HDD GURU FORUMS
http://forum.hddguru.com/

Deleting Firmware Unlock patch
http://forum.hddguru.com/viewtopic.php?f=28&t=45987		 Page 1 of 1
Author:  msnirvana [ April 16th, 2026, 9:05 ]
Post subject:  Deleting Firmware Unlock patch
My HDD is ST4000VX016 B5 Cimarron locked

ive unlocked the rom and did repair but i have problem to deleting the lock patch

Original rom terminals:

Boot 0x0100MBK007MSN04
Trans
Rst 0x0100MBK007MSN04
(P) SATA Reset

NVCScram Saved HB Size:020A
LD: MD_Alloc:000000F0 HB_Alloc:0000 DiscRestore MD_Saved:000000F0 HB_Saved:00000000 MD_CRC:36B2
PP: MD_Alloc:0000F000 HB_Alloc:0000 DiscRestore
PVTSize: 0004722C CompSize: 000008FA DeCompSize: 0004722C MD_Saved:000008FA HB_Saved:00000000 MD_CRC:D7E0
TW: MD_Alloc:00000400 HB_Alloc:002E DiscRestore MD_Saved:00000160 HB_Saved:00000000 MD_CRC:0000
WCD: MD_Alloc:00038800 HB_Alloc:05B2 DiscRestore MD_Saved:00000020 HB_Saved:00000000 MD_CRC:56D4
GC: MD_Alloc:00005000 HB_Alloc:0000 DiscRestore MD_Saved:00004320 HB_Saved:00000000 MD_CRC:4454
DSP00E2
2Sync:0 4
ABORT!
OpCode = 00000040
SenseCode = 03310022
ReadyStatusFlags = 0002A1E1

ABORT!
OpCode = 00000040
SenseCode = 03310022
ReadyStatusFlags = 0002A1E1

Unrecoverable Read Verify Error Reported
HPower Req=0002 Status=0001
Immediately start Priority Task B
ABORT!
OpCode = 00000040
SenseCode = 03310022
ReadyStatusFlags = 0002A1E1



after unlocking rom everythings on disk scan be well but i cant remove the unlock patch and use the HDD:

Flash bo
Rst 0x0100MBK007MSN04
(P) SATA Reset

NVCScram Saved HB Size:020A
LD: MD_Alloc:000000F0 HB_Alloc:0000 DiscRestore MD_Saved:000000F0 HB_Saved:00000000 MD_CRC:36B2
PP: MD_Alloc:0000F000 HB_Alloc:0000 DiscRestore
PVTSize: 0004722C CompSize: 000008FA DeCompSize: 0004722C MD_Saved:000008FA HB_Saved:00000000 MD_CRC:D7E0
TW: MD_Alloc:00000400 HB_Alloc:002E DiscRestore MD_Saved:00000160 HB_Saved:00000000 MD_CRC:0000
WCD: MD_Alloc:00038800 HB_Alloc:05B2 DiscRestore MD_Saved:00000020 HB_Saved:00000000 MD_CRC:56D4
GC: MD_Alloc:00005000 HB_Alloc:0000 DiscRestore MD_Saved:00004320 HB_Saved:00000000 MD_CRC:0AB5
DSP00E3
2Sync:0 4
2Sync:0 4
ASCII Diag mode

LPower=
HPower
TCC:001E Humidity:16.5% EMCDataErr:00000000 Req=0038 Status=0001ACTIVE
F3 T>

Attachments:
unlocked ROM.zip [355.39 KiB]
Downloaded 17 times
original rom.zip [352.62 KiB]
Downloaded 16 times
Author:  fzabkar [ April 16th, 2026, 12:10 ]
Post subject:  Re: Deleting Firmware Unlock patch
If you are using the original ROM, why are you needing to remove the unlock patch?

Your IAP segment indicates that PUIS is enabled. Does your drive power up in standby?

