Gregory's Serverthe design of the ST225N is essentially an ST225 but with the data separator and controller built in. they changed the microcontroller to an 8051, and stored a bunch of the firmware on some hidden tracks.
|
42 comments
@tubetime Real Men™️ backup their data with a logic analyzer!  wrote a crappy python program to interpret MFM data, and it seems we have some sectors. they are using a different sector header format and there seems to be a lot of corrupted data. there are a few sectors with the drive firmware (negative cylinders) but then there appears to be real data. "DOS" might be part of some partition table scheme. the sector header might follow the format used by the Adaptec AIC-010 chip (which the ST-225N uses). wow, a 32-bit CRC. i wonder which one... wow there is definitely data on this drive. i'm fudging the MFM decoding to try and skip over errors. @tubetime hopefully the data on that drive will reveal the secret of the Kennedy assassination. You are putting a lot of work in after all. trying to capture more of the drive image to a binary. we'll see how it goes. so even though this disk image is probably irrecoverable, i want to learn as much as a can. this drive was from the Amiga Comspec, and i want to see if i can figure out how to replicate the disk layout. this segment here is from the Kickstart disk. @tubetime Really cool work! And great timing, I was just trying to diagnose a faulty ST-238R earlier this week! I have a feeling that two of the read heads aren’t working right, but I need to confirm that. well now i feel a bit stupid. this thread from a few years ago includes links to disassembled drivers and ROMs, as well as a sample disk image. i decided to try and get a better read of the firmware tracks (-1 and -2 on all the heads). this time i'm capturing analog data from the drive's test points. not all the surfaces have a good amplitude. this could explain some of the issues i was having. (channel 2 has a pulse whenever the head changes.) anyway this analog signal comes off the drive's analog test points (circled). this signal comes after the differentiator (IC 9E1) and the first stage analog filter, but before the second stage filter. i'm trying to correlate the drive's data output (valid on the rising edge, each pulse has a fixed width) with the analog data. it seems to have a delay of about 180ns caused by the analog filter and the propagation through the comparator. going to dump the drive firmware for the ST-225N's 8051 microcontroller. this has never been dumped before. this firmware reads additional firmware off the platter, but i've already dumped that data. i've got another ST-225N to try and extract firmware from. the board was apparently dead, but eventually i might try it out with my other ST-225N logic board (i hope it still works) just have to move this hacked up ST-225 logic board over. it's cabled to an Arduino that runs the stepper motor so i can get to the hidden tracks. it spins up and i've captured the negative tracks! (the Marker bit is a signal pulsed by the Arduino when it changes tracks or heads. it just cycles through all the heads in order, then goes to the next track) looks like this came out of an Apple system. this is on track 0 which is user data. track -1, head 0, sector 19 contains the drive serial number as ASCII text. interesting. track -2 contains the same 32 sectors on all heads. it seems to be 8051 code (02 is the LJMP instruction). i'm guessing this is the main drive operating code.   @tubetime Lot of drives had the firmware on hidden tracks. I am entertained that it's an 8051 though. The newer drives got much better CPU  @literatesavant i was hanging out with him on Thursday, so it was a weird coincidence.   @tubetime @pyksy ahh excellent someone else recognizes it! i'll have to check and see if the book block was preserved. I wrote this to take odd-ball floppy formats apart, maybe you can use some of it: @bsdphk i'll take a look. python has been pretty slow for the file sizes i've been working with, however. |
boards are swapped. now let's image the whole drive in about 175 seconds to a giant Saleae capture file!