Page 2 of 2
Re: Recovering data from 8 pin short circuited nor rom.Possi
Posted: March 25th, 2024, 5:31
by westcoast
is this really bootloader at 0x40000 ? then what is it at 0x0 ? is it for sure NAND fw isn't stored in this chip, even a failsafe copy ?
- Code:
0x000000 ?? CORRUPT
0x030000 Identify Device OK
0x040000 BOOT (marvell bootloader) OK
0x050000 ?? table OK
0x060000 zero marker OK
0x0B0000 DSSR table OK
0x0C0000 multi DSSR table OK
0x0E0000 MSP430 fw OK
0x110000 unknown table OK
0x130000 unknown table CORRUPT
0x140000 unknown table (ascii indicate thermal) OK
0x150000 unknown table CORRUPT
0x170000 unknown OK
0x1A0000 backup of unknown at 170000 OK
0x1F0000 signature? OK
Re: Recovering data from 8 pin short circuited nor rom.Possi
Posted: March 25th, 2024, 10:46
by westcoast
wow. so the first block is probably fused, or has been overwritten with garbage during failure (or further boot attempts) and no freeze spray or similar methods would help here (maybe only chip decap)
but it looks like this is main BOOT image and the one at 40000 is a backup of it. drive might even take care of this automatically, but still nothing more simple than copying data from 40000 to 0
this leaves me with only 2 unknown tables to fix. one of them might be TCG related
Re: Recovering data from 8 pin short circuited nor rom.Possi
Posted: March 25th, 2024, 14:44
by sourcerer
It is quite usual to copy the firmware from ROM to RAM during the booting process, since RAM is usually much faster than ROM. So one of them might be RAM and the other ROM.
Re: Recovering data from 8 pin short circuited nor rom.Possi
Posted: March 25th, 2024, 14:58
by fzabkar
The size of the BOOT region is 0xAC00. The terminator is 0xDEADBEEF.
Re: Recovering data from 8 pin short circuited nor rom.Possi
Posted: March 25th, 2024, 15:21
by fzabkar
This is the header of the boot section.
- Code:
Offset(h) 00 04 08 0C 10 14 18 1C
00040000 5AFFFFFF 19090000 18090000 00010000 00000000 00000000 FFFFFFFF FFFFFF94
^^ ^^^^^^^^ ^^^^^^^^ ^^^^^^^^ ^^
| | size offset checksum of header
| |
| size including checksum byte
boot from SPI flash
The header is checksummed from byte 0 to 0x1E. The checksum byte is stored at 0x1F.
The main boot segment is located at offset 0100 and has a size of 0x918 bytes. The bytes in this range are summed and the checksum byte is place at the end of the segment.
- Code:
Offset(h) 00 04 08 0C 10 14 18 1C
00040100 18F09FE5 18F09FE5 18F09FE5 18F09FE5 18F09FE5 0000A0E1 18F09FE5 18F09FE5
........
00040A00 58080000 60080000 00080000 10080000 20080000 0004FF00 B4
^^ checksum byte
After the header there is a BOOT table. It defines several sub-segments.
- Code:
Offset(h) 00 04 08 0C
00040000 5AFFFFFF 19090000 18090000 00010000
00040010 00000000 00000000 FFFFFFFF FFFFFF94
00040020 544F4F42 00AC0000 01000000 0000F74A TOOB............
^^^^^^^^ ^^^^^^^^
size of boot segment start of table
00040030 00010000 00000000 18090000 01009228
00040040 200A0000 00200000 380C0000 0200D14F
00040050 1C0A0000 00000080 04000000 03003415
00040060 58160000 00400000 B84C0000 0400CD27
00040070 10630000 00A00000 90210000 05005B43
00040080 A0840000 00E00000 30170000 06002D84
00040090 D09B0000 00FA0100 F4000000 07004230
000400A0 C49C0000 00FE0100 64010000 0800AD17
000400B0 289E0000 38130004 50000000 09007391
000400C0 789E0000 00210004 500B0000 0A00ED27
000400D0 C8A90000 00100080 F0000000 FFFFFFFF
^^^^^^^^
last entry in table
000400E0 FFFFFFFF FFFFFFFF FFFFFFFF 00000000
000400F0 FFFFFFFF FFFFFFFF FFFFFFFF FFFFDC66
^^^^ checksum or CRC ?
The table appears to have the following structure:
- Code:
seg# CRC? offset RAM add? size
---- ---- -------- -------- --------
0000 F74A 00010000 00000000 18090000
0100 9228 200A0000 00200000 380C0000
0200 D14F 1C0A0000 00000080 04000000
0300 3415 58160000 00400000 B84C0000
0400 CD27 10630000 00A00000 90210000
0500 5B43 A0840000 00E00000 30170000
0600 2D84 D09B0000 00FA0100 F4000000
0700 4230 C49C0000 00FE0100 64010000
0800 AD17 289E0000 38130004 50000000
0900 7391 789E0000 00210004 500B0000
0A00 ED27 C8A90000 00100080 F0000000
I haven't yet been able to determine the CRC/checksum algorithm.
Re: Recovering data from 8 pin short circuited nor rom.Possi
Posted: March 25th, 2024, 15:55
by westcoast
fzabkar wrote:The header is checksummed from byte 0 to 0x1E. The checksum byte is stored at 0x1F.
