Main » Forums home » Conventional hard drives

All times are UTC - 5 hours [ DST ]



Post new topic Reply to topic  Page 1 of 1
  [ 16 posts ] 
  Previous topic | Next topic 
Author Message
Spildit
 Post subject: WD ROYL-20B Arch ROM REGEN ?
PostPosted: January 5th, 2014, 11:09 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 11038
Location: Portugal
Hi !

Can someone please share an "easy" way to regen or recover a ROM when the original PCB is missing or ROM chip is damaged or ROM masked on MCU and pcb is damaged on the ROYL-20B Arch series ? (Pinclite, DragFly,Sadle G6, Mainer, etc) ?

Those drives only have a copy of ROM on module 109 BUT NO COPY of ROM MODULES at all on SA.

With a close match regarding pcb it's still possible to gain access to SA and hopefully get module 47 with the info on module 40, and native ROM on 109, but how to get the rest of the ROM MODULES ?

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.
Top
 Profile  
 
Spildit
 Post subject: Re: WD ROYL-20B Arch ROM REGEN ?
PostPosted: January 5th, 2014, 13:45 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 11038
Location: Portugal
Uhmmm....

The copy on module 109 looks like a complete ROM dump (including all ROM modules) with a ROYL header ...

If i parse the header out, or in other words get the header of the module out i will have a ROM dump in programmer format ..... and the ROM modules are there too :)

:D :D :D

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.
Top
 Profile  
 
hddguy
 Post subject: Re: WD ROYL-20B Arch ROM REGEN ?
PostPosted: January 6th, 2014, 5:35 
Offline

Joined: November 9th, 2006, 15:15
Posts: 2991
Restore ROM from #109, take ROM modules from similar resource. You can adjust head map manually after writing, and #47 you can restore from SA after writing also. This should be all you need
Top
 Profile  
 
Spildit
 Post subject: Re: WD ROYL-20B Arch ROM REGEN ?
PostPosted: January 6th, 2014, 6:03 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 11038
Location: Portugal
hddguy wrote:
Restore ROM from #109, take ROM modules from similar resource. You can adjust head map manually after writing, and #47 you can restore from SA after writing also. This should be all you need


On some dumps of 109 on my test drives the module with the copy of ROM also have the ROM modules on it. I guess that restoring that will not be enough.
#47 i can regen without any issue from the data on #40 - microjogs.
And what about the dir location on random location (mod 20B, will it be the same from family to family or diferent from drive to drive) ?
Thanks.

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.
Top
 Profile  
 
hddguy
 Post subject: Re: WD ROYL-20B Arch ROM REGEN ?
PostPosted: January 6th, 2014, 6:58 
Offline

Joined: November 9th, 2006, 15:15
Posts: 2991
Spildit wrote:

On some dumps of 109 on my test drives the module with the copy of ROM also have the ROM modules on it.


Not if it has external ROM it shouldnt.

If you can match same version as ROM for ROM modules then as far as I know all dir locations remains the same.
Top
 Profile  
 
Spildit
 Post subject: Re: WD ROYL-20B Arch ROM REGEN ?
PostPosted: January 6th, 2014, 7:37 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 11038
Location: Portugal
hddguy wrote:
Spildit wrote:

On some dumps of 109 on my test drives the module with the copy of ROM also have the ROM modules on it.


Not if it has external ROM it shouldnt.

If you can match same version as ROM for ROM modules then as far as I know all dir locations remains the same.


Thanks for the info.
My test drives were 2.5 laptop drives and 3.5 with masked ROM on MCU.
Well, at any rate further exploration/testing is needed.
I guess that i still have lots to learn, and that is great !
Well, thanks once more for the explanation. I guess that i will have lots of fun with PC3K UDMA !

