Joy-Con Firmware: Difference between revisions

From Nintendo Switch Brew
Jump to navigation Jump to search
← Older editNewer edit →
No edit summary
No edit summary
Line 1: Line 1:
The Joy-Con is internally called Ukyo. (Strings in the firmware) The firmware is written in C++. (Also found in strings in the firmware)
The Joy-Con are internally called Ukyo (Left) and Sakyo (Right). The firmware is written in C++.


= Joy-Con Firmware File =
= Joy-Con Firmware File =
The length of the firmware must be 524288 bytes.
The length of the firmware must be 524288 bytes.


Line 28: Line 27:


== Factory Configuration Sector ==
== Factory Configuration Sector ==
{| class="wikitable" border="1"
{| class="wikitable" border="1"
|-
|-
Line 36: Line 34:
! Description
! Description
|-
|-
| 0x00 || B || 0x10 || Serial number
| 0x00 || B || 0x10 || IdentificationCode
|-
| 0x12 || B || 0x01 || [[#Type|Type]]
|-
|-
| 0x10 || ? || 0x02 || Unknown
| 0x1B || B || 0x01 || FormatVersion
|-
|-
| 0x12 || B || 0x01 || Type descriptor (see [[#Type Descriptor|Type Descriptor]])
| 0x20 || B || 0x18 || Cal1
|-
|-
| 0x13 || ? || 0x3D || Unknown
| 0x3D || B || 0x19 || Cal2
|-
|-
| 0x50 || B || 0x03 || Body color of Controller in RGB Hex  (see [[Joy-Con#Colors|Joy-Con Colors]])
| 0x50 || B || 0x0D || [[#DesignInfo|DesignInfo]]
|-
|-
| 0x53 || B || 0x03 || Button color of Controller in RGB Hex (see [[Joy-Con#Colors|Joy-Con Colors]])
| 0x80 || B || 0x18 || Model1
|-
|-
| 0x56 || ? || 0xFAA || Unknown
| 0x98 || B || 0x12 || Model2
|}
|}


=== Type Descriptor ===
=== Type===
 
{| class="wikitable" border="1"
{| class="wikitable" border="1"
|-
|-
! Value
! Value
! Type Name
! Name
|-
|-
| 0x01 || Joy-Con Left
| 0x01 || Joy-Con Left
Line 65: Line 64:
|}
|}


== User Calibration Sector ==
=== DesignInfo ===
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x00 || 0x06 || [[#ControllerColor|ControllerColor]]
|-
| 0x06 || 0x07 || Unknown
|}


==== ControllerColor ====
{| class="wikitable" border="1"
{| class="wikitable" border="1"
|-
|-
! Offset
! Offset
! Endianness
! Size
! Size
! Description
! Description
|-
|-
| 0x00 || ? || 0x11 || Unknown
| 0x00 || 0x03 || Body color of controller in RGB Hex (see [[Joy-Con#Colors|Joy-Con Colors]])
|-
|-
| 0x10 || B || 0x0B || Left Stick Calibration (Factory 0xFF?)
| 0x03 || 0x03 || Button color of controller in RGB Hex (see [[Joy-Con#Colors|Joy-Con Colors]])
|}
 
== User Calibration Sector ==
{| class="wikitable" border="1"
|-
! Offset
! Endianness
! Size
! Description
|-
|-
| 0x1B || B || 0x0B || Right Stick Calibration (Factory 0xFF?)
| 0x10 || B || 0x0B || LeftAnalogStickUserCal
|-
|-
| 0x26 || B || 0x1A || Sensor Calibration (Factory 0xFF?)
| 0x1B || B || 0x0B || RightAnalogStickUserCal
|-
|-
| 0x40 || ? || 0xFBF || Unknown
| 0x26 || B || 0x1A || SixAxisSensorUserCal
|}
|}


= Firmware Chunks =
= Firmware Chunks =
The firmware itself is stored in PatchRAM chunks, located at the Factory Offset or the OTA Offset. Each chunk has a Record Type, Size and Data.
The firmware itself is stored in PatchRAM chunks, located at the Factory Offset or the OTA Offset. Each chunk has a Record Type, Size and Data.


