Discussions related to DFL tools: general chat, firmware requests
September 24th, 2018, 14:14
Hi folks, today i happened to invest in the learning curve.
Got this WD for fooling around.
Attached is the ROM.
Many new ROYL modules
tried to use standard dfl technique of making changes in module 30 of the rom...ie at 00x08 offset as 31 (which is also the module identifier i believe.)
Patched the rom back to the micronix chip using my new minipro2 plus (
still no access to SA.
More ppl can join in.
- self Spzx.rar
- (669.25 KiB) Downloaded 167 times
September 24th, 2018, 16:51
Would this trick be worth trying?viewtopic.php?t=37418
I have analysed the structure of a similar ROM here:viewtopic.php?f=1&t=36673
BTW, I notice that DFL does not recalculate the checksum for mod 31.
September 25th, 2018, 4:54
HI, i had edited it manually. Forgot to do the checksum bit...
not a DFL fault.
September 27th, 2018, 9:55
Hi there...the rom Ive uploaded is having 24 found ROYL header mods.
it is like 2 copies of each hence 12 mods
some mods like 47 are repeated twice as stated but have different checksums.
Wonder what is WD upto
September 27th, 2018, 16:16
Two copies of module 47 (and others) is not new. Each copy is referenced by a different directory, either 0B or 20B. Sometimes the inactive copy is uninitialised, ie it may contain a template or be filled with FFh.
See my attachment.
PCMBlknn_nnnnn.bin -- non-compressed sections of the ROM
revBlknn_nnnnn.bin -- compressed sections of the ROM (converted to big endian)
decBlknn_nnnnn.bin -- decompressed sections of the ROM
These are the tools I'm using:http://www.users.on.net/~fzabkar/temp/wdROMv12.exehttp://www.users.on.net/~fzabkar/temp/wdROMv12.bashttp://www.hddoracle.com/download/file.php?id=7412
How to decompress PMCBlocks:http://www.hddoracle.com/viewtopic.php?f=59&t=181&p=18963#p18963
- (956.11 KiB) Downloaded 163 times
September 27th, 2018, 18:15
I just realized it is not a new thing as some one over a WhatsApp forum also suggested something identical to what you said. What an eye opener.
Thanks for the references.
Is there a way to access the SA for these drives in a non commercial approach (no one button click/fix)
Thanks for being so supportive in my journey.
More to come
September 27th, 2018, 18:32
possibly by manually setting off the regions active flag(may be not, or shifting them?) and extracting the start address from the rom and trying to read ? but wouldn't the loaders be required to read stuff...I am aware some drives dont require loaders to read the SA...just speculating at 4:02AM
September 27th, 2018, 18:55
sin wrote:Is there a way to access the SA for these drives in a non commercial approach (no one button click/fix)
AIUI, neither MRT nor PC3000 are currently able to work with this family.
September 27th, 2018, 19:11
That said. May be their research is going on possibly.
Considering these all folks use Disassemblers and Decompilers and can do things very well at the back end to develop solutions, why do you think this drive is so left out?
monopoly establishment may be?
September 27th, 2018, 19:30
sin wrote:Considering these all folks use Disassemblers and Decompilers and can do things very well at the back end to develop solutions, why do you think this drive is so left out?
Maybe this architecture is a hard nut to crack?
Powered by phpBB © phpBB Group.