asie's personal wiki - notes:flashcart

acekard2i

Anonymous (anonymous@undisclosed.example.com) — 2023-10-31T13:13:21+00:00

Acekard 2/2i (NDS) programming Original research provided primarily by Normmatt. Hardware variants Acekard 2, HW-40 (0x40) Acekard 2i, HW-44 (0x44) Acekard 2i, HW-81 (0x81) Commands Flash ??? (C0 00 00 00 00 00 00 00) Get hardware revision (D1 00 00 00 00 00 00 00)

dstt

Anonymous (anonymous@undisclosed.example.com) — 2023-10-16T15:10:59+00:00

DSTT (NDS) programming Original research provided primarily by HandsomeMatt. Hardware variants The DSTT is notorious for using pretty much every flash chip its manufacturing team could get its hands on throughout its lifecycle. There's over fifty of them - an incomplete list is available

ds_linker

Anonymous (anonymous@undisclosed.example.com) — 2025-06-22T21:28:03+00:00

DSFlash2 (DS Linker, N-Card et al.) programming This page only discusses the Slot-1 card. For information on the Slot-2 USB cartridges, see DS Linker Writer/N-Card (Slot-2 USB cart). Photos MK5 Giga 16Gbit [Array][Array] Flash chips Known types: - Hynix HY27UF081G2M - Samsung K9G8G08U0M Commands TODO: Figure out card timings. (Are all of them stored in RAM?)

ds_linker_writer

Anonymous (anonymous@undisclosed.example.com) — 2025-06-22T21:27:28+00:00

DS Linker Writer/N-Card (Slot-2 USB cart) The DS Linker Writer (also known as the N-Card, ExpressCard, DS Fire Link, etc.) is a Slot-2 GBA cartridge with an USB controller; in combination with a software USB stack running on the DS itself, it allows the console to act as an USB device.

ds_motion_card

Anonymous (anonymous@undisclosed.example.com) — 2024-11-06T09:23:51+00:00

DS Motion Card This page documents the DS Motion Card and other devices based around the Kionix KXPB5 accelerometer. Devices Name Description Accelerometer Gyroscope Analog Input GBAccelerometer Link port device; GBA only Yes (KXP74) No No

edgb

Anonymous (anonymous@undisclosed.example.com) — 2024-11-17T14:37:23+00:00

EverDrive GB original (GB/GBC) programming Registers 0xBE00 (SPI_DATA) SPI data port used for communication with the SD card. Write to send and receive a byte; read to get the last received byte. 0xBE80 (?) 0xBF00 (REG_INDEX) The index of the register to be accessed.

edgbx

Anonymous (anonymous@undisclosed.example.com) — 2024-05-24T22:07:34+00:00

EverDrive GB X-series (GB/GBC) programming Stub (only covers SPI bus for storage). Registers 0xBD00 (SPI_DATA) SPI data port used for communication with the SD card. Write to send and receive a byte; read to get the last received byte. 0xBD01 (SPI_CTRL)

elcheaposdgb

Anonymous (anonymous@undisclosed.example.com) — 2024-09-21T09:50:52+00:00

ElCheapo SD 2.x (GB/GBC) programming Stub (only covers SPI bus for storage). Registers $0000 (RAM enable) Write $09 to unlock other registers. $3F00 (SPI read) Returns the last read value from the SPI bus. $3F01 (SPI write) Write to send and receive a byte via the SPI bus from/to the SD card.

ezflash

Anonymous (anonymous@undisclosed.example.com) — 2024-09-29T21:13:26+00:00

EZ Flash (GBA) programming It appears many EZ Flash GBA cartridges use a compatible interface across the product line. Unlocking To unlock the cartridge's interface, the following writes must be issued: * 0x9FE0000 = 0xD200 * 0x8000000 = 0x1500

ezflash5

Anonymous (anonymous@undisclosed.example.com) — 2024-11-07T22:50:03+00:00

EZ-Flash V programming Commands Card: Read with prefetch (B7 aa bb cc dd nn 00 00) * First, B7aaaaaaaa010000 is sent - returns 4 bytes. The final byte may be FF or 00 - if it's 00, prefetch is complete. * Next, if prefetch was not complete, B7aaaaaaaa020000

