Reverse Engineering the CIC

Discuss hardware-related topics, such as development cartridges, CopyNES, PowerPak, EPROMs, or whatever.

Moderators: B00daW, Moderators

Fiskbit
Posts: 267
Joined: Sat Nov 18, 2017 9:15 pm

Re: Reverse Engineering the CIC

Post by Fiskbit » Sun Sep 27, 2020 5:03 pm

If you'd like a 6113B1, I believe they're the standard in NES Play Action Football, which is a very cheap game; I was getting mine for $2 at the local game shop.

User avatar
Jeroen
Posts: 1048
Joined: Tue Jul 03, 2007 1:49 pm

Re: Reverse Engineering the CIC

Post by Jeroen » Sun Sep 27, 2020 5:06 pm

Fiskbit wrote:
Sun Sep 27, 2020 5:03 pm
If you'd like a 6113B1, I believe they're the standard in NES Play Action Football, which is a very cheap game; I was getting mine for $2 at the local game shop.
Sadly I live in Pal territory, so getting even cheap ntsc games is a hassle.

edit, btw fiskbit, did you try my updated code where I bring r20 and r21 low at the same time? I suspect that might have had something to do with it not working sometimes.

edit2: code in question http://forums.nesdev.com/viewtopic.php? ... 40#p256795

Fiskbit
Posts: 267
Joined: Sat Nov 18, 2017 9:15 pm

Re: Reverse Engineering the CIC

Post by Fiskbit » Sun Sep 27, 2020 5:18 pm

I have not. My components are at my friend's place, so that'll wait until the next time we meet up.

Patnukem
Posts: 80
Joined: Thu Sep 10, 2020 11:16 pm

Re: Reverse Engineering the CIC

Post by Patnukem » Mon Sep 28, 2020 7:17 pm

Please disregard if this is not useful.

I was thinking how I have tested 3 3198A CIC chips with the same result for all 3. I investigated how the chips are networked and thought since I had two chips out I would network another chip the same way it is set up in the Famicomstation.

The chip on the main board has pin 1 and pin two as data in and data out, they are fed directly to the cart slots in a crossover fashion (pin 1 to pin 2 and pin 2 to pin 1). Pins 4 (R03),6 (CL1), 8 (Ground), and 16 (5+) are all connected to each other directly.

I put a 2nd CIC on the bread board tied it's pin 1 to pin 2 of the test chip and pin 2 to pin 1 of the test chip and pins 4,6,8,16 together.

Edit: got some of my wires crossed mentally and physically so the dump I had here was useless. This did not seem to change the output but I am leaving the other information how it’s networked together.
Last edited by Patnukem on Tue Sep 29, 2020 8:48 am, edited 1 time in total.

Fiskbit
Posts: 267
Joined: Sat Nov 18, 2017 9:15 pm

Re: Reverse Engineering the CIC

Post by Fiskbit » Mon Sep 28, 2020 7:31 pm

Not sure about your setup, but the dump looks like bit 2 has been moved to bit 0. I'm more confident in the previous version because it better matched up with instructions I expect to see.

Patnukem
Posts: 80
Joined: Thu Sep 10, 2020 11:16 pm

Re: Reverse Engineering the CIC

Post by Patnukem » Mon Sep 28, 2020 7:40 pm

Worth a shot since I had an extra one out. I also used a desoldering gun so there should be no thermal damage to this other chip and still getting same numbers.

Patnukem
Posts: 80
Joined: Thu Sep 10, 2020 11:16 pm

Re: Reverse Engineering the CIC

Post by Patnukem » Tue Sep 29, 2020 2:20 pm

I dumped a 3193A and got a dump that looks to be correct, very similar to Jeroen's chip with a few lines different, probably because a different version of the chip. so it would seem at the very least the reader is functioning properly.

