Difference between revisions of "IO Registers"

From 3dbrew
Jump to navigation Jump to search
m
 
(20 intermediate revisions by 7 users not shown)
Line 11: Line 11:
 
| style="background: green" | Yes
 
| style="background: green" | Yes
 
| A9
 
| A9
| [[CONFIG Registers]]
+
| [[CONFIG9 Registers]]
 
| 0x10000000
 
| 0x10000000
 
| Boot9, Process9
 
| Boot9, Process9
Line 28: Line 28:
 
| 0x10002000
 
| 0x10002000
 
| Boot9, Process9
 
| Boot9, Process9
| DMA Engine
+
| AHB DMA Engine
 
|-
 
|-
 
| style="background: green" | Yes
 
| style="background: green" | Yes
Line 48: Line 48:
 
| [[EMMC Registers]]
 
| [[EMMC Registers]]
 
| 0x10006000 / 0x10007000
 
| 0x10006000 / 0x10007000
| Boot9, Process9
+
| Boot9, Process9, NewKernel9Loader
| 0x10007000 is normally not enabled on retail, all-zeros when read.
+
| SD(IO) controller 1 and 3. 3 is normally mapped to ARM11.
 
|-
 
|-
 
| style="background: green" | Yes
 
| style="background: green" | Yes
Line 62: Line 62:
 
| [[AES Registers]]
 
| [[AES Registers]]
 
| 0x10009000
 
| 0x10009000
| Boot9, Process9
+
| Boot9, Process9, NewKernel9Loader
 
|
 
|
 
|-
 
|-
Line 69: Line 69:
 
| [[SHA Registers]]
 
| [[SHA Registers]]
 
| 0x1000A000
 
| 0x1000A000
| Boot9, Process9
+
| Boot9, Process9, NewKernel9Loader
 
|
 
|
 
|-
 
|-
Line 84: Line 84:
 
| 0x1000C000
 
| 0x1000C000
 
| Boot9, Kernel9
 
| Boot9, Kernel9
| [http://infocenter.arm.com/help/topic/com.arm.doc.ddi0424d/index.html CoreLink™ DMA-330] (single-channel).
+
| [http://infocenter.arm.com/help/topic/com.arm.doc.subset.primecell.system/index.html CoreLink™ DMA-330 r0p0] (AXI busmaster, two channels, uses 32-bit bus width instead of 64).
 
|-
 
|-
 
| style="background: green" | Yes
 
| style="background: green" | Yes
Line 104: Line 104:
 
| PRNG Registers
 
| PRNG Registers
 
| 0x10011000
 
| 0x10011000
| Process9
+
| Boot9, Process9
 
| Used as entropy-source for seeding random number generators.
 
| Used as entropy-source for seeding random number generators.
 
|-
 
|-
Line 111: Line 111:
 
| [[OTP Registers]]
 
| [[OTP Registers]]
 
| 0x10012000
 
| 0x10012000
| Kernel9, NewKernel9Loader
+
| Boot9, Kernel9, NewKernel9Loader
 
| Top secret.
 
| Top secret.
 
|-
 
|-
Line 123: Line 123:
 
| style="background: green" | Yes
 
| style="background: green" | Yes
 
| A11/A9
 
| A11/A9
| Debug WIFI SDIO Registers?
+
| TMIO SD(IO) controller 3
 
| 0x10100000
 
| 0x10100000
 
|  
 
|  
| An SDIO controller is mapped here, NWM references this controller but doesn't have access to it.
+
| NWM references this controller but doesn't have access to it.
 
|-
 
|-
 
| style="background: green" | Yes
 
| style="background: green" | Yes
Line 133: Line 133:
 
| 0x10101000
 
| 0x10101000
 
| [[Filesystem services]]
 
| [[Filesystem services]]
|  
+
| These registers function the same as the [[SHA Registers]], with the exception of the FIFO being located at 0x10301000.
 
|-
 
|-
 
| style="background: green" | Yes
 
| style="background: green" | Yes
 
| A11/A9
 
| A11/A9
| [[Camera Registers]]
+
| [[Y2R Registers]]
 
| 0x10102000
 
| 0x10102000
 
| [[Camera Services]]
 
| [[Camera Services]]
Line 144: Line 144:
 
| style="background: green" | Yes
 
| style="background: green" | Yes
 
| A11/A9
 
| A11/A9
| [[CSND Registers]] / [[DSP Registers]]
+
| [[CSND Registers]]
 
| 0x10103000
 
| 0x10103000
 
| TwlBg, [[Codec Services]], [[CSND Services]], [[DSP Services]]
 
| TwlBg, [[Codec Services]], [[CSND Services]], [[DSP Services]]
| Sound hardware. For DSP regs, see the "DSi XpertTeak" section in [http://problemkaputt.de/gba.htm no$gba] help.
+
| Sound hardware.
 
