Main » Forums home » Conventional hard drives

All times are UTC - 5 hours [ DST ]



Post new topic Reply to topic  Page 3 of 4
  [ 67 posts ]  Go to page Previous  1, 2, 3, 4  Next
  Previous topic | Next topic 
Author Message
eNDi
 Post subject: Re: HD103SJ dead
PostPosted: December 9th, 2019, 16:03 
Offline

Joined: November 29th, 2019, 18:05
Posts: 17
Location: Germany
I resoldered the flash but nothing changed - flash contents are still zeroes.
Top
 Profile  
 
eNDi
 Post subject: Re: HD103SJ dead
PostPosted: December 11th, 2019, 6:18 
Offline

Joined: November 29th, 2019, 18:05
Posts: 17
Location: Germany
Should I try to read the flash? Is it possible to access it in-circuit by shorting a reset-line or osc, or do I have to remove the IC from the PCB?
Top
 Profile  
 
BGman
 Post subject: Re: HD103SJ dead
PostPosted: December 11th, 2019, 6:56 
Offline

Joined: September 30th, 2005, 7:33
Posts: 849
Could you post the response of your drive to "DV" terminal command and/or the startup output.
Have you tried any sort of burnin procedure (downloading any kind of BI code) ?
Top
 Profile  
 
eNDi
 Post subject: Re: HD103SJ dead
PostPosted: December 11th, 2019, 14:56 
Offline

Joined: November 29th, 2019, 18:05
Posts: 17
Location: Germany
I didn't try anything with this drive, these are very my first steps.

Startup output is:
Code:
*PA VID=0000 PN=0004 Rev=0002- 785x Found*PA VID=0000 PN=0004 Rev=0002- 785x FoundChipRev = 63B0U
S_0
[DEBUG HALT @MDL_RSRC_BufferAlloc():10034A95 L0 1003A451]

RV En Sensor Circuit
En Shock Sensor Circuit


response of "DV":
Code:
DV
[SHOS2:1AJc3suM.d26|c3su_.009u_ HPCSF:3.26.1.7.0 0MB SoC:63B0 Ch:0920]
[FLAGs:00000000 00000000][CMD:00000000][RESET:00000000][TIME:38 38]

   ID     EVENT_WAIT_FLAGS  ST PR CODEADDR STACKPTR RET_ADDR FREESTACK
Serial  : 00000000_00000000 00 00 00000376 040061A0 040061EC 000000D8<-
HostXfr : 00000800_00000000 01 01 10034A2B 04006640 04005ED8 00000038
CmdDisp : 00000000_00000020 01 01 00002398 04006A60 0000853F 00000018
RdWr    : 00000800_00000000 01 01 10034A2B 04006DC8 0001C138 000000B0
BkGrnd  : 00000800_00000000 01 01 10034A2B 04007400 00014000 00000078
Partol  : 00000000_00000000 02 01 0000858A 040075F0 A5A5A5A5 00000008
EV:00000004_00200000
[DEBUG HALT @MDL_RSRC_BufferAlloc():10034A95 L0 1003A451]
Top
 Profile  
 
einstein9
 Post subject: Re: HD103SJ dead
PostPosted: December 12th, 2019, 2:14 
Offline
User avatar

Joined: May 13th, 2010, 11:17
Posts: 2798
Location: Kuwait
[SHOS2: 1AJc3suM.d26 |c3su_.009u_ HPCSF:3.26.1.7.0 0MB SoC:63B0 Ch:0920]

_________________
Kuwait Data Recovery - UNIX GTC
The only reason for time is so that everything doesn't happen at once. By: Albert Einstein
Top
 Profile  
 
BGman
 Post subject: Re: HD103SJ dead
PostPosted: December 12th, 2019, 2:57 
Offline

Joined: September 30th, 2005, 7:33
Posts: 849
I see a problem. The drive reports 0MB DRAM instead of 32MB. Maybe DRAM chip is damaged. This could explain why FIPS is all zeroes (during the startup drive copies FLASH to DRAM). The solution is to find a good PCB and to transfer the FLASH chip.
Top
 Profile  
 
eNDi
 Post subject: Re: HD103SJ dead
PostPosted: December 12th, 2019, 5:45 
Offline

Joined: November 29th, 2019, 18:05
Posts: 17
Location: Germany
Ok, thank you!
On the PCB is written "3_2D", "REV.05 R00" and "BF41-00353A 00". A PCB without a working Flash would be sufficient, right?
If I can't find a suitable PCB, should I try to replace the DRAM (K4H561638N) - I have a different donor PCB with a K4H561638J.
Top
 Profile  
 
fzabkar
 Post subject: Re: HD103SJ dead
PostPosted: December 12th, 2019, 15:32 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 15531
Location: Australia
The "0MB" report bothered me, too. However, the MCU cannot execute code in serial flash memory. The code needs to be unpacked into RAM, and then executed from RAM. Since the "DI" command exists in ROM, and since the following strings also exist in ROM, then this would suggest that the ROM code is executing in RAM.