Code: Select all

i0 :0
i1 :30
i2 :20
i3 :46
i4 :55
i5 :67
i6 :87
i7 :75
i8 :55
i9 :66
iA :E7
iB :21
iC :31
iD :70
iE :43
iF :DF
i10 :32
i11 :21
i12 :46
i13 :0
i14 :30
i15 :46
i16 :3D
i17 :1
i18 :EB
i19 :0
i1A :0
i1B :B0
i1C :31
i1D :21
i1E :46
i1F :7D
i20 :0
i21 :31
i22 :5C
i23 :74
i24 :7C
i25 :8C
i26 :75
i27 :7C
i28 :8C
i29 :7C
i2A :97
i2B :55
i2C :65
i2D :A8
i2E :92
i2F :30
i30 :41
i31 :46
i32 :0
i33 :55
i34 :47
i35 :4A
i36 :75
i37 :7C
i38 :EC
i39 :74
i3A :60
i3B :E3
i3C :7C
i3D :97
i3E :61
i3F :92
i40 :DB
i41 :7C
i42 :97
i43 :61
i44 :B7
i45 :92
i46 :0
i47 :5D
i48 :1
i49 :CA
i4A :7C
i4B :80
i4C :7D
i4D :DE
i4E :27
i4F :40
i50 :10
i51 :F6
i52 :EC
i53 :5D
i54 :BB
i55 :7C
i56 :EC
i57 :90
i58 :30
i59 :B9
i5A :21
i5B :30
i5C :0
i5D :E4
i5E :21
i5F :46
i60 :7C
i61 :F3
i62 :7C
i63 :80
i64 :7C
i65 :F3
i66 :92
i67 :0
i68 :0
i69 :0
i6A :0
i6B :0
i6C :0
i6D :0
i6E :0
i6F :0
i70 :0
i71 :0
i72 :0
i73 :0
i74 :0
i75 :0
i76 :0
i77 :0
i78 :0
i79 :0
i7A :0
i7B :0
i7C :0
i7D :0
i7E :0
i7F :7C
i80 :EC
i81 :EF
i82 :31
i83 :21
i84 :0
i85 :0
i86 :0
i87 :CF
i88 :30
i89 :21
i8A :46
i8B :0
i8C :0
i8D :0
i8E :46
i8F :4C
i90 :74
i91 :2B
i92 :30
i93 :42
i94 :BC
i95 :2F
i96 :3E
i97 :41
i98 :2B
i99 :49
i9A :30
i9B :73
i9C :F5
i9D :42
i9E :8E
i9F :4C
iA0 :20
iA1 :55
iA2 :67
iA3 :99
iA4 :4D
iA5 :74
iA6 :7C
iA7 :EC
iA8 :75
iA9 :4C
iAA :5D
iAB :5C
iAC :57
iAD :40
iAE :20
iAF :4A
iB0 :69
iB1 :6A
iB2 :6B
iB3 :4C
iB4 :0
iB5 :0
iB6 :0
iB7 :0
iB8 :0
iB9 :0
iBA :0
iBB :0
iBC :0
iBD :0
iBE :0
iBF :0
iC0 :0
iC1 :0
iC2 :0
iC3 :0
iC4 :0
iC5 :0
iC6 :0
iC7 :0
iC8 :0
iC9 :0
iCA :0
iCB :0
iCC :0
iCD :0
iCE :0
iCF :0
iD0 :0
iD1 :0
iD2 :0
iD3 :0
iD4 :0
iD5 :0
iD6 :0
iD7 :0
iD8 :0
iD9 :0
iDA :0
iDB :0
iDC :0
iDD :0
iDE :0
iDF :0
iE0 :0
iE1 :0
iE2 :0
iE3 :0
iE4 :0
iE5 :0
iE6 :0
iE7 :0
iE8 :0
iE9 :0
iEA :0
iEB :0
iEC :0
iED :0
iEE :0
iEF :0
iF0 :0
iF1 :0
iF2 :0
iF3 :0
iF4 :0
iF5 :0
iF6 :0
iF7 :0
iF8 :0
iF9 :0
iFA :0
iFB :0
iFC :0
iFD :0
iFE :7C
iFF :EC
i100 :8E
i101 :75
i102 :21
i103 :31
i104 :63
i105 :30
i106 :7D
i107 :80
i108 :31
i109 :60
i10A :30
i10B :7D
i10C :80
i10D :31
i10E :61
i10F :30
i110 :7D
i111 :80
i112 :31
i113 :62
i114 :30
i115 :7D
i116 :80