Code:
Offset(d) 00   02   04   06   08   10   12   14   16   18

00000000  5E0C FF3F C837 1000 0000 0000 3F00 0000 0000 0000  ^.ÿ?È7......?.......
00000020  2020 2020 2020 2020 2020 2020 5357 3232 5859 3147              SW22XY1G
00000040  0000 0000 0000 4E53 3430 2020 2020 4553 4741 5441  ......NS40    ESGATA
00000060  2045 5453 3034 3030 4D4E 3030 4135 2020 2020 2020   ETS0400MN00A5     
00000080  2020 2020 2020 2020 2020 2020 2020 1080 0040 002F                .€.@./
00000100  0040 0002 0002 0700 FF3F 1000 3F00 10FC FB00 105D  .@......ÿ?..?..üû..]
00000120  FFFF FF0F 0000 0704 0300 7800 7800 7800 7800 0800  ÿÿÿ.......x.x.x.x...
00000140  0000 0000 0000 0000 0000 1F00 0E8D 4200 CC08 0000  ..............B.Ì...
00000160  E00F FFFF 6B30 6175 7361 0000 6000 7361 7F00 B800  à.ÿÿk0ausa..`.sa..¸.
                         ^^^^           ^^^^
00000180  B800 0000 0000 0000 00FE 0010 0000 0000 1027 0000  ¸........þ.......'..
00000200  B0BE C0D1 0100 0000 0000 0000 0360 0000 0050 00C5  °¾ÀÑ.........`...P.Å
00000220  4EE2 4C58 0000 0000 0000 0000 0000 0000 0000 DE43  NâLX..............ÞC
00000240  9C40 0000 0000 0000 0000 0000 0000 0000 0000 B0BE  œ@................°¾
00000260  C0D1 B0BE C0D1 2020 0200 4001 0001 0050 063C 0A3C  ÀÑ°¾ÀÑ  ..@....P.<.<
00000280  0000 3C00 0000 0800 0000 0000 FFFD 8002 0000 7004  ..<.........ÿý€...p.
00000300  0800 0000 0000 331E 0000 0080 0000 E701 00B5 6880  ......3....€..ç..µh€
00000320  0000 0000 0000 0000 0000 0000 0000 0000 0200 0000  ....................
00000340  0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ....................
00000360  0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ....................
00000380  0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ....................
00000400  0000 0000 0000 0000 0000 0000 BD70 0000 0000 0040  ............½p.....@
00000420  0000 0000 0000 0000 0000 0000 0000 201C 0000 0000  .............. .....
00000440  0000 0000 FF11 0000 0000 0000 0000 0000 0000 0000  ....ÿ...............
00000460  B0BE C0D1 0100 0000 0000 0000 0000 0000 0000 0000  °¾ÀÑ................
00000480  0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ....................
00000500  0000 0000 0000 0000 0000 A50A                      ..........¥.

https://forum.hddguru.com/viewtopic.php?p=302603#p302603
Author:  msnirvana [ April 17th, 2026, 6:40 ]
Post subject:  Re: Deleting Firmware Unlock patch
fzabkar wrote:
If you are using the original ROM, why are you needing to remove the unlock patch?

Your IAP segment indicates that PUIS is enabled. Does your drive power up in standby?

Code:
Offset(d) 00   02   04   06   08   10   12   14   16   18

00000000  5E0C FF3F C837 1000 0000 0000 3F00 0000 0000 0000  ^.ÿ?È7......?.......
00000020  2020 2020 2020 2020 2020 2020 5357 3232 5859 3147              SW22XY1G
00000040  0000 0000 0000 4E53 3430 2020 2020 4553 4741 5441  ......NS40    ESGATA
00000060  2045 5453 3034 3030 4D4E 3030 4135 2020 2020 2020   ETS0400MN00A5     
00000080  2020 2020 2020 2020 2020 2020 2020 1080 0040 002F                .€.@./
00000100  0040 0002 0002 0700 FF3F 1000 3F00 10FC FB00 105D  .@......ÿ?..?..üû..]
00000120  FFFF FF0F 0000 0704 0300 7800 7800 7800 7800 0800  ÿÿÿ.......x.x.x.x...
00000140  0000 0000 0000 0000 0000 1F00 0E8D 4200 CC08 0000  ..............B.Ì...
00000160  E00F FFFF 6B30 6175 7361 0000 6000 7361 7F00 B800  à.ÿÿk0ausa..`.sa..¸.
                         ^^^^           ^^^^
00000180  B800 0000 0000 0000 00FE 0010 0000 0000 1027 0000  ¸........þ.......'..
00000200  B0BE C0D1 0100 0000 0000 0000 0360 0000 0050 00C5  °¾ÀÑ.........`...P.Å
00000220  4EE2 4C58 0000 0000 0000 0000 0000 0000 0000 DE43  NâLX..............ÞC
00000240  9C40 0000 0000 0000 0000 0000 0000 0000 0000 B0BE  œ@................°¾
00000260  C0D1 B0BE C0D1 2020 0200 4001 0001 0050 063C 0A3C  ÀÑ°¾ÀÑ  ..@....P.<.<
00000280  0000 3C00 0000 0800 0000 0000 FFFD 8002 0000 7004  ..<.........ÿý€...p.
00000300  0800 0000 0000 331E 0000 0080 0000 E701 00B5 6880  ......3....€..ç..µh€
00000320  0000 0000 0000 0000 0000 0000 0000 0000 0200 0000  ....................
00000340  0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ....................
00000360  0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ....................
00000380  0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ....................
00000400  0000 0000 0000 0000 0000 0000 BD70 0000 0000 0040  ............½p.....@
00000420  0000 0000 0000 0000 0000 0000 0000 201C 0000 0000  .............. .....
00000440  0000 0000 FF11 0000 0000 0000 0000 0000 0000 0000  ....ÿ...............
00000460  B0BE C0D1 0100 0000 0000 0000 0000 0000 0000 0000  °¾ÀÑ................
00000480  0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ....................
00000500  0000 0000 0000 0000 0000 A50A                      ..........¥.

