All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 75 posts ]  Go to page Previous  1, 2, 3, 4  Next
Author Message
 Post subject: Re: HD103SJ dead
PostPosted: December 1st, 2019, 14:32 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 12483
Location: Australia
BGman wrote:
If it's a real FIPS problem, command EI should fix it.

I posted this potential solution at the HDD Oracle, but received no feedback. Have you verified that it works?

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: HD103SJ dead
PostPosted: December 1st, 2019, 20:35 
Offline

Joined: November 29th, 2019, 18:05
Posts: 17
Location: Germany
BGman wrote:
command EI should fix it.

How do I use 'EI' correctly - just enter it without arguments? Should I give it a try?

BTW: I sent commands SU and SD to start and stop the motor and they worked. Got them from here: https://forum.hddguru.com/viewtopic.php?t=26366


Top
 Profile  
 
 Post subject: Re: HD103SJ dead
PostPosted: December 2nd, 2019, 3:36 
Offline

Joined: September 30th, 2005, 7:33
Posts: 761
fzabkar wrote:
Have you verified that it works?

No. I don't have such a drive.

"DI" = Dump Image
"MI" = Modify Image
"EI" = Erase Image

"DI 64" = show Heads Map
"MI 64 FF" = unlock all heads
"DI 0 4" should return ASCII of IF SP (FIPS header)
Commands are valid for some (Trinity) models....


Top
 Profile  
 
 Post subject: Re: HD103SJ dead
PostPosted: December 2nd, 2019, 15:01 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 12483
Location: Australia
@eNDi, try the "DI 0 4" command.

Then try "DI 0 400"

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: HD103SJ dead
PostPosted: December 4th, 2019, 15:23 
Offline

Joined: November 29th, 2019, 18:05
Posts: 17
Location: Germany
"DI 0 4" returns only zeros:
Code:
DI 0 4
I:00000000 0000 0000 0000 0000


"DI 0 400" returns for addresses 0x0000 to 0x03ff always 0x0000, and for addresses 0x0400 to 0x07ff the 32bit address itself following a 0x4eed 0000:
Code:
I:00000000 0000 0000 0000 0000 0000 0000 0000 0000
...
I:000003F0 0000 0000 0000 0000 0000 0000 0000 0000
I:00000400 0400 0000 4EED 0000 0408 0000 4EED 0000
...
I:000007F0 07F0 0000 4EED 0000 07F8 0000 4EED 0000


Top
 Profile  
 
 Post subject: Re: HD103SJ dead
PostPosted: December 4th, 2019, 15:34 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 12483
Location: Australia
Did you use the EI command? That would explain why the data are all zeros. Am I correct in assuming that the drive is still not working?

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: HD103SJ dead
PostPosted: December 4th, 2019, 19:51 
Offline

Joined: November 29th, 2019, 18:05
Posts: 17
Location: Germany
I didn't use EI - I didn't want to erase it before you said "go" :)
And yes, the drive is still not working.
At least I got it to spin up with 'SU'.


Top
 Profile  
 
 Post subject: Re: HD103SJ dead
PostPosted: December 5th, 2019, 11:09 
Offline

Joined: September 30th, 2005, 7:33
Posts: 761
I would try resoldering of the FLASH chip. It's easy and safe.


Top
 Profile  
 
 Post subject: Re: HD103SJ dead
PostPosted: December 9th, 2019, 16:03 
Offline

Joined: November 29th, 2019, 18:05
Posts: 17
Location: Germany
I resoldered the flash but nothing changed - flash contents are still zeroes.


Top
 Profile  
 
 Post subject: Re: HD103SJ dead
PostPosted: December 11th, 2019, 6:18 
Offline

Joined: November 29th, 2019, 18:05
Posts: 17
Location: Germany
Should I try to read the flash? Is it possible to access it in-circuit by shorting a reset-line or osc, or do I have to remove the IC from the PCB?


Top
 Profile  
 
 Post subject: Re: HD103SJ dead
PostPosted: December 11th, 2019, 6:56 
Offline

Joined: September 30th, 2005, 7:33
Posts: 761
Could you post the response of your drive to "DV" terminal command and/or the startup output.
Have you tried any sort of burnin procedure (downloading any kind of BI code) ?


Top
 Profile  
 
 Post subject: Re: HD103SJ dead
PostPosted: December 11th, 2019, 14:56 
Offline

Joined: November 29th, 2019, 18:05
Posts: 17
Location: Germany
I didn't try anything with this drive, these are very my first steps.