The main boot segment is located at offset 0100 and has a size of 0x918 bytes. The bytes in this range are summed and the checksum byte is place at the end of the segment.
i found your post
http://www.hddoracle.com/viewtopic.php?f=59&t=1617 and was able to confirm this last night, the checksum is 8bit
then today looked closer at first block and spotted ascii string corrupted, a little comparing of size/content and it became clear it is also BOOT
do you have any dumps from similar micron/crucial models ? need to do something with other 2 tables or at least know what they're used for. maybe the bootcode can rebuild them
Re: Recovering data from 8 pin short circuited nor rom.Possi
Posted: March 25th, 2024, 16:00
by fzabkar
no dumps sry
Re: Recovering data from 8 pin short circuited nor rom.Possi
Posted: March 27th, 2024, 17:46
by fzabkar
I compared your BOOT table (version MA01) with the MU03, MU04 and MU05 firmware updates:
https://www.hddoracle.com/viewtopic.php?p=24376#p24376
Re: Recovering data from 8 pin short circuited nor rom.Possi
Posted: March 27th, 2024, 20:02
by westcoast
so, in theory i could try to force MUxx update over MA01 ? assuming BOOT code is enough to accept cli commands (bootloader is fine as the drive booted from backup after the failure when it showed as uninitalized)
then there are other things that could go wrong - corrupted blocks at 130000 looks like a table but the other one at 150000, could be some kind of executable (NAND fw? if it's that and if the fw in actual NAND is damaged too, it won't recover itself from SPI backup as the integrity check will fail - will the forced update write new fw to NAND ? or it will skip it ?)
tried to read chip again, this time with flashrom starting from 0x100000, still the same corrupted reads. it is interesting that all the FFs after the end of code in block 150000 are read properly, not garbled like in first BOOT block, but still the data from that block looks inconsistent (i think there are more differences than comparing of the two dumps reveal)
Re: Recovering data from 8 pin short circuited nor rom.Possi
Posted: March 27th, 2024, 23:25
by fzabkar
I'm not a DR pro, but ISTM that those corrupt tables are unique to each drive. If so, then I can't see a solution, unless the drive is somehow able to reconstruct the metadata. All I can see is that these tables consist of 64-byte records, and some parameter values increase monotonically. It's not very helpful, but I have no real experience in this area. Sorry.
Re: Recovering data from 8 pin short circuited nor rom.Possi
Posted: March 29th, 2024, 19:26
by westcoast
do you think it is possible to use SST25VF016B temporarily instead of M25P16 ? having clips attached to large chip would make experimenting with this much easier
Re: Recovering data from 8 pin short circuited nor rom.Possi
Posted: March 29th, 2024, 20:23
by fzabkar
The short answer is, I don't know.
That said, as a general rule I would ensure that the Vcc voltage is the same. I would also ensure that the quad/dual I/O specs are the same or better. I would also look for any special features such as an OTP region.
However, I think that the M25P16 is not particularly special.
Re: Recovering data from 8 pin short circuited nor rom.Possi
Posted: March 31st, 2024, 20:44
by westcoast
i was mainly concerned about WP pin voltage specified as high as 9V on 25P16. but now i see the actual WP pin is pulled via 4.7K to 3.3V so this voltage level is never used on this board. i'll probably give it a shot, cpu only left to solder, all the small parts are back in their place
Re: Recovering data from 8 pin short circuited nor rom.Possi
Posted: April 13th, 2024, 0:07
by westcoast
tried reading bios again, this time with 3.5V on all pins - it got that hot that the remaining flux started to smoke. previous suspicion also confirmed - there are a lot more of incorrect reads than it seems.
but, some data started to appear where there were previously zeros, and as one table has data twice (e.g. 00 26 8A FF 00 26 8A FF) in several locations i can see previously bad read now is read correctly
bad (e.g. 00 06 0A 7F 00 26 8A FF)
good (e.g. 00 26 8A FF 00 26 8A FF)
when launch hdparm, all drive info is presented but everytime there is SG_IO: bad/missing sense data
maybe it is related to these corrupted blocks in flash?
another idea, first block may be burned, and others should be good, but differences in these two tables are caused due to flash wear? the chip would probably need more current to be successfully read on worn out section, and all the extra current available is wasted in short circuit that's why raising voltage helped a bit.
this would indicate these tables are written constantly (on every boot or whatever)...
Re: Recovering data from 8 pin short circuited nor rom.Possi
Posted: April 14th, 2024, 6:27
by westcoast
on a flash chip taken off the drive now after some attempts to start it:
at 0x90000 new table appeared consisting of plain text data of some sort
at 0xF0000 DSSR tag added
at 0x120000 new table appeared (or maybe the one at 0x110000 was recovered and extended to real length) plain text in there: iskErrorHandle.c and Handle/EH_PBEH.c
content of table at 0x140000 also increased
as suspected tables at 0x130000 and 0x150000 were completely overwritten
- 25r1.zip
- (128.44 KiB) Downloaded 17 times
Re: Recovering data from 8 pin short circuited nor rom.Possi
Posted: April 15th, 2024, 17:10
by pepe
have you tried reading smaller segments at a time?
