Not too long ago there was a lot of progress on cracking the N64 CIC by imaging the chip’s die and accessing the factory test pins. A google search landed me on REcon’s June 2015 presentation slides (pdf) on “Reversing the Nintendo 64 CIC,” by Mike Ryan, John McMaster, and marshallh. There is also a Youtube video of the presentation. The slides and video reveal test pins on the PIF's die (probably grounded on the N64 motherboard?), has the functionality of these pins been mapped out? https://recon.cx/2015/slides/recon2...r-marshallh-Reversing-the-Nintendo-64-CIC.pdf
This should help fill in the console code side of things. https://github.com/tj90241/cen64/blob/1c518539c2ed035164b201ad9b9d183e62228368/si/cic.c
That looks like only the CIC (cart) side of things, not the PIF. Still, handy bookmark to keep around because of the seed values, since iirc the UltraCIC code has them dummied out. But let's stay on topic - have the PAL pif contents been extracted yet? What's different from the NTSC one?
It seems some portions of the chip never saw use, maybe they were general purpose I/Os. After looking at the PIF's die in the REcon presentation, I drew up this pinout diagram, the test pins are tied to ground on the commercial N64 motherboards (probably SGI dev kits as well?). I guess breadboarding a PIF would be possible, but perhaps disconnecting the test pins from ground and accessing them while the console is running would prove to be far more interesting?