i117 :0
i118 :B5
i119 :75
i11A :21
i11B :3F
i11C :41
i11D :7D
i11E :F7
i11F :65
i120 :6B
i121 :0
i122 :7D
i123 :F7
i124 :65
i125 :68
i126 :0
i127 :7D
i128 :F7
i129 :65
i12A :69
i12B :0
i12C :7D
i12D :F7
i12E :65
i12F :6A
i130 :74
i131 :21
i132 :3F
i133 :31
i134 :42
i135 :31
i136 :39
i137 :42
i138 :32
i139 :35
i13A :42
i13B :33
i13C :32
i13D :42
i13E :3F
i13F :42
i140 :38
i141 :42
i142 :32
i143 :42
i144 :37
i145 :42
i146 :31
i147 :42
i148 :39
i149 :42
i14A :38
i14B :42
i14C :31
i14D :42
i14E :31
i14F :42
i150 :31
i151 :42
i152 :35
i153 :41
i154 :75
i155 :22
i156 :34
i157 :39
i158 :42
i159 :3F
i15A :35
i15B :42
i15C :35
i15D :32
i15E :42
i15F :31
i160 :42
i161 :32
i162 :42
i163 :31
i164 :42
i165 :37
i166 :42
i167 :31
i168 :42
i169 :39
i16A :42
i16B :38
i16C :42
i16D :35
i16E :42
i16F :37
i170 :42
i171 :31
i172 :42
i173 :35
i174 :41
i175 :4C
i176 :0
i177 :0
i178 :0
i179 :0
i17A :0
i17B :0
i17C :0
i17D :20
i17E :4A
i17F :30
i180 :41
i181 :46
i182 :0
i183 :0
i184 :47
i185 :21
i186 :4C
i187 :20
i188 :0
i189 :0
i18A :0
i18B :0
i18C :0
i18D :55
i18E :0
i18F :21
i190 :4C
i191 :74
i192 :7D
i193 :F5
i194 :75
i195 :2F
i196 :40
i197 :5C
i198 :49
i199 :21
i19A :72
i19B :4A
i19C :52
i19D :72
i19E :44
i19F :42
i1A0 :73
i1A1 :42
i1A2 :70
i1A3 :4A
i1A4 :52
i1A5 :48
i1A6 :72
i1A7 :42
i1A8 :8
i1A9 :72
i1AA :42
i1AB :1
i1AC :0
i1AD :72
i1AE :4A
i1AF :52
i1B0 :D1
i1B1 :5D
i1B2 :F
i1B3 :4C
i1B4 :9D
i1B5 :0
i1B6 :0
i1B7 :0
i1B8 :0
i1B9 :0
i1BA :0
i1BB :0
i1BC :0
i1BD :0
i1BE :0
i1BF :0
i1C0 :0
i1C1 :0
i1C2 :0
i1C3 :0
i1C4 :0
i1C5 :0
i1C6 :0
i1C7 :0
i1C8 :0
i1C9 :0
i1CA :0
i1CB :0
i1CC :0
i1CD :0
i1CE :0
i1CF :0
i1D0 :0
i1D1 :0
i1D2 :0
i1D3 :0
i1D4 :0
i1D5 :0
i1D6 :0
i1D7 :0
i1D8 :0
i1D9 :0
i1DA :0
i1DB :0
i1DC :0
i1DD :0
i1DE :0
i1DF :0
i1E0 :0
i1E1 :0
i1E2 :0
i1E3 :0
i1E4 :0
i1E5 :0
i1E6 :0
i1E7 :0
i1E8 :0
i1E9 :0
i1EA :0
i1EB :0
i1EC :0
i1ED :0
i1EE :0
i1EF :0
i1F0 :0
i1F1 :0
i1F2 :0
i1F3 :0
i1F4 :0
I was also reading that the Famicombox (and persumebly the Famicomstation) have a CIC that uses 4 bits for just cart position, and since the chips can be programed with different pin assignments, could these be set up a bit differently?