Re: Recovering data from 8 pin short circuited nor rom.Possi
Posted: April 15th, 2024, 21:02
by westcoast
tried reading second half of the chip only, but the result was similar in 0x130000 and 0x150000 blocks
i don't know if this is NAND fw corruption, or the fw is looping due to bad BIOS data and overwriting it with garbage (i'd guess it is this, based on how new table is created and filled till the rest of the block in flash)
can't entirely exclude possibility there is still some hw problem, but the newly written data to 0x150000 block looks sane (maybe only incorrect) so this would indicate CPU-DRAM is working fine. not sure about NAND, there was short on 3.3V, but after taking off CPU and BIOS 3.3 resistance went beyond 200kohms, same with new chips soldered and 1.8V resistance is around 145kohm
Re: Recovering data from 8 pin short circuited nor rom.Possi
Posted: April 19th, 2024, 2:55
by westcoast
tried to flash bootcode from MU03 fw to 0x0 and 0x40000 sections while erasing everything at 0x110000 0x130000 0x140000 0x150000 0x170000 0x1A0000
the result was: both IDENTIFYs aborted, assuming NODEV
system booted at normal speed, upon disconnecting and reconnecting drive kernel messages indicated that it was in RDY state. not sure if anything can be done at that point as no device is created in dev
then compared the dump and what it does at 0x90000 it's writing serial output log
- Code:
<CusInfo Init> FeatureMacros=08F001FA
@@@@4235394C@@@4235394C
@NAND_RAW_CAPACITY:256
@USER_CAPACITY:256
@TOTAL_USER_LBA:500118192
WP_SB_BAD_BLOCK_THRESHOLD 68, wWP_DATA_BLK_CNT_WITH_OP 965, FREE_THRESHOLD_PERIODIC 11, WP_PGC_MARGIN 4
ReserverdTable
0x0FAFC383,HeapBuf 0x0FF41E7D
erverdTable
0x0FAFC383,HeapBuf 0x0FF41E7D
InitFTLPhyAddrTable Done
X300: Establish PHY Link TIMEOUT, sending COMRESET
# Boot Loader Configuration: SCRAMBLER_ON_ROM_TABLE
Check CRC fail: 0x000F0000!
Get temp 0000001A
<EL>NOR SIZE 2048K, SECTOR SIZE 64K, PAGE SIZE 256
<EL>EL ENTRY SIZE 64
<EL>Base Sec: CRITICAL 0x12, GENERIC 0x14
<EL>Class0: ACTIVE SEG 17, ACTIVE LAST ENTRY 65535
<EL>Class1: ACTIVE SEG 20, ACTIVE LAST ENTRY 65535
<EL>Max Entry Ver 0x00000000
<EL>EL Flash INIT OK
<BIT>Total Entry Size Is Not Enough
<BIT>Load Fail
L Sec : 00000000
U Sec : 00000000
S0 Wr : 00000000
S1 Wr : 00000000
Need erase: 00000000
Need erase: 00000000
<BPC> Init
<BPC> Enable
<BPC> Force All Lun to MLC
PreTH:4 NewTH:1
SEDERR: 00000208
SEDERR: 0000010C
SEDERR: 00000301
SEDERR: 0000010C
<INIT>Meta Info
ATA read nor
Err! InitMi media read err!
Warning! InitMi Id 001 data default to 0!
Warning! InitMi Id 003 data default to 0!
Warning! InitMi Id 004 data default to 0!
Warning! InitMi Id 006 data default to 0!
DCO flag 00000000
Warning! InitMi Id 00E data default to 0!
Warning! InitMi Id 011 data default to 0!
Warning! InitMi Id 012 data default to 0!
Warning! InitMi Id 013 data default to 0!
~~~~ATA Save 00000014
Err! SaveMi Wr Protected!
Security Feature ERR!
SEDERR: 0000010C
DCO flag 00000000
init GPIO 11
# Initialize sata link... 806674 #
wRandIndex = 0
WP_SB_BAD_BLOCK_THRESHOLD = 68
LPP is enabled
Load Turbo Boot
<INIT>BbTbl
<BB>Load BbTbl
wRandIndex = 0
WP_SB_BAD_BLOCK_THRESHOLD = 68
CopyIdx:0 is bad, address: 00170000
CopyIdx:3 is bad, address: 001A0000
Get temp 0000001A
EL is forced to stop rec!
REL_ASSERT (FATAL): ../FTL/FtlCore/FtlCore_BadBlock.c, line 1053
WP-EL
EL 0x00000103 not rec!
P3: sata debug info
SATA REG:
R4A00: 0x00000050, R4A02: 0x00000150, R4AB4: 0x00000000, R4AB6: 0x0000C007
Last Rcv cmd lba:00000001, Sec:0001, Cmd:0000
Current lba:00000001, Sec:0001
Ncq cmd exe status:00000000
Buffer Block Txfer Cnt:00000000
Error lba:00000000
CHSB write ptr:01
CHSB Dump:
1C004D00: 85159EB9 1A781116 6FB8DEB9 AF928C90