Quote:
*PA VID=0000 PN=0004 Rev=0002- 785x Found*PA VID=0000 PN=0004 Rev=0002- 785x FoundChipRev = 63B0U
S_0


One solution would be to desolder the ROM, dump its contents, patch the FIPS if necessary, and reinstall it. Alternatively the ROM could be dumped and reprogrammed in-circuit via an IC clip.

Try the demo version of SHTR. It may be able to dump the ROM.

http://www.hddoracle.com/viewtopic.php?f=149&t=1084

http://www.hddoracle.com/download/file.php?id=9235 (SHT/SHTR manual - EN)

_________________
A backup a day keeps DR away.
Top
 Profile  
 
BGman
 Post subject: Re: HD103SJ dead
PostPosted: December 13th, 2019, 4:14 
Offline

Joined: September 30th, 2005, 7:33
Posts: 849
fzabkar wrote:
The "0MB" report bothered me, too. However, the MCU cannot execute code in serial flash memory. The code needs to be unpacked into RAM, and then executed from RAM. Since the "DI" command exists in ROM, and since the following strings also exist in ROM, then this would suggest that the ROM code is executing in RAM.

The MCU has its own "Mask ROM" able to do some basic functions like Read/Write to Flash, DDR, etc....
It could be able to execute some terminal commands (like DI, MI, EI, etc.) as well.
Top
 Profile  
 
eNDi
 Post subject: Re: HD103SJ dead
PostPosted: December 13th, 2019, 5:47 
Offline

Joined: November 29th, 2019, 18:05
Posts: 17
Location: Germany
So I would go this way:
1. read ROM
2. if FIPS is ok: DRAM is broken - replace DRAM, or find a working PCB and put the ROM on it

With command "DL" I dumped 128kByte several times and compared the results:
between two power-cycles the contents are always the same.
After a power-cycle only some specific bits in these areas are changing:
0x1c860 - 0x1c9df
0x1cfe0 - 0x1d1ff
0x1e880 - end

For example: addresses 0x1c860, 0x1c8e0 and 0x1c960 read 5 times (read, power-cycle, read, power-cycle, ...):
Code:
L:0001C860 00320032 00320032 EB9151EF 15668C89
L:0001C860 00320032 00320032 EF1141EE 15668489
L:0001C860 00320032 00320032 EB115166 1D668489
L:0001C860 00320032 00320032 EF1151EE 0566CC89
L:0001C860 00320032 00320032 EB11516E 15668C89

Code:
L:0001C8E0 D06A4376 D0CC6F22 6C93D1E0 448934F7
L:0001C8E0 D06A417E D48C4F22 6C1BC1E0 448930FF
L:0001C8E0 506A457E D4C44F22 6C97D1E0 448934F7
L:0001C8E0 D062417E D1CC6F22 6C13D1E0 54C934FF
L:0001C8E0 50624176 D1C44F22 6C13D1E0 448934FF

Code:
L:0001C960 8BAA14F1 E4ED9E24 D39C76EE 4D2DB54B
L:0001C960 9BAA16F0 A4ED9E24 F39D7666 5C2DB14F
L:0001C960 9BAA14E0 A4ED8E24 D38A76EC 5D2DB54B
L:0001C960 8BAA14F0 E4ED9E24 F39C766E 4D2DB14B
L:0001C960 9BAA14F0 E4ED9E24 F39D766C 4D2DB54F

For me it looks like bad memory cells - is it Flash or DRAM?
Top
 Profile  
 
BGman
 Post subject: Re: HD103SJ dead
PostPosted: December 13th, 2019, 8:12 
Offline

Joined: September 30th, 2005, 7:33
Posts: 849
"DL" (or DW, DB ) dumps content of MCU memory which is OK.
"DI" dumps the Image of Flash content into DRAM (known as FIPS)

Could you try two more commands - "LB" and "LD".
What's the drive part number P/N ?????
Top
 Profile  
 
eNDi
 Post subject: Re: HD103SJ dead
PostPosted: December 13th, 2019, 18:21 
Offline

