All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 137 posts ]  Go to page Previous  1, 2, 3, 4, 5, 6, 7  Next
Author Message
 Post subject: Re: Help needed - Serious challange with this one
PostPosted: May 18th, 2015, 19:28 
Offline
User avatar

Joined: May 8th, 2015, 19:08
Posts: 40
Location: Portugal
Check page 5 to 10 on this document : http://pdf.datasheetarchive.com/indexer ... 390008.pdf

Is it possible that we have been reading the original dump in a wrong way?

BTW the nand chip was sent to Sean for further checkout on the dumping procedure....


Top
 Profile  
 
 Post subject: Re: Help needed - Serious challange with this one
PostPosted: May 18th, 2015, 20:53 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 15461
Location: Australia
The Intel document confirms that the FTL exists in system RAM, not on the DOC. I was led to believe that the FTL and wear levelling were functions that were handled by the DOC's microcontroller. In fact these are handled by TrueFFS drivers running under DOS. These drivers are loaded into RAM via the BIOS adapter window that loads the IPL ROM code.

In short, we were looking for a map that didn't exist. Had your tools, or their operator, not let you down, this would have been immediately evident in the NAND dump. I'm convinced that even a complete novice like myself would have been able to determine the logical-to-physical translation scheme, and we would have had your data by the following day. :x

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Help needed - Serious challange with this one
PostPosted: May 19th, 2015, 0:25 
Offline
User avatar

Joined: December 4th, 2012, 1:35
Posts: 3844
Location: Adelaide, Australia
joanorsky wrote:
BTW the nand chip was sent to Sean for further checkout on the dumping procedure....


well fine then! [blows raspberry]


No, seriously

Except we aren't looking for the FTL, we are looking for the FTL Map - VPM, VBM & BAM. This may or may not be stored on the Flash, and if it is, may or may not be completely stored on the flash. (pg. 11).



Another thing to consider is this document is a version of an FTL scheme.

Many different variations are possible between vendors, and between devices, and even between versions of the same device.

I reckon wait 'til Sean dumps the chip and see what is different.


Top
 Profile  
 
 Post subject: Re: Help needed - Serious challange with this one
PostPosted: May 19th, 2015, 21:05 
Offline
User avatar

Joined: May 8th, 2015, 19:08
Posts: 40
Location: Portugal
While the chip travels... here goes some more reading material on the MSystems FTL algorithm.. (Kinda interesting.. )

www.it.iitb.ac.in/frg/wiki/images/a/a7/ ... ort_01.pdf


Attachments:
P12440_silpa_week_07_Report_01-1.pdf [152.83 KiB]
Downloaded 701 times
Top
 Profile  
 
 Post subject: Re: Help needed - Serious challange with this one
PostPosted: May 19th, 2015, 22:34 
Offline
User avatar

Joined: December 4th, 2012, 1:35
Posts: 3844
Location: Adelaide, Australia
joanorsky wrote:
(Kinda interesting.. )


Kinda? Actually this whole thing is VERY interesting! one observation is that if this device/machine was one manufactured this year, and we had to perform similar analysis.. there would probably be not a single document apart from a marketing "datasheet" with max 5 40pt bullet points saying virtually nothing.

remember that documents relating to any system is a guide only, and even if regular programmers used these docs as a guide or manual, the actual produced system is however they decided to implement it. Customisations and errors also make it more interesting.

Thanks for the docs, and also to everyone else posting useful info.


Top
 Profile  
 
 Post subject: Re: Help needed - Serious challange with this one
PostPosted: May 20th, 2015, 4:37 
Offline
User avatar

Joined: May 5th, 2004, 20:06
Posts: 2782
Location: England
You're correct with the below. Many times I have seen specs that are not followed
HaQue wrote:
joanorsky wrote:
(Kinda interesting.. )




remember that documents relating to any system is a guide only, and even if regular programmers used these docs as a guide or manual, the actual produced system is however they decided to implement it. Customisations and errors also make it more interesting

_________________
All went well until I plugged the drive in.


Top
 Profile  
 
 Post subject: Re: Help needed - Serious challange with this one
PostPosted: May 23rd, 2015, 12:47 
Offline
User avatar

Joined: April 22nd, 2015, 20:32
Posts: 413
Location: Portugal
joanorski, how is the process going?

_________________
BTC Wallet - 3AoQPTBsz9PbfoanCx44Lw76Y2TwtKa1x5
Instagram https://www.instagram.com/datarecovery_morde.pt/


Top
 Profile  
 
 Post subject: Re: Help needed - Serious challange with this one
PostPosted: May 23rd, 2015, 17:23 
Offline
User avatar

Joined: May 8th, 2015, 19:08
Posts: 40
Location: Portugal
It arrived at uk today. It should be delivered next monday... :)


Top
 Profile  
 
 Post subject: Re: Help needed - Serious challange with this one
PostPosted: May 24th, 2015, 2:39 
Offline

Joined: November 29th, 2006, 10:08
Posts: 7843
Location: UK
joanorsky wrote:
It arrived at uk today. It should be delivered next monday... :)


Tuesday at the earliest, national holiday here tomorrow :-)

_________________
PC Image Data Recovery
http://www.pcimage.co.uk

New!! HDD-PCB.COM for all your PCB and donor HDD requirements!