1C004D10: 13FBFEA6 618AA77A 7B36BF7C 2F77D0F1
1C004D20: 80D0DEAE C6009D21 E5660A6C 97A3D858
1C004D30: C9FC2E56 2D045C94 D190A236 B21F93FF
1C004D40: 5319C00E 150028C0 DA8313CA 81F57E8F
1C004D50: 295EDB08 D81A1D43 1D5F9B73 7ACB999F
1C004D60: 3E945315 84A02FB8 7E5B40D9 35B654C8
1C004D70: 9CF73F8C 0C284590 5E70C778 AA738DCE CRSB Dump:
1C004BA0: 108C 5D98 281D 612F 2926 210F 3C62 DACE
1C004BB0: 0DD5 E8F1 3DDE 6D52 7C1C 4F5C 1176 B6DC
1C004BC0: D454 9074 460F 6796 4DE8 2A8A B4BD 5896
1C004BD0: EECB 8ACE 2A68 48C6 2115 6FDB E9F1 D4DE CXSB wr/rd ptr: 0202
CXSB ctrl status: 2800
CXSB last f/w req: 0220,0001, last h/w exe: 0220,0001
CXSB Dump:
1C004D80: 0220 0001 2076 9268 8DF6 9BEB 91F2 375C
1C004D90: C5A6 F75E 6281 BE72 BDFE 3F8F 9634 C881
1C004DA0: 36EC E7BF 7560 EA0E 2AF3 77D1 461A 7AF3
1C004DB0: 7AFA F1B9 840A 29F5 EB5C 7BB1 5A85 B3BB
1C004DC0: EA21 7207 09CA C9FD DFF2 EFFC A14C E28E
1C004DD0: 7EB7 9BB9 F04C 869C 918B D59B F687 DE7A
1C004DE0: 196F BAED 7666 DE0F C8EF 6D9B BC48 AA11
1C004DF0: 2F49 3AB2 12AA 9560 53CC 6F21 F8B1 D681 Sata status: 0123
link layer state: 0000
tx primitive: 8000
rx primitive: 0004
Cmd fifo Cnt 00000000
f/w abort state: 0084
BM REG:
HS0 Cnt: 0x00000000, HS1 Cnt: 0x00000000, HS2 Cnt: 0x00000000, HS3 Cnt:0x00000000
HS4 Cnt: 0x00000000, HS5 Cnt: 0x00000000, HS6 Cnt: 0x00000000, HS7 Cnt:0x00000000
FS0 Cnt: 0x00000000, FS1 Cnt: 0x00000000, FS2 Cnt: 0x00000000, FS3 Cnt: 0x00000000
ES0 Cnt: 0x00000000, ES1 Cnt: 0x00000000, ES3 Cnt: 0x00000000, ES3 Cnt: 0x00000000
Host txfer ptr:
1C002F88: 00A59600 00C59600 00D5B600 00F5B600
1C002F98: 0014B014 00129014 00000000 00000000 Flash txfer ptr:
1C002FA8: 00C59600 00000000 00551A00 00000000 Ext txfer ptr:
1C002FF4: 00000000 0105D600 0014D014 00000000 CRSB timer: 00000002, 000C8D69
P5: ftl debug info
<LWI>LV:00000000 LP:000001FF NP:00000000
FreeBlkCnt:0
GarBlkCnt :0
IgcMark:00 CgcMark:00
BBC:0
TrimSkipFG:00000000
Save Serial Log in Nor
Len:4452, Start:4452
Len:4474, Start:4474
NOR Space Size:131064
message CopyIdx:0 is bad indicates first thing of the missing stuff it loads is data at 0x170000
then i tried to flash same cleaned dump but with that section included
the log size increased this time
- Code:
<CusInfo Init> FeatureMacros=08F001FA
@@@@4235394C@@@4235394C
@NAND_RAW_CAPACITY:256
@USER_CAPACITY:256
@TOTAL_USER_LBA:500118192
WP_SB_BAD_BLOCK_THRESHOLD 68, wWP_DATA_BLK_CNT_WITH_OP 965, FREE_THRESHOLD_PERIODIC 11, WP_PGC_MARGIN 4
InitFTLePsheyAdddr TDable
x0FAFC383,HeapBuf 0x0FF41E7D
ddr TDable
x0FAFC383,HeapBuf 0x0FF41E7D
InitFTLPhyAddrTable Done
X300: Establish PHY Link TIMEOUT, sending COMRESET
# Boot Loader
Configuration: SCRAMBLER_ON_ROM_TABLE
Check CRC fail: 0x000F0000!
Get temp 00000012
<EL>NOR SIZE 2048K, SECTOR SIZE 64K, PAGE SIZE 256
<EL>EL ENTRY SIZE 64
<EL>Base Sec: CRITICAL 0x12, GENERIC 0x14
<EL>Class0: ACTIVE SEG 17, ACTIVE LAST ENTRY
65535
<EL>Class1: ACTIVE SEG 20, ACTIVE LAST ENTRY 65535
<EL>Max Entry Ver 0x00000000
<EL>EL Flash INIT OK
<BIT>Total Entry Size Is Not Enough
<BIT>Load Fail
L
Sec : 00000000
U Sec : 00000000
S0 Wr : 00000000
S1 Wr : 00000000
Need erase: 00000000
Need erase: 00000000
<BPC> Init
<BPC> Enable
<BPC> Force All Lun to MLC
PreTH:4
NewTH:1
SEDERR: 00000208
SEDERR: 0000010C
SEDERR: 00000301
SEDERR: 0000010C
<INIT>Meta Info
ATA read nor
Err! InitMi media read err!
Warning! InitMi Id 001 data
default to 0!
Warning! InitMi Id 003 data default to 0!
Warning! InitMi Id 004 data default to 0!
Warning! InitMi Id 006 data default to 0!
DCO flag 00000000
Warning! InitMi Id 00E data default to 0!
Warning! InitMi Id 011 data default to 0!
Warning! InitMi Id 012 data default to 0!
Warning! InitMi Id 013 data
default to 0!
~~~~ATA Save 00000014
Err! SaveMi Wr Protected!
Security Feature ERR!
