Thief in Garden does still work. It has a fairly normal PCB, unlike the G&Ws I've seen that have conductive layers on top of the metal traces. So I removed the crystal, its capacitors and the reset capactor, and tapped each signal at a via, except for test (which was tied to gnd) and S6 (which was unused). I cut the trace to test, but I jumpered it back and replaced the parts I removed. I can capture the signal later tonight.
On the G&Ws that I dumped electronically, I removed the chip and soldered it to a breakout board to get to the signals more easily. But with the SMB you sent, I'm going to try to solder wirewrap wire to the necessary pins, then connect them to a small breakout board I made. That board also has pins to connect to a PIC to generate the signals, and to a Saleae Logic to capture the output. I think this will be less work and less likely to damage the game. I will have to remove the crystal and caps so they won't interfere with dumping, but that's easy to do and fix. I'll desolder just the test pin and lift it instead of cutting the trace.