additionally I got a NES to test the Famicomstation carts on, some are working others are not. I am not sure if the famicomstation menu cart will boot in a regular NES with CIC disabled but this cart did not, so there is a change my Famicomstation menu is shot. I may need to get the Famicombox roms that were dumped and use them until we dump the Famicomstation ones. I have a lead on another unit, this one seems to be working so lets hope I can get it, I also saw a parts unit but it looks way worse then mine and probably worse off then mine too.

Fiskbit
Posts: 267
Joined: Sat Nov 18, 2017 9:15 pm

Re: Reverse Engineering the CIC

Post by Fiskbit » Wed Sep 30, 2020 5:26 pm

Aside from missing seven 00's at the end of the dump, that matches my dump and the accessible portion of the existing 512 byte dump.

Regarding the 3198A, there's no actual need for a hardware difference to support the slot ID pins; all the port pins can be read from and written to in software. However, the datasheet mentions on page 31, section 3 that there are mask ROM options that can be selected for ports that are only inputs or only outputs. Given that the two bits we can't get are on normally-unused lines that are changed to inputs here, maybe the mask was modified for this chip to make them input-only, interfering with the dump feature. If this is the case, we'd need to decap one of these and visually read out the ROM.
Last edited by Fiskbit on Wed Sep 30, 2020 5:46 pm, edited 1 time in total.

lidnariq
Posts: 10459
Joined: Sun Apr 13, 2008 11:12 am
Location: Seattle

Re: Reverse Engineering the CIC

Post by lidnariq » Wed Sep 30, 2020 5:42 pm

At least one of pins 1 and 2 must be an output: otherwise there's no way for the cartridge CIC to reply to the host CIC.

Fiskbit
Posts: 267
Joined: Sat Nov 18, 2017 9:15 pm

Re: Reverse Engineering the CIC

Post by Fiskbit » Wed Sep 30, 2020 5:45 pm

Ah, I had my pins mixed up and was thinking 0 and 1 were outputted on R1_2 and R1_3, which are slot ID inputs.

Patnukem
Posts: 80
Joined: Thu Sep 10, 2020 11:16 pm

Re: Reverse Engineering the CIC

Post by Patnukem » Wed Sep 30, 2020 6:14 pm

So pin one of cart CIC goes to console pin 2 CIC and pin two goes to pin one of console CIC so they are I/O. I confirmed via multimeter. I know the CIC uses some other chip, maybe the CPU if I remember correctly. I hope to take the 3199A out this week and try to dump it.

Additionally, got some solid core wires just to eliminate any iffy stuff. So if I need to switch any wires around to try another arrangement I’m game.

Probably dumb but I obsess about stuff until i find a solution...

I found a junk Famicombox for parts and a supposedly working famicombox, but they could take a bit to get to the states from Japan.

Fiskbit
Posts: 267
Joined: Sat Nov 18, 2017 9:15 pm

Re: Reverse Engineering the CIC

Post by Fiskbit » Wed Sep 30, 2020 6:46 pm

No need to rush on this stuff. :) I'll be working on 3198A dumps soon, and 3199(A?) hopefully in the next couple months.

I forgot to comment on the FamicomStation menu cart. It's unsurprising it wouldn't work in a normal system; the FamicomBox has a number of additional features, such as additional RAM and hardware registers. Indeed, running the FamicomBox menu ROM in Mesen doesn't get far enough to display anything. The code spins on reads to $5000, which is the exception status register in the FamicomBox, but just open bus on an NES with an NROM cart such as this.

Patnukem
Posts: 80
Joined: Thu Sep 10, 2020 11:16 pm

Re: Reverse Engineering the CIC

Post by Patnukem » Thu Oct 01, 2020 12:52 pm

Using the last arduino code posted I got the following on the 3199A chip.

