To Explore

From Cricut Hacking Wiki

Jump to: navigation, search

Commands that need more research.

See Also Explored

  • Mat Bounds Request (0x11):
    • Do the dimensions returned change based on the current position of the cutter head?
    • Do the dimensions returned change based on the Mat that is currently loaded?
    • What are the dimensions for other Mat sizes (6"x12", 12"x12", 12"x24", 8.5"x12" (Cricut Mini))
  • Other known commands:
    • Brute Force the parameters to see if they have different results, or behaviors.
    • Also check if alternate Size bytes change the results.
      • Every command is preceded with a byte representing how many bytes the Cricut can expect. Maybe Single byte Commands can be preceded with a 0x01 and the command byte.


These Commands probably exist but their parameters and other information are unknown.

  • Firmware Upgrade (This command would be a bad one to discover while brute forcing the command set. AKA trying every possible command combination to determine how the machine behaves or physically responds.)
  • Detect status of Speed, Pressure and Size Dials.
  • Keyboard detect Key press and set on back light.
  • Power Timeout while experimenting I found that the Cricut would timeout and power off. Maybe the timeout value can be modified?

I believe that "George Basic Shapes" cartridge is used for testing the machine functionality, possibly in the factory before shipping and definitely after refurbishing. This makes me believe that are some test functions that are accessible through either unique key combinations with the cartridge in place or over USB, without the "fake" cartridge in place. Command 0x81 makes me think maybe with the "fake" in place they execute a command over USB to put it through it's paces.

Hardware Questions to research

See Also Explored

  • The internal Atmel Processor supports a boot loader. By writing new firmware at the end of the boot loader, is it possible to revert back to official firmware?