wd10spzx-22z10t1

[sin]

Hi folks, today i happened to invest in the learning curve.
Got this WD for fooling around.
Attached is the ROM.
Many new ROYL modules
tried to use standard dfl technique of making changes in module 30 of the rom...ie at 00x08 offset as 31 (which is also the module identifier i believe.)

Patched the rom back to the micronix chip using my new minipro2 plus ( )

still no access to SA.
More ppl can join in.

Thanks
--

Attachments

self Spzx.rar

(669.25 KiB) Downloaded 1313 times

[fzabkar]

Would this trick be worth trying?
viewtopic.php?t=37418

I have analysed the structure of a similar ROM here:
viewtopic.php?f=1&t=36673

BTW, I notice that DFL does not recalculate the checksum for mod 31.

[sin]

HI, i had edited it manually. Forgot to do the checksum bit...
not a DFL fault.


Thanks.

[sin]

Would this trick be worth trying?
viewtopic.php?t=37418

I have analysed the structure of a similar ROM here:
viewtopic.php?f=1&t=36673

BTW, I notice that DFL does not recalculate the checksum for mod 31.

Hi there...the rom Ive uploaded is having 24 found ROYL header mods.

it is like 2 copies of each hence 12 mods

some mods like 47 are repeated twice as stated but have different checksums.

Wonder what is WD upto

--

[fzabkar]

Two copies of module 47 (and others) is not new. Each copy is referenced by a different directory, either 0B or 20B. Sometimes the inactive copy is uninitialised, ie it may contain a template or be filled with FFh.

See my attachment.

PCMBlknn_nnnnn.bin -- non-compressed sections of the ROM
revBlknn_nnnnn.bin -- compressed sections of the ROM (converted to big endian)
decBlknn_nnnnn.bin -- decompressed sections of the ROM

These are the tools I'm using:

http://www.users.on.net/~fzabkar/temp/wdROMv12.exe
http://www.users.on.net/~fzabkar/temp/wdROMv12.bas

http://www.hddoracle.com/download/file.php?id=7412 (LzHuf.7z)
http://www.hddoracle.com/download/file.php?id=7414 (LZHUFDOS.7z)

How to decompress PMCBlocks:
http://www.hddoracle.com/viewtopic.php?f=59&t=181&p=18963#p18963

Attachments

wd10spzx-22z10t1_sin.rar

(956.11 KiB) Downloaded 1326 times

[sin]

I just realized it is not a new thing as some one over a WhatsApp forum also suggested something identical to what you said. What an eye opener.

Thanks for the references.

Is there a way to access the SA for these drives in a non commercial approach (no one button click/fix)

Thanks for being so supportive in my journey.

More to come

--

[sin]

possibly by manually setting off the regions active flag(may be not, or shifting them?) and extracting the start address from the rom and trying to read ? but wouldn't the loaders be required to read stuff...I am aware some drives dont require loaders to read the SA...just speculating at 4:02AM

--

[fzabkar]

Is there a way to access the SA for these drives in a non commercial approach (no one button click/fix)

AIUI, neither MRT nor PC3000 are currently able to work with this family.

[sin]

thanks,
That said. May be their research is going on possibly.
Considering these all folks use Disassemblers and Decompilers and can do things very well at the back end to develop solutions, why do you think this drive is so left out?

monopoly establishment may be?


--

[fzabkar]

Considering these all folks use Disassemblers and Decompilers and can do things very well at the back end to develop solutions, why do you think this drive is so left out?

Maybe this architecture is a hard nut to crack?