadLocationNameList ===
Takes an input s32 LocationName_index and a type-0x6 output buffer for [[#LocationName]], returns an output s32 for total output entries.

=== LocationName ===
This contains a TimeZone location string with a max size of 0x24 bytes.

=== TimeZoneRule ===
This is an 0x4000-byte struct. Official sw uses fixed-size 0x4000 for the buffer size with the above commands.

This is loaded from the [[Title_list|TimeZoneBinary]] title with the specified LocationName under the zoneinfo/ directory, the content is then converted into this TimeZoneRule structure.

=== TimeZoneRuleVersion ===
This is an u128.

=== CalendarTime ===
{| class="wikitable" border="1"
|-
! Offset || Size || Description
|-
| 0x0 || 0x2 || Year
|-
| 0x2 || 0x1 || Month
|-
| 0x3 || 0x1 || Day
|-
| 0x4 || 0x1 || Hour
|-
| 0x5 || 0x1 || Minute
|-
| 0x6 || 0x1 || Second
|-
| 0x7 || 0x1 || Padding / unknown?
|}

This is an 0x8-byte struct.

=== CalendarAdditionalInfo ===
{| class="wikitable" border="1"
|-
! Offset || Size || Description
|-
| 0x0 || 0x4 || 0-based day-of-week.
|-
| 0x4 || 0x4 || 0-based day-of-year.
|-
| 0x8 || 0x8 || Timezone name string.
|-
| 0x10 || 0x4 || 0 = no DST, 1 = DST.
|-
| 0x14 || 0x4 || s32 seconds relative to UTC for this timezone.
|}

This is an 0x18-byte struct. This stores timezone info.

[[Category:Services]]

Gamecard

2018-09-22T05:55:20Z

Stuckpixel: The chip on the card reader board is a touchscreen controller. The actual controller is on the motherboard.

For the Gamecard partitions that can be [[Filesystem_services|mounted]], see [[Gamecard_Partition|here]].

For the format of the Gamecard image, see [[Gamecard_Format|here]].

= Gamecard controller =

The gamecard controller (a separate chip on the motherboard) is responsible for communicating with the Gamecard.
[[Filesystem_services|FS]], to access the gamecard data, will communicate with the gamecard controller. At each boot, firmware blobs (with a fixed size of 0x7800 bytes) are sent by FS to the gamecard controller.

The gamecard controller firmware is encrypted, signed and follows the format below.

{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x100
| RSA-PKCS#1 signature
|-
| 0x100
| 0x4
| Magic ("LAFW")
|-
| 0x104
| 0x4
| Unknown (0xFF000000, 0xFFFF0000 or 0xFFFFFF00)
|-
| 0x108
| 0x4
|
|-
| 0x10C
| 0x4
|
|-
| 0x110
| 0x4
| Version (0, 1 or 3)
|-
| 0x114
| 0x4
| Unknown (0x80000000)
|-
| 0x118
| 0x4
| Data size
|-
| 0x11C
| 0x4
|
|-
| 0x120
| 0x10
| Data hash
|-
| 0x130
| 0x10
| Placeholder string ("IDIDIDIDIDIDIDID")
|-
| 0x140
| 0x40
| Empty
|-
| 0x180
| 0x7680
| Encrypted data
|}

= Hardware =
{| style="float:right; margin-left: 0px;"
|-
| [[File:ZeldaFront.jpg|200px|thumb|right|A Switch game cartridge, frontside]]
| [[File:ZeldaBack.jpg|200px|thumb|right|A Switch game cartridge, backside]]
|-
| [[File:CartridgeFront.jpeg|200px|thumb|right|Close-up of frontside PCB]]
|rowspan="2"|[[File:CartridgeBack.jpeg|200px|thumb|right|Close-up of backside PCB]]
|-
|[[File:CartridgeFrontBare.jpeg|200px|thumb|right|Close-up of stripped frontside PCB]]
|
|-
|}

== Pinout ==
[[File:Gamecard-pinout.png|400px]]

{| class="wikitable"
! Pin
! Name
! Direction
! Description
|-
| 0
| IRQ?
| Output
| Always wired to GND inside game cartridge; Possibly used for interrupt signaling
|-
| 1
| RCLK
| Output
| Return clock; Game cartridge sends back CLK signal delayed by a few ns
|-
| 2
| CLK
| Input
| Clock, 25MHz
|-
| 3
| CS
| Input
| Chip select; Switch pulls this LOW during a transfer
|-
| 4
| DAT0
| Inout
| Data bus pin 0
|-
| 5
| DAT1
| Inout
| Data bus pin 1
|-
| 6
| VCC 3.3v
| Input
|
|-
| 7
| DAT2
| Inout
| Data bus pin 2
|-
| 8
| DAT3
| Inout
| Data bus pin 3
|-
| 9
| VCC 1.8v
| Input
|
|-
| 10
| DAT4
| Inout
| Data bus pin 4
|-
| 11
| DAT5
| Inout
| Data bus pin 5
|-
| 12
| DAT6
| Inout
| Data bus pin 6
|-
| 13
| DAT7
| Inout
| Data bus pin 7
|-
| 14
| GND
|
|
|-
| 15
| RST
| Input
| Reset, active LOW.
|-
|}

All IO use 1.8V for logic HIGH and 0V for logic LOW.