Joined: November 29th, 2019, 18:05
Posts: 17
Location: Germany
Drives P/N A7773-C741-A0DJZ, S/N S246J9KB426221, HDD P/N HD103SJ

'LB' gives the following line and stops responding to commands:
Code:
[DEBUG HALT @MDL_RSRC_BufferAlloc():10034A21 L0 10039669]

'LD' gives:
Code:
| LZ | PZ | HD |TYPE| StartABA | StartLBA | NumDefect|
+----+----+----+----+----------+----------+----------+
| 00 | 01 | 00 | 00 | 00000000 | 00000000 | 00000000 |
| 01 | 01 | 01 | 00 | 01870748 | 018706F3 | 00000000 |
| 02 | 01 | 02 | 00 | 030E0E90 | 030E0DE6 | 00000000 |
...
| 8D | 18 | 03 | 00 | ADCFA7DA | ADCF7909 | 00000000 |
| 8E | 18 | 04 | 00 | AE9CB9A0 | AE9C8A7A | 00000000 |
| 8F | 18 | 05 | 00 | AF69CB66 | AF699BEB | 00000000 |

Complete output of 'LD':
Attachment:
20191213153600.log [8.45 KiB]
Downloaded 312 times


Top
 Profile  
 
BGman
 Post subject: Re: HD103SJ dead
PostPosted: December 14th, 2019, 5:01 
Offline

Joined: September 30th, 2005, 7:33
Posts: 849
It looks like that the PCB is either damaged or not original (wrong maincode downloaded)....
Are you saving some information?
Top
 Profile  
 
eNDi
 Post subject: Re: HD103SJ dead
PostPosted: December 14th, 2019, 5:25 
Offline

Joined: November 29th, 2019, 18:05
Posts: 17
Location: Germany
BGman wrote:
Are you saving some information?

What do you mean by that? (the drive is not accessible over SATA, but I'd like to rescue the data from it).
Top
 Profile  
 
BGman
 Post subject: Re: HD103SJ dead
PostPosted: December 14th, 2019, 10:20 
Offline

Joined: September 30th, 2005, 7:33
Posts: 849
Did you change the PCB? Did you download a new maincode? Did you use some unknown for you terminal commands like "EU" for example?
Top
 Profile  
 
eNDi
 Post subject: Re: HD103SJ dead
PostPosted: December 14th, 2019, 11:29 
Offline

Joined: November 29th, 2019, 18:05
Posts: 17
Location: Germany
As for me: I did none of the things you mentioned - I have written down everything I know and what I've done yet here: just "harmless" things.
However, the drive was at a computer store before to rescue the data from it. As quick as I got it back with the result "it can't be recovered by us", I assume they haven't gone that far as we are now.

I really appreciate the professional help of all of you - thank you!
Top
 Profile  
 
eNDi
 Post subject: Re: HD103SJ dead
PostPosted: December 15th, 2019, 16:48 
Offline

Joined: November 29th, 2019, 18:05
Posts: 17
Location: Germany
I will make a ROM dump next week, maybe this brings new insights.
Top
 Profile  
 
eNDi
 Post subject: Re: HD103SJ dead
PostPosted: December 16th, 2019, 7:13 
Offline

Joined: November 29th, 2019, 18:05
Posts: 17
Location: Germany
BGman wrote:
It looks like that the PCB is either damaged or not original (wrong maincode downloaded)....
Are you saving some information?

On specific inquiry I just got the information, that the "computer expert" indeed made some modifications! :roll:
Tomorrow I will hopefully have the ROM dump.
Top
 Profile  
 
BGman
 Post subject: Re: HD103SJ dead
PostPosted: December 16th, 2019, 9:39 
Offline

Joined: September 30th, 2005, 7:33
Posts: 849
Say "danke" to your "computer expert"...
Top
 Profile  
 
eNDi
 Post subject: Re: HD103SJ dead
PostPosted: December 17th, 2019, 5:43 
Offline

Joined: November 29th, 2019, 18:05
Posts: 17
Location: Germany
Attached is the dump of the W25X40BL of my dead HD103SJ.
Thanks for looking at it!


Attachments:
File comment: 512kB flash dump of the dead HD103SJ.
HD103SJ_dump.zip [168.54 KiB]
Downloaded 329 times
Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  Page 3 of 4
  [ 67 posts ]  Go to page Previous  1, 2, 3, 4  Next

Main » Forums home » Conventional hard drives

All times are UTC - 5 hours [ DST ]

Who is online

Users browsing this forum: Google Adsense [Bot] and 90 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Switch to mobile style
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group