HDD GURU FORUMS http://forum.hddguru.com/ |
|
Recovering data from 8 pin short circuited nor rom.Possible? http://forum.hddguru.com/viewtopic.php?f=10&t=43617 |
Page 2 of 2 |
Author: | westcoast [ March 25th, 2024, 5:31 ] |
Post subject: | Re: Recovering data from 8 pin short circuited nor rom.Possi |
is this really bootloader at 0x40000 ? then what is it at 0x0 ? is it for sure NAND fw isn't stored in this chip, even a failsafe copy ? Code: 0x000000 ?? CORRUPT
0x030000 Identify Device OK 0x040000 BOOT (marvell bootloader) OK 0x050000 ?? table OK 0x060000 zero marker OK 0x0B0000 DSSR table OK 0x0C0000 multi DSSR table OK 0x0E0000 MSP430 fw OK 0x110000 unknown table OK 0x130000 unknown table CORRUPT 0x140000 unknown table (ascii indicate thermal) OK 0x150000 unknown table CORRUPT 0x170000 unknown OK 0x1A0000 backup of unknown at 170000 OK 0x1F0000 signature? OK |
Author: | westcoast [ March 25th, 2024, 10:46 ] |
Post subject: | Re: Recovering data from 8 pin short circuited nor rom.Possi |
wow. so the first block is probably fused, or has been overwritten with garbage during failure (or further boot attempts) and no freeze spray or similar methods would help here (maybe only chip decap) but it looks like this is main BOOT image and the one at 40000 is a backup of it. drive might even take care of this automatically, but still nothing more simple than copying data from 40000 to 0 this leaves me with only 2 unknown tables to fix. one of them might be TCG related |
Author: | sourcerer [ March 25th, 2024, 14:44 ] |
Post subject: | Re: Recovering data from 8 pin short circuited nor rom.Possi |
It is quite usual to copy the firmware from ROM to RAM during the booting process, since RAM is usually much faster than ROM. So one of them might be RAM and the other ROM. |
Author: | fzabkar [ March 25th, 2024, 14:58 ] |
Post subject: | Re: Recovering data from 8 pin short circuited nor rom.Possi |
The size of the BOOT region is 0xAC00. The terminator is 0xDEADBEEF. |
Author: | fzabkar [ March 25th, 2024, 15:21 ] |
Post subject: | Re: Recovering data from 8 pin short circuited nor rom.Possi |
This is the header of the boot section. Code: Offset(h) 00 04 08 0C 10 14 18 1C 00040000 5AFFFFFF 19090000 18090000 00010000 00000000 00000000 FFFFFFFF FFFFFF94 ^^ ^^^^^^^^ ^^^^^^^^ ^^^^^^^^ ^^ | | size offset checksum of header | | | size including checksum byte boot from SPI flash The header is checksummed from byte 0 to 0x1E. The checksum byte is stored at 0x1F. The main boot segment is located at offset 0100 and has a size of 0x918 bytes. The bytes in this range are summed and the checksum byte is place at the end of the segment. Code: Offset(h) 00 04 08 0C 10 14 18 1C 00040100 18F09FE5 18F09FE5 18F09FE5 18F09FE5 18F09FE5 0000A0E1 18F09FE5 18F09FE5 ........ 00040A00 58080000 60080000 00080000 10080000 20080000 0004FF00 B4 ^^ checksum byte After the header there is a BOOT table. It defines several sub-segments. Code: Offset(h) 00 04 08 0C 00040000 5AFFFFFF 19090000 18090000 00010000 00040010 00000000 00000000 FFFFFFFF FFFFFF94 00040020 544F4F42 00AC0000 01000000 0000F74A TOOB............ ^^^^^^^^ ^^^^^^^^ size of boot segment start of table 00040030 00010000 00000000 18090000 01009228 00040040 200A0000 00200000 380C0000 0200D14F 00040050 1C0A0000 00000080 04000000 03003415 00040060 58160000 00400000 B84C0000 0400CD27 00040070 10630000 00A00000 90210000 05005B43 00040080 A0840000 00E00000 30170000 06002D84 00040090 D09B0000 00FA0100 F4000000 07004230 000400A0 C49C0000 00FE0100 64010000 0800AD17 000400B0 289E0000 38130004 50000000 09007391 000400C0 789E0000 00210004 500B0000 0A00ED27 000400D0 C8A90000 00100080 F0000000 FFFFFFFF ^^^^^^^^ last entry in table 000400E0 FFFFFFFF FFFFFFFF FFFFFFFF 00000000 000400F0 FFFFFFFF FFFFFFFF FFFFFFFF FFFFDC66 ^^^^ checksum or CRC ? The table appears to have the following structure: Code: seg# CRC? offset RAM add? size ---- ---- -------- -------- -------- 0000 F74A 00010000 00000000 18090000 0100 9228 200A0000 00200000 380C0000 0200 D14F 1C0A0000 00000080 04000000 0300 3415 58160000 00400000 B84C0000 0400 CD27 10630000 00A00000 90210000 0500 5B43 A0840000 00E00000 30170000 0600 2D84 D09B0000 00FA0100 F4000000 0700 4230 C49C0000 00FE0100 64010000 0800 AD17 289E0000 38130004 50000000 0900 7391 789E0000 00210004 500B0000 0A00 ED27 C8A90000 00100080 F0000000 I haven't yet been able to determine the CRC/checksum algorithm. |
Author: | westcoast [ March 25th, 2024, 15:55 ] |
Post subject: | Re: Recovering data from 8 pin short circuited nor rom.Possi |
fzabkar wrote: The header is checksummed from byte 0 to 0x1E. The checksum byte is stored at 0x1F. The main boot segment is located at offset 0100 and has a size of 0x918 bytes. The bytes in this range are summed and the checksum byte is place at the end of the segment. i found your post http://www.hddoracle.com/viewtopic.php?f=59&t=1617 and was able to confirm this last night, the checksum is 8bit then today looked closer at first block and spotted ascii string corrupted, a little comparing of size/content and it became clear it is also BOOT do you have any dumps from similar micron/crucial models ? need to do something with other 2 tables or at least know what they're used for. maybe the bootcode can rebuild them |
Author: | fzabkar [ March 25th, 2024, 16:00 ] |
Post subject: | Re: Recovering data from 8 pin short circuited nor rom.Possi |
no dumps sry |
Author: | fzabkar [ March 27th, 2024, 17:46 ] |
Post subject: | Re: Recovering data from 8 pin short circuited nor rom.Possi |
I compared your BOOT table (version MA01) with the MU03, MU04 and MU05 firmware updates: https://www.hddoracle.com/viewtopic.php?p=24376#p24376 |
Author: | westcoast [ March 27th, 2024, 20:02 ] |
Post subject: | Re: Recovering data from 8 pin short circuited nor rom.Possi |