Startup output is:
Code:
*PA VID=0000 PN=0004 Rev=0002- 785x Found*PA VID=0000 PN=0004 Rev=0002- 785x FoundChipRev = 63B0U
S_0
[DEBUG HALT @MDL_RSRC_BufferAlloc():10034A95 L0 1003A451]

RV En Sensor Circuit
En Shock Sensor Circuit


response of "DV":
Code:
DV
[SHOS2:1AJc3suM.d26|c3su_.009u_ HPCSF:3.26.1.7.0 0MB SoC:63B0 Ch:0920]
[FLAGs:00000000 00000000][CMD:00000000][RESET:00000000][TIME:38 38]

   ID     EVENT_WAIT_FLAGS  ST PR CODEADDR STACKPTR RET_ADDR FREESTACK
Serial  : 00000000_00000000 00 00 00000376 040061A0 040061EC 000000D8<-
HostXfr : 00000800_00000000 01 01 10034A2B 04006640 04005ED8 00000038
CmdDisp : 00000000_00000020 01 01 00002398 04006A60 0000853F 00000018
RdWr    : 00000800_00000000 01 01 10034A2B 04006DC8 0001C138 000000B0
BkGrnd  : 00000800_00000000 01 01 10034A2B 04007400 00014000 00000078
Partol  : 00000000_00000000 02 01 0000858A 040075F0 A5A5A5A5 00000008
EV:00000004_00200000
[DEBUG HALT @MDL_RSRC_BufferAlloc():10034A95 L0 1003A451]


Top
 Profile  
 
 Post subject: Re: HD103SJ dead
PostPosted: December 12th, 2019, 2:14 
Offline
User avatar

Joined: May 13th, 2010, 11:17
Posts: 2634
Location: Kuwait
[SHOS2: 1AJc3suM.d26 |c3su_.009u_ HPCSF:3.26.1.7.0 0MB SoC:63B0 Ch:0920]

_________________
Kuwait Data Recovery - UNIX GTC
The only reason for time is so that everything doesn't happen at once. By: Albert Einstein


Top
 Profile  
 
 Post subject: Re: HD103SJ dead
PostPosted: December 12th, 2019, 2:57 
Offline

Joined: September 30th, 2005, 7:33
Posts: 761
I see a problem. The drive reports 0MB DRAM instead of 32MB. Maybe DRAM chip is damaged. This could explain why FIPS is all zeroes (during the startup drive copies FLASH to DRAM). The solution is to find a good PCB and to transfer the FLASH chip.


Top
 Profile  
 
 Post subject: Re: HD103SJ dead
PostPosted: December 12th, 2019, 5:45 
Offline

Joined: November 29th, 2019, 18:05
Posts: 17
Location: Germany
Ok, thank you!
On the PCB is written "3_2D", "REV.05 R00" and "BF41-00353A 00". A PCB without a working Flash would be sufficient, right?
If I can't find a suitable PCB, should I try to replace the DRAM (K4H561638N) - I have a different donor PCB with a K4H561638J.


Top
 Profile  
 
 Post subject: Re: HD103SJ dead
PostPosted: December 12th, 2019, 15:32 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 12483
Location: Australia
The "0MB" report bothered me, too. However, the MCU cannot execute code in serial flash memory. The code needs to be unpacked into RAM, and then executed from RAM. Since the "DI" command exists in ROM, and since the following strings also exist in ROM, then this would suggest that the ROM code is executing in RAM.

Quote:
*PA VID=0000 PN=0004 Rev=0002- 785x Found*PA VID=0000 PN=0004 Rev=0002- 785x FoundChipRev = 63B0U
S_0


One solution would be to desolder the ROM, dump its contents, patch the FIPS if necessary, and reinstall it. Alternatively the ROM could be dumped and reprogrammed in-circuit via an IC clip.

Try the demo version of SHTR. It may be able to dump the ROM.

http://www.hddoracle.com/viewtopic.php?f=149&t=1084

http://www.hddoracle.com/download/file.php?id=9235 (SHT/SHTR manual - EN)

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: HD103SJ dead
PostPosted: December 13th, 2019, 4:14 
Offline

Joined: September 30th, 2005, 7:33
Posts: 761
fzabkar wrote:
The "0MB" report bothered me, too. However, the MCU cannot execute code in serial flash memory. The code needs to be unpacked into RAM, and then executed from RAM. Since the "DI" command exists in ROM, and since the following strings also exist in ROM, then this would suggest that the ROM code is executing in RAM.

