Normally for these, we use an unlocked SATA board, backup SA, fix firmware, lock UA and generate a head map.
Then start a new DE task with USB original board to get data either via USB Stabilizer or USB port on PC3K portable. I know we can now write back unlocked ROM to USB PCB using Ace...