so, in theory i could try to force MUxx update over MA01 ? assuming BOOT code is enough to accept cli commands (bootloader is fine as the drive booted from backup after the failure when it showed as uninitalized) then there are other things that could go wrong - corrupted blocks at 130000 looks like a table but the other one at 150000, could be some kind of executable (NAND fw? if it's that and if the fw in actual NAND is damaged too, it won't recover itself from SPI backup as the integrity check will fail - will the forced update write new fw to NAND ? or it will skip it ?) tried to read chip again, this time with flashrom starting from 0x100000, still the same corrupted reads. it is interesting that all the FFs after the end of code in block 150000 are read properly, not garbled like in first BOOT block, but still the data from that block looks inconsistent (i think there are more differences than comparing of the two dumps reveal) |
Author: | fzabkar [ March 27th, 2024, 23:25 ] |
Post subject: | Re: Recovering data from 8 pin short circuited nor rom.Possi |
I'm not a DR pro, but ISTM that those corrupt tables are unique to each drive. If so, then I can't see a solution, unless the drive is somehow able to reconstruct the metadata. All I can see is that these tables consist of 64-byte records, and some parameter values increase monotonically. It's not very helpful, but I have no real experience in this area. Sorry. |
Author: | westcoast [ March 29th, 2024, 19:26 ] |
Post subject: | Re: Recovering data from 8 pin short circuited nor rom.Possi |
do you think it is possible to use SST25VF016B temporarily instead of M25P16 ? having clips attached to large chip would make experimenting with this much easier |
Author: | fzabkar [ March 29th, 2024, 20:23 ] |
Post subject: | Re: Recovering data from 8 pin short circuited nor rom.Possi |
The short answer is, I don't know. That said, as a general rule I would ensure that the Vcc voltage is the same. I would also ensure that the quad/dual I/O specs are the same or better. I would also look for any special features such as an OTP region. However, I think that the M25P16 is not particularly special. |
Author: | westcoast [ March 31st, 2024, 20:44 ] |
Post subject: | Re: Recovering data from 8 pin short circuited nor rom.Possi |
i was mainly concerned about WP pin voltage specified as high as 9V on 25P16. but now i see the actual WP pin is pulled via 4.7K to 3.3V so this voltage level is never used on this board. i'll probably give it a shot, cpu only left to solder, all the small parts are back in their place |
Author: | westcoast [ April 13th, 2024, 0:07 ] |
Post subject: | Re: Recovering data from 8 pin short circuited nor rom.Possi |
tried reading bios again, this time with 3.5V on all pins - it got that hot that the remaining flux started to smoke. previous suspicion also confirmed - there are a lot more of incorrect reads than it seems. but, some data started to appear where there were previously zeros, and as one table has data twice (e.g. 00 26 8A FF 00 26 8A FF) in several locations i can see previously bad read now is read correctly bad (e.g. 00 06 0A 7F 00 26 8A FF) good (e.g. 00 26 8A FF 00 26 8A FF) when launch hdparm, all drive info is presented but everytime there is SG_IO: bad/missing sense data maybe it is related to these corrupted blocks in flash? another idea, first block may be burned, and others should be good, but differences in these two tables are caused due to flash wear? the chip would probably need more current to be successfully read on worn out section, and all the extra current available is wasted in short circuit that's why raising voltage helped a bit. this would indicate these tables are written constantly (on every boot or whatever)... |
Author: | westcoast [ April 14th, 2024, 6:27 ] |
Post subject: | Re: Recovering data from 8 pin short circuited nor rom.Possi |
on a flash chip taken off the drive now after some attempts to start it: at 0x90000 new table appeared consisting of plain text data of some sort at 0xF0000 DSSR tag added at 0x120000 new table appeared (or maybe the one at 0x110000 was recovered and extended to real length) plain text in there: iskErrorHandle.c and Handle/EH_PBEH.c content of table at 0x140000 also increased as suspected tables at 0x130000 and 0x150000 were completely overwritten Attachment:
|
Author: | pepe [ April 15th, 2024, 17:10 ] |
Post subject: | Re: Recovering data from 8 pin short circuited nor rom.Possi |
have you tried reading smaller segments at a time? |
Author: | westcoast [ April 15th, 2024, 21:02 ] |
Post subject: | Re: Recovering data from 8 pin short circuited nor rom.Possi |
tried reading second half of the chip only, but the result was similar in 0x130000 and 0x150000 blocks i don't know if this is NAND fw corruption, or the fw is looping due to bad BIOS data and overwriting it with garbage (i'd guess it is this, based on how new table is created and filled till the rest of the block in flash) can't entirely exclude possibility there is still some hw problem, but the newly written data to 0x150000 block looks sane (maybe only incorrect) so this would indicate CPU-DRAM is working fine. not sure about NAND, there was short on 3.3V, but after taking off CPU and BIOS 3.3 resistance went beyond 200kohms, same with new chips soldered and 1.8V resistance is around 145kohm |
Author: | westcoast [ April 19th, 2024, 2:55 ] |
Post subject: | Re: Recovering data from 8 pin short circuited nor rom.Possi |