https://forum.hddguru.com/viewtopic.php?p=302603#p302603



The problem is that with the original ROM, everything shows red during the scan and gives an error, but with the unlocked ROM, I don’t have any issues.
Author:  fzabkar [ April 17th, 2026, 15:16 ]
Post subject:  Re: Deleting Firmware Unlock patch
Your IAP shows a Serial Number of WS22YXG1 and a Model Number of ST4000NM005A.

Your CAP has a model number of ST4000VX016-3CV104 and a serial number of ZW614YX5.

Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000  00 00 08 00 00 B0 55 80 20 00 00 00 5A 57 36 31  .....°U€ ...ZW61
00000010  34 59 58 35 30 30 30 30 45 32 31 36 43 33 53 42  4YX50000E216C3SB
00000020  20 31 30 30 38 35 37 36 35 30 06 01 50 00 C5 00   100857650..P.Å.
00000030  E2 4E 58 4C B5 05 FF FF FF FF FF FF FF FF FF FF  âNXLµ.ÿÿÿÿÿÿÿÿÿÿ
........
000000D0  FF FF FF FF FF FF FF FF 31 31 31 39 32 30 32 31  ÿÿÿÿÿÿÿÿ11192021
000000E0  FF FF FF FF FF FF FF FF FF FE 00 00 53 54 34 30  ÿÿÿÿÿÿÿÿÿþ..ST40
000000F0  30 30 56 58 30 31 36 2D 33 43 56 31 30 34 20 20  00VX016-3CV104 
00000100  20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20                 
00000110  20 20 20 20 53 54 34 30 30 30 56 58 30 31 36 2D      ST4000VX016-
00000120  33 43 56 31 30 34 20 20 20 20 20 20 20 20 20 20  3CV104         

Your SAP has a serial number of WS22YXG1.

Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000  44 E0 37 01 00 57 11 00 C0 47 01 05 00 57 11 00  Dà7..W..ÀG...W..
00000010  F8 4D 00 00 00 57 11 00 36 7B D2 94 06 00 00 00  øM...W..6{Ò”....
00000020  21 20 33 BA 09 B5 55 00 00 00 00 00 33 BA 21 20  ! 3º.µU.....3º!
00000030  00 00 57 53 32 32 59 58 47 31 C0 BA 00 00 00 00  ..WS22YXG1Àº....

Seagate's site associates WS22YXG1 with ST4000NM005A (Exos 7E8 4TB 512e SAS).

https://www.seagate.com/au/en/support/warranty-and-replacements/

Can you show us the label and both sides of the PCB?
Author:  fzabkar [ April 17th, 2026, 19:12 ]
Post subject:  Re: Deleting Firmware Unlock patch
HddSurgery identifies ST4000VX016-3CV104 with CV10 firmware as Hepburn_Oasis.
Author:  fzabkar [ April 18th, 2026, 15:11 ]
Post subject:  Re: Deleting Firmware Unlock patch
https://forum.hddguru.com/viewtopic.php?p=318367#p318367
Author:  msnirvana [ April 20th, 2026, 8:43 ]
Post subject:  Re: Deleting Firmware Unlock patch
fzabkar wrote:
Your IAP shows a Serial Number of WS22YXG1 and a Model Number of ST4000NM005A.

