View topic - Seagate boot ROM dump

Main » Forums home » Research and development

All times are UTC - 5 hours [ DST ]

Forum rules

Please do not post questions about data recovery cases here (use this forum instead). This forum is for topics on finding new ways to recover data. Accessing firmware, writing programs, reading bits off the platter, recovering data from dust...

Seagate boot ROM dump

Page 1 of 1

[ 7 posts ]

Previous topic | Next topic

Author

Message

skeeter

Post subject: Seagate boot ROM dump

Posted: June 2nd, 2019, 10:15

Joined: May 29th, 2019, 22:00
Posts: 15
Location: United States

A few years back I used some python code to dump the bootloader ROM from a seagate F3 drive using the AP and RD commands within the bootloader

It was referenced in a slide presentation by Jonas Zaddach (starting on slide 18) and written by Travis Goodspeed
http://s3.eurecom.fr/~zaddach/docs/Recon14_HDD.pdf

I can't find this script.
Can anyone help ?

Top

fzabkar

Post subject: Re: Seagate boot ROM dump

Posted: June 2nd, 2019, 22:39

Joined: September 8th, 2009, 18:21
Posts: 15525
Location: Australia

If you can't find the Python code, it shouldn't be too difficult to write a ZOC script to do this. You could modify the ZOC script I wrote for dumping WD's bootloader.

AIUI, the command sequence is …

_________________
A backup a day keeps DR away.

Top

E123

Post subject: Re: Seagate boot ROM dump

Posted: June 3rd, 2019, 7:02

Joined: September 26th, 2016, 4:26
Posts: 110
Location: Russia

fzabkar,

Quote:

AP 0<CR>

-bootloader here. BootROM sits at 0x100000.)))
skeeter, What version BootROM you need? I've some dumps.

Top

fzabkar

Post subject: Re: Seagate boot ROM dump

Posted: June 3rd, 2019, 7:37

Joined: September 8th, 2009, 18:21
Posts: 15525
Location: Australia

E123 wrote:

fzabkar,

Quote:

AP 0<CR>

-bootloader here. BootROM sits at 0x100000.)))

I found this after I posted:

http://s3.eurecom.fr/~zaddach/docs/POC13_zaddach.pdf

Code:

Memory Range             Type

0x00000000 – 0x00008000  Code SRAM
0x00100000 – 0x00120000  ROM
0x00200000 – 0x00400000  Code DRAM
0x04000000 – 0x04004000  Data SRAM
0x40000000 – 0x50000000  IO
0x60000000 – 0x70000000  Data DRAM

_________________
A backup a day keeps DR away.

Top

fzabkar

Post subject: Re: Seagate boot ROM dump

Posted: June 3rd, 2019, 18:47

Joined: September 8th, 2009, 18:21
Posts: 15525
Location: Australia

If you would like to play with WD instead, here is the boot loader from a WD20EADS (uploaded via a ZOC script):

Attachment:

FFFF0000-FFFF2AFF.rar [7.89 KiB]
Downloaded 795 times

@Severence and I have been able to decompress WD's ROM code (@Severence has compiled a Windows version of LZHUF for this purpose). My ROM parsing tool extracts the various code segments.

Seagate's ROM segments are compressed with a different algorithm ("CPRS").

_________________
A backup a day keeps DR away.

Top

skeeter

Post subject: Re: Seagate boot ROM dump

Posted: June 6th, 2019, 13:59

Joined: May 29th, 2019, 22:00
Posts: 15
Location: United States

Thanks for all the ideas, but I want to stick with seagate because it will make it much easier later when I get to the actual firmware code (having messages and diagnostics in text throughout....)

The version I have is:

SEA-3 Yeti Boot ROM 2.0 (12/06/2007)
Copyright Seagate 2007

Top

E123

Post subject: Re: Seagate boot ROM dump

Posted: June 6th, 2019, 14:25

Joined: September 26th, 2016, 4:26
Posts: 110
Location: Russia

skeeter, https://yadi.sk/d/qMVdXFEuy4zUtg

Top

Page 1 of 1

[ 7 posts ]

Main » Forums home » Research and development

All times are UTC - 5 hours [ DST ]

Who is online

Users browsing this forum: No registered users and 10 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum