WD-2 WD HDD ROM AND RAM MODULES DETAIL

WD HARD DISK FIRMWARE REPAIR TRAINING COURSE DETAIL VER 02-20 tof
IN SHORT ABOUT RAM MODULE ID
ROM NAME OF MODULE SIZE IN KB BACKUP IN SA PROBLEMS
MODULE ID
0A HEAD MAP 512B
0B/20B FLASH ROM DIR /EXT 512B
30 SA TRANSLATOR 1KB
47 SA ADAPTIVE 2KB
0D FLASH 512B
CONFIGURATION
4F MICROPROGRAM VER 1KB
NEW SMR DRIVES
181 APOLLO 3072B
5D APOLLO 4096B
303 APOLLO 512B
1BO
1B6
1A2

ROM FILE CONTAIN ALL MODULE INSIDE IN IT SIZE 512B/ 1KB

ROM module in short detail includes many important data

 MODULE# 0A HEAD MAP DATA ( detail about heads total no and used, etc)

 MODULE# 0B/20B ROM MODULE DIRECTOREY ( detail description of service area location , load dir
contain module 001 address new disk with 20B module old hard disk not have 20B ) it has 0B module

 MODULE# 30 :- SERVICE AREA TRANSLATOR INFORMATION (sa compiler ,starting process of hard
disk , sa adater, , micro jogs, pre amp values)

 MODULE# 47 :- PHYSICAL SERVO PARAMETERS INFORMATION/ ADAPTATION PARAMETERS /SA

adaptation parameters jog parameters (reading , writing subsystems of service area, firmware vertion
information, micro jog )

 MODULE# 0D :- FLASH CONFIGURATION ( firmware vertion information detail )

 MODULE# 4F :- MICROCODE VERSION ( ROM vertion when loading LDR with the ROM version of
election )

Note:- ROM FILES HAVE INCLUDE OF ALL ROM MODULES IF WE UPLOAD ROM FILES MEANS IT WILL UPDATE ALL
MODULE ALSO

NEW APOLLO FAMILIES 3 ROM FILES ADDED

 MODULE# 181:- size 3072
 MODULE#5D size 4096
 MODULE #303 size 512

WD hard disk firmware repair concept page no :- 1

Printed by BoltPDF (c) NCH Software. Free for non-commercial use only.
 

 READ ROM
 0A MODULE

WE WILL SEE ALL MODULES IN DETAIL OF ROM MODULES STEP BY STEP

All ROM or module files of wd hard disk have 2 lines common

1- Firist 4 by tes = ROYL

2-Bit 08 ,09 in reverse = MOD ID
here for ex 4F 00 = REVERSE 00 4F
this module is 4F
3- next 2 hexa is of size of module
and you can try with any module in SA
4- last 4 bytes is CRC Check sum for modules
5- in second line from 0 20 7 this is module version

1. MODULE 0A : - HEAD MAP DATA ( detail about head, total n o , and used, depop etc)
512 BYTES SIZE BACKUP ON 102 MODU LE OF SERVI CE AREA

WD hard disk firmware repair concept page no :- 2

Printed by BoltPDF (c) NCH Software. Free for non-commercial use only.
Address 0x21 4 bytes 02 02 03 03
The number of magnetic heads that can be accommodated in the disc cavity
Address 0x06 2 -byte effective address

offset function
----------------------------
0x26 DCM (|N|RWCUHRD)
0x21/0x22 number of physical/logical heads (06/06)
0x23/0x24 heap map in earlier models
0x3C single word checksum of the addresses 1E (A0) to 3D (CF) ,
such that it should equal zero
0x3E/0x40 head map (0x3F = heads 0,1,2,3,4,5)

we use 0A module to test cli cking heads

to know which is bad head that cause cliking in hdd

For Ex :- in this hdd u have 4 heads

suppose head numbe r 3 is bad and cause cli cking
let's remove it and reset hdd to see cli cking will stop or no
now if hdd stop cli cking this mean head 3 is main reason for cli cking

what we have done is hide head from 0A not depop head

WD hard disk firmware repair concept page no :- 3

Printed by BoltPDF (c) NCH Software. Free for non-commercial use only.
MODUEL : - 0B FLASH ROM MODULE DIRECTORY ( detail description of service area location , load
dir, contain moduel 01 address, new disk contain 20Bmodule

Description of 0B / 20B module

 0B module contains ROM module directory and description information of service area ABA range
 It has backup relation with 20B module. At startup, it only starts the one which is activated by activation
tagging.
 In 20B module, 01 module address will be indicated in the first line of ROM module directory list.
 ABA range description defines the starting address and length of copy 0 and copy 1.

Compare 1B = 00= off 01= on means running

WD hard disk firmware repair concept page no :- 4

Printed by BoltPDF (c) NCH Software. Free for non-commercial use only.
------
module 0x 47 is adaptive module , adaptive paramenters , servo parameter / jog parameters
head assembly of hard drive , if it is not ok or borrowed , but head is reading but slow reading ,

WD hard disk firmware repair concept page no :- 5

Printed by BoltPDF (c) NCH Software. Free for non-commercial use only.
1A0 PRE AMP VALUES = 05 15 72 0E
1B0
1C0 LOCATION OF MICRO JOGS =
HEAD 0 = BF7
HEAD 1= C64
HEAD 2= ADC
HEAD 3 = ADC
HEAD 4 = ADC
HEAD 5 = ADC
HEAD 6 = ADC
HEAD 7 = ADC

LOCATION OF MICRO JOGS PARAMETER IS 01CO= 1CO

LOCATION OF PRE MAP VALUES 01 A0 = 1A0
DCM VALUES OF HEAD . MEDI TYPES HEAD HEAD = 7 MCU = K

DIFFERENT FAMILIES HAVE DIFFERENT SIZE OF MODULES AND LOCATION OF FILES

MODUEL 47 HAVING JOG PARAMETER OF HEAD AND MODULE 40/41 ON SERVICE MANUAL S BOTH TO MATCH
ALSO HERE YOU CAN FIND PRE AMP VALUES, DCM VALUES LOCATION

There is special software to find jog parameters and preamp values from moduel 47 as per size

module 0D contain FW Version only

we didn't use it

WD hard disk firmware repair concept page no :- 6

Printed by BoltPDF (c) NCH Software. Free for non-commercial use only.
module 4F contain Microcode

4F flash config uration & micro program ver sion :- this is unique modules, see v ersion of ROM , if you have
defective ROM which is native but can not read , read 4F MODULE you can read ROM V ersion , borrowed defect
ROM can be read and mixed with that

Class 1 ROM MODULE QUESTION OF WD

QUES TION ANSWER

WD hard disk firmware repair concept page no :- 7

Printed by BoltPDF (c) NCH Software. Free for non-commercial use only.
 1. WHAT IS ROM MODULE
2. Explain module of ROM
3. how many sizes of ROM available in wd hard disk
4. Work of 0A module
5. Work of 0B/20B MODULE
6. Work of 30 MODULE
7. Work of 47 MODULE and contain
8. Work of 0D MODULE
9. Work of 4F MODULE
10. Where mr jog parameter of wd head store module no and location
11. In Which module no of head detail store
12. Which module contain micro code no to match for service area files
13. how to match microcode no of Rom and service area files
14. How to test which head is bad cause cliking in hdd
15. How to identify its head problem or firmware problems
16. What is region how to edit region of head
17.
Copy of ROM modules in service area are belows
Service ara moduel ROM module
 102 / 2D, 2E -> 0A :- head map
 107 / 109 -> 0B / 20B : - rom moduel
 105 / 35 -> 30 :- service area
 103 / 40 -> 47 :- servo parameters
 104 /109 -> 0D :- flash configuration
 106 /109 -> 4F :- micro code version
( so in wd we can regenerate rom with this se rvice area modules)

D6.4 WD SERVICE AREA MODULES DETAIL AND WORKING IDEA

---- CLASS 2 ------- SA MODULES

1- critical modules for hdd to start

these module is critical for hdd start
and if any module is not good or bad this will affect on hdd start

like mod 01,02,03,11,......

