Saturday, March 10, 2018

Taito C-Chip: data by lobotomy

In a previous post we described some early attempts to analyze the Taito C-Chip. See Haze's forum post for some background on the C-Chip itself.

In particular we're interested in the EPROM. Previous efforts focused on less invasive techniques with the goal of keeping the C-Chip alive after dumping. Unfortunately, we've been unable to successfully send an unlock command and efforts to rebond the EPROM die have been difficult with the equipment we have on hand.

With this in mind, we took a break to regroup. If we remove the ASIC we can solder to PCB traces shared with the EPROM. Traces are documented in our wiring diagram:

Which allows us to make an attack (soldering) plan:

The basic idea is to mill and etch away the purple masked area to expose the PCB. Then, solder wires as indicated by the green dots.

A few issues, but nothing too bad. First, this implies requires removing the ASIC to have enough room to work. As there is not a reliable way to safely remove it (or easily put it back for that matter), this means killing the module. Second, the PCB traces are roughly 6 mil (ie 0.006" => 0.15 mm) width and roughly 12 mil (0.3 mm) pitch. These are non-trivial to solder, although doesn't require as much precision as hand wire bonding (roughly 0.1 mm pads at 0.2 mm pitch). Sort of like soldering a bunch of "0201" size resistors in close proximity.

Lets get started. First, take a c-chip:

Mill it to near PCB:

We went about 2.5 mils down at a time until the ASIC paddle just starts to show. You can see bits of shattered die clinging to the paddle corners.

Then use acid to fully expose PCB:

Next tin areas where we'll make connections:

Now mount to protoboard:

And wire up:

Which successfully dumped the EPROM!

A little hard to measure, but it takes roughly 3 hours per module using this technique. Definitely better at soldering since starting this project.

To date we've dumped Volfied, Superman, and Bonze Adventure (not shown):

Volfied (top) was our first attempt and has the CPU removed due to some early issues getting a dump. We thought the CPU might have been driving some control lines, but it turned out to actually be some solder debris shorting out the power rails. Surprisingly our programmer didn't generate any error messages (over current, continuity, etc).

We have a few more chips in the pipeline that we expect to finish over the next couple of weeks. We're still figuring out which chips, if any, we still need to source to cover all known games.

We've also continued to think about the best ways to keep the module alive. There are still a few options like decapping the area between the dies and using a laser cutter to isolate the EPROM control lines from the ASIC. This is a littler riskier though as we might accidentally sever a bond wire or corrode EPROM pads. For example, if any solder crept to the bond wire it would dissolve the gold, severing the connection.

Finally, what about keeping the PCBs alive after the C-Chip lobotomy? At this point we're thinking the best option is to design a C-Chip compatible module. We know the CPU, have the firmware, and have a reasonable understanding about how the ASIC works. We suspect with a little fiddling one should be able to figure out the remaining details. That said, we'd like to focus on the extracting data rather than repairing PCBs. So this may be left as an exercise to the reader.

Enjoy this post? Please support us on Patreon! Note: with the Indiegogo campaign over we unfortunately don't currently have a way to accept one time donations.

EDIT: Rainbow Islands dumped!


  1. Great! Operation Wolf and Rainbow Island/Ex will finally be emulated correctly after 30+ years!

  2. You guys are amazing I couldn't solder anything that small. Thanks for all the work you do

  3. Super impressed with your skills! May I ask what kind of wire type you used when soldering to the EPROM and where I might buy some ?

    1. Found it at a local surplus store, not sure where you can get more. Its marked: RUBADUE WIRE COMPANY, VDE-R, COLOR: ORANGE, AWG: 38, PRT NO: TCA138 AWG. I'm not sure what the insulation is, but I'd guess PVC. Its uncommon to find plastic coated wire at this AWG, but FWIW magnet wire is readily available

    2. Thank you for the information CAPS0ff very much appreciated!

    3. go to your local electronics parts store and buy a roll of transformer/coil/inductor wire ($5). it's enamel coated and available in many thicknesses, used for re-winding coils etc. I've seen it as small as 0.25mm. To remove the enamel coating put the wire on your workbench and scrape it off with the end of a hot soldering iron (takes about 2 seconds to remove it). For very small work (like tightly-packed PCB traces) I usually use multi-strand copper wire and take a single strand out.... it's 0.15mm wide. Obviously it's not insulated but for patching PCB tracks it doesn't matter.
      Here's an example of my handy-work....


    4. I wondered if any of the caps0ff methods actually involve taking the board to a "clean room" where data recovery of chips happens and procedures are followed to reduce damaging, static and dust.

  4. Rubadue Tca Insulation is tefelz (etfe)

    1. it's single strand teflon coated wire. they used to use it in the telecommunication industry for wiring the exchanges and street inter-connecting boxes. it's very rare now. closest thing for normal people is Kynar wire, which is 30AWG.

  5. A suggestion for you Patreon campaign: the gap between $10 and $100 is pretty steep, especially since it is about monthly payments. You might want to introduce one or two "levels" in between, $20 and $50, say. It is more cumbersome (i.e. less likely) that someone chooses $10 and enters $20 afterwards because he wants to donate more. Whereas people are more like to donate $20 if it is just a click away.

    Just saying...

  6. Fantastic news, finally c-chip games will be correctly emulated. Thanks guys :)

  7. Awesome hack! I admire your soldering skills.

  8. Good Blog I like This Blog

    Find all information about the etfe connection detail, etfe fabrication, cladding, welding & price at Visit here our Projects.