Code: Select all

i0 :75
i1 :30
i2 :4A
i3 :74
i4 :42
i5 :C0
i6 :7D
i7 :A6
i8 :7E
i9 :7D
iA :7D
iB :D3
iC :7D
iD :CA
iE :7E
iF :5B
i10 :75
i11 :22
i12 :63
i13 :9D
i14 :0
i15 :28
i16 :52
i17 :EB
i18 :EC
i19 :74
i1A :22
i1B :60
i1C :B0
i1D :D7
i1E :7E
i1F :21
i20 :74
i21 :23
i22 :63
i23 :B2
i24 :23
i25 :52
i26 :97
i27 :91
i28 :7D
i29 :F2
i2A :B1
i2B :22
i2C :6C
i2D :23
i2E :60
i2F :C2
i30 :0
i31 :29
i32 :52
i33 :9A
i34 :74
i35 :24
i36 :33
i37 :45
i38 :BD
i39 :0
i3A :0
i3B :C7
i3C :23
i3D :61
i3E :DC
i3F :2C
i40 :52
i41 :E3
i42 :A6
i43 :75
i44 :2E
i45 :7D
i46 :C5
i47 :A6
i48 :74
i49 :23
i4A :6D
i4B :0
i4C :74
i4D :23
i4E :62
i4F :89
i50 :2B
i51 :52
i52 :94
i53 :78
i54 :9C
i55 :78
i56 :C4
i57 :7D
i58 :F2
i59 :E9
i5A :75
i5B :21
i5C :7D
i5D :CC
i5E :86
i5F :74
i60 :23
i61 :6C
i62 :7D
i63 :A6
i64 :0
i65 :86
i66 :22
i67 :68
i68 :7D
i69 :A6
i6A :28
i6B :52
i6C :88
i6D :93
i6E :7D
i6F :D3
i70 :74
i71 :23
i72 :60
i73 :96
i74 :78
i75 :2B
i76 :2C
i77 :52
i78 :D5
i79 :7D
i7A :A6
i7B :74
i7C :23
i7D :68
i7E :23
i7F :61
i80 :BF
i81 :69
i82 :78
i83 :13
i84 :0
i85 :75
i86 :25
i87 :7E
i88 :0
i89 :26
i8A :33
i8B :45
i8C :D7
i8D :25
i8E :3C
i8F :45
i90 :D7
i91 :74
i92 :23
i93 :6F
i94 :74
i95 :23
i96 :62
i97 :8E
i98 :9C
i99 :7E
i9A :5B
i9B :74
i9C :24
i9D :40
i9E :10
i9F :BB
iA0 :89
iA1 :13
iA2 :97
iA3 :89
iA4 :75
iA5 :26
iA6 :11
iA7 :A8
iA8 :40
iA9 :10
iAA :89
iAB :3E
iAC :9A
iAD :40
iAE :10
iAF :89
iB0 :3C
iB1 :25
iB2 :71
iB3 :C1
iB4 :89
iB5 :78
iB6 :13
iB7 :74
iB8 :2A
iB9 :7D
iBA :C5
iBB :96
iBC :75
iBD :22
iBE :63
iBF :B7
iC0 :74
iC1 :26
iC2 :6D
iC3 :96
iC4 :74
iC5 :2F
iC6 :30
iC7 :43
iC8 :32
iC9 :43
iCA :3F
iCB :43
iCC :3F
iCD :4A
iCE :75
iCF :22
iD0 :6F
iD1 :96
iD2 :79
iD3 :8D
iD4 :74
iD5 :26
iD6 :6C
iD7 :6E
iD8 :23
iD9 :6E
iDA :21
iDB :32
iDC :46
iDD :22
iDE :55
iDF :65
iE0 :B4
iE1 :D0
iE2 :2D
iE3 :52
iE4 :DA
iE5 :75
iE6 :22
iE7 :63
iE8 :98
iE9 :79
iEA :69
iEB :21
iEC :52
iED :E2
iEE :0
iEF :21
iF0 :52
iF1 :E6
iF2 :22
iF3 :52
iF4 :AC
iF5 :22
iF6 :52
iF7 :D5
iF8 :A5
iF9 :0
iFA :0
iFB :75
iFC :22
iFD :60
iFE :FE
iFF :2D
i100 :52
i101 :F0
i102 :DE
i103 :7E
i104 :3F
i105 :F3
i106 :23
i107 :52
i108 :F7
i109 :28