The MCU has its own "Mask ROM" able to do some basic functions like Read/Write to Flash, DDR, etc....
It could be able to execute some terminal commands (like DI, MI, EI, etc.) as well.


Top
 Profile  
 
 Post subject: Re: HD103SJ dead
PostPosted: December 13th, 2019, 5:47 
Offline

Joined: November 29th, 2019, 18:05
Posts: 17
Location: Germany
So I would go this way:
1. read ROM
2. if FIPS is ok: DRAM is broken - replace DRAM, or find a working PCB and put the ROM on it

With command "DL" I dumped 128kByte several times and compared the results:
between two power-cycles the contents are always the same.
After a power-cycle only some specific bits in these areas are changing:
0x1c860 - 0x1c9df
0x1cfe0 - 0x1d1ff
0x1e880 - end

For example: addresses 0x1c860, 0x1c8e0 and 0x1c960 read 5 times (read, power-cycle, read, power-cycle, ...):
Code:
L:0001C860 00320032 00320032 EB9151EF 15668C89
L:0001C860 00320032 00320032 EF1141EE 15668489
L:0001C860 00320032 00320032 EB115166 1D668489
L:0001C860 00320032 00320032 EF1151EE 0566CC89
L:0001C860 00320032 00320032 EB11516E 15668C89

Code:
L:0001C8E0 D06A4376 D0CC6F22 6C93D1E0 448934F7
L:0001C8E0 D06A417E D48C4F22 6C1BC1E0 448930FF
L:0001C8E0 506A457E D4C44F22 6C97D1E0 448934F7
L:0001C8E0 D062417E D1CC6F22 6C13D1E0 54C934FF
L:0001C8E0 50624176 D1C44F22 6C13D1E0 448934FF

Code:
L:0001C960 8BAA14F1 E4ED9E24 D39C76EE 4D2DB54B
L:0001C960 9BAA16F0 A4ED9E24 F39D7666 5C2DB14F
L:0001C960 9BAA14E0 A4ED8E24 D38A76EC 5D2DB54B
L:0001C960 8BAA14F0 E4ED9E24 F39C766E 4D2DB14B
L:0001C960 9BAA14F0 E4ED9E24 F39D766C 4D2DB54F

For me it looks like bad memory cells - is it Flash or DRAM?


Top
 Profile  
 
 Post subject: Re: HD103SJ dead
PostPosted: December 13th, 2019, 8:12 
Offline

Joined: September 30th, 2005, 7:33
Posts: 761
"DL" (or DW, DB ) dumps content of MCU memory which is OK.
"DI" dumps the Image of Flash content into DRAM (known as FIPS)

Could you try two more commands - "LB" and "LD".
What's the drive part number P/N ?????


Top
 Profile  
 
 Post subject: Re: HD103SJ dead
PostPosted: December 13th, 2019, 18:21 
Offline

Joined: November 29th, 2019, 18:05
Posts: 17
Location: Germany
Drives P/N A7773-C741-A0DJZ, S/N S246J9KB426221, HDD P/N HD103SJ

'LB' gives the following line and stops responding to commands:
Code:
[DEBUG HALT @MDL_RSRC_BufferAlloc():10034A21 L0 10039669]

'LD' gives:
Code:
| LZ | PZ | HD |TYPE| StartABA | StartLBA | NumDefect|
+----+----+----+----+----------+----------+----------+
| 00 | 01 | 00 | 00 | 00000000 | 00000000 | 00000000 |
| 01 | 01 | 01 | 00 | 01870748 | 018706F3 | 00000000 |
| 02 | 01 | 02 | 00 | 030E0E90 | 030E0DE6 | 00000000 |
...
| 8D | 18 | 03 | 00 | ADCFA7DA | ADCF7909 | 00000000 |
| 8E | 18 | 04 | 00 | AE9CB9A0 | AE9C8A7A | 00000000 |
| 8F | 18 | 05 | 00 | AF69CB66 | AF699BEB | 00000000 |

Complete output of 'LD':
Attachment:
20191213153600.log [8.45 KiB]
Downloaded 73 times


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 75 posts ]  Go to page Previous  1, 2, 3, 4  Next

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 91 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group