HITACHI-ARM FIRMWARE RECOVERY.

[fzabkar]

I found these updates:

http://files.hddguru.com/download/Firmware%20updates/Hitachi/JP07H3PA.zip (firmware 3PA for HUA722010CLA330 HUA722050CLA330)
http://files.hddguru.com/download/Firmware%20updates/Hitachi/Firmware_Hitachi_7K1000.C_39C_3EA.rar (Firmware update: Hitachi Deskstar HDS721010CLA332 (Ver. 39C & 3EA)

Code:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000  44 4C 44 30 00 00 00 00 48 33 50 41 00 00 00 00  DLD0....H3PA....
00000010  F8 04 E8 09 F2 B5 8D D1 00 00 00 00 00 00 00 00
00000020  4B 2D E8 84 8F E3 07 95 01 D8 28 0E 6F 73 07 D0
........
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

0009EFE0  F7 A7 C5 D1 82 5B 6C C8 67 E6 7C 01 4F 36 8D 89
0009EFF0  BD 43 C7 33 93 E1 4A E5 24 B0 87 7E 65 A1 BB 7B

The .BD and .BDX files look like loaders, but their payloads appear to be encrypted. They all end on a sector boundary, so that would be consistent with encryption rather than compression.

[fzabkar]

Code:

Offset(h) 00   02   04   06   08   0A   0C   0E

00000000  444C 4430 0000 0000 4833 5041 0000 0000  DLD0....H3PA....
00000010  F804 E809 F2B5 8DD1 0000 0000 0000 0000
          ^^^^
          size of file in sectors = 0x4F8

Would it be possible to apply the firmware update to a stand-alone PCB and then dump the RAM? Hopefully this will enable us to see the decrypted loader.

[fzabkar]

Or use PC3K to create the loader ? I will test the loaders myself in a moment or two.

IIUC, PC3K is unable to create a loader for this model. :-?

[fzabkar]

I found some Jupiter updates here, but all the .BD files are encrypted:

https://www.ibm.com/support/pages/ibm-online-sassata-hard-disk-drive-update-program-legacy-v12201-windows-ibm-system-x-bladecenter-and-flex-systems

[saltwater]

I think that @Pepe is feeling very well and generouse today because he did had a great weekend so he will privide a loader for us !!! If we had a loader we could try something... Are you sure PC3K doesn't make a loader for the drive ?

I don't think pepe will create loader for me or us. I asked him before on Skype. I have no illusion. I don't want harass him with this anymore.
And about your other question. We did not found any menu in Pc3K for creating loader. Pepe has an own programmed script or software created for this kind of problem.

[saltwater]

I think that @Pepe is feeling very well and generouse today because he did had a great weekend so he will privide a loader for us !!! If we had a loader we could try something... Are you sure PC3K doesn't make a loader for the drive ?

I don't think pepe will create loader for me or us. I asked him before on Skype. I have no illusion. I don't want harass him with this anymore.
And about your other question. We did not found any menu in Pc3K for creating loader. Pepe has an own programmed script or software created for this kind of problem.

When you do HDD Resources backup on PC3K using a good drive don't you have an option to tick that says off-line start resources ?

2019-01-30.png

The "Offline Start Resources" option does NOT create loader file It"s just creates a "Utility Start Resources" folder, and put the USAG.RPM, and OpenDir files into, and thats it.

[saltwater]

What about if you use this :

20190130113102.jpg

And point to the folder with USAG+Open modules ?

With this method PC3K use resource map files, but does not upload anything to HDD RAM. Because the consequence of no overlay in RAM (in my case) this cause that there is no SA or UA access....

[saltwater]

Also what version of SeDiv do you have ? The last one that I have is 3.0.0.15 and "Download MFG Code" is "PLACEBO" - Doesn't do a thing - Doesn't send any command to the drive.

Download Microcode works very slowly and half of the times don't work.

SeDiv.png

I have Sediv Hitachi 2.0 so mine is older than yours, but can handle CLA3 family.
The "Download MFG code" does not do anythin in mine as yours.
Under "Special Mode", only "JPK does something, but i don't know what

drHDD's loader as i remember does not contains any of open modules, and it's worked for you.
I'm really confused how hitachi loader have to look like.

[saltwater]

Maybe the problem with my loader is i used USAG module wich point to ABA address, and not to RAM address.
.....and some module size are different in RAM compared to ABA module size.

[saltwater]

Just thinking.....

Maybe we have to build a loader that contents a RAM module map (USAG section in loader) using modules highlighted in this picture above with correct RAM address and sectors:

[fzabkar]

I have no confidence in this idea, but I could try to modify my program so that it creates a loader using every SA module in a specified directory. Note that I still don't understand the function of 3 of the bytes, plus I will be basing my loader on the A7E example created by PC3K (because I still don't know what a CLA loader is supposed to look like).

[fzabkar]

As I said, I have no confidence in this:

http://users.on.net/~fzabkar/FreeBasic_W32/Hitachi/HARMLDR2.bas
http://users.on.net/~fzabkar/FreeBasic_W32/Hitachi/HARMLDR2.exe