i10A :52
i10B :BE
i10C :79
i10D :FB
i10E :75
i10F :22
i110 :6C
i111 :7E
i112 :3F
i113 :C1
i114 :7E
i115 :7D
i116 :7E
i117 :1E
i118 :75
i119 :22
i11A :68
i11B :69
i11C :21
i11D :30
i11E :46
i11F :23
i120 :7E
i121 :0
i122 :24
i123 :30
i124 :45
i125 :CF
i126 :23
i127 :3F
i128 :45
i129 :CF
i12A :7E
i12B :6A
i12C :22
i12D :62
i12E :8D
i12F :6A
i130 :B3
i131 :6E
i132 :30
i133 :D9
i134 :75
i135 :22
i136 :61
i137 :B8
i138 :26
i139 :52
i13A :FA
i13B :D2
i13C :25
i13D :52
i13E :C7
i13F :CF
i140 :74
i141 :21
i142 :7D
i143 :CC
i144 :8F
i145 :7E
i146 :7D
i147 :7E
i148 :20
i149 :6D
i14A :21
i14B :30
i14C :46
i14D :74
i14E :27
i14F :7E
i150 :0
i151 :29
i152 :32
i153 :45
i154 :CF
i155 :28
i156 :33
i157 :45
i158 :CF
i159 :27
i15A :30
i15B :45
i15C :CF
i15D :7E
i15E :1E
i15F :A8
i160 :75
i161 :26
i162 :3F
i163 :71
i164 :AB
i165 :0
i166 :21
i167 :52
i168 :A2
i169 :7E
i16A :7D
i16B :7E
i16C :20
i16D :21
i16E :32
i16F :46
i170 :31
i171 :22
i172 :46
i173 :CF
i174 :75
i175 :25
i176 :40
i177 :27
i178 :43
i179 :40
i17A :28
i17B :4A
i17C :74
i17D :24
i17E :40
i17F :75
i180 :27
i181 :7E
i182 :3C
i183 :78
i184 :82
i185 :79
i186 :B
i187 :74
i188 :26
i189 :61
i18A :8D
i18B :75
i18C :40
i18D :10
i18E :AA
i18F :74
i190 :24
i191 :40
i192 :75
i193 :25
i194 :7E
i195 :3C
i196 :87
i197 :DD
i198 :74
i199 :23
i19A :6A
i19B :26
i19C :6C
i19D :6A
i19E :7D
i19F :CA
i1A0 :7E
i1A1 :7D
i1A2 :7E
i1A3 :20
i1A4 :69
i1A5 :6B
i1A6 :7E
i1A7 :1E
i1A8 :74
i1A9 :26
i1AA :69
i1AB :6F
i1AC :23
i1AD :6B
i1AE :7E
i1AF :5B
i1B0 :74
i1B1 :26
i1B2 :60
i1B3 :B7
i1B4 :23
i1B5 :38
i1B6 :46
i1B7 :7E
i1B8 :AD
i1B9 :23
i1BA :30
i1BB :46
i1BC :26
i1BD :68
i1BE :7E
i1BF :E9
i1C0 :78
i1C1 :73
i1C2 :7E
i1C3 :AD
i1C4 :2D
i1C5 :52
i1C6 :B6
i1C7 :F1
i1C8 :75
i1C9 :20
i1CA :32
i1CB :42
i1CC :3A
i1CD :4A
i1CE :4C
i1CF :21
i1D0 :33
i1D1 :46
i1D2 :23
i1D3 :30
i1D4 :46
i1D5 :22
i1D6 :31
i1D7 :46
i1D8 :4C
i1D9 :22
i1DA :55
i1DB :66
i1DC :4D
i1DD :4C
i1DE :75
i1DF :2E
i1E0 :33
i1E1 :42
i1E2 :38
i1E3 :4A
i1E4 :4C
i1E5 :3F
i1E6 :71
i1E7 :E2
i1E8 :4A
i1E9 :4C
i1EA :42
i1EB :C5
i1EC :4D
i1ED :3F
i1EE :71
i1EF :D6
i1F0 :4A
i1F1 :4C
i1F2 :43
i1F3 :CC
i1F4 :4D
i1F5 [code]
[/code]

