Stargate 3DS - PCB and firmware

moon_rabbit

Well-Known Member
OP
Member
Joined
May 6, 2022
Messages
215
Trophies
0
Age
34
Location
kor
XP
489
Country
Korea, South
front_1.jpg



Front of STARGATE 3DS.
It has a SmartFusion2 fpga and an Atmel sam d11 ARM processor.

My guess is that the Atmel chip has something to do with USB or SD card communication.





back_1.jpg


Back of STARGATE 3DS.
I initially thought it would contain firmware for DS MODE and 3DS MODE, but after dumping the firmware, it turned out not to be the case.

SPI flash = W25Q16JV WSON-8 6x5mm.

SPI flash labeled UP.
1. Contains an ASCII table at the beginning.
2. Almost empty.
3. I'm guessing it has something to do with the Arm chip.

-UPDATE-
This is the SPI FLASH that holds the save file.

SPI flash labeled DOWN.
1. Seems to be a firmware that covers both alex rider(ds) and 3ds.
2. It stores the location of the current 3ds file at 1FF000h.


I only dumped one cartridge, so I don't know if it contains any specific data.

The only thing I saw was 1FF000h, which recorded the location of the 3ds file.
Saving it to a file on the SD card would be a better way, but I don't know why it's writing to the SPI FLASH.

I've attached the dumped firmware.
If anyone is interested, feel free to compare or analyze the firmware.
 

Attachments

  • Stargate_3DS_firmware.zip
    1.1 MB · Views: 11
Last edited by moon_rabbit,

moon_rabbit

Well-Known Member
OP
Member
Joined
May 6, 2022
Messages
215
Trophies
0
Age
34
Location
kor
XP
489
Country
Korea, South
UPDATE 1
Atmel chip is related to USB communication.
It is connected to the two data pins of USB.

When connected to a computer using a micro USB cable, RGB(or Green) LED lights up and nothing happens.
If you hold down one of the buttons on the cartridge that is further away from the USB port while connecting the USB cable,
Red LED pops up and USB serial port appears on the computer.

I don't get any information from the serial monitor program.
I assume that if there is a program implemented, there must be a special command.
I don't know exactly what it is yet.
 
Last edited by moon_rabbit,
  • Like
Reactions: SylverReZ

moon_rabbit

Well-Known Member
OP
Member
Joined
May 6, 2022
Messages
215
Trophies
0
Age
34
Location
kor
XP
489
Country
Korea, South
UPDATE 2 (final)
UP(SPI FLASH) has been corrupted by the act of connecting to the USB.
This corrupted the game's save and only worked after restoring the original data.


It is never recommended to connect the STARGATE 3DS to a USB.
UP(SPI FLASH) is associated with the game's save (SD card) and USB.
 
Last edited by moon_rabbit,
  • Like
Reactions: SylverReZ

4d1xlaan

Well-Known Member
Member
Joined
Apr 21, 2024
Messages
1,074
Trophies
0
XP
1,190
Country
United States
UPDATE 2 (final)
UP(SPI FLASH) has been corrupted by the act of connecting to the USB.
This corrupted the game's save and only worked after restoring the original data.

It is never recommended to connect the STARGATE 3DS to a USB.
UP(SPI FLASH) is associated with the game's save (SD card) and USB.
so if you use card2, that isn't a problem? since it saves directly to rom instead
 

moon_rabbit

Well-Known Member
OP
Member
Joined
May 6, 2022
Messages
215
Trophies
0
Age
34
Location
kor
XP
489
Country
Korea, South
so if you use card2, that isn't a problem? since it saves directly to rom instead
I haven't tried card2, so I don't know.
I thought it would have a widespread effect since so many points in the firmware were changed, but all I saw was a corrupted save.
 

4d1xlaan

Well-Known Member
Member
Joined
Apr 21, 2024
Messages
1,074
Trophies
0
XP
1,190
Country
United States
I haven't tried card2, so I don't know.
I thought it would have a widespread effect since so many points in the firmware were changed, but all I saw was a corrupted save.
do those points keep changing every time you plug it in?

I never used gateway and I dont have one, but I read that you could work around a broken spi flash by converting all your games to card2 instead. if the same workaround works on stargate that could be pretty useful (and maybe the chip can last even longer too, if your games never use it to save)
 

moon_rabbit

Well-Known Member
OP
Member
Joined
May 6, 2022
Messages
215
Trophies
0
Age
34
Location
kor
XP
489
Country
Korea, South
do those points keep changing every time you plug it in?

I never used gateway and I dont have one, but I read that you could work around a broken spi flash by converting all your games to card2 instead. if the same workaround works on stargate that could be pretty useful (and maybe the chip can last even longer too, if your games never use it to save)
I haven't seen how this changes since it's not possible to do an in-circuit dump.

