Switch to full style
Data recovery and disk repair questions and discussions related to old-fashioned SATA, SAS, SCSI, IDE, MFM hard drives - any type of storage device that has moving parts
Post a reply

Re: Toshiba 500GB out of DVR Locked

October 26th, 2016, 23:47

In the case of the MK5061GSY model, all the CPs in the table were in the ROM. The MQ01ABD050V and MQ01ABD032 models differ from the MK5061GSY in this respect. Also, the newer drives have a slightly different table structure, and they have 2-byte CP IDs.

I now suspect that the parameter which I have called "Relative Address" is in fact, together with "Byt11", the loadpoint of the CP in RAM. For example, I believe that the loadpoint for CP 0x0109 ("SX") is 0xD007F2D0. Likewise, I believe that the loadpoint for CP 0x00F8 ("DB") is 0xD00C1110. For the most part, the layout of the CPs in ROM ("Absolute Address") matches their layout in RAM.

Re: Toshiba 500GB out of DVR Locked

November 2nd, 2016, 17:44

AFAICT, the header of the ROM stores the location of the CPs. It also appears to point to 6 bytes which look like they may be some kind of CRC. If I'm correct, then I expect it would be possible to patch the CP section (0x77C00 - 0x7FFFF) from the patient into a donor ROM without affecting any checksum(s).

Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000  43 6F 70 79 72 69 67 68 74 20 31 39 39 39 20 54  Copyright 1999 T
00000010  4F 53 48 49 42 41 20 43 6F 72 70 6F 72 61 74 69  OSHIBA Corporati
00000020  6F 6E 00 00 00 00 00 00 00 00 00 00 00 00 00 00  on..............
00000030  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000050  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000060  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000070  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000080  00 00 00 00 00 00 00 00 78 7B 07 00 00 7C 07 00  ........x{...|..
          location of 6-byte CRC? ^^^^^^^^^^^ ^^^^^^^^^^^ location of CPs in ROM
00000090  00 00 00 00 00 00 00 00 00 00 08 00 00 00 00 00  ................
                                  ^^^^^^^^^^^ size of ROM ?
000000A0  00 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00  ................
000000B0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 23  ...............#

The following program extracts the CPs from the newer ROM type.

http://www.users.on.net/~fzabkar/temp/toromcp4.bas
http://www.users.on.net/~fzabkar/temp/toromcp4.exe

Re: Toshiba 500GB out of DVR Locked

February 16th, 2017, 10:36

https://monosnap.com/file/QuzF60yO0PZAq ... YU91Z7Tpsk

Re: Toshiba 500GB out of DVR Locked

February 16th, 2017, 15:57

I will buy any locked Toshiba VS at the right price :)

Re: Toshiba 500GB out of DVR Locked

February 17th, 2017, 4:20

I'm talking 1000s 8)

Re: Toshiba 500GB out of DVR Locked

February 19th, 2017, 0:44

guru wrote:I'm talking 1000s 8)



Guru ,
Your enthusiasm shows you know how to unlock these already

Re: Toshiba 500GB out of DVR Locked

August 11th, 2017, 5:46

Spildit wrote:
guru wrote:I will buy any locked Toshiba VS at the right price :)


Yes, if someone have one of those locked drives (500 GB) that they are willing to sell for a small price i would like to buy one or two as well.


I have, get in touch.

Re: Toshiba 500GB out of DVR Locked

November 3rd, 2017, 20:02

g0dzax wrote:It would be cool if someone actually managed to dump the ROM or CP's, so we could compare them to an unlocked drive of these series. If there is any kind of suggestion regarding how to do that, do post it. Meanwhile, I'm attaching the RAM (read through terminal and ATA), ROM and CP's I got from an ABD unlocked.



Hi
You model
MQ01ABD100
FW : AXFA1Q2E
10/18/2013
no same file

Fw toshiba serii vs model MQ01ABD032VS 2 pcs no same file
same model and many other files
unlock very hard

Re: Toshiba 500GB out of DVR Locked

November 4th, 2017, 16:22

vides wrote:
g0dzax wrote:It would be cool if someone actually managed to dump the ROM or CP's, so we could compare them to an unlocked drive of these series. If there is any kind of suggestion regarding how to do that, do post it. Meanwhile, I'm attaching the RAM (read through terminal and ATA), ROM and CP's I got from an ABD unlocked.



Hi
You model
MQ01ABD100
FW : AXFA1Q2E
10/18/2013
no same file

Fw toshiba serii vs model MQ01ABD032VS 2 pcs no same file
same model and many other files
unlock very hard

I don't understand what you are trying to say, but ISTM that the task should be fairly straightforward. The main problem seems to be the tools. They all have bugs, and none of the developers seem to care too much about fixing them.

For example, neither PC3K nor MRT understand Toshiba's Glists (MRT has the same bug as PC3K plus another of its own), and none of the tools can correctly determine the CP sizes. Sediv even tells you that all is OK when it isn't.

Notice the dismissive response by Ace to a request from several PC3K users to implement a feature to enable writing Toshiba ROMs:

http://forum.acelaboratory.com/viewtopic.php?t=9184

Re: Toshiba 500GB out of DVR Locked

November 5th, 2017, 15:41

I wonder if HRT's "Update Flash" feature is realised with the ATA standard Download Microcode command (92h).

Re: Toshiba 500GB out of DVR Locked

August 21st, 2020, 8:38

guru wrote:I will buy any locked Toshiba VS at the right price :)


Is your offer still valid? :)

Re: Toshiba 500GB out of DVR Locked

August 21st, 2020, 8:41

Years have passed but
I encounter this problem.Can anyone find a solution to this problem?

Re: Toshiba 500GB out of DVR Locked

August 22nd, 2020, 13:26

No solution, for Toshiba Vs series.
Post a reply