tried to flash bootcode from MU03 fw to 0x0 and 0x40000 sections while erasing everything at 0x110000 0x130000 0x140000 0x150000 0x170000 0x1A0000 the result was: both IDENTIFYs aborted, assuming NODEV system booted at normal speed, upon disconnecting and reconnecting drive kernel messages indicated that it was in RDY state. not sure if anything can be done at that point as no device is created in dev then compared the dump and what it does at 0x90000 it's writing serial output log Code: <CusInfo Init> FeatureMacros=08F001FA @@@@4235394C@@@4235394C @NAND_RAW_CAPACITY:256 @USER_CAPACITY:256 @TOTAL_USER_LBA:500118192 WP_SB_BAD_BLOCK_THRESHOLD 68, wWP_DATA_BLK_CNT_WITH_OP 965, FREE_THRESHOLD_PERIODIC 11, WP_PGC_MARGIN 4 ReserverdTable 0x0FAFC383,HeapBuf 0x0FF41E7D erverdTable 0x0FAFC383,HeapBuf 0x0FF41E7D InitFTLPhyAddrTable Done X300: Establish PHY Link TIMEOUT, sending COMRESET # Boot Loader Configuration: SCRAMBLER_ON_ROM_TABLE Check CRC fail: 0x000F0000! Get temp 0000001A <EL>NOR SIZE 2048K, SECTOR SIZE 64K, PAGE SIZE 256 <EL>EL ENTRY SIZE 64 <EL>Base Sec: CRITICAL 0x12, GENERIC 0x14 <EL>Class0: ACTIVE SEG 17, ACTIVE LAST ENTRY 65535 <EL>Class1: ACTIVE SEG 20, ACTIVE LAST ENTRY 65535 <EL>Max Entry Ver 0x00000000 <EL>EL Flash INIT OK <BIT>Total Entry Size Is Not Enough <BIT>Load Fail L Sec : 00000000 U Sec : 00000000 S0 Wr : 00000000 S1 Wr : 00000000 Need erase: 00000000 Need erase: 00000000 <BPC> Init <BPC> Enable <BPC> Force All Lun to MLC PreTH:4 NewTH:1 SEDERR: 00000208 SEDERR: 0000010C SEDERR: 00000301 SEDERR: 0000010C <INIT>Meta Info ATA read nor Err! InitMi media read err! Warning! InitMi Id 001 data default to 0! Warning! InitMi Id 003 data default to 0! Warning! InitMi Id 004 data default to 0! Warning! InitMi Id 006 data default to 0! DCO flag 00000000 Warning! InitMi Id 00E data default to 0! Warning! InitMi Id 011 data default to 0! Warning! InitMi Id 012 data default to 0! Warning! InitMi Id 013 data default to 0! ~~~~ATA Save 00000014 Err! SaveMi Wr Protected! Security Feature ERR! SEDERR: 0000010C DCO flag 00000000 init GPIO 11 # Initialize sata link... 806674 # wRandIndex = 0 WP_SB_BAD_BLOCK_THRESHOLD = 68 LPP is enabled Load Turbo Boot <INIT>BbTbl <BB>Load BbTbl wRandIndex = 0 WP_SB_BAD_BLOCK_THRESHOLD = 68 CopyIdx:0 is bad, address: 00170000 CopyIdx:3 is bad, address: 001A0000 Get temp 0000001A EL is forced to stop rec! REL_ASSERT (FATAL): ../FTL/FtlCore/FtlCore_BadBlock.c, line 1053 WP-EL EL 0x00000103 not rec! P3: sata debug info SATA REG: R4A00: 0x00000050, R4A02: 0x00000150, R4AB4: 0x00000000, R4AB6: 0x0000C007 Last Rcv cmd lba:00000001, Sec:0001, Cmd:0000 Current lba:00000001, Sec:0001 Ncq cmd exe status:00000000 Buffer Block Txfer Cnt:00000000 Error lba:00000000 CHSB write ptr:01 CHSB Dump: 1C004D00: 85159EB9 1A781116 6FB8DEB9 AF928C90 1C004D10: 13FBFEA6 618AA77A 7B36BF7C 2F77D0F1 1C004D20: 80D0DEAE C6009D21 E5660A6C 97A3D858 1C004D30: C9FC2E56 2D045C94 D190A236 B21F93FF 1C004D40: 5319C00E 150028C0 DA8313CA 81F57E8F 1C004D50: 295EDB08 D81A1D43 1D5F9B73 7ACB999F 1C004D60: 3E945315 84A02FB8 7E5B40D9 35B654C8 1C004D70: 9CF73F8C 0C284590 5E70C778 AA738DCE CRSB Dump: 1C004BA0: 108C 5D98 281D 612F 2926 210F 3C62 DACE 1C004BB0: 0DD5 E8F1 3DDE 6D52 7C1C 4F5C 1176 B6DC 1C004BC0: D454 9074 460F 6796 4DE8 2A8A B4BD 5896 1C004BD0: EECB 8ACE 2A68 48C6 2115 6FDB E9F1 D4DE CXSB wr/rd ptr: 0202 CXSB ctrl status: 2800 CXSB last f/w req: 0220,0001, last h/w exe: 0220,0001 CXSB Dump: 1C004D80: 0220 0001 2076 9268 8DF6 9BEB 91F2 375C 1C004D90: C5A6 F75E 6281 BE72 BDFE 3F8F 9634 C881 1C004DA0: 36EC E7BF 7560 EA0E 2AF3 77D1 461A 7AF3 1C004DB0: 7AFA F1B9 840A 29F5 EB5C 7BB1 5A85 B3BB 1C004DC0: EA21 7207 09CA C9FD DFF2 EFFC A14C E28E 1C004DD0: 7EB7 9BB9 F04C 869C 918B D59B F687 DE7A 1C004DE0: 196F BAED 7666 DE0F C8EF 6D9B BC48 AA11 1C004DF0: 2F49 3AB2 12AA 9560 53CC 6F21 F8B1 D681 Sata status: 0123 link layer state: 0000 tx primitive: 8000 rx primitive: 0004 Cmd fifo Cnt 00000000 f/w abort state: 0084 BM REG: HS0 Cnt: 0x00000000, HS1 Cnt: 0x00000000, HS2 Cnt: 0x00000000, HS3 Cnt:0x00000000 HS4 Cnt: 0x00000000, HS5 Cnt: 0x00000000, HS6 Cnt: 0x00000000, HS7 Cnt:0x00000000 FS0 Cnt: 0x00000000, FS1 Cnt: 0x00000000, FS2 Cnt: 0x00000000, FS3 Cnt: 0x00000000 ES0 Cnt: 0x00000000, ES1 Cnt: 0x00000000, ES3 Cnt: 0x00000000, ES3 Cnt: 0x00000000 Host txfer ptr: 1C002F88: 00A59600 00C59600 00D5B600 00F5B600 1C002F98: 0014B014 00129014 00000000 00000000 Flash txfer ptr: 1C002FA8: 00C59600 00000000 00551A00 00000000 Ext txfer ptr: 1C002FF4: 00000000 0105D600 0014D014 00000000 CRSB timer: 00000002, 000C8D69 P5: ftl debug info <LWI>LV:00000000 LP:000001FF NP:00000000 FreeBlkCnt:0 GarBlkCnt :0 IgcMark:00 CgcMark:00 BBC:0 TrimSkipFG:00000000 Save Serial Log in Nor Len:4452, Start:4452 Len:4474, Start:4474 NOR Space Size:131064 message CopyIdx:0 is bad indicates first thing of the missing stuff it loads is data at 0x170000 then i tried to flash same cleaned dump but with that section included the log size increased this time Code: <CusInfo Init> FeatureMacros=08F001FA @@@@4235394C@@@4235394C @NAND_RAW_CAPACITY:256 @USER_CAPACITY:256 @TOTAL_USER_LBA:500118192 WP_SB_BAD_BLOCK_THRESHOLD 68, wWP_DATA_BLK_CNT_WITH_OP 965, FREE_THRESHOLD_PERIODIC 11, WP_PGC_MARGIN 4 InitFTLePsheyAdddr TDable x0FAFC383,HeapBuf 0x0FF41E7D ddr TDable x0FAFC383,HeapBuf 0x0FF41E7D InitFTLPhyAddrTable Done X300: Establish PHY Link TIMEOUT, sending COMRESET # Boot Loader Configuration: SCRAMBLER_ON_ROM_TABLE Check CRC fail: 0x000F0000! Get temp 00000012 <EL>NOR SIZE 2048K, SECTOR SIZE 64K, PAGE SIZE 256 <EL>EL ENTRY SIZE 64 <EL>Base Sec: CRITICAL 0x12, GENERIC 0x14 <EL>Class0: ACTIVE SEG 17, ACTIVE LAST ENTRY 65535 <EL>Class1: ACTIVE SEG 20, ACTIVE LAST ENTRY 65535 <EL>Max Entry Ver 0x00000000 <EL>EL Flash INIT OK <BIT>Total Entry Size Is Not Enough <BIT>Load Fail L Sec : 00000000 U Sec : 00000000 S0 Wr : 00000000 S1 Wr : 00000000 Need erase: 00000000 Need erase: 00000000 <BPC> Init <BPC> Enable <BPC> Force All Lun to MLC PreTH:4 NewTH:1 SEDERR: 00000208 SEDERR: 0000010C SEDERR: 00000301 SEDERR: 0000010C <INIT>Meta Info ATA read nor Err! InitMi media read err! Warning! InitMi Id 001 data default to 0! Warning! InitMi Id 003 data default to 0! Warning! InitMi Id 004 data default to 0! Warning! InitMi Id 006 data default to 0! DCO flag 00000000 Warning! InitMi Id 00E data default to 0! Warning! InitMi Id 011 data default to 0! Warning! InitMi Id 012 data default to 0! Warning! InitMi Id 013 data default to 0! ~~~~ATA