SEDERR: 0000010C
DCO flag 00000000
init GPIO 11
# Initialize sata link... 794386 #
wRandIndex = 3
WP_SB_BAD_BLOCK_THRESHOLD = 68
LPP is enabled
Load Turbo Boot
<INIT>BbTbl
<BB>Load BbTbl
wRandIndex = 3
WP_SB_BAD_BLOCK_THRESHOLD = 68
CopyIdx:0 is bad, address: 001A0000
Find the last wCopyIdx:3
<INIT>VerTbl
BPC: Enable
Block BPC mode:
000: 00 00 00 01 00 00 00 00
040: 40 10 00 00 00 00 00 00
080: 01 00 08 00 00 00 00 00
0C0: 01 00 02 00 00 00 00 00
100: 80 00 00 00 00 00 80 00
140: 00 00 00 00 00 00 00 80
180: 00 00 00 00 00 00 00 00
1C0: 00 00 80 00 00 00 00 01
200: 00 00 00 00 00 00 00 00
240: 00 00 00 00 02 00 00 00
280: 00 00 00 00 02 00 00 00
2C0: 00 00 08 00 00 00 00 00
300: 00 00 00 00 10 00 00 00
340: 00 40 00 00 00 00 00 00
380: 00 00 00 00 00 00 80 00
3C0: 00 00 01 00 00 02 00 00
400: 00 00 00
Lun BPC mode:
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
Nand BPC mode:
0 0.0.0:00000102
0 1.0.0:00000102
0 2.0.0:00000102
0 3.0.0:00000102
0 4.0.0:00000102
0 5.0.0:00000102
0 6.0.0:00000102
0 7.0.0:00000102
0
0.0.1:00000102
0 1.0.1:00000102
0 2.0.1:00000102
0 3.0.1:00000102
0 4.0.1:00000102
0 5.0.1:00000102
0 6.0.1:00000102
0 7.0.1:00000102
Nand SFBL(0x10)/FA91
(0x08) mode:
0.0.0: 33/3F
1.0.0: 33/3F
2.0.0: 33/3F
3.0.0: 33/3F
4.0.0: 33/3F
5.0.0: 33/3F
6.0.0: 33/3F
7.0.0: 33/3F
0.0.1: 33/3F
1.0.1: 33/3F
2.0.1: 33/3F
3.0.1: 33/3F
4.0.1: 33/3F
5.0.1: 33/3F
6.0.1: 33/3F
7.0.1: 33/3F
BlkPgCnt: 00000100
LP:000000FF
TuCnt:00008000
P2lPC:00000010
P2lTuC:00000020
XorPC:00000080
XorTuC:00000100
<VER_ORI>Last Blk : 00000090, last version : 009EEEED
<TBINIT>3 : 717501 us
<INIT>LastBlkP2l
<P0BF,118120BF>
Scan:11512 us 10
<AT>LWI.Ptu:118120BF, Blk:00000090,
Page:000000BF, Seg:00000018, Offset:00000001
mhSegIdx:00000019, ahGoodSeg[wIdx - 1]:00000018,ahGoodSeg[wIdx]:00000019
<P2L>Scan Blk:090, Lwpl:0BF,
FPtu:118120BF
P2Lptu_EH!hP=00000000, eP=00000007
******EH...Good Luck******
BPC: Enable
Block BPC mode:
000: 00 00 00 01 00 00 00 00
040: 40 10 00 00 00 00 00 00
080: 01 00 08 00 00 00 00 00
0C0: 01 00 02 00 00 00 00 00
100: 80 00 00 00 00 00 80 00
140: 00 00 00 00 00 00 00 80
180: 00 00 00 00 00 00 00 00
1C0: 00 00 80 00 00 00 00 01
200: 00 00 00 00 00 00 00 00
240: 00 00 00 00 02 00 00 00
280: 00 00 00 00 02 00 00 00
2C0: 00 00 08 00 00 00 00 00
300: 00 00 00 00 10 00 00 00
340: 00 40 00 00 00 00 00 00
380: 00 00 00 00 00 00 80 00
3C0: 00 00 01 00 00 02 00 00
400: 00 00 00
Lun BPC mode:
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
Nand BPC mode:
0 0.0.0:00000102
0 1.0.0:00000102
0 2.0.0:00000102
0 3.0.0:00000102
0 4.0.0:00000102
0 5.0.0:00000102
0 6.0.0:00000102
0 7.0.0:00000102
0
0.0.1:00000102
0 1.0.1:00000102
0 2.0.1:00000102
0 3.0.1:00000102
0 4.0.1:00000102
0 5.0.1:00000102
0 6.0.1:00000102
0 7.0.1:00000102
Nand SFBL(0x10)/FA91
(0x08) mode:
0.0.0: 33/0A
1.0.0: 33/0A
2.0.0: 33/0A
3.0.0: 33/0A
4.0.0: 33/0A
5.0.0: 33/0A
6.0.0: 33/0A
7.0.0: 33/0A
0.0.1: 33/0A
1.0.1: 33/0A
2.0.1: 33/0A
3.0.1: 33/0A
4.0.1: 33/0A
5.0.1: 33/0A
6.0.1: 33/0A
7.0.1: 33/0A
BlkPgCnt: 00000100
LP:000000FF
TuCnt:00008000
P2lPC:00000010
P2lTuC:00000020
XorPC:00000080
XorTuC:00000100
E 0
C:2
L:FFFFFFFF,FFFFFFFF
P:01212000,11212000
ECC:FF,FF
U:30,O:0,Err:1
BlkVer:009EEEED
wBufIdx:0
Get temp 00000012
<DR>01212000
ATLVP0 ATLWP0
CH:2 CE:0 LUN:0 BLK:121 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:53
R00:88 R01:75
<30s same temp 00000012!
<Vp M0 blk121 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<QB>: Not Quick Boot this time
RDRcv:383,144,2,0,0,0,12120000
StrF:1
RainCnt:127
RAIN PTU 03712070 ErrCode 1. RLC.
Abort RAIN:Empty page.
<30s same temp 00000012!
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
<DR>TgC:0/F
<30s same temp 00000012!
<DR>FAIL
<InitTmpBB>Ptu:01212000
<RdPre>Next P:0x01312000
<DR>11212000
ATLVP0 ATLWP0
CH:2 CE:0 LUN:0 BLK:121 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:53
R00:88 R01:75
<30s same temp 00000012!
<Vp M0 blk121 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<QB>: Not Quick Boot this time
RDRcv:383,144,2,0,0,0,12120000
StrF:1
RainCnt:127
RAIN PTU 13712070 ErrCode 1. RLC.