loader files

WD hard disk firmware repair concept page no :- 8

Printed by BoltPDF (c) NCH Software. Free for non-commercial use only.
MODULE# 11 ZONE ALLOCATION TABLE , PERMANENT OVERLAY / MICRO PROGRAM CODE (if not there
MODULE# 13 : - OVERLAY IN RAM ( also important if not there hard disk not read and accessed normally)
MODULE# 5C SERVO OVERLAY

MODULE# 10 / 1F OVERLAY MODUELS OF ROM

MODULE # 01 MODULE LI ST/ DIRECTORY MODULE/ZONE TABLE / MODULE MAP : -

MODULE# 02 HARD DISK CONFIGURATION MODULE /ATA SLOW FIX/ (SN MODEL, CAPACITY,
PASSWORD ETC)
MODULE # 03 Segment table
MODULE 04 : - FAMILY MODEL CONFIGURATION (

2- Functional module
this modules needed in some c ases to do special function on hdd
like mod 28 to run SF Test in HDD

3-Defect list modules

This modules contain detail about different defect sector may be plist , glist , tlist etc
i.e Module 31,32,33,34,35 . . . .. .
Module 30 and Modul e 35: Defines defects location in SA area; defect translator
Module 31: P -list translator
MODULE# 32 G list translater (CONTAIN DATA REGARDING SECTOR THAT ARE PENDING Can not be
Module 33: P -list

4-ADAPTIVE modules that is important containg all adap tive setting and head read write setting ARCO
parameters MRjogs values, preamplifier values, Head DCM Media dcm

Module 40 and module 41: Channel Adaptive parameters modules; jog parameter ( rom 47
Module 49 and Module 4A: Servo Adaptive parameters modules;
Module 46: Calibrate the logical bad sectors of data area;
Module 0C: Field info/Contents in factory info.
Module 30 = 105 Service area translator defect in ROM

5- Backup and logs module

Wd royls backup of ROM
Module 102: = ROM 0A module backup Factory -defined head map information;
Module 103/40 = ROM 47 module backup adaptive setting backup module;
Module 104/109 = ROM 0D module backup Microprogram version image;
Module 105/35= ROM 30 mo dule backup SA translator backup;
Module 106/109 ROM 4F module backup image;
Module 107 = ROM 0B module backup used to defines the map of modules present in ROM and the
placement of SA copies;
Module 108: IBI Packet;
Module 109: Most important rom mo dule -ROM Image Module.
Short detail for different modules
Ldr (loader modules , micro code, )

6-Other modules

WD hard disk firmware repair concept page no :- 9

Printed by BoltPDF (c) NCH Software. Free for non-commercial use only.
let's start with modules we will need in hdd repair

1- mod 0x01 : - this module contain Full MAP for all modules in SA
we know that SA contain all modules for hdd these modules stored in location in zone 0

MODULE # 01 MODULE LIST / DIRECTORY MODULE/ZONE TABLE / MODULE MAP : - (firmware vertion
directory, where all module location is mention )
This MODULE defines the l ocation, length and the track where the module is located in;
 For L -shaped drives, it is to access the hdd by CHS;
 For ROYL drives, it is to access the hdd by ABA address.
 Users can move the modules to other location by editing module 01;
 01 module has one backup module, that ‟s module 110 , if the module 01 is damaged, you
can use the module 110 instead. In R OYL HDD:


WD hard disk firmware repair concept page no :- 10

Printed by BoltPDF (c) NCH Software. Free for non-commercial use only.
12= length of entr 02= means backup 09 10 = module id 17 00= length 03 18 00 00 =
8C 13 00 00 = head 0 loc 8C 13 00 00 = head 1 loc

WD hard disk firmware repair concept page no :- 11

Printed by BoltPDF (c) NCH Software. Free for non-commercial use only.
module 0X01 contain all offset for all copy 0 , copy 1 to any module
we know that there are 2 copies of region : - copy 0 , copy 1

mod 0x01 contain map for all modules with offset for both copie s

1-we call mod 0x01 with " DIR Module "

2-there are copy of mod 0x01 in mod 0x110

3- we can move module to another location in SA
this process we call it " Module offset shifting "

EX
Starting no of copy module id length head 0 loc head 1 loc
12 02 09 10 17 00 03 18 00 00 8C 13 00 00 8C 13 00 00