Save 00000014 Err! SaveMi Wr Protected! Security Feature ERR! SEDERR: 0000010C DCO flag 00000000 init GPIO 11 # Initialize sata link... 794386 # wRandIndex = 3 WP_SB_BAD_BLOCK_THRESHOLD = 68 LPP is enabled Load Turbo Boot <INIT>BbTbl <BB>Load BbTbl wRandIndex = 3 WP_SB_BAD_BLOCK_THRESHOLD = 68 CopyIdx:0 is bad, address: 001A0000 Find the last wCopyIdx:3 <INIT>VerTbl BPC: Enable Block BPC mode: 000: 00 00 00 01 00 00 00 00 040: 40 10 00 00 00 00 00 00 080: 01 00 08 00 00 00 00 00 0C0: 01 00 02 00 00 00 00 00 100: 80 00 00 00 00 00 80 00 140: 00 00 00 00 00 00 00 80 180: 00 00 00 00 00 00 00 00 1C0: 00 00 80 00 00 00 00 01 200: 00 00 00 00 00 00 00 00 240: 00 00 00 00 02 00 00 00 280: 00 00 00 00 02 00 00 00 2C0: 00 00 08 00 00 00 00 00 300: 00 00 00 00 10 00 00 00 340: 00 40 00 00 00 00 00 00 380: 00 00 00 00 00 00 80 00 3C0: 00 00 01 00 00 02 00 00 400: 00 00 00 Lun BPC mode: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Nand BPC mode: 0 0.0.0:00000102 0 1.0.0:00000102 0 2.0.0:00000102 0 3.0.0:00000102 0 4.0.0:00000102 0 5.0.0:00000102 0 6.0.0:00000102 0 7.0.0:00000102 0 0.0.1:00000102 0 1.0.1:00000102 0 2.0.1:00000102 0 3.0.1:00000102 0 4.0.1:00000102 0 5.0.1:00000102 0 6.0.1:00000102 0 7.0.1:00000102 Nand SFBL(0x10)/FA91 (0x08) mode: 0.0.0: 33/3F 1.0.0: 33/3F 2.0.0: 33/3F 3.0.0: 33/3F 4.0.0: 33/3F 5.0.0: 33/3F 6.0.0: 33/3F 7.0.0: 33/3F 0.0.1: 33/3F 1.0.1: 33/3F 2.0.1: 33/3F 3.0.1: 33/3F 4.0.1: 33/3F 5.0.1: 33/3F 6.0.1: 33/3F 7.0.1: 33/3F BlkPgCnt: 00000100 LP:000000FF TuCnt:00008000 P2lPC:00000010 P2lTuC:00000020 XorPC:00000080 XorTuC:00000100 <VER_ORI>Last Blk : 00000090, last version : 009EEEED <TBINIT>3 : 717501 us <INIT>LastBlkP2l <P0BF,118120BF> Scan:11512 us 10 <AT>LWI.Ptu:118120BF, Blk:00000090, Page:000000BF, Seg:00000018, Offset:00000001 mhSegIdx:00000019, ahGoodSeg[wIdx - 1]:00000018,ahGoodSeg[wIdx]:00000019 <P2L>Scan Blk:090, Lwpl:0BF, FPtu:118120BF P2Lptu_EH!hP=00000000, eP=00000007 ******EH...Good Luck****** BPC: Enable Block BPC mode: 000: 00 00 00 01 00 00 00 00 040: 40 10 00 00 00 00 00 00 080: 01 00 08 00 00 00 00 00 0C0: 01 00 02 00 00 00 00 00 100: 80 00 00 00 00 00 80 00 140: 00 00 00 00 00 00 00 80 180: 00 00 00 00 00 00 00 00 1C0: 00 00 80 00 00 00 00 01 200: 00 00 00 00 00 00 00 00 240: 00 00 00 00 02 00 00 00 280: 00 00 00 00 02 00 00 00 2C0: 00 00 08 00 00 00 00 00 300: 00 00 00 00 10 00 00 00 340: 00 40 00 00 00 00 00 00 380: 00 00 00 00 00 00 80 00 3C0: 00 00 01 00 00 02 00 00 400: 00 00 00 Lun BPC mode: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Nand BPC mode: 0 0.0.0:00000102 0 1.0.0:00000102 0 2.0.0:00000102 0 3.0.0:00000102 0 4.0.0:00000102 0 5.0.0:00000102 0 6.0.0:00000102 0 7.0.0:00000102 0 0.0.1:00000102 0 1.0.1:00000102 0 2.0.1:00000102 0 3.0.1:00000102 0 4.0.1:00000102 0 5.0.1:00000102 0 6.0.1:00000102 0 7.0.1:00000102 Nand SFBL(0x10)/FA91 (0x08) mode: 0.0.0: 33/0A 1.0.0: 33/0A 2.0.0: 33/0A 3.0.0: 33/0A 4.0.0: 33/0A 5.0.0: 33/0A 6.0.0: 33/0A 7.0.0: 33/0A 0.0.1: 33/0A 1.0.1: 33/0A 2.0.1: 33/0A 3.0.1: 33/0A 4.0.1: 33/0A 5.0.1: 33/0A 6.0.1: 33/0A 7.0.1: 33/0A BlkPgCnt: 00000100 LP:000000FF TuCnt:00008000 P2lPC:00000010 P2lTuC:00000020 XorPC:00000080 XorTuC:00000100 E 0 C:2 L:FFFFFFFF,FFFFFFFF P:01212000,11212000 ECC:FF,FF U:30,O:0,Err:1 BlkVer:009EEEED wBufIdx:0 Get temp 00000012 <DR>01212000 ATLVP0 ATLWP0 CH:2 CE:0 LUN:0 BLK:121 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:53 R00:88 R01:75 <30s same temp 00000012! <Vp M0 blk121 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <QB>: Not Quick Boot this time RDRcv:383,144,2,0,0,0,12120000 StrF:1 RainCnt:127 RAIN PTU 03712070 ErrCode 1. RLC. Abort RAIN:Empty page. <30s same temp 00000012! IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 <DR>TgC:0/F <30s same temp 00000012! <DR>FAIL <InitTmpBB>Ptu:01212000 <RdPre>Next P:0x01312000 <DR>11212000 ATLVP0 ATLWP0 CH:2 CE:0 LUN:0 BLK:121 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:53 R00:88 R01:75 <30s same temp 00000012! <Vp M0 blk121 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <QB>: Not Quick Boot this time RDRcv:383,144,2,0,0,0,12120000 StrF:1 RainCnt:127 RAIN PTU 13712070 ErrCode 1. RLC. Abort RAIN:Empty page. <30s same temp 00000012! IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 <DR>TgC:0/F <30s same temp 00000012! <DR>FAIL <InitTmpBB>Ptu:11212000 <Rd>DRPTU:01212000-Sts:00000004 <Rd>DRPTU:11212000-Sts:00000004 E 1 C:2 L:FFFFFFFF,FFFFFFFF P:01412000,11412000 ECC:FF,FF U:30,O:0,Err:1 BlkVer:009EEEED wBufIdx:1 <30s same temp 00000012! <DR>01412000 ATLVP0 ATLWP0 CH:4 CE:0 LUN:0 BLK:121 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:4B R00:82 R01:6C Bad Stripe! <30s same temp 00000012! <Vp M0 blk121 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <DR>FAIL <InitTmpBB>Ptu:01412000 <RdPre>Next P:0x01512000 <DR>11412000 ATLVP0 ATLWP0 CH:4 CE:0 LUN:0 BLK:121 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:4B R00:82 R01:6C Bad Stripe! <30s same temp 00000012! <Vp M0 blk121 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <DR>FAIL <InitTmpBB>Ptu:11412000 <Rd>DRPTU:01412000-Sts:00000004 <Rd>DRPTU:11412000-Sts:00000004 E 2 C:2 L:FFFFFFFF,FFFFFFFF P:01A12000,11A12000 ECC:FF,FF U:30,O:0,Err:1 BlkVer:009EEEED wBufIdx:2 <30s same temp 00000012! <DR>01A12000 ATLVP0 ATLWP0 CH:2 CE:0 LUN:0 BLK:121 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:53 R00:88 R01:75 <30s same temp 00000012! <Vp M0 blk121 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <QB>: Not Quick Boot this time RDRcv:383,144,2,0,0,0,1A120000 StrF:1 RainCnt:127 RAIN PTU 03F12070 ErrCode 1. RLC. Abort RAIN:Empty page. <30s same temp 00000012! IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 <DR>TgC:0/F <30s same temp 00000012! <DR>FAIL <InitTmpBB>Ptu:01A12000 <RdPre>Next P:0x01B12000 <DR>11A12000 ATLVP0 ATLWP0 CH:2 CE:0 LUN:0 BLK:121 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:53 R00:88 R01:75 <30s same temp 00000012! <Vp M0 blk121 