Abort RAIN:Empty page.
<30s same temp 00000012!
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
<DR>TgC:0/F
<30s same temp 00000012!
<DR>FAIL
<InitTmpBB>Ptu:11212000
<Rd>DRPTU:01212000-Sts:00000004
<Rd>DRPTU:11212000-Sts:00000004
E 1
C:2
L:FFFFFFFF,FFFFFFFF
P:01412000,11412000
ECC:FF,FF
U:30,O:0,Err:1
BlkVer:009EEEED
wBufIdx:1
<30s same temp 00000012!
<DR>01412000
ATLVP0 ATLWP0
CH:4 CE:0 LUN:0 BLK:121 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:4B
R00:82 R01:6C
Bad Stripe!
<30s same temp 00000012!
<Vp M0 blk121 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<DR>FAIL
<InitTmpBB>Ptu:01412000
<RdPre>Next P:0x01512000
<DR>11412000
ATLVP0 ATLWP0
CH:4 CE:0 LUN:0 BLK:121 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:4B
R00:82 R01:6C
Bad Stripe!
<30s same temp 00000012!
<Vp M0 blk121 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<DR>FAIL
<InitTmpBB>Ptu:11412000
<Rd>DRPTU:01412000-Sts:00000004
<Rd>DRPTU:11412000-Sts:00000004
E 2
C:2
L:FFFFFFFF,FFFFFFFF
P:01A12000,11A12000
ECC:FF,FF
U:30,O:0,Err:1
BlkVer:009EEEED
wBufIdx:2
<30s same temp 00000012!
<DR>01A12000
ATLVP0 ATLWP0
CH:2 CE:0 LUN:0 BLK:121 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:53
R00:88 R01:75
<30s same temp 00000012!
<Vp M0 blk121 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<QB>: Not Quick Boot this time
RDRcv:383,144,2,0,0,0,1A120000
StrF:1
RainCnt:127
RAIN PTU 03F12070 ErrCode 1. RLC.
Abort RAIN:Empty page.
<30s same temp 00000012!
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
<DR>TgC:0/F
<30s same temp 00000012!
<DR>FAIL
<InitTmpBB>Ptu:01A12000
<RdPre>Next P:0x01B12000
<DR>11A12000
ATLVP0 ATLWP0
CH:2 CE:0 LUN:0 BLK:121 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:53
R00:88 R01:75
<30s same temp 00000012!
<Vp M0 blk121 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<QB>: Not Quick Boot this time
RDRcv:383,144,2,0,0,0,1A120000
StrF:1
RainCnt:127
RAIN PTU 13F12070 ErrCode 1. RLC.
Abort RAIN:Empty page.
<30s same temp 00000012!
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
<DR>TgC:0/F
<30s same temp 00000012!
<DR>FAIL
<InitTmpBB>Ptu:11A12000
<Rd>DRPTU:01A12000-Sts:00000004
<Rd>DRPTU:11A12000-Sts:00000004
E 3
C:2
L:FFFFFFFF,FFFFFFFF
P:01C12000,11C12000
ECC:FF,FF
U:30,O:0,Err:1
BlkVer:009EEEED
wBufIdx:3
<30s same temp 00000012!
<DR>01C12000
ATLVP0 ATLWP0
CH:4 CE:0 LUN:0 BLK:121 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:4B
R00:82 R01:6C
Bad Stripe!
<30s same temp 00000012!
<Vp M0 blk121 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<DR>FAIL
<InitTmpBB>Ptu:01C12000
<RdPre>Next P:0x01D12000
<DR>11C12000
ATLVP0 ATLWP0
CH:4 CE:0 LUN:0 BLK:121 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:4B
R00:82 R01:6C
Bad Stripe!
<30s same temp 00000012!
<Vp M0 blk121 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<DR>FAIL
<InitTmpBB>Ptu:11C12000
<Rd>DRPTU:01C12000-Sts:00000004
<Rd>DRPTU:11C12000-Sts:00000004
E 4
C:2
L:FFFFFFFF,FFFFFFFF
P:02012000,12012000
ECC:FF,FF
U:30,O:0,Err:1
BlkVer:009EEEED
wBufIdx:4
<30s same temp 00000012!
<DR>02012000
ATLVP0 ATLWP0
CH:0 CE:0 LUN:1 BLK:120 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:59
R00:8F R01:71
<30s same temp 00000012!
<Vp M0 blk00001120 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<QB>: Not Quick Boot this time
RDRcv:383,144,2,0,0,0,20120000
StrF:1
RainCnt:127
RAIN PTU 02712070 ErrCode 1. RLC.
Abort RAIN:Empty page.
<30s same temp 00000012!
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
<DR>TgC:0/F
<30s same temp 00000012!
<DR>FAIL
<InitTmpBB>Ptu:02012000
<RdPre>Next P:0x02112000
<RdPre>Read Error! ECODE: 1
<DR>12112000
ATLVP0 ATLWP0
CH:1 CE:0 LUN:1 BLK:120 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:74
R00:9D R01:74
<30s same temp 00000012!
<Vp M0 blk00001120 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<QB>: Not Quick Boot this time
RDRcv:383,144,2,0,0,0,21120000
StrF:1
RainCnt:127
RAIN PTU 12712070 ErrCode 1. RLC.
Abort RAIN:Empty page.
<30s same temp 00000012!
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
<DR>TgC:0/F
<30s same temp 00000012!
<DR>FAIL
<InitTmpBB>Ptu:12112000
<DR>12012000
ATLVP0 ATLWP0
CH:0 CE:0 LUN:1 BLK:120 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:59
R00:8F R01:71
Bad Stripe!