1- 12 02 begining of all module

12 mean module take 18 kb before start
02 mean this module stored in SA 2 backup not in ROM
2- NEXT 2 BYTE IN REVERSE = MOD id
here 09 10 in reverse = 10 09
this mean module 0X10 09
3 length of module in 4 2 bytes
0x 00 17
4 COPY 0 A DDRESS 8C 13 00 00
= COPY 1 ADDRESS 8C 13 00 00
HEX 8C 13 00 00 REVERSE WE SEE AS - 00 00 13 8C IN HEXA AND IN DECIMAL IT WILL
CONVERT TO
WD hard disk firmware repair concept page no :- 12

Printed by BoltPDF (c) NCH Software. Free for non-commercial use only.
138C TO DECIMAL =5004 LOGICAL BLOCK ADDRESS

ALSO IF WE CALCULATE SIZE OF MODUEL IS 00 17 IN HEXA DECIMAL IT WILL BE 23

chapter 2 SA Module 01 directory f iles

QUESTION
1 Where SA modules store
2 How many types of modules are ther
3 Which are critical modules for hard disk to start
4 Which are function module
5 Work of directory module
6 Copy of module 01 on which module
7 What is " Module offset shifting "
8 How can we move any module to other location
9 Explain module 01 starting and location of different modules
10 How to view module directory with different module location
11 Problem due to module 01

----- CLASS 3 ----- SA MODULE 02

module 0x02 :- Configuration module ( slow fix, password , )

very important module contai important information critical for hdd like

MODULE # 02 HARD DISK CONF IGURATION MODULE /ATA (SN MODEL, CAPACITY, PASSWORD ETC)
This module containing HDD ID including capacity (LBA), Serial Number, model number, manufacturing
date, password marks, etc.
 For L series, 02 module can be found in drives of the same family;
 For ROYL, each module 02 has different configuration information and programs offers to
regenerate the ID module(Module 02) to enhance repair success rate;
 For ROYL series, module 02 has one backup module which is located in module 8032 .

1- HDD Model
2- HDD S/N
3- LBA
4- Password

WD hard disk firmware repair concept page no :- 13

Printed by BoltPDF (c) NCH Software. Free for non-commercial use only.
5- DCM
and .....look if we open module 02

this is new structure WDR didn't support it

open wdmarvel and let's read 02

WD hard disk firmware repair concept page no :- 14

Printed by BoltPDF (c) NCH Software. Free for non-commercial use only.
 Here is the header section:
:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000 52 4F 59 4C 01 00 30 00 02 00 03 00 09 5A D8 B3 ROYL............
00000010 30 30 30 38 30 30 30 30 07 07 07 00 00 00 00 00 00080000........
00000020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :

Location data description

-----------------------------------------
0x0000 - 0x0003 "ROYL" header
0x0008 - 0x0009 0x0002 MOD ID
s0x000A - 0x000B 0x0003 size in sectors
0x000C - 0x000F 0xB3D85A09 32-bit checksum
0x0010 - 0x0017 "00080000" MOD version

this is hdd SN location

WD hard disk firmware repair concept page no :- 15

Printed by BoltPDF (c) NCH Software. Free for non-commercial use only.
model
Date of production

after Date directly you can see password

and you can see password Flag like this

01 00
01 01
01 03
this mean hdd is not password proteced
but if flag is 01 07

this mean hdd is locked by ata password

and if hdd is locked by ATA password

and you go to scan hdd with tools like V ictoria
you will see hdd is full of Exclamation Mark
!!!!!!!!!!!

you will face password many times in your work

and you have many ways to remove pas sword

for example
WD hard disk firmware repair concept page no :- 16

Printed by BoltPDF (c) NCH Software. Free for non-commercial use only.
use WDMARVEL you have 2 ways

if pcb is less than 1640 like 1590 use old ways

if pcb is 1640 and more use clear password new ways

this is flags

let's do it practically open hdd with vcr and lock it

look fir st to module 02 on ram this is password in hdd

also you can copy this password and unlock from vcr
also you can use wdmarvel directly

password is off now

let's lock hdd and see sectors

did you see hdd is full !!!!!!!!

