Homebrew The bootroms

  • Thread starter Thread starter Suiginou
  • Start date Start date
  • Views Views 52,348
  • Replies Replies 307
  • Likes Likes 39
Just an idea, but could glitching possibly be used, maybe try and bypass the lock code.
 
Based on a careful search and analysis by some of us on #Cakey, the (at least old 3DS) MCU appears to be a modified version of the Renesas 78K0/KE2 UPD78F0531AFC-AA1-A.

It is the only 0.5cmx0.5cm BGA 8-bit 64-pin 16kb-ROM MCU that Renesas manufactures. Documentation can be found on that page. It runs a custom ISA (which is why we failed to determine anything from IDA Pro) with opcodes available in the "78K/0 Series for Instructions" manual on the site linked.

There is a metric fuck-ton of information and docs available, including an emulator for the chip.

That's impressive and awesome. Kudos, #Cakey.
I'm going to be poring over these documents, especially the 78k ISA.
A reimplementation of the important things in C or AVR ASM shouldn't be too hard, it's only 16k to work with.
I have a Teensy++2 which is itching to be put to use. :D
 
  • Like
Reactions: astronautlevel
That's impressive and awesome. Kudos, #Cakey.
I'm going to be poring over these documents, especially the 78k ISA.
A reimplementation of the important things in C or AVR ASM shouldn't be too hard, it's only 16k to work with.
I have a Teensy++2 which is itching to be put to use. :D
I also have an Arduino Uno that may be finding a use in the near future... :P
 
That's impressive and awesome. Kudos, #Cakey.
I'm going to be poring over these documents, especially the 78k ISA.
A reimplementation of the important things in C or AVR ASM shouldn't be too hard, it's only 16k to work with.
I have a Teensy++2 which is itching to be put to use. :D

We also discovered that they offer a download for an ide with a built in simulator and decompiler for this family. The decompiler does not appear to accept foreign binaries, but perhaps it will give us some clues for reversing the MCU firmware.
 
>could glitching possibly be used

I don't even know what you mean by that.

I've heard about hacks being done by messing around with e.g. power connections, etc. to processors which can get them to behave in an odd way.

The Reset Glitch Hack on the 360 being an example.

As I said it was just an idea I was curious about.
 
Last edited by 8BitWonder,
  • Like
Reactions: VegaRoXas
  • Like
Reactions: 8BitWonder
D-Waves aren't general-purpose QCs and, in particular, can neither run Shor's algorithm (irrelevant for this, but would mean instant death for the entire elliptic curve cryptosystem) nor Grover's algorithm.
My bad, guess I was looking more at qubits rather than if it was possible to use it for the mentioned purpose. :P
 
  • Like
Reactions: Deleted User

Site & Scene News

Popular threads in this forum