Switch 2: MB1-BCT
Jump to navigation
Jump to search
MB1-BCT is loaded by the bootrom (?) to 0x40040000, to be consumed by MB1.
Unlike other boot payloads, the MB1-BCT is not updated with firmware update.
MB1-BCT likely contains vendor-specific EMC configuration data to initialize LPDDR, so that the rest of the OS can be loaded.
Payload
This format is Nintendo-custom, and does not match the MB1-BCT format for Orin (t234).
| Offset | Size | Description |
|---|---|---|
| 0x0 | 2 | Magic (Always 'MM') |
| 0x2 | 2 | |
| 0x4 | 2 | |
| 0x6 | 2 | Size |
| 0x8 | 2 | DramConfigId? (Seen 0xE, 0x10, 0x11) |
| 0xA | 2 | |
| 0xC | 2 | ? (Seen 0, 0x2000, 0x3000) |
| 0xE | 2 | ? (Seen 5) |