NMI halt is handled with writing 0x80 to port 0x70, but the dumper still fails

sb16dump V0.16 experimental support for 4.12
I hope it works ))

No error this time it just freezes after passing the loopback check

maxtherabbit wrote on 2023-10-05, 16:23:

No error this time it just freezes after passing the loopback check

Wait a liitle ))

Maelgrum wrote on 2023-10-05, 16:24:

maxtherabbit wrote on 2023-10-05, 16:23:

No error this time it just freezes after passing the loopback check

Wait a liitle ))

I gave it like 45 seconds how long are you thinking?

maxtherabbit wrote on 2023-10-05, 16:24:

Maelgrum wrote on 2023-10-05, 16:24:

maxtherabbit wrote on 2023-10-05, 16:23:

No error this time it just freezes after passing the loopback check

Wait a liitle ))

I gave it like 45 seconds how long are you thinking?

Ok, its long enough.

Waiting for @S95Sedan result

Maelgrum wrote on 2023-10-05, 16:19:

sb16dump V0.16 experimental support for 4.12
I hope it works ))

Here you go 😉

hmm wonder why it crashed for me

S95Sedan wrote on 2023-10-05, 16:29:

Maelgrum wrote on 2023-10-05, 16:19:

sb16dump V0.16 experimental support for 4.12
I hope it works ))

Here you go 😉

Yes ! We did it ! ))))))))))

sb16dump V0.17 support for v4.12

Content:

1v404-8k_49fc3869
2- Original Creative 4.04 Firmware
3-----
4v405-8k_e51aff23:
5- Original Creative 4.05 Firmware
6-----
7v411-8k_4d75e821
8- Original Creative 4.11 Firmware
9-----
10v412-8k_f69d1672
11- Original Creative 4.12 Firmware
12-----
13v413-6k_9e1b22c6
14v413-8k_e22e9001
15- Original Creative 4.13 Firmwares
16
17v413-8k_4ca3dca8_patch3
18- Fixed hanging note bug
19
20v413-8k_16a46526_patch4
21- Fixed hanging note bug
22- Fixed PSW bug in ExtInt0/ExtInt1 interrupt handlers
23-----
24v416-6k_986e5cb9
25v416-8k_b15514ef
26- Original Creative 4.16 Firmwares

- Added D52 mappings;
( https://www.bipom.com/dis51.php )

So far, we have ALL 4.xx fw (4.04, 4.05, 4.11, 4.12, 4.13, 4.16).
4.16 and 4.12 was not previously known as dumped. Great job done !
Мy sincere gratitude to everyone involved in the project.
Special thanks to main testers: @S95Sedan and @mattw !

Maelgrum wrote on 2023-10-05, 16:34:

sb16dump V0.17 support for v4.12

Still doesn't work on my CT2760

maxtherabbit wrote on 2023-10-05, 16:48:

Maelgrum wrote on 2023-10-05, 16:34:

sb16dump V0.17 support for v4.12

Still doesn't work on my CT2760

May be NMI sensitive mb ?

Maelgrum wrote on 2023-10-05, 16:34:

sb16dump V0.17 support for v4.12

Now since no new firmware will be released by Creative, the fun with dumping can only continue with clone cards. On the other hand have you checked how 4.16 is fixed against hanging notes bugs? Looks the most proper way to improve the firmware is to make fixes on 4.13.

Maelgrum wrote on 2023-10-05, 16:49:

maxtherabbit wrote on 2023-10-05, 16:48:

Maelgrum wrote on 2023-10-05, 16:34:

sb16dump V0.17 support for v4.12

Still doesn't work on my CT2760

May be NMI sensitive mb ?

Not sure it has anything to do with the NMI, once I masked it by writing 0x80 to port 0x70 the v0.16 dumper failed gracefully

Maelgrum wrote on 2023-10-05, 16:47:

So far, we have ALL 4.xx fw (4.04, 4.05, 4.11, 4.12, 4.13, 4.16). 4.16 and 4.12 was not previously known as dumped. Great job […]
Show full quote

So far, we have ALL 4.xx fw (4.04, 4.05, 4.11, 4.12, 4.13, 4.16).
4.16 and 4.12 was not previously known as dumped. Great job done !
Мy sincere gratitude to everyone involved in the project.
Special thanks to main testers: @S95Sedan and @mattw !

Nice job on the coding.

I changed my post a bit aswell and added d52 mappings i have so far, as only 4.05 was partially done.
Used https://github.com/schlae/sb-firmware/tree/master as reference.

Has anyone done a sb16dumper run on a 4.11 card yet?

maxtherabbit wrote on 2023-10-05, 16:52:

Maelgrum wrote on 2023-10-05, 16:49:

maxtherabbit wrote on 2023-10-05, 16:48:

Still doesn't work on my CT2760

May be NMI sensitive mb ?

Not sure it has anything to do with the NMI, once I masked it by writing 0x80 to port 0x70 the v0.16 dumper failed gracefully

Now, with known dump of 4.12, i can try to find other attack route. May be without NMI triggering in process ))