Top
 Profile  
 
 Post subject: Re: Help needed - Serious challange with this one
PostPosted: May 26th, 2015, 5:46 
Offline

Joined: November 29th, 2006, 10:08
Posts: 7843
Location: UK
Chip arrived.

Read with Soft Center tool (my PC3K won't read at all although the ID is in the supported list, just gives read errors but need to look into that) , but still weird...

https://www.hightail.com/download/bXBhZ ... MHVxV2NUQw

As you'll see, SA data still not being read correctly. The 16-byte SA data just contains the last byte of the 512-byte data area repeated.

_________________
PC Image Data Recovery
http://www.pcimage.co.uk

New!! HDD-PCB.COM for all your PCB and donor HDD requirements!


Top
 Profile  
 
 Post subject: Re: Help needed - Serious challange with this one
PostPosted: May 26th, 2015, 6:27 
Offline
User avatar

Joined: May 8th, 2015, 19:08
Posts: 40
Location: Portugal
fzabkar wrote:
The latest dumps have the same problem. Worse still, the firmware sections are missing. :?

On the plus side, your latest dumps are identical, so there is some hope that there are no bit errors in the user data area.

I notice that your chip has an /SE pin that more recent flash chips do not need. I suspect that you need to ground this pin in order to be able to read the spare bytes.


I have forgotten to mention but on the DOC's board the SE pin IS grounded as specified on the K9F2808's datasheet. I don't know if this is relevant to this situation or not...


Top
 Profile  
 
 Post subject: Re: Help needed - Serious challange with this one
PostPosted: May 26th, 2015, 7:39 
Offline

Joined: November 29th, 2006, 10:08
Posts: 7843
Location: UK
Have now read it with a real old version of the SC nand reader, and SA data now seems to have read....

https://www.hightail.com/download/bXBhZ ... QUpvZE1UQw

_________________
PC Image Data Recovery
http://www.pcimage.co.uk

New!! HDD-PCB.COM for all your PCB and donor HDD requirements!


Top
 Profile  
 
 Post subject: Re: Help needed - Serious challange with this one
PostPosted: May 26th, 2015, 7:45 
Offline

Joined: November 29th, 2006, 10:08
Posts: 7843
Location: UK
Using block size of 0x4200 and markers at 521/520 I have rebuilt the dump...


Attachments:
FAT.jpg
FAT.jpg [ 302.02 KiB | Viewed 13780 times ]

_________________
PC Image Data Recovery
http://www.pcimage.co.uk

New!! HDD-PCB.COM for all your PCB and donor HDD requirements!
Top
 Profile  
 
 Post subject: Re: Help needed - Serious challange with this one
PostPosted: May 26th, 2015, 7:51 
Offline

Joined: November 29th, 2006, 10:08
Posts: 7843
Location: UK
Here's the image file dump...

https://www.hightail.com/download/bXBhZ ... SWZOTzhUQw

_________________
PC Image Data Recovery
http://www.pcimage.co.uk

New!! HDD-PCB.COM for all your PCB and donor HDD requirements!


Top
 Profile  
 
 Post subject: Re: Help needed - Serious challange with this one
PostPosted: May 26th, 2015, 7:55 
Offline

Joined: November 29th, 2006, 10:08
Posts: 7843
Location: UK
And running GDB on the image produces this data (root folder names lost)...

https://www.hightail.com/download/bXBhZ ... MTQxWjhUQw

_________________
PC Image Data Recovery
http://www.pcimage.co.uk

New!! HDD-PCB.COM for all your PCB and donor HDD requirements!


Top
 Profile  
 
 Post subject: Re: Help needed - Serious challange with this one
PostPosted: May 26th, 2015, 7:58 
Offline
User avatar

Joined: May 8th, 2015, 19:08
Posts: 40
Location: Portugal
Ok.. Now i am getting nervous... :D

Have found the nk.bin file inside? (I am currently away from the computer)


Top
 Profile  
 
 Post subject: Re: Help needed - Serious challange with this one
PostPosted: May 26th, 2015, 8:25 
Offline
User avatar

Joined: December 4th, 2012, 1:35
Posts: 3844
Location: Adelaide, Australia
Nice work Sean!!


Top
 Profile  
 
 Post subject: Re: Help needed - Serious challange with this one
PostPosted: May 26th, 2015, 8:45 
Offline
User avatar

Joined: December 4th, 2012, 1:35
Posts: 3844
Location: Adelaide, Australia
yes NK.bin is there :)


Top
 Profile  
 
 Post subject: Re: Help needed - Serious challange with this one
PostPosted: May 26th, 2015, 9:08 
Offline
User avatar

Joined: May 8th, 2015, 19:08
Posts: 40
Location: Portugal
My heart is running fast now. I will test this out on the device's board this afternoon/night and will get back to you guys after it has been "worked on"... :D

Sean... very nice job indeed!


Top
 Profile  
 
 Post subject: Re: Help needed - Serious challange with this one
PostPosted: May 26th, 2015, 9:28 
Offline
User avatar

Joined: May 8th, 2015, 19:08
Posts: 40
Location: Portugal
At first analysis it seems ok.. but after some looking i have notice that some files are corrupted. Take a look at these two files ..

msgalarm_original.msg -> From original setup (that i had partially had over here)
msgalarm_dump.msg -> From Sean dump


Download at : http://www.joaocesarsilva.com/echo/damaged_data.rar


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 137 posts ]  Go to page Previous  1, 2, 3, 4, 5, 6, 7  Next

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 31 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group