First they mapped out where each x86 assembly codes went in microcode ROM. Using this information, and the ability to update the microcode, they could load and execute arbitrary microcode.
[Gpfault] has launched a series on 64-bit x86 assembly that tries to remedy that ... Of course, if you are writing boot code, you need to know all that old-fashioned legacy stuff.