|-style="border-top: double"
 
|-style="border-top: double"
 
| style="background: green" | Yes
 
| style="background: green" | Yes
 
| A11/A9
 
| A11/A9
| LGYFB0
+
| [[MTX_Registers|LgyFb bottom screen]]
 
| 0x10110000
 
| 0x10110000
 
| TwlBg
 
| TwlBg
Line 158: Line 158:
 
| style="background: green" | Yes
 
| style="background: green" | Yes
 
| A11/A9
 
| A11/A9
| LGYFB1
+
| [[MTX_Registers|LgyFb top screen]]
 
| 0x10111000
 
| 0x10111000
 
| TwlBg
 
| TwlBg
Line 214: Line 214:
 
| style="background: green" | Yes
 
| style="background: green" | Yes
 
| A11/A9
 
| A11/A9
| [[PDN Registers]]
+
| [[CONFIG11 Registers]]
 
| 0x10140000
 
| 0x10140000
 
| Process9, Boot11, Kernel11, TwlBg, [[DSP Services]], [[NWM Services]], [[SPI Services]]
 
| Process9, Boot11, Kernel11, TwlBg, [[DSP Services]], [[NWM Services]], [[SPI Services]]
| Power management.  
+
| System configuration.  
 
|-
 
|-
 
| style="background: green" | Yes
 
| style="background: green" | Yes
Line 245: Line 245:
 
| 0x10144000
 
| 0x10144000
 
| Boot11, Kernel11, TwlBg, [[I2C Services]]
 
| Boot11, Kernel11, TwlBg, [[I2C Services]]
|  
+
| 3DS I2C interface (MCU + Cameras + LCD)
 
|-
 
|-
 
| style="background: green" | Yes
 
| style="background: green" | Yes
 
| A11/A9
 
| A11/A9
| [[CODEC Registers]]
+
| [[I2S Registers]]
 
| 0x10145000
 
| 0x10145000
| TwlBg, [[Codec Services]]
+
| TwlBg, AgbBg, [[Codec Services]]
|  
+
| Sound input/output lines
 
|-
 
|-
 
| style="background: green" | Yes
 
| style="background: green" | Yes
Line 258: Line 258:
 
| [[HID Registers]]
 
| [[HID Registers]]
 
| 0x10146000
 
| 0x10146000
| Boot11, Kernel11, TwlBg, [[HID Services]], dlp Services
+
| Boot9, Boot11, Kernel11, TwlBg, [[HID Services]], dlp Services
 
| See [[PAD]].
 
| See [[PAD]].
 
|-
 
|-
Line 273: Line 273:
 
| 0x10148000
 
| 0x10148000
 
| TwlBg, [[I2C Services]]
 
| TwlBg, [[I2C Services]]
|  
+
| 3DS I2C interface (Gyro + IR)
 
|-style="border-top: double"
 
|-style="border-top: double"
 
| style="background: green" | Yes
 
| style="background: green" | Yes
Line 287: Line 287:
 
| 0x10161000
 
| 0x10161000
 
| Boot11, TwlBg, [[I2C Services]]
 
| Boot11, TwlBg, [[I2C Services]]
| See [http://problemkaputt.de/gba.htm no$gba] help for some clues maybe.
+
| TWL I2C interface (MCU + Cameras)
 
|-
 
|-
 
| style="background: green" | Yes
 
| style="background: green" | Yes
Line 385: Line 385:
 
| 0x10200000
 
| 0x10200000
 
| Boot11, Kernel11
 
| Boot11, Kernel11
| [http://infocenter.arm.com/help/topic/com.arm.doc.ddi0424d/index.html CoreLink™ DMA-330]. Only used by bootrom on New3DS.
+
| [http://infocenter.arm.com/help/topic/com.arm.doc.subset.primecell.system/index.html CoreLink™ DMA-330 r0p0] (eight channels). Only used by bootrom on New3DS.
 
|-
 
|-
 
| style="background: green" | Yes
 
| style="background: green" | Yes
 
| A11
 
| A11
| ?
+
| FCRAM configuration
 
| 0x10201000
 
| 0x10201000
| TwlBg
+
| TwlBg, Kernel11 (dead code)
 
|
 
|
 
|-
 
|-
Line 406: Line 406:
 
| 0x10203000
 
| 0x10203000
 
| [[DSP Services]]
 
| [[DSP Services]]
|  
+
| see the "DSi XpertTeak" section in [http://problemkaputt.de/gba.htm no$gba] help.
|-
+
|-style="border-top: double"
| style="background: green" | Yes
+
| style="background: red" | No
 
| A11
 
| A11
 
| ?
 