Your CAP has a model number of ST4000VX016-3CV104 and a serial number of ZW614YX5.

Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000  00 00 08 00 00 B0 55 80 20 00 00 00 5A 57 36 31  .....°U€ ...ZW61
00000010  34 59 58 35 30 30 30 30 45 32 31 36 43 33 53 42  4YX50000E216C3SB
00000020  20 31 30 30 38 35 37 36 35 30 06 01 50 00 C5 00   100857650..P.Å.
00000030  E2 4E 58 4C B5 05 FF FF FF FF FF FF FF FF FF FF  âNXLµ.ÿÿÿÿÿÿÿÿÿÿ
........
000000D0  FF FF FF FF FF FF FF FF 31 31 31 39 32 30 32 31  ÿÿÿÿÿÿÿÿ11192021
000000E0  FF FF FF FF FF FF FF FF FF FE 00 00 53 54 34 30  ÿÿÿÿÿÿÿÿÿþ..ST40
000000F0  30 30 56 58 30 31 36 2D 33 43 56 31 30 34 20 20  00VX016-3CV104 
00000100  20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20                 
00000110  20 20 20 20 53 54 34 30 30 30 56 58 30 31 36 2D      ST4000VX016-
00000120  33 43 56 31 30 34 20 20 20 20 20 20 20 20 20 20  3CV104         

Your SAP has a serial number of WS22YXG1.

Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000  44 E0 37 01 00 57 11 00 C0 47 01 05 00 57 11 00  Dà7..W..ÀG...W..
00000010  F8 4D 00 00 00 57 11 00 36 7B D2 94 06 00 00 00  øM...W..6{Ò”....
00000020  21 20 33 BA 09 B5 55 00 00 00 00 00 33 BA 21 20  ! 3º.µU.....3º!
00000030  00 00 57 53 32 32 59 58 47 31 C0 BA 00 00 00 00  ..WS22YXG1Àº....

Seagate's site associates WS22YXG1 with ST4000NM005A (Exos 7E8 4TB 512e SAS).

https://www.seagate.com/au/en/support/warranty-and-replacements/

Can you show us the label and both sides of the PCB?


Attachments:
76d6fa45-d585-4898-95de-28cd5666d9dd.jpg
76d6fa45-d585-4898-95de-28cd5666d9dd.jpg [ 203.98 KiB | Viewed 253 times ]
03bf9dd3-ce23-45e5-b3dc-97d19255b091.jpg
03bf9dd3-ce23-45e5-b3dc-97d19255b091.jpg [ 274.27 KiB | Viewed 253 times ]
47004a96-e305-42f9-a473-6603258fd14d.jpg
47004a96-e305-42f9-a473-6603258fd14d.jpg [ 140.43 KiB | Viewed 253 times ]
Author:  fzabkar [ April 20th, 2026, 13:02 ]
Post subject:  Re: Deleting Firmware Unlock patch
The date code on the SDRAM is "034". That's week 34 of 2020.

The date code in the CAP appears to be "11192021", which is Nov 19, 2021. That's more than a year later.

There are no solder marks on the ROM, so that would suggest that the ROM has been hacked with a chip clip or via the terminal.
Author:  gold6565 [ April 20th, 2026, 13:49 ]
Post subject:  Re: Deleting Firmware Unlock patch
This is a disk with a configuration of the SD&D drives. Most likely, some changes were made to the CA while the ROM was unlocked. Everything on these disks is tied to each other. That's why this situation has arisen; everything needs to be restored to the way it was in the CA.
Author:  fzabkar [ April 20th, 2026, 19:32 ]
Post subject:  Re: Deleting Firmware Unlock patch
The first copy of the BOOTFW in the ROM has a date of 2021-03-22. The second copy has not been initialised.
Author:  msnirvana [ April 21st, 2026, 3:20 ]
Post subject:  Re: Deleting Firmware Unlock patch
So i will return it
Page 1 of 1 All times are UTC - 5 hours [ DST ]
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
http://www.phpbb.com/