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.
Top
 Profile  
 
BGman
 Post subject: Re: WD ROYL-20B Arch ROM REGEN ?
PostPosted: January 8th, 2014, 16:14 
Offline

Joined: September 30th, 2005, 7:33
Posts: 874
I think that mod 109 contains only templates of ROM modules.
Top
 Profile  
 
Spildit
 Post subject: Re: WD ROYL-20B Arch ROM REGEN ?
PostPosted: January 8th, 2014, 16:33 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 11038
Location: Portugal
BGman wrote:
I think that mod 109 contains only templates of ROM modules.


Uhhhmmmm ..... Interesting :)
I think you are correct !

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.
Top
 Profile  
 
pcimage
 Post subject: Re: WD ROYL-20B Arch ROM REGEN ?
PostPosted: January 8th, 2014, 16:59 
Offline

Joined: November 29th, 2006, 10:08
Posts: 7855
Location: UK
Spildit wrote:
BGman wrote:
I think that mod 109 contains only templates of ROM modules.


Uhhhmmmm ..... Interesting :)
I think you are correct !


He is!

_________________
PC Image Data Recovery
http://www.pcimage.co.uk

New!! HDD-PCB.COM for all your PCB and donor HDD requirements!
Top
 Profile  
 
fzabkar
 Post subject: Re: WD ROYL-20B Arch ROM REGEN ?
PostPosted: January 9th, 2014, 15:29 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 14945
Location: Australia
FWIW, I have analysed a "non-20B" ROM here:

Regenerating a WD ROYL ROM from SA MODs:
http://malthus.zapto.org/viewtopic.php? ... 2710#p2710

@Spildit, if you could upload your resources, and those of a similar drive, I would be interested to take a look.

_________________
A backup a day keeps DR away.
Top
 Profile  
 
Spildit
 Post subject: Re: WD ROYL-20B Arch ROM REGEN ?
PostPosted: January 9th, 2014, 15:45 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 11038
Location: Portugal
fzabkar wrote:
FWIW, I have analysed a "non-20B" ROM here:

Regenerating a WD ROYL ROM from SA MODs:
http://malthus.zapto.org/viewtopic.php? ... 2710#p2710

@Spildit, if you could upload your resources, and those of a similar drive, I would be interested to take a look.


Fantasticccccc !!!!!!
Nice article !

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.
Top
 Profile  
 
Spildit
 Post subject: Re: WD ROYL-20B Arch ROM REGEN ?
PostPosted: January 9th, 2014, 18:12 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 11038
Location: Portugal
fzabkar wrote:
@Spildit, if you could upload your resources, and those of a similar drive, I would be interested to take a look.


For example :

My 500 GB WD drive that i use to store movies that i've already watched.

Thaoe 3.5 drive - According to WD_Marvell UDMA manual it's a ROYL-20B

I didn't "play" with the drive. It's on a working state and i don't want to brick it. I've just changed the model name of it and backed up ROM and Modules.
Attached is module 109 and ROM.

Attachment:
WD.rar [364.19 KiB]
Downloaded 491 times

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.
Top
 Profile  
 
fzabkar
 Post subject: Re: WD ROYL-20B Arch ROM REGEN ?
PostPosted: January 10th, 2014, 15:30 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 14945
Location: Australia
table of MODs from ROM MOD 20B

Code:
00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11

12 02 01 00 18 00 03 18 90 00 19 63 02 00 19 63 02 00
12 01 0A 00 3E 00 00 19 00 00 30 D7 02 00 00 00 00 00
12 01 0B 00 19 01 00 19 00 00 84 F0 02 00 00 00 00 00
12 01 0B 02 19 01 00 19 00 00 84 E0 02 00 00 00 00 00
12 01 30 00 00 04 00 19 00 00 6E D7 02 00 00 00 00 00
12 01 47 00 00 04 00 19 00 00 00 DC 02 00 00 00 00 00
12 01 0D 00 84 00 00 19 00 00 00 E0 02 00 00 00 00 00
12 01 4F 00 92 00 00 19 00 00 6E DB 02 00 00 00 00 00