| ?
 
| 0x10204000
 
| 0x10204000
 +
| ?
 
|  
 
|  
|
+
|-
|-style="border-top: double"
 
 
|  style="background: red" | No
 
|  style="background: red" | No
 
| A11
 
| A11
Line 420: Line 420:
 
| 0x10206000
 
| 0x10206000
 
| NewKernel11
 
| NewKernel11
| CDMA was moved (mirrored?) here on New 3DS. [http://infocenter.arm.com/help/topic/com.arm.doc.ddi0424d/index.html CoreLink™ DMA-330].
+
| [http://infocenter.arm.com/help/topic/com.arm.doc.ddi0424d/index.html CoreLink™ DMA-330 r1p2] (eight channels). This is the DMA engine actually being used by the New3DS ARM11 kernel.
 
|-
 
|-
 
| style="background: red" | No
 
| style="background: red" | No
Line 438: Line 438:
 
| style="background: green" | Yes
 
| style="background: green" | Yes
 
| A11
 
| A11
| DMA region
+
| AHB (or AXI?) FIFOs region
| 0x10300000-0x10400000
+
| 0x10300000-0x10340000
 
|
 
|
| CDMA wants these addresses. Each page in this region corresponds to the same page in the 0x10100000-0x10200000 region. It is unknown if this is just a separate bus and/or if there are any differences in the registers.
+
| Pages present in this region correspond to the same respective devices in the 0x10100000-0x10140000 region but don't hold the same registers. They hold the FIFOs instead: the HASH FIFO register is located at 0x10301000. The LgyFb scaler data FIFO are located at 0x10310000 (top) and 0x10311000 (bot), etc. Needed for DMA.
 
|-style="border-top: double"
 
|-style="border-top: double"
 
| style="background: green" | Yes
 
| style="background: green" | Yes

Latest revision as of 23:08, 4 February 2021

Overview[edit]