User avatar
Jeroen
Posts: 1048
Joined: Tue Jul 03, 2007 1:49 pm

Re: Reverse Engineering the CIC

Post by Jeroen » Thu Oct 01, 2020 1:38 pm

Patnukem wrote:
Thu Oct 01, 2020 12:52 pm
Using the last arduino code posted I got the following on the 3199A chip.

Code: Select all

i0 :75
i1 :30
i2 :4A
i3 :74
i4 :42
i5 :C0
i6 :7D
i7 :A6
i8 :7E
i9 :7D
iA :7D
iB :D3
iC :7D
iD :CA
iE :7E
iF :5B
i10 :75
i11 :22
i12 :63
i13 :9D
i14 :0
i15 :28
i16 :52
i17 :EB
i18 :EC
i19 :74
i1A :22
i1B :60
i1C :B0
i1D :D7
i1E :7E
i1F :21
i20 :74
i21 :23
i22 :63
i23 :B2
i24 :23
i25 :52
i26 :97
i27 :91
i28 :7D
i29 :F2
i2A :B1
i2B :22
i2C :6C
i2D :23
i2E :60
i2F :C2
i30 :0
i31 :29
i32 :52
i33 :9A
i34 :74
i35 :24
i36 :33
i37 :45
i38 :BD
i39 :0
i3A :0
i3B :C7
i3C :23
i3D :61
i3E :DC
i3F :2C
i40 :52
i41 :E3
i42 :A6
i43 :75
i44 :2E
i45 :7D
i46 :C5
i47 :A6
i48 :74
i49 :23
i4A :6D
i4B :0
i4C :74
i4D :23
i4E :62
i4F :89
i50 :2B
i51 :52
i52 :94
i53 :78
i54 :9C
i55 :78
i56 :C4
i57 :7D
i58 :F2
i59 :E9
i5A :75
i5B :21
i5C :7D
i5D :CC
i5E :86
i5F :74
i60 :23
i61 :6C
i62 :7D
i63 :A6
i64 :0
i65 :86
i66 :22
i67 :68
i68 :7D
i69 :A6
i6A :28
i6B :52
i6C :88
i6D :93
i6E :7D
i6F :D3
i70 :74
i71 :23
i72 :60
i73 :96
i74 :78
i75 :2B
i76 :2C
i77 :52
i78 :D5
i79 :7D
i7A :A6
i7B :74
i7C :23
i7D :68
i7E :23
i7F :61
i80 :BF
i81 :69
i82 :78
i83 :13
i84 :0
i85 :75
i86 :25
i87 :7E
i88 :0
i89 :26
i8A :33
i8B :45
i8C :D7
i8D :25
i8E :3C
i8F :45
i90 :D7
i91 :74
i92 :23
i93 :6F
i94 :74
i95 :23
i96 :62
i97 :8E
i98 :9C
i99 :7E
i9A :5B
i9B :74
i9C :24
i9D :40
i9E :10
i9F :BB
iA0 :89
iA1 :13
iA2 :97
iA3 :89
iA4 :75
iA5 :26
iA6 :11
iA7 :A8
iA8 :40
iA9 :10
iAA :89
iAB :3E
iAC :9A
iAD :40
iAE :10
iAF :89
iB0 :3C
iB1 :25
iB2 :71
iB3 :C1
iB4 :89
iB5 :78
iB6 :13
iB7 :74
iB8 :2A
iB9 :7D
iBA :C5
iBB :96
iBC :75
iBD :22
iBE :63
iBF :B7
iC0 :74
iC1 :26
iC2 :6D
iC3 :96
iC4 :74
iC5 :2F
iC6 :30
iC7 :43
iC8 :32
iC9 :43
iCA :3F
iCB :43
iCC :3F
iCD :4A
iCE :75
iCF :22
iD0 :6F
iD1 :96
iD2 :79
iD3 :8D
iD4 :74
iD5 :26
iD6 :6C
iD7 :6E
iD8 :23
iD9 :6E
iDA :21
iDB :32
iDC :46
iDD :22
iDE :55
iDF :65
iE0 :B4
iE1 :D0
iE2 :2D
iE3 :52
iE4 :DA
iE5 :75
iE6 :22
iE7 :63
iE8 :98
iE9 :79
iEA :69
iEB :21
iEC :52
iED :E2
iEE :0
iEF :21
iF0 :52
iF1 :E6
iF2 :22
iF3 :52
iF4 :AC
iF5 :22
iF6 :52
iF7 :D5
iF8 :A5
iF9 :0
iFA :0
iFB :75
iFC :22
iFD :60
iFE :FE
iFF :2D
i100 :52
i101 :F0
i102 :DE
i103 :7E
i104 :3F
i105 :F3
i106 :23
i107 :52
i108 :F7
i109 :28
i10A :52
i10B :BE
i10C :79
i10D :FB
i10E :75
i10F :22
i110 :6C
i111 :7E
i112 :3F
i113 :C1
i114 :7E
i115 :7D
i116 :7E
i117 :1E
i118 :75
i119 :22
i11A :68
i11B :69
i11C :21
i11D :30
i11E :46
i11F :23