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <QB>: Not Quick Boot this time RDRcv:383,144,2,0,0,0,1A120000 StrF:1 RainCnt:127 RAIN PTU 13F12070 ErrCode 1. RLC. Abort RAIN:Empty page. <30s same temp 00000012! IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 <DR>TgC:0/F <30s same temp 00000012! <DR>FAIL <InitTmpBB>Ptu:11A12000 <Rd>DRPTU:01A12000-Sts:00000004 <Rd>DRPTU:11A12000-Sts:00000004 E 3 C:2 L:FFFFFFFF,FFFFFFFF P:01C12000,11C12000 ECC:FF,FF U:30,O:0,Err:1 BlkVer:009EEEED wBufIdx:3 <30s same temp 00000012! <DR>01C12000 ATLVP0 ATLWP0 CH:4 CE:0 LUN:0 BLK:121 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:4B R00:82 R01:6C Bad Stripe! <30s same temp 00000012! <Vp M0 blk121 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <DR>FAIL <InitTmpBB>Ptu:01C12000 <RdPre>Next P:0x01D12000 <DR>11C12000 ATLVP0 ATLWP0 CH:4 CE:0 LUN:0 BLK:121 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:4B R00:82 R01:6C Bad Stripe! <30s same temp 00000012! <Vp M0 blk121 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <DR>FAIL <InitTmpBB>Ptu:11C12000 <Rd>DRPTU:01C12000-Sts:00000004 <Rd>DRPTU:11C12000-Sts:00000004 E 4 C:2 L:FFFFFFFF,FFFFFFFF P:02012000,12012000 ECC:FF,FF U:30,O:0,Err:1 BlkVer:009EEEED wBufIdx:4 <30s same temp 00000012! <DR>02012000 ATLVP0 ATLWP0 CH:0 CE:0 LUN:1 BLK:120 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:59 R00:8F R01:71 <30s same temp 00000012! <Vp M0 blk00001120 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <QB>: Not Quick Boot this time RDRcv:383,144,2,0,0,0,20120000 StrF:1 RainCnt:127 RAIN PTU 02712070 ErrCode 1. RLC. Abort RAIN:Empty page. <30s same temp 00000012! IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 <DR>TgC:0/F <30s same temp 00000012! <DR>FAIL <InitTmpBB>Ptu:02012000 <RdPre>Next P:0x02112000 <RdPre>Read Error! ECODE: 1 <DR>12112000 ATLVP0 ATLWP0 CH:1 CE:0 LUN:1 BLK:120 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:74 R00:9D R01:74 <30s same temp 00000012! <Vp M0 blk00001120 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <QB>: Not Quick Boot this time RDRcv:383,144,2,0,0,0,21120000 StrF:1 RainCnt:127 RAIN PTU 12712070 ErrCode 1. RLC. Abort RAIN:Empty page. <30s same temp 00000012! IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 <DR>TgC:0/F <30s same temp 00000012! <DR>FAIL <InitTmpBB>Ptu:12112000 <DR>12012000 ATLVP0 ATLWP0 CH:0 CE:0 LUN:1 BLK:120 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:59 R00:8F R01:71 Bad Stripe! <30s same temp 00000012! <Vp M0 blk00001120 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <DR>FAIL <InitTmpBB>Ptu:12012000 <Rd>DRPTU:02012000-Sts:00000004 <Rd>DRPTU:12012000-Sts:00000004 E 5 C:2 L:FFFFFFFF,FFFFFFFF P:02112000,12112000 ECC:FF,FF U:30,O:0,Err:1 BlkVer:009EEEED wBufIdx:5 <30s same temp 00000012! <DR>02112000 ATLVP0 ATLWP0 CH:1 CE:0 LUN:1 BLK:120 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:74 R00:9D R01:74 Bad Stripe! <30s same temp 00000012! <Vp M0 blk00001120 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <DR>FAIL <InitTmpBB>Ptu:02112000 <RdPre>Next P:0x02212000 <RdPre>Read Error! ECODE: 1 <DR>12212000 ATLVP0 ATLWP0 CH:2 CE:0 LUN:1 BLK:120 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:43 R00:7D R01:70 Bad Stripe! <30s same temp 00000012! <Vp M0 blk00001120 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <DR>FAIL <InitTmpBB>Ptu:12212000 <DR>12112000 ATLVP0 ATLWP0 CH:1 CE:0 LUN:1 BLK:120 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:74 R00:9D R01:74 Bad Stripe! <30s same temp 00000012! <Vp M0 blk00001120 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <DR>FAIL <InitTmpBB>Ptu:12112000 <Rd>DRPTU:02112000-Sts:00000004 <Rd>DRPTU:12112000-Sts:00000004 E 6 C:2 L:FFFFFFFF,FFFFFFFF P:02212000,12212000 ECC:FF,FF U:30,O:0,Err:1 BlkVer:009EEEED wBufIdx:6 <30s same temp 00000012! <DR>02212000 ATLVP0 ATLWP0 CH:2 CE:0 LUN:1 BLK:120 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:43 R00:7D R01:70 Bad Stripe! <30s same temp 00000012! <Vp M0 blk00001120 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <DR>FAIL <InitTmpBB>Ptu:02212000 <RdPre>Next P:0x02312000 <DR>12212000 ATLVP0 ATLWP0 CH:2 CE:0 LUN:1 BLK:120 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:43 R00:7D R01:70 Bad Stripe! <30s same temp 00000012! <Vp M0 blk00001120 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <DR>FAIL <InitTmpBB>Ptu:12212000 <Rd>DRPTU:02212000-Sts:00000004 <Rd>DRPTU:12212000-Sts:00000004 E 7 C:2 L:FFFFFFFF,FFFFFFFF P:02412000,12412000 ECC:FF,FF U:30,O:0,Err:1 BlkVer:009EEEED wBufIdx:7 <30s same temp 00000012! <DR>02412000 ATLVP0 ATLWP0 CH:4 CE:0 LUN:1 BLK:120 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:53 R00:8B R01:6E Bad Stripe! <30s same temp 00000012! <Vp M0 blk00001120 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <DR>FAIL <InitTmpBB>Ptu:02412000 <RdPre>Next P:0x02512000 <DR>12412000 ATLVP0 ATLWP0 CH:4 CE:0 LUN:1 BLK:120 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:53 R00:8B R01:6E Bad Stripe! <30s same temp 00000012! <Vp M0 blk00001120 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <DR>FAIL <InitTmpBB>Ptu:12412000 <Rd>DRPTU:02412000-Sts:00000004 <Rd>DRPTU:12412000-Sts:00000004 <EH>Empty <CleanET>Ptu:01212000, AuCnt:2 <CleanET>Ptu:01412000, AuCnt:2 <CleanET>Ptu:01A12000, AuCnt:2 <CleanET>Ptu:01C12000, AuCnt:2 <CleanET>Ptu:02012000, AuCnt:2 <CleanET>Ptu:02112000, AuCnt:2 <CleanET>Ptu:02212000, AuCnt:2 <CleanET>Ptu:02412000, AuCnt:2 < EH>EH:278095us. ******EH...Good Bye****** ******EH...Good Luck****** <StoreET>Ptu:01212000, AuCnt:2 <StoreET>Ptu:01412000, AuCnt:2 <StoreET>Ptu:01A12000, AuCnt:2 <StoreET>Ptu:01C12000, AuCnt:2 <StoreET>Ptu:02012000, AuCnt:2 <StoreET>Ptu:02112000, AuCnt:2 <StoreET>Ptu:02212000, AuCnt:2 <StoreET>Ptu:02412000, AuCnt:2 BPC: Enable Block BPC mode: 000: 00 00 00 01 00 00 00 00 040: 40 10 00 00 00 00 00 00 080: 01 00 08 00 00 00 00 00 0C0: 01 00 02 00 00 00 00 00 100: 80 00 00 00 00 00 80 00 140: 00 00 00 00 00 00 00 80 