table of MODs from ROM MOD 0B

Code:
00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11

12 02 01 00 18 00 03 18 90 00 00 00 00 00 00 00 00 00
12 01 0A 00 3E 00 00 19 00 00 30 D7 02 00 00 00 00 00
12 01 0B 00 19 01 00 19 00 00 84 F0 02 00 00 00 00 00
12 01 0B 02 19 01 00 19 00 00 84 E0 02 00 00 00 00 00
12 01 30 00 00 04 00 19 00 00 6E D7 02 00 00 00 00 00
12 01 47 00 00 04 00 19 00 00 00 DC 02 00 00 00 00 00
12 01 0D 00 84 00 00 19 00 00 00 F0 02 00 00 00 00 00
12 01 4F 00 92 00 00 19 00 00 6E DB 02 00 00 00 00 00

table of MODs from MOD 20B in MOD 109

Code:
00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11

12 02 01 00 18 00 03 18 90 00 18 00 00 00 18 00 00 00
12 01 0A 00 3E 00 00 19 00 00 30 D7 02 00 00 00 00 00
12 01 0B 00 19 01 00 19 00 00 84 F0 02 00 00 00 00 00
12 01 0B 02 19 01 00 19 00 00 84 E0 02 00 00 00 00 00
12 01 30 00 00 04 00 19 00 00 6E D7 02 00 00 00 00 00
12 01 47 00 00 04 00 19 00 00 00 DC 02 00 00 00 00 00
12 01 0D 00 84 00 00 19 00 00 00 E0 02 00 00 00 00 00
12 01 4F 00 92 00 00 19 00 00 6E DB 02 00 00 00 00 00

table of MODs from MOD 0B in MOD 109

Code:
00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11

12 02 01 00 18 00 03 18 90 00 00 00 00 00 00 00 00 00
12 01 0A 00 3E 00 00 19 00 00 30 D7 02 00 00 00 00 00
12 01 0B 00 19 01 00 19 00 00 84 F0 02 00 00 00 00 00
12 01 0B 02 19 01 00 19 00 00 84 E0 02 00 00 00 00 00
12 01 30 00 00 04 00 19 00 00 6E D7 02 00 00 00 00 00
12 01 47 00 00 04 00 19 00 00 00 DC 02 00 00 00 00 00
12 01 0D 00 84 00 00 19 00 00 00 F0 02 00 00 00 00 00
12 01 4F 00 92 00 00 19 00 00 6E DB 02 00 00 00 00 00

MOD info from tables

Code:
MOD ID  ROM offset  size

0A      2D730       3E
0B      2F084      119
20B      2E084      119
30      2D76E      400
47      2DC00      400
0D      2F000       84 (in MOD 0B)
0D      2E000       84 (in MOD 20B)
4F      2DB6E       92

Actual locations of MODs in ROM

Code:
0A      2D730
30      2D76E
4F      2DB6E
47      2DC00
0D      2E000
20B      2E084
0D      2F000
0B      2F084

Actual locations of MODs in MOD 109 (with 0x200 header stripped off)

Code:
0A      2D730
4F      2DB6E
0D      2E000
20B      2E084
0D      2F000
0B      2F084

MOD 0D in ROM

Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

0002E000  52 4F 59 4C 04 00 1E 00 0D 00 01 00 47 34 1A 4D  ROYL........G4.M
0002E010  30 30 30 31 30 30 30 30 00 00 00 00 00 00 00 01  00010000........
0002E020  30 35 2E 30 31 44 30 35 02 00 03 00 00 00 50 01  05.01D05......P.
0002E030  4E E1 57 B9 66 DE 00 01 FE FF 00 00 00 00 20 01  NáW¹fÞ..þÿ.... .
0002E040  01 01 00 00 00 00 20 20 20 20 20 20 20 20 20 20  ......         
0002E050  20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20                 
0002E060  20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20                 
0002E070  20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20                 
0002E080  20 20 00 00