i120 :7E
i121 :0
i122 :24
i123 :30
i124 :45
i125 :CF
i126 :23
i127 :3F
i128 :45
i129 :CF
i12A :7E
i12B :6A
i12C :22
i12D :62
i12E :8D
i12F :6A
i130 :B3
i131 :6E
i132 :30
i133 :D9
i134 :75
i135 :22
i136 :61
i137 :B8
i138 :26
i139 :52
i13A :FA
i13B :D2
i13C :25
i13D :52
i13E :C7
i13F :CF
i140 :74
i141 :21
i142 :7D
i143 :CC
i144 :8F
i145 :7E
i146 :7D
i147 :7E
i148 :20
i149 :6D
i14A :21
i14B :30
i14C :46
i14D :74
i14E :27
i14F :7E
i150 :0
i151 :29
i152 :32
i153 :45
i154 :CF
i155 :28
i156 :33
i157 :45
i158 :CF
i159 :27
i15A :30
i15B :45
i15C :CF
i15D :7E
i15E :1E
i15F :A8
i160 :75
i161 :26
i162 :3F
i163 :71
i164 :AB
i165 :0
i166 :21
i167 :52
i168 :A2
i169 :7E
i16A :7D
i16B :7E
i16C :20
i16D :21
i16E :32
i16F :46
i170 :31
i171 :22
i172 :46
i173 :CF
i174 :75
i175 :25
i176 :40
i177 :27
i178 :43
i179 :40
i17A :28
i17B :4A
i17C :74
i17D :24
i17E :40
i17F :75
i180 :27
i181 :7E
i182 :3C
i183 :78
i184 :82
i185 :79
i186 :B
i187 :74
i188 :26
i189 :61
i18A :8D
i18B :75
i18C :40
i18D :10
i18E :AA
i18F :74
i190 :24
i191 :40
i192 :75
i193 :25
i194 :7E
i195 :3C
i196 :87
i197 :DD
i198 :74
i199 :23
i19A :6A
i19B :26
i19C :6C
i19D :6A
i19E :7D
i19F :CA
i1A0 :7E
i1A1 :7D
i1A2 :7E
i1A3 :20
i1A4 :69
i1A5 :6B
i1A6 :7E
i1A7 :1E
i1A8 :74
i1A9 :26
i1AA :69
i1AB :6F
i1AC :23
i1AD :6B
i1AE :7E
i1AF :5B
i1B0 :74
i1B1 :26
i1B2 :60
i1B3 :B7
i1B4 :23
i1B5 :38
i1B6 :46
i1B7 :7E
i1B8 :AD
i1B9 :23
i1BA :30
i1BB :46
i1BC :26
i1BD :68
i1BE :7E
i1BF :E9
i1C0 :78
i1C1 :73
i1C2 :7E
i1C3 :AD
i1C4 :2D
i1C5 :52
i1C6 :B6
i1C7 :F1
i1C8 :75
i1C9 :20
i1CA :32
i1CB :42
i1CC :3A
i1CD :4A
i1CE :4C
i1CF :21
i1D0 :33
i1D1 :46
i1D2 :23
i1D3 :30
i1D4 :46
i1D5 :22
i1D6 :31
i1D7 :46
i1D8 :4C
i1D9 :22
i1DA :55
i1DB :66
i1DC :4D
i1DD :4C
i1DE :75
i1DF :2E
i1E0 :33
i1E1 :42
i1E2 :38
i1E3 :4A
i1E4 :4C
i1E5 :3F
i1E6 :71
i1E7 :E2
i1E8 :4A
i1E9 :4C
i1EA :42
i1EB :C5
i1EC :4D
i1ED :3F
i1EE :71
i1EF :D6
i1F0 :4A
i1F1 :4C
i1F2 :43
i1F3 :CC
i1F4 :4D
i1F5 [code]
[/code]
Maybe I missed it, but I don't see any altered code posted in your previous posts?

also that looks like a plausible dump!

edit: jero can't read, I read "The last arduino code I posted" nvermind

Patnukem
Posts: 80
Joined: Thu Sep 10, 2020 11:16 pm

Re: Reverse Engineering the CIC

Post by Patnukem » Thu Oct 01, 2020 1:58 pm

It seems to be looping so I do not believe any additional data. I used your last posted Arduino script.

Also replaced the leads with solid wires just in case but the Famicomstation CIC still returning the same information as before.
Last edited by Patnukem on Thu Oct 01, 2020 2:10 pm, edited 1 time in total.

Post Reply