![Page 1: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/1.jpg)
Orbiting the SaturnInvestigating a decades-old DRM system
James Laird-Wah
![Page 2: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/2.jpg)
Chipmusic?
![Page 3: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/3.jpg)
Drag’n’Derp: a USB cartridge
![Page 4: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/4.jpg)
Why the Saturn?
![Page 5: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/5.jpg)
Architecture
Cart Port
ROM processor
User programmable
MasterCPU
SlaveCPU
SMPC
SystemControl
Unit
CD Block
SCSP
68EC000
CD Mech
VDP1 VDP2
![Page 6: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/6.jpg)
Saturn discs
![Page 7: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/7.jpg)
Boot sequence
BIOS CDB Mech
Auth DiscRead first sector
SEGA SEGASATURN
Read ring
Logo data + statusAuth: genuine game
Read IP
IP data
![Page 8: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/8.jpg)
System Disc
![Page 9: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/9.jpg)
“Just cut a real disc…”
![Page 10: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/10.jpg)
CD sector format
Header Data Sector ECC
Subcode Audio Sector
CIRC
EFM
![Page 11: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/11.jpg)
Isolating the mech
![Page 12: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/12.jpg)
Mech status bytes
b2 00 00 03 ad 3f 00 00 00 00 00 5e 01
b2 00 00 03 ad 3f 01 00 00 00 00 5d 01
b2 00 00 03 ad 3f 01 00 01 01 00 5b 01
b2 00 00 03 ad 3f 02 00 01 01 00 5a 01
b2 00 00 03 ad 3f 02 00 02 02 00 58 01
b2 00 00 03 ad 3f 03 00 02 02 00 57 01
b2 00 00 03 ad 3f 03 00 03 03 00 55 01
b2 00 00 03 ad 3f 04 00 03 03 00 54 01
Regular data areab2 00 00 04 ad 3f 00 00 00 00 00 5d 01
b2 00 00 04 ad 3f 01 01 00 00 00 5b 01
b2 00 00 04 ad 3f 01 01 01 01 00 59 01
b2 00 00 04 ad 3f 02 02 01 01 00 57 01
b2 00 00 04 ad 3f 02 02 02 02 00 55 01
b2 00 00 04 ad 3f 03 03 02 02 00 53 01
b2 00 00 04 ad 3f 03 03 03 03 00 51 01
b2 00 00 04 ad 3f 04 04 03 03 00 4f 01
Ring area
![Page 13: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/13.jpg)
Mech’s MCU
![Page 14: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/14.jpg)
WDET?
![Page 15: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/15.jpg)
Tracking
Da
ta
TE
![Page 16: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/16.jpg)
Tracking Error
Regular data area Ring area
![Page 17: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/17.jpg)
CDB architecture
CPU
DRAM
CD mechHost
bridge
MPEG DRAM
ROM
Video CD card
![Page 18: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/18.jpg)
CDB module
![Page 19: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/19.jpg)
SH-1 boot modes
![Page 20: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/20.jpg)
Dumping the SH-1
![Page 21: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/21.jpg)
Dumping the SH-1
![Page 22: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/22.jpg)
Victory!
03d0: 0000 09d2 0000 09d2 0000 09d2 0000 09d2 ................
03e0: 0000 09d2 0000 09d2 0000 09d2 0000 09d2 ................
03f0: 0000 09d2 0000 09d2 0000 09d2 0000 09d2 ................
0400: 2243 6f70 7972 6967 6874 2028 4329 2048 "Copyright (C) H
0410: 6974 6163 6869 2c20 4c74 642e 2031 3939 itachi, Ltd. 199
0420: 3322 0009 e2e0 9ba6 d039 400e 3ee8 4e2e 3".......9@.>.N.
0430: b080 0009 d0e9 401e b088 0009 b094 0009 ......@.........
0440: b0b2 0009 b0c0 0009 b094 0009 b0d5 0009 ................
0450: d030 401e b0dc 0009 b0e8 0009 d02e 401e .0@...........@.
0460: b0ea 0009 b12a 0009 d0dc 401e b0b0 0009 .....*....@.....
![Page 23: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/23.jpg)
Where to start?
![Page 24: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/24.jpg)
More vectors
![Page 25: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/25.jpg)
Spaghetti Central
![Page 26: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/26.jpg)
The key to everything
![Page 27: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/27.jpg)
The secret backdoor!
![Page 28: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/28.jpg)
???
![Page 29: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/29.jpg)
Eyeballing the round function
![Page 30: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/30.jpg)
A pattern
![Page 31: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/31.jpg)
Feistel networks
X
Y
Z
+
+
+
X
Y
Z
+
+
+
![Page 32: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/32.jpg)
Code injection!
![Page 33: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/33.jpg)
A new tool
![Page 34: Orbiting the Saturn the... · 2019-06-08 · Estee Laird-Wah. Title: PowerPoint Presentation Author: james Created Date: 10/10/2016 9:30:26 PM](https://reader035.vdocuments.us/reader035/viewer/2022070916/5fb6f72308ebc24fec654615/html5/thumbnails/34.jpg)
Thanks
Lazerbeat
zyrobs
the Yabause team
cTrix
Estee Laird-Wah