Reverse Engineering the CIC
Moderator: Moderators
Playchoice Security (RP5H01)
RP5H01 is used as for a security chip in Playchoice
EDIT: thought i would add some links.. give people an idea of how it works
rp5h01.c
rp5h01.h
here is a little PC10 hackey
Gamehacker's Replacement BIOS
Oliver's Replacement BIOS
enjoy!
EDIT: thought i would add some links.. give people an idea of how it works
rp5h01.c
rp5h01.h
here is a little PC10 hackey
Gamehacker's Replacement BIOS
Oliver's Replacement BIOS
enjoy!
Last edited by jims cool on Thu May 29, 2008 3:48 pm, edited 2 times in total.
Wow, that would have been much easier to reverse engineer than the rabbit since we already know the hardware specs. All it would have taken is the die photo's to extract the binary, and a reverse assembler. Why didn't we think of that before?blargg wrote:And going by the data sheet, just a 64-bit PROM (one-time programmable read-only memory). Not an enigma like the CIC at all.RP5H01 is used as a CIC security chip in Playchoice
Type of Work: Computer File
Registration Number / Date:
TX0003812530 / 1994-09-06
Title: SFC CIC for Nintendo KK : ROM FIX 1991.2.7.
Description: Computer program.
Copyright Claimant:
Nintendo of America, Inc.
Date of Creation: 1991
Date of Publication:
1992-03-01
Authorship on Application:
rev. & additional computer code: Sharp Corporation,
employer for hire.
Previous Registration:
Prev. reg. 1986, TX 1-945-426.
Basis of Claim: New Matter: rev. & additional computer code.
Names: Nintendo of America, Inc.
Sharp Corporation
================================================================================
Type of Work: Computer File
Registration Number / Date:
TX0003812529 / 1994-09-06
Title: SFC CIC for Nintendo KK : ROM FIX 1990.3.23.
Description: Computer program.
Copyright Claimant:
Nintendo of America, Inc.
Date of Creation: 1990
Date of Publication:
1990-11-21
Authorship on Application:
rev. & additional computer code: Sharp Corporation,
employer for hire.
Previous Registration:
Prev. reg. 1986, TX 1-945-426.
Basis of Claim: New Matter: rev. & additional computer code.
Names: Nintendo of America, Inc.
Sharp Corporation
================================================================================
Type of Work: Computer File
Registration Number / Date:
TX0001945426 / 1986-12-01
Title: 10NES software.
Description: printout.
Copyright Claimant:
Nintendo of America, Inc.
Date of Creation: 1985
Date of Publication:
1985-10-01
Authorship on Application:
computer program: Sharp Corporation, employer for hire.
Copyright Note: C.O. correspondence.
Names: Nintendo of America, Inc.
Sharp Corporation
================================================================================
Type of Work: Recorded Document
Document Number: V2182P102
Date of Recordation:
1986-05-30
Entire Copyright Document:
V2182P102 (Single page document)
Date of Execution: 6May86
Title: 10NES; software in R O M of L S I in software security
system of Nintendo entertainment system / By Sharp
Corporation.
Notes: Copyright assignment.
Party 1: Sharp Corporation.
Party 2: Nintendo of America, Inc.
Names: Sharp Corporation.
Nintendo of America, Inc.
================================================================================
Registration Number / Date:
TX0003812530 / 1994-09-06
Title: SFC CIC for Nintendo KK : ROM FIX 1991.2.7.
Description: Computer program.
Copyright Claimant:
Nintendo of America, Inc.
Date of Creation: 1991
Date of Publication:
1992-03-01
Authorship on Application:
rev. & additional computer code: Sharp Corporation,
employer for hire.
Previous Registration:
Prev. reg. 1986, TX 1-945-426.
Basis of Claim: New Matter: rev. & additional computer code.
Names: Nintendo of America, Inc.
Sharp Corporation
================================================================================
Type of Work: Computer File
Registration Number / Date:
TX0003812529 / 1994-09-06
Title: SFC CIC for Nintendo KK : ROM FIX 1990.3.23.
Description: Computer program.
Copyright Claimant:
Nintendo of America, Inc.
Date of Creation: 1990
Date of Publication:
1990-11-21
Authorship on Application:
rev. & additional computer code: Sharp Corporation,
employer for hire.
Previous Registration:
Prev. reg. 1986, TX 1-945-426.
Basis of Claim: New Matter: rev. & additional computer code.
Names: Nintendo of America, Inc.
Sharp Corporation
================================================================================
Type of Work: Computer File
Registration Number / Date:
TX0001945426 / 1986-12-01
Title: 10NES software.
Description: printout.
Copyright Claimant:
Nintendo of America, Inc.
Date of Creation: 1985
Date of Publication:
1985-10-01
Authorship on Application:
computer program: Sharp Corporation, employer for hire.
Copyright Note: C.O. correspondence.
Names: Nintendo of America, Inc.
Sharp Corporation
================================================================================
Type of Work: Recorded Document
Document Number: V2182P102
Date of Recordation:
1986-05-30
Entire Copyright Document:
V2182P102 (Single page document)
Date of Execution: 6May86
Title: 10NES; software in R O M of L S I in software security
system of Nintendo entertainment system / By Sharp
Corporation.
Notes: Copyright assignment.
Party 1: Sharp Corporation.
Party 2: Nintendo of America, Inc.
Names: Sharp Corporation.
Nintendo of America, Inc.
================================================================================
Last edited by jims cool on Fri Mar 26, 2010 3:31 am, edited 4 times in total.
Tengen weren't the only ones to create their own CIC clone.
On Snes, Datel created the Action Replay.
I've opened mine (AR MK3), and tried to find where the CIC was.
The numbers are the cartidge connectors.
"Datel Turbo Replay" seems to be a multi-purpose chip, and the other chip is an eprom. Has anyone already decapped it, or is willing to do it? Maybe it would be easier to understand the algorithm...
On Snes, Datel created the Action Replay.
I've opened mine (AR MK3), and tried to find where the CIC was.
The numbers are the cartidge connectors.
"Datel Turbo Replay" seems to be a multi-purpose chip, and the other chip is an eprom. Has anyone already decapped it, or is willing to do it? Maybe it would be easier to understand the algorithm...