180: 00 00 00 00 00 00 00 00 1C0: 00 00 80 00 00 00 00 01 200: 00 00 00 00 00 00 00 00 240: 00 00 00 00 02 00 00 00 280: 00 00 00 00 02 00 00 00 2C0: 00 00 08 00 00 00 00 00 300: 00 00 00 00 10 00 00 00 340: 00 40 00 00 00 00 00 00 380: 00 00 00 00 00 00 80 00 3C0: 00 00 01 00 00 02 00 00 400: 00 00 00 Lun BPC mode: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Nand BPC mode: 0 0.0.0:00000102 0 1.0.0:00000102 0 2.0.0:00000102 0 3.0.0:00000102 0 4.0.0:00000102 0 5.0.0:00000102 0 6.0.0:00000102 0 7.0.0:00000102 0 0.0.1:00000102 0 1.0.1:00000102 0 2.0.1:00000102 0 3.0.1:00000102 0 4.0.1:00000102 0 5.0.1:00000102 0 6.0.1:00000102 0 7.0.1:00000102 Nand SFBL(0x10)/FA91 (0x08) mode: 0.0.0: 33/0A 1.0.0: 33/0A 2.0.0: 33/0A 3.0.0: 33/0A 4.0.0: 33/0A 5.0.0: 33/0A 6.0.0: 33/0A 7.0.0: 33/0A 0.0.1: 33/0A 1.0.1: 33/0A 2.0.1: 33/0A 3.0.1: 33/0A 4.0.1: 33/0A 5.0.1: 33/0A 6.0.1: 33/0A 7.0.1: 33/0A BlkPgCnt: 00000100 LP:000000FF TuCnt:00008000 P2lPC:00000010 P2lTuC:00000020 XorPC:00000080 XorTuC:00000100 E 0 C:2 L:FFFFFFFF,FFFFFFFF P:02812000,12812000 ECC:FF,FF U:30,O:0,Err:1 BlkVer:009EEEED wBufIdx:0 <30s same temp 00000012! <DR>02812000 ATLVP0 ATLWP0 CH:0 CE:0 LUN:1 BLK:120 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:59 R00:8F R01:71 <30s same temp 00000012! <Vp M0 blk00001120 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <QB>: Not Quick Boot this time RDRcv:383,144,2,0,0,0,28120000 StrF:1 RainCnt:127 RAIN PTU 02F12070 ErrCode 1. RLC. Abort RAIN:Empty page. <30s same temp 00000012! IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 <DR>TgC:0/F <30s same temp 00000012! <DR>FAIL <InitTmpBB>Ptu:02812000 <RdPre>Next P:0x02912000 <RdPre>Read Error! ECODE: 1 <DR>12912000 ATLVP0 ATLWP0 CH:1 CE:0 LUN:1 BLK:120 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:74 R00:9D R01:74 <30s same temp 00000012! <Vp M0 blk00001120 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <QB>: Not Quick Boot this time RDRcv:383,144,2,0,0,0,29120000 StrF:1 RainCnt:127 RAIN PTU 12F12070 ErrCode 1. RLC. Abort RAIN:Empty page. <30s same temp 00000012! IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 <DR>TgC:0/F <30s same temp 00000012! <DR>FAIL <InitTmpBB>Ptu:12912000 <DR>12812000 ATLVP0 ATLWP0 CH:0 CE:0 LUN:1 BLK:120 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:59 R00:8F R01:71 Bad Stripe! <30s same temp 00000012! <Vp M0 blk00001120 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <DR>FAIL <InitTmpBB>Ptu:12812000 <Rd>DRPTU:02812000-Sts:00000004 <Rd>DRPTU:12812000-Sts:00000004 <EH>Empty <CleanET>Ptu:01212000, AuCnt:2 <CleanET>Ptu:01412000, AuCnt:2 <CleanET>Ptu:01A12000, AuCnt:2 <CleanET>Ptu:01C12000, AuCnt:2 <CleanET>Ptu:02012000, AuCnt:2 <CleanET>Ptu:02112000, AuCnt:2 <CleanET>Ptu:02212000, AuCnt:2 <CleanET>Ptu:02412000, AuCnt:2 < CleanET>Ptu:02812000, AuCnt:2 <EH>EH:64264us. ******EH...Good Bye****** ******EH...Good Luck****** <StoreET>Ptu:01212000, AuCnt:2 <StoreET>Ptu:01412000, AuCnt:2 <StoreET>Ptu:01A12000, AuCnt:2 <StoreET>Ptu:01C12000, AuCnt:2 <StoreET>Ptu:02012000, AuCnt:2 <StoreET>Ptu:02112000, AuCnt:2 <StoreET>Ptu:02212000, AuCnt:2 <StoreET>Ptu:02412000, AuCnt:2 <StoreET>Ptu:02812000, AuCnt:2 BPC: Enable Block BPC mode: 000: 00 00 00 01 00 00 00 00 040: 40 10 00 00 00 00 00 00 080: 01 00 08 00 00 00 00 00 0C0: 01 00 02 00 00 00 00 00 100: 80 00 00 00 00 00 80 00 140: 00 00 00 00 00 00 00 80 180: 00 00 00 00 00 00 00 00 1C0: 00 00 80 00 00 00 00 01 200: 00 00 00 00 00 00 00 00 240: 00 00 00 00 02 00 00 00 280: 00 00 00 00 02 00 00 00 2C0: 00 00 08 00 00 00 00 00 300: 00 00 00 00 10 00 00 00 340: 00 40 00 00 00 00 00 00 380: 00 00 00 00 00 00 80 00 3C0: 00 00 01 00 00 02 00 00 400: 00 00 00 Lun BPC mode: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Nand BPC mode: 0 0.0.0:00000102 0 1.0.0:00000102 0 2.0.0:00000102 0 3.0.0:00000102 0 4.0.0:00000102 0 5.0.0:00000102 0 6.0.0:00000102 0 7.0.0:00000102 0 0.0.1:00000102 0 1.0.1:00000102 0 2.0.1:00000102 0 3.0.1:00000102 0 4.0.1:00000102 0 5.0.1:00000102 0 6.0.1:00000102 0 7.0.1:00000102 Nand SFBL(0x10)/FA91 (0x08) mode: 0.0.0: 33/0A 1.0.0: 33/0A 2.0.0: 33/0A 3.0.0: 33/0A 4.0.0: 33/0A 5.0.0: 33/0A 6.0.0: 33/0A 7.0.0: 33/0A 0.0.1: 33/0A 1.0.1: 33/0A 2.0.1: 33/0A 3.0.1: 33/0A 4.0.1: 33/0A 5.0.1: 33/0A 6.0.1: 33/0A 7.0.1: 33/0A BlkPgCnt: 00000100 LP:000000FF TuCnt:00008000 P2lPC:00000010 P2lTuC:00000020 XorPC:00000080 XorTuC:00000100 E 0 C:2 L:FFFFFFFF,FFFFFFFF P:02912000,12912000 ECC:FF,FF U:30,O:0,Err:1 BlkVer:009EEEED wBufIdx:0 <30s same temp 00000012! <DR>02912000 ATLVP0 ATLWP0 CH:1 CE:0 LUN:1 BLK:120 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:74 R00:9D R01:74 Bad Stripe! <30s same temp 00000012! <Vp M0 blk00001120 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <DR>FAIL <InitTmpBB>Ptu:02912000 <RdPre>Next P:0x02A12000 <RdPre>Read Error! ECODE: 1 <DR>12A12000 ATLVP0 ATLWP0 CH:2 CE:0 LUN:1 BLK:120 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:43 R00:7D R01:70 Bad Stripe! <30s same temp 00000012! <Vp M0 blk00001120 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <DR>FAIL <InitTmpBB>Ptu:12A12000 <DR>12912000 ATLVP0 ATLWP0 CH:1 CE:0 LUN:1 BLK:120 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:74 R00:9D R01:74 Bad Stripe! <30s same temp 00000012! <Vp M0 blk00001120 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <DR>FAIL <InitTmpBB>Ptu:12912000 <Rd>DRPTU:02912000-Sts:00000004 <Rd>DRPTU:12912000-Sts:00000004 <EH>Empty <CleanET>Ptu:01212000, AuCnt:2 <CleanET>Ptu:01412000, AuCnt:2 <CleanET>Ptu:01A12000, AuCnt:2 <CleanET>Ptu:01C12000, AuCnt:2 <CleanET>Ptu:02012000, AuCnt:2 <CleanET>Ptu:02112000, AuCnt:2 <CleanET>Ptu:02212000, AuCnt:2 <CleanET>Ptu:02412000, AuCnt:2 < CleanET>Ptu:02812000, AuCnt:2 <CleanET>Ptu:02912000, AuCnt:2 <EH>EH:40734us. ******EH...Good Bye****** ******EH...Good Luck****** <StoreET>Ptu:01212000, AuCnt:2 <StoreET>Ptu:01412000, AuCnt:2 <StoreET>Ptu:01A12000, AuCnt:2 <StoreET>Ptu:01C12000, AuCnt:2 <StoreET>Ptu:02012000, AuCnt:2 <StoreET>Ptu:02112000, AuCnt:2 <StoreET>Ptu:02212000, AuCnt:2 <StoreET>Ptu:02412000, AuCnt:2 <StoreET>Ptu:02812000, AuCnt:2 <StoreET>Ptu:02912000, AuCnt:2 BPC: Enable Block BPC mode: 000: 00 00 00 01 00 00 00 00 040: 40 10 00 00 00 00 00 00 080: 01 00 08 00 00 00 00 00 0C0: 01 00 02 00 00 00 00 00 100: 80 00 00 00 00 00 80 00 140: 00 00 00 00 00 00 00 80 180: 00 00 00 00 00 00 00 00 1C0: 00 00 80 00 00 00 00 01 200: 00 00 00 00 00 00 00 00 240: 00 00 00 00 02 00 00 00 280: 00 00 00 00 02 00 00 00 2C0: 00 00 08 00 00 00 00 00 300: 00 00 00 00 10 00 00 00 340: 00 40 00 00 00 00 00 00 380: 00 00 00 00 00 00 80 00 3C0: 00 00 01 00 00 02 00 00 400: 00 00 00 Lun BPC mode: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Nand BPC mode: 0 0.0.0:00000102 0 1.0.0:00000102 0 2.0.0:00000102 0 3.0.0:00000102 0 4.0.0:00000102 0 5.0.0:00000102 0 6.0.0:00000102 0 7.0.0:00000102 0 0.0.1:00000102 0 1.0.1:00000102 0 2.0.1:00000102 0 3.0.1:00000102 0 4.0.1:00000102 0 5.0.1:00000102 0 6.0.1:00000102 0 7.0.1:00000102 Nand SFBL(0x10)/FA91 (0x08) mode: 0.0.0: 33/0A 1.0.0: 33/0A 2.0.0: 33/0A 3.0.0: 33/0A 4.0.0: 33/0A 5.0.0: 33/0A 6.0.0: 33/0A 7.0.0: 33/0A 0.0.1: 33/0A 1.0.1: 33/0A 2.0.1: 33/0A 3.0.1: 33/0A 4.0.1: 33/0A 5.0.1: 33/0A 6.0.1: 33/0A 7.0.1: 33/0A BlkPgCnt: 00000100 LP:000000FF TuCnt:00008000 P2lPC:00000010 P2lTuC:00000020 XorPC:00000080 XorTuC:00000100 E 0 C:2 L:FFFFFFFF,FFFFFFFF P:02A12000,12A12000 ECC:FF,FF U:30,O:0,Err:1 BlkVer:009EEEED wBufIdx:0 <30s same temp 00000012! <DR>02A12000 ATLVP0 ATLWP0 CH:2 CE:0 LUN:1 BLK:120 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:43 R00:7D R01:70 Bad Stripe! <30s same temp 00000012! <Vp M0 blk00001120 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <DR>FAIL <InitTmpBB>Ptu:02A12000 <RdPre>Next P:0x02B12000 <DR>12A12000 ATLVP0 ATLWP0 CH:2 CE:0 LUN:1 BLK:120 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:43 R00:7D R01:70 Bad Stripe! <30s same temp 00000012! <Vp M0 blk00001120 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <DR>FAIL <InitTmpBB>Ptu:12A12000 <Rd>DRPTU:02A12000-Sts:00000004 <Rd>DRPTU:12A12000-Sts:00000004 <EH>Empty <CleanET>Ptu:01212000, AuCnt:2 <CleanET>Ptu:01412000, AuCnt:2 <CleanET>Ptu:01A12000, AuCnt:2 <CleanET>Ptu:01C12000, AuCnt:2 <CleanET>Ptu:02012000, AuCnt:2 <CleanET>Ptu:02112000, AuCnt:2 <CleanET>Ptu:02212000, AuCnt:2 <CleanET>Ptu:02412000, AuCnt:2 < CleanET>Ptu:02812000, AuCnt:2 <CleanET>Ptu:02912000, AuCnt:2 <CleanET>Ptu:02A12000, AuCnt:2 <EH>EH:30412us. ******EH...Good Bye****** ******EH...Good Luck****** <StoreET>Ptu:01212000, AuCnt:2 <StoreET>Ptu:01412000, AuCnt:2 <StoreET>Ptu:01A12000, AuCnt:2 <StoreET>Ptu:01C12000, AuCnt:2 <StoreET>Ptu:02012000, AuCnt:2 <StoreET>Ptu:02112000, AuCnt:2 <StoreET>Ptu:02212000, AuCnt:2 <StoreET>Ptu:02412000, AuCnt:2 <StoreET>Ptu:02812000, AuCnt:2 <StoreET>Ptu:02912000, AuCnt:2 <StoreET>Ptu:02A12000, AuCnt:2 BPC: Enable Block BPC mode: 000: 00 00 00 01 00 00 00 00 040: 40 10 00 00 00 00 00 00 080: 01 00 08 00 00 00 00 00 0C0: 01 00 02 00 00 00 00 00 100: 80 00 00 00 00 00 80 00 140: 00 00 00 00 00 00 00 80 180: 00 00 00 00 00 00 00 00 1C0: 00 00 80 00 00 00 00 01 200: 00 00 00 00 00 00 00 00 240: 00 00 00 00 02 00 00 00 280: 00 00 00 00 02 00 00 00 2C0: 00 00 08 00 00 00 00 00 300: 00 00 00 00 10 00 00 00 340: 00 40 00 00 00 00 00 00 380: 00 00 00 00 00 00 80 00 3C0: 00 00 01 00 00 02 00 00 400: 00 00 00 Lun BPC mode: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Nand BPC mode: 0 0.0.0:00000102 0 1.0.0:00000102 0 2.0.0:00000102 0 3.0.0:00000102 0 4.0.0:00000102 0 5.0.0:00000102 0 6.0.0:00000102 0 7.0.0:00000102 0 0.0.1:00000102 0 1.0.1:00000102 0 2.0.1:00000102 0 3.0.1:00000102 0 4.0.1:00000102 0 5.0.1:00000102 0 6.0.1:00000102 0 7.0.1:00000102 Nand SFBL(0x10)/FA91 (0x08) mode: 0.0.0: 33/0A 1.0.0: 33/0A 2.0.0: 33/0A 3.0.0: 33/0A 4.0.0: 33/0A 5.0.0: 33/0A 6.0.0: 33/0A 7.0.0: 33/0A 0.0.1: 33/0A 1.0.1: 33/0A 2.0.1: 33/0A 3.0.1: 33/0A 4.0.1: 33/0A 5.0.1: 33/0A 6.0.1: 33/0A 7.0.1: 33/0A BlkPgCnt: 00000100 LP:000000FF TuCnt:00008000 P2lPC:00000010 P2lTuC:00000020 XorPC:00000080 XorTuC:00000100 E 0 C:2 L:FFFFFFFF,FFFFFFFF P:02C12000,12C12000 ECC:FF,FF U:30,O:0,Err:1 BlkVer:009EEEED wBufIdx:0 <30s same temp 00000012! <DR>02C12000 ATLVP0 ATLWP0 CH:4 CE:0 LUN:1 BLK:120 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:53 R00:8B R01:6E Bad Stripe! <30s same temp 00000012! <Vp M0 blk00001120 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <DR>FAIL <InitTmpBB>Ptu:02C12000 <RdPre>Next P:0x02D12000 <DR>12C12000 ATLVP0 ATLWP0 CH:4 CE:0 LUN:1 BLK:120 PAGE:000 IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0 Warning: Empty page! Former nand trim: R10:53 R00:8B R01:6E Bad Stripe! <30s same temp 00000012! <Vp M0 blk00001120 page000> <30s same temp 00000012! Tg:0/F Vp:0/F FD:1 BB:1 <DR>FAIL <InitTmpBB>Ptu:12C12000 <Rd>DRPTU:02C12000-Sts:00000004 <Rd>DRPTU:12C12000-Sts:00000004 <EH>Empty <CleanET>Ptu:01212000, AuCnt:2 <CleanET>Ptu:01412000, AuCnt:2 <CleanET>Ptu:01A12000, AuCnt:2 <CleanET>Ptu:01C12000, AuCnt:2 <CleanET>Ptu:02012000, AuCnt:2 <CleanET>Ptu:02112000, AuCnt:2 <CleanET>Ptu:02212000, AuCnt:2 <CleanET>Ptu:02412000, AuCnt:2 < CleanET>Ptu:02812000, AuCnt:2 <CleanET>Ptu:02912000, AuCnt:2 <CleanET>Ptu:02A12000, AuCnt:2 <CleanET>Ptu:02C12000, AuCnt:2 <EH>EH:30689us. ******EH...Good Bye****** Err!Ptu:13F12000, Ltu:074AF2AF, LastLtu:03BD0705, DummyLtu:03BC1750 <30s same temp 00000012! DBG_ASSERT: ../Operation/FlsOp_P2LOp.c, line 1227 Save Serial Log in Nor Len:28149, Start:28149 Len:28173, Start:28173 NOR Space Size:131064 the idea was to see why bootcode adds data to all these sections. now after single boot attempt at least to the section at 0x170000 nothing new has been added the sections at 0x110000 and 0x130000 seems to be filled with garbage, and it appears there is no special section at 0x120000, it is just space for the content at 0x110000 this time few messages "failed to IDENTIFY (I/O error, err_mask=0x4)" no idea if the bootcode MU03 is actually compatible with the rest of the data in flash chip. i'll try restoring few more tables back to see how it behaves |
