There are many ways to rip firmware from a microcontroller, but a particularly cool method is to photograph the bits of a mask ROM through a microscope. In this lecture, I'll teach you the chemistry and photography needed to get a picture of the ROM, as well as a bit about my open source CAD tool for extracting those bits and converting them into logically ordered bytes.

A follow-up to the mask ROM lecture, in this workshop we'll provide you with photographs of a real ROM and the CAD software to interpret it. In two hours, you will mark the bits of that ROM, error correct them, and dump them to disk. You will also learn a bit about decoding them into bytes for emulation or disassembly.