Old3DS A9/A11 Category Physaddr Used by Comments
Yes A9 CONFIG9 Registers 0x10000000 Boot9, Process9
Yes A9 IRQ Registers 0x10001000 Boot9, Process9, Kernel9 ARM9 Interrupt Masking
Yes A9 NDMA Registers 0x10002000 Boot9, Process9 AHB DMA Engine
Yes A9 TIMER Registers 0x10003000 Boot9, Process9
Yes A9 CTRCARD Registers 0x10004000 / 0x10005000 Process9
Yes A9 EMMC Registers 0x10006000 / 0x10007000 Boot9, Process9, NewKernel9Loader SD(IO) controller 1 and 3. 3 is normally mapped to ARM11.
Yes A9 PXI Registers 0x10008000 Boot9, Process9
Yes A9 AES Registers 0x10009000 Boot9, Process9, NewKernel9Loader
Yes A9 SHA Registers 0x1000A000 Boot9, Process9, NewKernel9Loader
Yes A9 RSA Registers 0x1000B000 Boot9, Process9
Yes A9 XDMA Registers 0x1000C000 Boot9, Kernel9 CoreLink™ DMA-330 r0p0 (AXI busmaster, two channels, uses 32-bit bus width instead of 64).
Yes A9 SPICARD Registers 0x1000D800 Process9
Yes A9 CONFIG Registers 0x10010000 Process9
Yes A9 PRNG Registers 0x10011000 Boot9, Process9 Used as entropy-source for seeding random number generators.
Yes A9 OTP Registers 0x10012000 Boot9, Kernel9, NewKernel9Loader Top secret.
Yes A9 ARM7 Registers 0x10018000 TwlProcess9 Used to setup the ARM7 core for AGB/TWL
Yes A11/A9 TMIO SD(IO) controller 3 0x10100000 NWM references this controller but doesn't have access to it.
Yes A11/A9 HASH Registers 0x10101000 Filesystem services These registers function the same as the SHA Registers, with the exception of the FIFO being located at 0x10301000.
Yes A11/A9 Y2R Registers 0x10102000 Camera Services y2r
Yes A11/A9 CSND Registers 0x10103000 TwlBg, Codec Services, CSND Services, DSP Services Sound hardware.
Yes A11/A9 LgyFb bottom screen 0x10110000 TwlBg IO registers used to access legacy output framebuffer, as well as configure the upscaling filter.
Yes A11/A9 LgyFb top screen 0x10111000 TwlBg IO registers used to access legacy output framebuffer, as well as configure the upscaling filter.
Yes A11/A9 Camera Registers 0x10120000 Camera Services
Yes A11/A9 Camera Registers 0x10121000 Camera Services Mirror of 0x10120000?
Yes A11/A9 WIFI Registers 0x10122000 NWM Services WIFI SDIO bus registers
Yes A11/A9 ? 0x10123000 NWM Services WIFI?
No A11/A9 MVD Registers 0x10130000 MVD Services
No A11/A9 MVD Registers 0x10131000 MVD Services
No A11/A9 MVD Registers 0x10132000 MVD Services
Yes A11/A9 CONFIG11 Registers 0x10140000 Process9, Boot11, Kernel11, TwlBg, DSP Services, NWM Services, SPI Services System configuration.
Yes A11/A9 PDN Registers 0x10141000 Process9, Boot11, Kernel11, TwlBg, Codec Services, NWM Services, SPI Services, PDN Services Power management
Yes A11/A9 SPI Registers 0x10142000 TwlBg, SPI Services
Yes A11/A9 SPI Registers 0x10143000 TwlBg, dmnt Module Debugger related?
Yes A11/A9 I2C Registers 0x10144000 Boot11, Kernel11, TwlBg, I2C Services 3DS I2C interface (MCU + Cameras + LCD)
Yes A11/A9 I2S Registers 0x10145000 TwlBg, AgbBg, Codec Services Sound input/output lines
Yes A11/A9 HID Registers 0x10146000 Boot9, Boot11, Kernel11, TwlBg, HID Services, dlp Services See PAD.
Yes A11/A9 GPIO Registers 0x10147000 Boot11, TwlBg, GPIO Services, DSP Services(v0)
Yes A11/A9 I2C Registers 0x10148000 TwlBg, I2C Services 3DS I2C interface (Gyro + IR)
Yes A11/A9 SPI Registers 0x10160000 Boot9, TwlBg, SPI Services
Yes A11/A9 I2C Registers 0x10161000 Boot11, TwlBg, I2C Services TWL I2C interface (MCU + Cameras)
Yes A11/A9 MIC Registers 0x10162000 MIC Services
Yes A11/A9 PXI Registers 0x10163000 Boot11, Kernel11, TwlBg, PXI Services
Yes A11/A9 NTRCARD Registers 0x10164000 Boot9, Process9
Yes A11/A9 MP Registers 0x10165000 MP Services
Yes A11/A9 MP Registers 0x10170000 MP Services NTR WIFI Registers, see GBATek.
Yes A11/A9 MP Registers 0x10171000 MP Services NTR WIFI Registers (mirror)
Yes A11/A9 ? 0x10172000 ? NTR WIFI Unused?
Yes A11/A9 ? 0x10173000 ? NTR WIFI Unused?
Yes A11/A9 MP Registers 0x10174000 MP Services NTR WIFI RAM
Yes A11/A9 MP Registers 0x10175000 ? NTR WIFI RAM
Yes A11/A9 MP Registers 0x10176000 ? NTR WIFI Registers (mirror)
Yes A11/A9 MP Registers 0x10177000 ? NTR WIFI Registers (mirror)
Yes A11/A9 MP Registers 0x10178000 - 0x10180000 MP Services NTR WIFI WS1 Region
Yes A11 CDMA 0x10200000 Boot11, Kernel11 CoreLink™ DMA-330 r0p0 (eight channels). Only used by bootrom on New3DS.
Yes A11 FCRAM configuration 0x10201000 TwlBg, Kernel11 (dead code)
Yes A11 LCD Registers 0x10202000 TwlBg, Kernel11, GSP Services
Yes A11 DSP Registers 0x10203000 DSP Services see the "DSi XpertTeak" section in no$gba help.
No A11 ? 0x10204000 ?
No A11 CDMA 0x10206000 NewKernel11 CoreLink™ DMA-330 r1p2 (eight channels). This is the DMA engine actually being used by the New3DS ARM11 kernel.
No A11 MVD Registers 0x10207000 MVD Services New 3DS only?
Yes A11 AXI 0x1020F000 TwlBg, GSP Services CoreLink™ NIC-301 r1p0.
Yes A11 AHB (or AXI?) FIFOs region 0x10300000-0x10340000 Pages present in this region correspond to the same respective devices in the 0x10100000-0x10140000 region but don't hold the same registers. They hold the FIFOs instead: the HASH FIFO register is located at 0x10301000. The LgyFb scaler data FIFO are located at 0x10310000 (top) and 0x10311000 (bot), etc. Needed for DMA.
Yes A11 GPU Registers 0x10400000 Boot11, Kernel11, GSP Services

IO registers starting at physical address 0x10200000 are not accessible from the ARM9 (which includes all LCD/GPU registers). It seems IO registers below physical address 0x10100000 are not accessible from the ARM11 bus.

ARM11 kernel virtual address mappings for these registers varies for different builds. For ARM11 user mode applications you have:

physaddr = virtaddr - 0x1EC00000 + 0x10100000