connect fir st hdd

one of most important problem

is fix slow hdd or slow responding
where hdd is very very slow
and take long time to be ready and long time reading modules or install ing windows

most hdd that have slow issue start from 1640

and you can fix slow by edit mod 02 or use ready made solution in wdmarvel

Deal With Slow Responding

let's start manual Fix Slow

1- read and open mod 0x02

2- scroll down search for " ODD" = 4F 44 44

WD hard disk firmware repair concept page no :- 17

Printed by BoltPDF (c) NCH Software. Free for non-commercial use only.
3- search for these bytes :- 01 00 28 64

an d make all bytes between step 2 , step 3 = 00000

4- save module 02 and write again to SA
or save to SA directly

Moduel 02 to edit for slow responding hard disk

LIKE EXAMPLE

----- CLASS 3 ----- SA MODULE 02

QUESTION
1 Which detail are store in module 02
WD hard disk firmware repair concept page no :- 18

Printed by BoltPDF (c) NCH Software. Free for non-commercial use only.
2 In which module model no and password detail stored
3 How to repair slow responding hard disk problem solution (firmware)
4 For what problem we have to fill 00 00 in module 02 at particular location
5 Module 02 backup on which module no in some families
6 H ow to open password of wd hard disk
7 case solution : - many bad green and yellow block in beginning of scan , how to solve
8 Common problem due to module -02

----- CLASS 4 ------- - - - module 03 zones / translator module

M od ule 0x03

we know that every hdd is divideid in to zones

physically it's 21 zone
but logically it divided into any zones

class 4 module 03 zones

QUESTION
1 W hich information is store in module 03
2 W hat is zone how many physically zone on hdd
3 W hich module used to cut zone
4 If module 03 damage what problem come
5 xlat e LBA how lba calculate to chs
6 what is in moduel 04
7 D efect list module no : -
WD hard disk firmware repair concept page no :- 19

Printed by BoltPDF (c) NCH Software. Free for non-commercial use only.
 8 Plist defect module no : -
9 IF SF log is ok and P -list is clear ed how can we rebuld p -list
10 Which are the defect -list modules
11 What happen if defect list are damage

----- CLASS 5 OVERLAY MODULES 11 - -- - - - - - - - -

WD – 5 overl ays

class 5 overlay module 11 QUESTIO n

1 W hat is overlays module
2 W hich different module in overlays files
3 How to load overlays to RAM
4 N otices in overlays for different pcb
5 S olution for bsy prb
6 in PCB No 1698 which overlays files first to load and last
7 how to move module 11 aba location to good location
8
9
10
11
12

class 6 adaptive m odule QUESTION

1 adaptive modules no start from
2 adaptive in rom store in which module
3 regen module 0x47 which arco run
4 Any error in 40 41 what happen
5 in module 47 DCM data store at which location
6
7
8
9

Key Modules for data recovery

Old l series Key Modules for data Back

Module 04 : - FAMILY MODEL CONFIGURATION (

Module 31 : P -list translator
Module 32: G -list translator
MODULE41 / 40 : JOG PAREMETER (head)
Module 40 and module 41: Channel Adaptive parameters modules;
Module 49 and Module 4A : Servo Adaptive parameters modules ;

WD hard disk firmware repair concept page no :- 20

Printed by BoltPDF (c) NCH Software. Free for non-commercial use only.
New ROYL series Key Modules for Data Back for ROYL series:
MODULE# 02 : HARD DISK CONFIGURATION MODULE /ATA (SN MODEL, CAPACITY, PASSWORD ETC)
Module 03 : Segment table
MODULE 04 : - FAMI LY MODEL CONFIGURATION (
Module 0C : Field info/Contents in factory info.
Module 31 : P -list translator
Module 32 : G-list translator
Module 33 : P -list
Module 40 and module 41: Channel Adaptive parameters modules;
Module E0 -E7: Pst log

Defect list moduels

Module 0C : Field info/Contents in factory info.

Module 31 : P -list translator
Module 32 : G-list translator
Module 33 : P -list

WD hard disk firmware repair concept page no :- 21

Printed by BoltPDF (c) NCH Software. Free for non-commercial use only.