  9. It was an amazing article.Thanks a lot for providing us this useful article with us
    clipping path service
    Photo Retouching

  10. Awesome writing. I will be back here for your next post.
    clipping path service

  11. On which work could we use this chip? How cost effective is it?

    Want to know

  12. Thanks for your useful information, Its really good blog, I appreciate it. Clipping Path

  13. It's a great and useful piece of information. I'm glad this helpful information you have shared with us.You have described very well about this topic. Thank you for sharing. Clipping Path | Image Masking | Photo Retouching | Photo Manipulation

  14. Very informative post! There is a lot of information here that can help any business get started with a successful post views ….

  15. Insane work... thanks for sharing, really cool......

  16. You have written a helpful post to spent your time. So i really appreciate it. I always read your blog post cause your post are very interesting.

    Clipping Path Service / Cliping path Creative / Buy Background Removal Service

  17. You have written a helpful post to spent your time. So i really appreciate it. I always read your blog post cause your post are very interesting.

    Clipping Path Service / Cliping path Creative / Buy Background Removal Service

  18. Informative article, I have read your article. You have shown in your article very urgent information that known very important every person. Thank you so much for sharing your personal knowledge. We have a company, Which high-quality product photo editing service provides at a reasonable price. I hope our company is one of the best companies in the world. We provide all kinds of photo editing service. If you want to get our service then contact us.

  19. The information is very good indeed, may be useful for everything
    clipping path services

  20. rajaremi
    adalah agen judi online terlengkap dan terpercaya

  21. We provide all major photo editing service such as background removal, image masking service, clipping path service, vehicle photo editing service, image shadow service, ecommerce photo editing service etc.

  22. Toko Otomotif : alat teknik, perkakas bengkel, alat safety, alat ukur, mesin perkakas, scanner mobil, alat servis motor, alat cuci mobil, mesin las.


  23. Erectile dysfunction or impotence is a health issue that is suffered by men. In this problem, the man becomes unable to get the perfect erection. Irregular blood flow in the body is the cause of this problem. This problem may happen because of various reasons. By taking the help of smart drugs, this problem can be solved. Viagra 150 mg is very effective as an ED pill. Viagra is a brand version of Sildenafil which is a PDE5 inhibitor. It cannot cure your ED, but when you take it with proper sexual arousal, and then it can help you in getting the perfect erection. This ED pill you can easily find in the market. Buy Viagra online and thus you can get this ED pill at an affordable price. There are lots of benefits you can enjoy if you buy Viagra online.
    Buy Viagra online


  24. Azad Soch Punjabi epaper and Punjabi newspaper Publish from Punjab India. Latest Punjabi epaper - Find all Latest News in the Punjabi Language – Business news in Punjabi, Sports news in Punjabi, Viral News and top stories from all across India read only at azad soch Punjabi epaper. latest Punjab news, Punjab news, Punjab news online, Punjab news, Punjab news headlines, Punjab Latest News, Punjab News, Punjabi News Online, Punjabi epaper, epaper Punjab, punjabi epaper, Punjabi News paper, Punjabi e-paper, Azad Soch Punjabi Epaper, Punjabi Newspaper, latest Punjabi epaper

    punjabi epaper

    punjabi news

    punjabi news paper

    punjabi newspaper

    today news in punjabi

    latest punjabi news

    punjabi news today

    punjabi latest news

  25. Tatio games are the toughest to emulate rather than imitate? Did the Koreans (the guys who did the copy boards) - resort to decapping custom ICs? You know actually, come to think of it - I do not think that I have ever seen a bootleg Superman.

  26. We provide database solution for telemarketing activities for the client to target their appropriate market.we have all the data city wise phone number list. State wise phone number list. List of Indian phone number with name. we are the best database provider in India and we provide phone number and email list.

    mobile number database

    indian mobile number list

    phone number database

    indian mobile numbers list

    indian mobile number directory

    indian phone number directory

    mobile number database provider

    all mobile number list

    phone number list

    mobile number list with name

  27. That was a great and comprehensive article…all the tips enumerated and explained will be helpful for those who are wise enough to tap from it. Any business nowadays without social media signals and presence may not make it to the outermost, and investment too is part of the key to success in business. Keep up the good work.

  28. This is very good and helpful article thanks for shearing. If you need image editing service just check out our website :

  29. Hi,
    Your article is very informative and has a lot of information. I really like your effort, keep posting.

    Instant Clipping Path Services | Get Clipping Path Services In 30 Minutes.

    High Quality Clipping Path Services, Multiple Path Services, Image-Masking Services ,Photo Retouching | Get Instant a Quote For Your Next Ideas.

  30. Great information!! I really enjoy reading this article information. Thanks for sharing this informative information. The James Firm

  31. A painkiller is also known as an analgesic that belongs to a group drug that is used to achieve analgesia or in other words it helps in getting relief from pain. An analgesic drug usually works on the peripheral and the central nervous system of the body. Any prescription painkiller is string drugs that work by interfering with the transmission by the central nervous system of the body.

    soma 350mg
    carisoprodol 350 mg tablet
    carisoprodol tab 350mg
    soma 350 mg tablet
    soma 350 mg price

  32. This Article is Really Fantastic And Thanks For Sharing The Valuable Post..Instant Clipping Path Services Dial +1-201-685-2077 Or Visit Clipping Path Services Get Instant Services from Experinced Photoshop Certified Experts.You Do Not Want To Get Hold Of The Clipping Path Online Support Or Be Looking For Opening Hours For Image Editing Team.

    Clipping Path Services
    Clipping Path
    Clipping Path Company
    Clipping Path Phone Number
    Clipping Path India
    Clipping Path Indesign
    Image Editing Services