0002F000  52 4F 59 4C 04 00 1E 00 0D 00 01 00 FE 0B C3 0B  ROYL........þ.Ã.
0002F010  30 30 30 31 30 30 30 30 00 00 00 00 00 00 00 00  00010000........
0002F020  30 30 2E 30 30 30 30 30 00 01 03 02 00 00 00 00  00.00000........
0002F030  00 00 00 00 00 00 00 01 FE FF 00 00 00 00 20 01  ........þÿ.... .
0002F040  01 01 00 00 00 00 20 20 20 20 20 20 20 20 20 20  ......         
0002F050  20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20                 
0002F060  20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20                 
0002F070  20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20                 
0002F080  20 20 00 00

MOD 0D in MOD 109

Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

0002E200  52 4F 59 4C 04 00 1E 00 0D 00 01 00 FE 0B C3 0B  ROYL........þ.Ã.
0002E210  30 30 30 31 30 30 30 30 00 00 00 00 00 00 00 00  00010000........
0002E220  30 30 2E 30 30 30 30 30 00 01 03 02 00 00 00 00  00.00000........
0002E230  00 00 00 00 00 00 00 01 FE FF 00 00 00 00 20 01  ........þÿ.... .
0002E240  01 01 00 00 00 00 20 20 20 20 20 20 20 20 20 20  ......         
0002E250  20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20                 
0002E260  20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20                 
0002E270  20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20                 
0002E280  20 20 00 00

0002F200  52 4F 59 4C 04 00 1E 00 0D 00 01 00 FE 0B C3 0B  ROYL........þ.Ã.
0002F210  30 30 30 31 30 30 30 30 00 00 00 00 00 00 00 00  00010000........
0002F220  30 30 2E 30 30 30 30 30 00 01 03 02 00 00 00 00  00.00000........
0002F230  00 00 00 00 00 00 00 01 FE FF 00 00 00 00 20 01  ........þÿ.... .
0002F240  01 01 00 00 00 00 20 20 20 20 20 20 20 20 20 20  ......         
0002F250  20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20                 
0002F260  20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20                 
0002F270  20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20                 
0002F280  20 20 00 00 

_________________
A backup a day keeps DR away.
Top
 Profile  
 
louis
 Post subject: Re: WD ROYL-20B Arch ROM REGEN ?
PostPosted: January 10th, 2014, 21:54 
Offline

Joined: August 22nd, 2011, 15:43
Posts: 214
Location: Romania
so the (in ROM) 20B mod it's in fact a copy of 0B mod..which has an entry to the initialized mod 0D.

also I notice the mod 01 descriptor present also in 0B and 20B (here it's initialized...aka holds the real values). I assume this is a way to change the location of mod 01 in SA when default physical area gets damaged. in older models (I don't know exactly how old by year..I've seen some firmwares in 2008 not having any 20B).. : - chs based SA..mod 01 it's fixed at cyl -1 sector 1; - lba basd SA mod 01 is fixed at LBA 0 which could be on the last cylinders; so if mod 01 gets some serious media damage..it's impossible to write it at another location in SA on these older models.
Top
 Profile  
 
BGman
 Post subject: Re: WD ROYL-20B Arch ROM REGEN ?
PostPosted: January 11th, 2014, 2:48 
Offline

Joined: September 30th, 2005, 7:33
Posts: 874
louis wrote:
so the (in ROM) 20B mod it's in fact a copy of 0B mod..which has an entry to the initialized mod 0D.


Sometimes 0B and 20B differ in regions map also.
Top
 Profile  
 
Spildit
 Post subject: Re: WD ROYL-20B Arch ROM REGEN ?
PostPosted: January 11th, 2014, 11:11 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 11038
Location: Portugal
Thanks for the nice findings :)

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.
Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  Page 1 of 1
  [ 16 posts ] 

Main » Forums home » Conventional hard drives

All times are UTC - 5 hours [ DST ]

Who is online

Users browsing this forum: No registered users and 73 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Switch to mobile style
cron
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group