Switch to full style
Discussions related to DFL tools: general chat, firmware requests
Post a reply

wd10spzx-22z10t1

September 24th, 2018, 14:14

Hi folks, today i happened to invest in the learning curve.
Got this WD for fooling around.
Attached is the ROM.
Many new ROYL modules
tried to use standard dfl technique of making changes in module 30 of the rom...ie at 00x08 offset as 31 (which is also the module identifier i believe.)

Patched the rom back to the micronix chip using my new minipro2 plus ( :D )

still no access to SA. :D :D :D
More ppl can join in.

Thanks
--
Attachments
self Spzx.rar
(669.25 KiB) Downloaded 86 times

Re: wd10spzx-22z10t1

September 24th, 2018, 16:51

Would this trick be worth trying?
viewtopic.php?t=37418

I have analysed the structure of a similar ROM here:
viewtopic.php?f=1&t=36673

BTW, I notice that DFL does not recalculate the checksum for mod 31. :?

Re: wd10spzx-22z10t1

September 25th, 2018, 4:54

HI, i had edited it manually. Forgot to do the checksum bit...
not a DFL fault.


Thanks.

Re: wd10spzx-22z10t1

September 27th, 2018, 9:55

fzabkar wrote:Would this trick be worth trying?
viewtopic.php?t=37418

I have analysed the structure of a similar ROM here:
viewtopic.php?f=1&t=36673

BTW, I notice that DFL does not recalculate the checksum for mod 31. :?



Hi there...the rom Ive uploaded is having 24 found ROYL header mods.

it is like 2 copies of each hence 12 mods

some mods like 47 are repeated twice as stated but have different checksums.

Wonder what is WD upto :D

--

Re: wd10spzx-22z10t1

September 27th, 2018, 16:16

Two copies of module 47 (and others) is not new. Each copy is referenced by a different directory, either 0B or 20B. Sometimes the inactive copy is uninitialised, ie it may contain a template or be filled with FFh.

See my attachment.

    PCMBlknn_nnnnn.bin -- non-compressed sections of the ROM
    revBlknn_nnnnn.bin -- compressed sections of the ROM (converted to big endian)
    decBlknn_nnnnn.bin -- decompressed sections of the ROM

These are the tools I'm using:

http://www.users.on.net/~fzabkar/temp/wdROMv12.exe
http://www.users.on.net/~fzabkar/temp/wdROMv12.bas

http://www.hddoracle.com/download/file.php?id=7412 (LzHuf.7z)
http://www.hddoracle.com/download/file.php?id=7414 (LZHUFDOS.7z)

How to decompress PMCBlocks:
http://www.hddoracle.com/viewtopic.php?f=59&t=181&p=18963#p18963
Attachments
wd10spzx-22z10t1_sin.rar
(956.11 KiB) Downloaded 90 times

Re: wd10spzx-22z10t1

September 27th, 2018, 18:15

I just realized it is not a new thing as some one over a WhatsApp forum also suggested something identical to what you said. What an eye opener.

Thanks for the references.

Is there a way to access the SA for these drives in a non commercial approach (no one button click/fix)

Thanks for being so supportive in my journey.

More to come

--

Re: wd10spzx-22z10t1

September 27th, 2018, 18:32

possibly by manually setting off the regions active flag(may be not, or shifting them?) and extracting the start address from the rom and trying to read ? but wouldn't the loaders be required to read stuff...I am aware some drives dont require loaders to read the SA...just speculating at 4:02AM

--

Re: wd10spzx-22z10t1

September 27th, 2018, 18:55

sin wrote:Is there a way to access the SA for these drives in a non commercial approach (no one button click/fix)

AIUI, neither MRT nor PC3000 are currently able to work with this family.

Re: wd10spzx-22z10t1

September 27th, 2018, 19:11

thanks,
That said. May be their research is going on possibly.
Considering these all folks use Disassemblers and Decompilers and can do things very well at the back end to develop solutions, why do you think this drive is so left out?

monopoly establishment may be?


--

Re: wd10spzx-22z10t1

September 27th, 2018, 19:30

sin wrote:Considering these all folks use Disassemblers and Decompilers and can do things very well at the back end to develop solutions, why do you think this drive is so left out?

Maybe this architecture is a hard nut to crack?
Post a reply