<30s same temp 00000012!
<Vp M0 blk00001120 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<DR>FAIL
<InitTmpBB>Ptu:12012000
<Rd>DRPTU:02012000-Sts:00000004
<Rd>DRPTU:12012000-Sts:00000004
E 5
C:2
L:FFFFFFFF,FFFFFFFF
P:02112000,12112000
ECC:FF,FF
U:30,O:0,Err:1
BlkVer:009EEEED
wBufIdx:5
<30s same temp 00000012!
<DR>02112000
ATLVP0 ATLWP0
CH:1 CE:0 LUN:1 BLK:120 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:74
R00:9D R01:74
Bad Stripe!
<30s same temp 00000012!
<Vp M0 blk00001120 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<DR>FAIL
<InitTmpBB>Ptu:02112000
<RdPre>Next P:0x02212000
<RdPre>Read Error! ECODE: 1
<DR>12212000
ATLVP0 ATLWP0
CH:2 CE:0 LUN:1 BLK:120 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:43
R00:7D R01:70
Bad Stripe!
<30s same temp 00000012!
<Vp M0 blk00001120 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<DR>FAIL
<InitTmpBB>Ptu:12212000
<DR>12112000
ATLVP0 ATLWP0
CH:1 CE:0 LUN:1 BLK:120 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:74
R00:9D R01:74
Bad Stripe!
<30s same temp 00000012!
<Vp M0 blk00001120 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<DR>FAIL
<InitTmpBB>Ptu:12112000
<Rd>DRPTU:02112000-Sts:00000004
<Rd>DRPTU:12112000-Sts:00000004
E 6
C:2
L:FFFFFFFF,FFFFFFFF
P:02212000,12212000
ECC:FF,FF
U:30,O:0,Err:1
BlkVer:009EEEED
wBufIdx:6
<30s same temp 00000012!
<DR>02212000
ATLVP0 ATLWP0
CH:2 CE:0 LUN:1 BLK:120 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:43
R00:7D R01:70
Bad Stripe!
<30s same temp 00000012!
<Vp M0 blk00001120 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<DR>FAIL
<InitTmpBB>Ptu:02212000
<RdPre>Next P:0x02312000
<DR>12212000
ATLVP0 ATLWP0
CH:2 CE:0 LUN:1 BLK:120 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:43
R00:7D R01:70
Bad Stripe!
<30s same temp 00000012!
<Vp M0 blk00001120 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<DR>FAIL
<InitTmpBB>Ptu:12212000
<Rd>DRPTU:02212000-Sts:00000004
<Rd>DRPTU:12212000-Sts:00000004
E 7
C:2
L:FFFFFFFF,FFFFFFFF
P:02412000,12412000
ECC:FF,FF
U:30,O:0,Err:1
BlkVer:009EEEED
wBufIdx:7
<30s same temp 00000012!
<DR>02412000
ATLVP0 ATLWP0
CH:4 CE:0 LUN:1 BLK:120 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:53
R00:8B R01:6E
Bad Stripe!
<30s same temp 00000012!
<Vp M0 blk00001120 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<DR>FAIL
<InitTmpBB>Ptu:02412000
<RdPre>Next P:0x02512000
<DR>12412000
ATLVP0 ATLWP0
CH:4 CE:0 LUN:1 BLK:120 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:53
R00:8B R01:6E
Bad Stripe!
<30s same temp 00000012!
<Vp M0 blk00001120 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<DR>FAIL
<InitTmpBB>Ptu:12412000
<Rd>DRPTU:02412000-Sts:00000004
<Rd>DRPTU:12412000-Sts:00000004
<EH>Empty
<CleanET>Ptu:01212000, AuCnt:2
<CleanET>Ptu:01412000, AuCnt:2
<CleanET>Ptu:01A12000,
AuCnt:2
<CleanET>Ptu:01C12000, AuCnt:2
<CleanET>Ptu:02012000, AuCnt:2
<CleanET>Ptu:02112000, AuCnt:2
<CleanET>Ptu:02212000, AuCnt:2
<CleanET>Ptu:02412000, AuCnt:2
<
EH>EH:278095us.
******EH...Good Bye******
******EH...Good Luck******
<StoreET>Ptu:01212000, AuCnt:2
<StoreET>Ptu:01412000, AuCnt:2
<StoreET>Ptu:01A12000, AuCnt:2
<StoreET>Ptu:01C12000, AuCnt:2
<StoreET>Ptu:02012000, AuCnt:2
<StoreET>Ptu:02112000, AuCnt:2
<StoreET>Ptu:02212000, AuCnt:2
<StoreET>Ptu:02412000, AuCnt:2
BPC:
Enable
Block BPC mode:
000: 00 00 00 01 00 00 00 00
040: 40 10 00 00 00 00 00 00
080: 01 00 08 00 00 00 00 00
0C0: 01 00 02 00 00 00 00 00
100: 80 00 00 00 00 00 80 00
140: 00 00 00 00 00 00 00 80
180: 00 00 00 00 00 00 00 00
1C0: 00 00 80 00 00 00 00 01
200: 00 00 00 00 00 00 00 00
240: 00 00 00 00 02 00 00 00
280: 00 00 00 00 02 00 00 00
2C0: 00 00 08 00 00 00 00 00
300: 00 00 00 00 10 00 00 00
340: 00 40 00 00 00 00 00 00
380: 00 00 00 00 00 00 80 00
3C0: 00 00 01 00 00 02 00 00
400: 00 00 00
Lun BPC mode:
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
Nand BPC mode:
0 0.0.0:00000102
0 1.0.0:00000102
0 2.0.0:00000102
0 3.0.0:00000102
0 4.0.0:00000102
0 5.0.0:00000102
0 6.0.0:00000102
0 7.0.0:00000102
0
0.0.1:00000102
0 1.0.1:00000102
0 2.0.1:00000102
0 3.0.1:00000102
0 4.0.1:00000102
0 5.0.1:00000102
0 6.0.1:00000102
0 7.0.1:00000102
Nand SFBL(0x10)/FA91
(0x08) mode:
0.0.0: 33/0A
1.0.0: 33/0A
2.0.0: 33/0A
3.0.0: 33/0A
4.0.0: 33/0A
5.0.0: 33/0A
6.0.0: 33/0A
7.0.0: 33/0A
0.0.1: 33/0A
1.0.1: 33/0A
2.0.1: 33/0A
3.0.1: 33/0A
4.0.1: 33/0A
5.0.1: 33/0A
6.0.1: 33/0A
7.0.1: 33/0A
BlkPgCnt: 00000100
LP:000000FF
TuCnt:00008000
P2lPC:00000010
P2lTuC:00000020
XorPC:00000080
XorTuC:00000100
E 0
C:2
L:FFFFFFFF,FFFFFFFF
P:02812000,12812000
ECC:FF,FF
U:30,O:0,Err:1
BlkVer:009EEEED
wBufIdx:0
<30s same temp 00000012!