Line 104: Line 121:


== Record Types ==
== Record Types ==
{| class="wikitable" border="1"
{| class="wikitable" border="1"
|-
|-
Line 121: Line 137:


=== Record 0x08 ===
=== Record 0x08 ===
{| class="wikitable" border="1"
{| class="wikitable" border="1"
|-
|-
Line 143: Line 158:


=== Record 0x0A ===
=== Record 0x0A ===
{| class="wikitable" border="1"
{| class="wikitable" border="1"
|-
|-
Line 158: Line 172:


=== Record 0x0B ===
=== Record 0x0B ===
{| class="wikitable" border="1"
{| class="wikitable" border="1"
|-
|-
Line 170: Line 183:


== Memory Regions ==
== Memory Regions ==
{| class="wikitable" border="1"
{| class="wikitable" border="1"
|-
|-

Revision as of 19:45, 17 August 2020

The Joy-Con are internally called Ukyo (Left) and Sakyo (Right). The firmware is written in C++.

Joy-Con Firmware File

The length of the firmware must be 524288 bytes.

Offset Endianness Size Description
0x00 B 0x14 Magic number??
0x15 L 0x06 Unique MAC Address of controller
0x3B3 L 0x04 Offset to Factory Firmware
0x1FF4 B 0x08 OTA Magic, if the controller is Over-The-Air updated.
0x1FFC L 0x04 Offset to OTA Firmware, if OTA Magic is valid.
0x6000 Mixed 0x1000 Factory configuration (see Factory Configuration Sector)
0x8000 Mixed 0x1000 User calibration (see User Calibration Sector)

Factory Configuration Sector

Offset Endianness Size Description
0x00 B 0x10 IdentificationCode
0x12 B 0x01 Type
0x1B B 0x01 FormatVersion
0x20 B 0x18 Cal1
0x3D B 0x19 Cal2
0x50 B 0x0D DesignInfo
0x80 B 0x18 Model1
0x98 B 0x12 Model2

Type

Value Name
0x01 Joy-Con Left
0x02 Joy-Con Right
0x03 Pro Controller

DesignInfo

Offset Size Description
0x00 0x06 ControllerColor
0x06 0x07 Unknown

ControllerColor

Offset Size Description
0x00 0x03 Body color of controller in RGB Hex (see Joy-Con Colors)
0x03 0x03 Button color of controller in RGB Hex (see Joy-Con Colors)

User Calibration Sector

Offset Endianness Size Description
0x10 B 0x0B LeftAnalogStickUserCal
0x1B B 0x0B RightAnalogStickUserCal
0x26 B 0x1A SixAxisSensorUserCal

Firmware Chunks

The firmware itself is stored in PatchRAM chunks, located at the Factory Offset or the OTA Offset. Each chunk has a Record Type, Size and Data.

Offset Endianness Size Description
0x00 L 0x01 Record type (see Record Types)
0x01 L 0x02 Size of data (size)
0x03 Mixed (size) Data

Record Types

Value Record name Description
0x08 REC8 ROM1 Patches (See Record 0x08 and Memory Regions)
0x0A RECA RAM (Ram Low and Ram High) Patches (See Record 0x0A and Memory Regions)
0x0B RECB Unknown
0xFE END End of chunk stream

Record 0x08

Offset Endianness Size Description
0x00 L 0x01 Index
0x01 L 0x04 Address
0x05 B 0x04 Data
0x09 L 0x02 Unk1?
0x0B L 0x02 Unk2?
0x0D L 0x02 Body size???

Record 0x0A

Offset Endianness Size Description Note
0x00 L 0x04 Address -
0x04 B (Note) Data To calculate the size do: chunk_datasize (See Firmware Chunks)-4

Record 0x0B

Offset Endianness Size Description
0x00 L 0x04 Address

Memory Regions

Offsets Description
0x00-0xC8000 ROM 1
0x260000-0x26C000 ROM 2
0xD0000-0x0x0DFFFF RAM Low
0x200000-0x247FFF RAM High
Retrieved from "https://switchbrew.org/w/index.php?title=Joy-Con_Firmware&oldid=9899"