Are you trying to reverse engineer the cart?
This is not possible due to my lack of knowledge.
 

Jayro

MediCat USB Dev
Developer
Joined
Jul 23, 2012
Messages
13,765
Trophies
7
Location
WA State
Website
ko-fi.com
XP
18,765
Country
United States
I don't get any information from the serial monitor program.
I assume that if there is a program implemented, there must be a special command.
I don't know exactly what it is yet.
There's also the possibility that something might need to be bridged on the board to enable it.
Either way, I love that you're reverse-engineering this thing. Maybe we can get a RP2040 version of this made someday on the cheap.
 
  • Like
Reactions: SylverReZ

SylverReZ

Let it snow
Member
GBAtemp Patron
Joined
Sep 13, 2022
Messages
8,871
Trophies
6
Location
The Wired
Website
m4x1mumrez87.neocities.org
XP
27,708
Country
United Kingdom
There's also the possibility that something might need to be bridged on the board to enable it.
Either way, I love that you're reverse-engineering this thing. Maybe we can get a RP2040 version of this made someday on the cheap.
There was a DS flashcart in development called the DSPico, but so far there has never been any more updates since. I'm starting to feel like it's becoming vaporware, kinda similar to Crown3DS.
 
  • Haha
Reactions: DSoryu

Jayro

MediCat USB Dev
Developer
Joined
Jul 23, 2012
Messages
13,765
Trophies
7
Location
WA State
Website
ko-fi.com
XP
18,765
Country
United States
There was a DS flashcart in development called the DSPico, but so far there has never been any more updates since. I'm starting to feel like it's becoming vaporware, kinda similar to Crown3DS.
The Gameboy flash cart using an RP2040 also never turned up. I guess it was very buggy. I wonder if they'll try again using the newer RP2350 chip. I'd also love to see the GB Interceptor get the RP2350 upgrade, maybe it could finally support color games.
 
  • Wow
Reactions: SylverReZ

SylverReZ

Let it snow
Member
GBAtemp Patron
Joined
Sep 13, 2022
Messages
8,871
Trophies
6
Location
The Wired
Website
m4x1mumrez87.neocities.org
XP
27,708
Country
United Kingdom
The Gameboy flash cart using an RP2040 also never turned up. I guess it was very buggy. I wonder if they'll try again using the newer RP2350 chip. I'd also love to see the GB Interceptor get the RP2350 upgrade, maybe it could finally support color games.
Which one was it? Never heard of a GB flashcart using a Pico.
 

moon_rabbit

Well-Known Member
OP
Member
Joined
May 6, 2022
Messages
215
Trophies
0
Age
34
Location
kor
XP
489
Country
Korea, South
There's also the possibility that something might need to be bridged on the board to enable it.
Either way, I love that you're reverse-engineering this thing. Maybe we can get a RP2040 version of this made someday on the cheap.
Since there is no direct connection from the ATMEL chip to the FLASH, I assume the FPGA programs it instead.
After testing a bit more, it seems that simply connecting it doesn't change data.
Most likely, it was the input with PuTTY that changed data.
 

moon_rabbit

Well-Known Member
OP
Member
Joined
May 6, 2022
Messages
215
Trophies
0
Age
34
Location
kor
XP
489
Country
Korea, South
I bought another one and it arrived today, but it has a save issue.
To check this out, you can make a save with 2 Zelda games and run them alternately and you should be able to figure it out.
My guess is that someone plugged it in and returned.
I'll take it apart and dump it just to be sure.
Post automatically merged:

As expected,UP(SPI FLASH) was corrupted.
So I programmed an existing dump.
I tested it and it now saves properly.
If by any chance you have a Stargate 3ds that won't save, program the UP SPI FLASH.

If by any chance you have a Stargate 3ds that won't save, resolder the UP SPI FLASH.
Post automatically merged:

:ohnoes:
UP (SPI FLASH) is the save file itself.
I haven't analyzed the save file, but when I look at the save file, it is exactly the same.
I didn't realize this until now.

I'm not exactly sure why it fails to save and then works when I program it.
Maybe it's write protection?
I'll have to investigate a bit more.
 
Last edited by moon_rabbit,
  • Like
Reactions: Doblete

4d1xlaan

Well-Known Member
Member
Joined
Apr 21, 2024
Messages
1,074
Trophies
0
XP
1,190
Country
United States
To check this out, you can make a save with 2 Zelda games and run them alternately and you should be able to figure it out.
what happens though?

if you're able to reproduce the problem, can you test if converting to card2 bypasses the problem and lets it work correctly?

what about resetting the save data to factory default with save data filer or something?
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
    K3Nv2 @ K3Nv2: https://youtu.be/ZtNtSVIiitE?si=vQHuSAiWxlBVO3Yn