3. Lockout Chips
The following information on the SNES chip lockout system was sent
to me by Karel (
Karel.Pauwels@village.uunet.be).
SNES Game Cassette Security IC
------------------------------
I noticed a lot of questions on the 'net about the SNES game
cartridge security and country dependent games.
I have seen claims that the only protection is the mechanical
incompatibility, this definitely not true. I happen to have the
SNES service manual from the European and the US version. Both
Control Decks having a security chip in the Deck and a counterpart
in every game cassette. The device are called CIC. The operation is
as follows:
* The CIC (F413 for the European PAL version or the F411 for the
NTSC version) is connected to main unit reset.
* The reset signal (reset) from F413 (F411) to S-PPU2 is set low
and places the S-PPU2 in standby.
* F413 / F411 seeks communication with the CIC (D413 / D411) in the
game cassette. If communication ends successfully then the RESET
is set High to start the S-PPU2. If the communication fails then
the RESET signal remains LOW, disabling the further operation of
the console.
Note: It might be possible that first versions of US control decks
did not use the security device and that the only protection is the
mechanical incompatibility but there is no record of that in the
service manual (rev. 06.92). (Please note, I don't think that
happened either. If anyone can prove this definitively, please let
me know.)
------------
------------------- | RESET |
| | SWITCH |
Game Cassette | ------------ SNES/SFC Hardware
| |
| v
| ---------------
--------------- | | U8 | RESET -----------
| CIC |<D413> | U3 |
| D413 (PAL) |------->| D411 (NTSC) | | S-PPU2 |
| D411 (NTSC) | | --------------- -----------
--------------- | |
^ | v
| | --------------
| | | |
----------------| S-CLK |
| | |
| --------------
-------------------
The communication between the cassette and the deck is done over four
wires. It uses the edge connector pin 24, 55, 25 and 56. The CIC in
the cassette is connected to the power supply but has no other
connections to the internal cassette circuitry. It is very likely
that the security device in the console can be disabled by connecting
the reset directly to the S-PPU2 the F413 (U8 ) output pin 10 is the
RESET output to pin 34 from the S-PPU2 (U3).
An alternative could be, placing a US-CIC between a US deck and a
European cassette on a extension card (or vice versa.)