== Protocol ==
Switch game cartridges use a simple (but Nintendo proprietery) SPI-like bus with 8-bit width (DAT7..0). It is very similar to the bus interface of 3DS game cartridges, except with very different commands.

The Switch host starts a transfer by first pulling CS low, followed by clocking a byte each clock cycle. The bus data will always be ready before the rising edge of the CLK signal, so that it can be captured on the rising edge.
After command bytes are written to the bus, the direction of the bus implicitly changes and the game cartridge responds. The Switch host keeps clocking while the game cartridge responds.
After the transfer is ended, the CS line is pulled high again.

Commands are 16 bytes long, and followed immediately by a 4-byte CRC-32 over the command bytes. After this, the Switch stops driving the data bus, and the bus will be 'floating'. Due to the pull-ups on the bus, it will slowly converge to logic HIGH state. The Switch will clock 2 cycles to allow the bus to settle a direction change. The Switch host will then clock another cycle and if the game cartridge didn't receive the CRC OK, it will respond with "01". Otherwise it will respond with "00" and pull DAT0 low on the next cycle to signal it is busy. The Switch host will then keep clocking until the cartridge is ready.

When the game cartridge is ready to send the actual data response, it will pull the DAT0 pin high for 2 cycles to let the Switch host know. After this, the game cartridge will send the actual data response bytes.

The actual response bytes are also followed immediately by a 4-byte CRC-32 over the actual data response bytes.

== Commands ==
A typical boot up sequence of a game cartridge (in this case, the game "1,2 Switch") looks like this:

{| class="wikitable"
! Command
! Size
! Description
|-
| <code>5B000000000000010000000000000000</code>
| 0x200
| Read sector 0, contains "HEAD" blob
|-
| <code>5B000000000000010000000000000000</code>
| 0x200
| Read sector 0, contains "HEAD" blob
|-
| <code>56000000000000000000000000000000</code>
| 0x4
| Read card id "AE F8 01 21"
|-
| <code>28000000000000000000000000000000</code>
| 0x4
| Read ??? "02 00 00 00"
|-
| <code>A5000000000000000000000000000000</code>
| 0x4
| Read ??? "00 00 00 00"
|-
| <code>56000000000000000000000000000000</code>
| 0x4
| Read card id "AE F8 01 21"
|-
| <code>28000000000000000000000000000000</code>
| 0x4
| Read ??? "02 00 00 00"
|-
| <code>5B000000380000010000000000000000</code>
| 0x200
| Read sector 0x38, contains "CERT" blob
|-
| <code>E2000000000000000000000000000000</code>
| 0x4
| Read ??? "01 00 00 00"
|-
| <code>E0000000000000000000000000000000</code>
| 0x200
| Read crypto-challenge header
|-
| <code>200838A25A344F818ABB6456694D4E8D</code>
| 0
| Enter crypto mode1 with HOST-RANDOM "0838A25A344F818ABB6456694D4E8D"
|-
| <code>7EE41FDF12C01C157CC899910673A0CF</code>
| 0x40
| Encrypted crypto mode1 command, reads CART-RANDOM
|-
| <code>263C8230EC15FAE3CE79365BD850F4BD</code>
| 0x0
| Encrypted mode1 command, enters crypto mode2 with (HOST-RANDOM, CART-RANDOM)
|-
| <code>B6FDA6F37FFA29E18831D0B217DFBDBE</code>
| 0x4
| Encrypted mode2 command, possibly read card id?
|-
| <code>7B97F7DF07240AA9870E1C974336FA8A</code>
| 0x4
| Encrypted mode2 command
|-
|}

The meaning of some these commands are currently unknown.

== Observations ==
* The "update" and "normal" partitions can be dumped using the plaintext 5B commands
* The "secure" partition can only be read from encrypted mode.

== Encryption ==
After a few initial plaintext commands, the Switch instructs the game cartridge to enter into encrypted mode. From that point on, commands and responses are sent encrypted over the bus. The encryption algorithm used is currently unknown.

There appear to be 2 kinds of crypto mode.

Crypto mode1 is initiated solely by the HOST-RANDOM as random session seed. In that mode, the Switch host requests for the game cartridge random seed, and then sends a command to enter crypto mode2.

Crypto mode2 takes into account the CART-RANDOM seed generated by the cartridge, and possibly the previous HOST-RANDOM.
The game cartridge will always send a different CART-RANDOM even if the exact same command sequence is replayed and thus with this scheme replay attacks are not possible.

== Manufacturers ==
;Macronix (MX)
: Uses package: LGA
: Uses card id: 0xC2
;OKI Semiconductor
: Uses package: TSOP-48
: Uses card id: 0xAE
;SanDisk?
: Uses package: ??
: Uses card id: 0x45 ?