ezflashjr

Anonymous (anonymous@undisclosed.example.com) — 2023-10-14T14:04:22+00:00

EZ Flash Junior (GB/GBC) programming Stub. For now, I'll refer you to Daid's excellent documents on the matter: * General (terminology, boot process) * Protocol (memory-mapped I/O, SRAM layout) * Sequence (boot sequence notes)

gbamp

Anonymous (anonymous@undisclosed.example.com) — 2023-10-14T16:58:50+00:00

GBA Movie Player (GBA) programming TODO CompactFlash Interface The address bits map onto IDE bus pins as follows: Address bit Pin 23 1 - access CompactFlash interface 22 Chip Select 0/1 18 DA2 17 DA1 16 DA0

gmp_z003

Anonymous (anonymous@undisclosed.example.com) — 2024-11-08T08:58:58+00:00

M3i Zero (GMP-Z003) programming Sourced from Commands Card: Info (B0 00 00 00 00 00 00 00) Should be 0x5AA5. Card: Write (C5 aa bb cc dd tt 00 00) Receives 512 bytes. * aabbccdd - offset in number of words (?) * tt - type: * 0x00 - SD card access (?)

m3ds

Anonymous (anonymous@undisclosed.example.com) — 2023-10-16T19:26:38+00:00

M3DS Real (NDS) programming Original research provided mostly by lifehackerhansol. Control flags * KEY1 gap1 length: 0, 256 for SD write and/or multi-sector commands. * KEY1 gap2 length: 24 * KEY2 encryption: Enabled for data and commands *

mkr6

Anonymous (anonymous@undisclosed.example.com) — 2024-11-11T12:40:50+00:00

NeoFlash MK6/R6 (NDS) programming SPI commands Read response (9F FF FF FF) Responds with a dummy byte, then three response bytes. Lock? (FE FD FB F5) Unlock? (FE FD FB F7) Mode: accelerometer (DS Motion Card) (FE FD FB F8) Mode: 4kbit EEPROM (FE FD FB F9)

nds_benchmarks

Anonymous (anonymous@undisclosed.example.com) — 2024-11-11T23:27:44+00:00

DS flashcart benchmarks Tested using default settings for each benchmark, random reads/writes, unless otherwise specified. In particular, this means that the file seeking cache is enabled by default on BlocksDS, which requires explicit opt-in from the homebrew program.

r4ds

Anonymous (anonymous@undisclosed.example.com) — 2023-10-16T15:03:57+00:00

R4 (NDS) programming Original research provided mostly by lifehackerhansol. Control flags * KEY1 gap1 length: 0 * KEY1 gap2 length: 24 * KEY2 encryption: Enabled for data and commands * Transfer clock rate: 6.7 MHz * Data block size: 4 bytes (512 bytes for SD commands)

scgba

Anonymous (anonymous@undisclosed.example.com) — 2025-07-26T10:40:06+00:00

SuperCard (GBA) programming All models SC_MODE (0x9FFFFFE) To unlock this register, one must write 0xA55A to it first. 15 bit 0 ---- ---- ---- ---- ???? ???? ???? ?wsm ||| ||+- Memory mapped: 0 = internal flash, 1 = PSRAM |+-- CF/SD card interface mapped: 0 = No, 1 = Yes +--- PSRAM write enabled: 0 = no, 1 = yes SRAM bank: 0 = first 64 KiB, 1 = second 64 KiB

ws_flash_masta

Anonymous (anonymous@undisclosed.example.com) — 2025-06-15T12:07:25+00:00

WS Flash Masta (WS/WSC) programming The flashcart uses (rev4) or emulates (rev5+) a 2003 mapper. Most of its functionality (banking, flash access via SRAM) is provided. * JS28F00AM29EWHA (1Gbit NOR flash, accessible as 16 64Mbit slots) * 4Mbit SRAM