Author: | westcoast [ April 21st, 2024, 13:48 ] |
Post subject: | Re: Recovering data from 8 pin short circuited nor rom.Possi |
trying to boot MU03 loader with erased tables wasn't the best idea it appears. after restoring the dump into nor chip i initially flashed, the drive would no longer get recognized with the same messages as above "failed to IDENTIFY (I/O error, err_mask=0x4)" took off the chip to read what's in there. i go immediately to 0x170000 section and see that it hasn't been expanded like first time when booted. maybe the software marked this action as performed and skips it now? or it was fooled further and doesn't know about checking it then i restored the dump i took before experimenting with MU03 loader, drive still not detected, but there is progress - model and FW version are identified by kernel, it still complain about identify data though. at least this cleared doubts about possible hw failure Code: [ 2.235704] ata2.00: failed to IDENTIFY (I/O error, err_mask=0x100) [ 6.037534] ata2: SATA link up 3.0 Gbps (SStatus 123 SControl 300) [ 6.404020] ata2.00: failed to IDENTIFY (I/O error, err_mask=0x100) [ 6.404023] ata2: limiting SATA link speed to 1.5 Gbps [ 11.541553] ata2: SATA link up 1.5 Gbps (SStatus 113 SControl 310) [ 13.168175] random: fast init done [ 13.168188] ata2.00: failed to enable AA (error_mask=0x1) [ 14.117259] ata2.00: READ LOG DMA EXT failed, trying unqueued [ 16.163814] ata2.00: failed to get Log Directory Emask 0x1 [ 16.163816] ata2.00: ATA-10: Micron_M600_MTFDDAV256MBF, MA01, max UDMA/133 [ 16.163817] ata2.00: 500118192 sectors, multi 16: LBA48 NCQ (depth 31/32) [ 16.778558] ata2.00: failed to get Identify Device Data, Emask 0x1 [ 17.436920] ata2.00: failed to IDENTIFY (I/O error, err_mask=0x40) [ 17.436921] ata2.00: revalidation failed (errno=-5) [ 17.436956] ata2.00: disabled [ 17.436968] ata2: exception Emask 0x52 SAct 0x0 SErr 0x280d00 action 0x6 frozen t4 [ 17.437018] ata2: irq_stat 0x08000000, interface fatal error [ 17.437054] ata2: SError: { UnrecovData Proto HostInt 10B8B BadCRC } [ 17.437090] ata2: hard resetting link [ 17.749577] ata2: SATA link up 1.5 Gbps (SStatus 113 SControl 310) [ 17.749584] ata2: EH complete took the dump from 2.5" drive and compared it MA01 Code: 0x000000 0x10000 bootloader OK 0x010000 0x10000 MFIN1/MFN21 offset 128 ERASED? 0x030000 0x10000 Identify Device OK 0x040000 0x10000 bootloader backup OK 0x050000 0x10000 unknown1 OK 0x060000 zero tag OK 0x090000 0x20000 empty, serial log on failed boot OK 0x0B0000 0x10000 DSSR table OK 0x0C0000 0x10000 multi DSSR table OK 0x0E0000 0x10000 MSP430 fw OK 0x0F0000 0x10000 DSSR tag (unused backup?) OK 0x110000 0x20000 unknown2 INCOMPLETE? 0x130000 0x10000 unknown3 CORRUPT 0x140000 0x10000 unknown4 CORRUPT offset f40 0x150000 0x10000 unknown5 CORRUPT 0x170000 BbTbl INCOMPLETE? 0x1A0000 BbTbl backup INCOMPLETE? 0x1F0000 0x10000 signature? OK HP 2.5" Code: 0x000000 0x10000 bootloader 0x010000 0x10000 MFIN1/MFN21 offset 128 0x030000 0x10000 Identify Device 0x040000 0x10000 bootloader backup 0x050000 0x10000 unknown1 0x060000 zero tag 0x090000 0x20000 empty, possibly same as on MA01 0x0B0000 0x10000 DSSR tag (unused backup?) 0x0D0000 0x10000 multi DSSR table 0x0E0000 0x10000 MSP430 fw 0x0F0000 0x10000 DSSR table 0x100000 0x10000 unknown6 0x110000 0x20000 unknown2 0x130000 0x10000 unknown3 0x140000 0x20000 unknown4 0x160000 0x10000 unknown5 0x170000 BbTbl 0x1A0000 BbTbl backup 0x1F0000 0x10000 signature? at 10128 there is this small sector that is zeroed out on m2 drive unlike 2.5" drive where it is filled out. not sure what it's purpose is and would it make sense to copy data from 2.5" dump to this section MSP430 fw are byte-to-byte identical between the two drives on 2.5" drive there is table at 0x100000 with zeros mostly and small percentage of random numbers through the table. also, 2.5" drive has a lot more content in multi DSSR table and unknown4 table. maybe it is depending on drive size and unknown4 is here 0x20000 in size to accomodate for 1TB drives (guess based on fact that in 512GB version data size of this table are beyond 8000) unknown4 on m2 dump was corrupted as well. thermal strings clearly do not belong there still unsure what is with m2 table at 0x110000, it would appear as if the content at 120000 has been erased which is part of this table same goes for BBTBL and it's backup. at first it looked like the dump was good, but then it got expanded during boot, and drive wasn't detected anymore when tried to boot with original dump. on 2.5" drive this table is also larger |
Author: | westcoast [ April 22nd, 2024, 10:17 ] |
Post subject: | Re: Recovering data from 8 pin short circuited nor rom.Possi |
except for corrupted bytes in unknown5 table, there is a lot of missing data too, e.g. 00 00 00 00... looking at this table from working drive there are no zeros maybe i try to read broken chip at 3.9V but need to work out cooling, drown it in IPA and put everything in freezer probably.. after few restarts last night DRDY/ABRT messages are back, no SN/WWN drive size displayed in disk utility on old laptop first time after repair these infos weren't displayed as well, then i tried to start the drive on another laptop with SATA3, don't remember exactly how and when, but disk utility on old laptop started to show these info this time it doesn't even start of SATA3 laptop (softreset failed, 1st FIS failed) but if i plug it into USB-SATA reader kernel detects 256GB device... edit: i did not try native m2 port, but used m2 to 2.5" adapter this time. no idea if that matters also BbTbl appears to be bad block table |
Page 2 of 2 | All times are UTC - 5 hours [ DST ] |
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group http://www.phpbb.com/ |