Cloning A Sound Card
summary
Reverse engineers recreate the 1989 Sound Blaster 1.0 from two hi‑res photos, trace both PCB layers in KiCad, and order alleged Creative/Intel 8051 mask‑ROM chips from utsource. Using a parallel programmer, logic analyzer and a tungsten microprobe they dumped 8051 mask ROM via tungsten microprobe (seven data lines probed over three tedious hours), discover a secret 512‑byte test ROM, seven undocumented DSP opcodes and a 4k implant NAND ROM, then published KiCad clone running original firmware that successfully plays the Windows 3.1 tada.wav.
AI-written summary · about
chapters (14)
- 0:00Introduction to the project
- 1:29Reverse engineering methods
- 3:48Identifying the microcontroller
- 6:12PCB layout and crowdsourcing
- 7:27Schematic and layout design
- 9:44Firmware extraction and analysis
- 13:00Verification and software
- 16:43First successful prototype
- 17:51Deep dive into silicon design
- 21:25ROM exploration and data recovery
- 25:16Physical probing of the chip
- 28:30Decoding the firmware
- 30:58Secret ROM and project closure
- 36:23Sound card history lesson
related talks
33mBreaking Into Chips By Reading The Datasheet
49mShack On The Beach
27mReverse Engineering Custom ASICs By Exploiting Supply-Chain Leaks
42mReinventing black boxes
11mOption hack that 30 year old oscilloscope!
01h 00mIntel VISA: Through the Rabbit Hole
21mOpen Source IC Design and Hardware Reverse Engineering Or: How I Learned to Stop...
48mReverse-Engineering the Supra iBox: Exploitation of a Hardened MSP430-Based Device