Hacking Question How boot launchers bypass fusee checks?

Qubarf · Jun 29, 2019

I was just wondering how boot launchers such as hekate and sx os bypass fusee checks?

Adran_Marit · Jun 29, 2019

Hamdan said:
I was just wondering how boot launchers such as hekate and sx os bypass fusee checks?

I assume they all use a similar method... this section of code is from the reinx bootloader.c source file

Code:

void bootloader() {

mbist_workaround();

clock_enable_se();

// This makes fuse registers visible
clock_enable_fuse(0x01);
check_sku();

// Check configuration fuses
check_config_fuses();

// Disables fuse programming until next reboot
FUSE(FUSE_PRIVATEKEYDISABLE) = 0x10;

// Setup memory controllers
mc_enable();

// Pre-Firmware setup
setup();
}

Beyond that I have no clue XD

M7L7NK7 · Jun 29, 2019

magic

Qubarf · Jun 29, 2019

Adran_Marit said:
I assume they all use a similar method... this section of code is from the reinx bootloader.c source file

Code:

void bootloader() { mbist_workaround(); clock_enable_se(); // This makes fuse registers visible clock_enable_fuse(0x01); check_sku(); // Check configuration fuses check_config_fuses(); // Disables fuse programming until next reboot FUSE(FUSE_PRIVATEKEYDISABLE) = 0x10; // Setup memory controllers mc_enable(); // Pre-Firmware setup setup(); }

Beyond that I have no clue XD

K, thx

Masamune3210 · Jun 29, 2019

I'm pretty sure Big N's bootloader is the thing that checks the fuse count and panics if the count isn't correct, as it's also the thing that will burn fuses if the count is too low.

Adran_Marit · Jun 29, 2019

Masamune3210 said:
I'm pretty sure Big N's bootloader is the thing that checks the fuse count and panics if the count isn't correct, as it's also the thing that will burn fuses if the count is too low.

You are, but when using a modded console the CFW bypasses nintendos bootloader

Qubarf · Jun 29, 2019

Just as a fact, the switch bootloader isn't stored in NAND right?

Masamune3210 · Jun 29, 2019

No, you are thinking about the bootrom, which does some minimal hardware init then starts the bootloader which is stored in one of the firmware partitions

Qubarf · Jun 29, 2019

Ah, ok. Thank you!

Hacking Question How boot launchers bypass fusee checks?

Well-Known Member

Walküre's Hacker

Well-Known Member

Well-Known Member

Well-Known Member

Walküre's Hacker

Well-Known Member

Well-Known Member

Well-Known Member

Similar threads

Popular threads in this forum