<DR>02812000
ATLVP0 ATLWP0
CH:0 CE:0 LUN:1 BLK:120 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:59
R00:8F R01:71
<30s same temp 00000012!
<Vp M0 blk00001120 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<QB>: Not Quick Boot this time
RDRcv:383,144,2,0,0,0,28120000
StrF:1
RainCnt:127
RAIN PTU 02F12070 ErrCode 1. RLC.
Abort RAIN:Empty page.
<30s same temp 00000012!
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
<DR>TgC:0/F
<30s same temp 00000012!
<DR>FAIL
<InitTmpBB>Ptu:02812000
<RdPre>Next P:0x02912000
<RdPre>Read Error! ECODE: 1
<DR>12912000
ATLVP0 ATLWP0
CH:1 CE:0 LUN:1 BLK:120 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:74
R00:9D R01:74
<30s same temp 00000012!
<Vp M0 blk00001120 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<QB>: Not Quick Boot this time
RDRcv:383,144,2,0,0,0,29120000
StrF:1
RainCnt:127
RAIN PTU 12F12070 ErrCode 1. RLC.
Abort RAIN:Empty page.
<30s same temp 00000012!
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
<DR>TgC:0/F
<30s same temp 00000012!
<DR>FAIL
<InitTmpBB>Ptu:12912000
<DR>12812000
ATLVP0 ATLWP0
CH:0 CE:0 LUN:1 BLK:120 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:59
R00:8F R01:71
Bad Stripe!
<30s same temp 00000012!
<Vp M0 blk00001120 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<DR>FAIL
<InitTmpBB>Ptu:12812000
<Rd>DRPTU:02812000-Sts:00000004
<Rd>DRPTU:12812000-Sts:00000004
<EH>Empty
<CleanET>Ptu:01212000, AuCnt:2
<CleanET>Ptu:01412000, AuCnt:2
<CleanET>Ptu:01A12000,
AuCnt:2
<CleanET>Ptu:01C12000, AuCnt:2
<CleanET>Ptu:02012000, AuCnt:2
<CleanET>Ptu:02112000, AuCnt:2
<CleanET>Ptu:02212000, AuCnt:2
<CleanET>Ptu:02412000, AuCnt:2
<
CleanET>Ptu:02812000, AuCnt:2
<EH>EH:64264us.
******EH...Good Bye******
******EH...Good Luck******
<StoreET>Ptu:01212000, AuCnt:2
<StoreET>Ptu:01412000, AuCnt:2
<StoreET>Ptu:01A12000, AuCnt:2
<StoreET>Ptu:01C12000, AuCnt:2
<StoreET>Ptu:02012000, AuCnt:2
<StoreET>Ptu:02112000, AuCnt:2
<StoreET>Ptu:02212000, AuCnt:2
<StoreET>Ptu:02412000, AuCnt:2
<StoreET>Ptu:02812000, AuCnt:2
BPC: Enable
Block BPC mode:
000: 00 00 00 01 00 00 00 00
040: 40 10 00 00 00 00 00 00
080: 01 00 08 00 00 00 00 00
0C0: 01 00 02 00 00 00 00 00
100: 80 00 00 00 00 00 80 00
140: 00 00 00 00 00 00 00 80
180: 00 00 00 00 00 00 00 00
1C0: 00 00 80 00 00 00 00 01
200: 00 00 00 00 00 00 00 00
240: 00 00 00 00 02 00 00 00
280: 00 00 00 00 02 00 00 00
2C0: 00 00 08 00 00 00 00 00
300: 00 00 00 00 10 00 00 00
340: 00 40 00 00 00 00 00 00
380: 00 00 00 00 00 00 80 00
3C0: 00 00 01 00 00 02 00 00
400: 00 00 00
Lun BPC mode:
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
Nand BPC mode:
0 0.0.0:00000102
0 1.0.0:00000102
0 2.0.0:00000102
0 3.0.0:00000102
0 4.0.0:00000102
0 5.0.0:00000102
0 6.0.0:00000102
0 7.0.0:00000102
0
0.0.1:00000102
0 1.0.1:00000102
0 2.0.1:00000102
0 3.0.1:00000102
0 4.0.1:00000102
0 5.0.1:00000102
0 6.0.1:00000102
0 7.0.1:00000102
Nand SFBL(0x10)/FA91
(0x08) mode:
0.0.0: 33/0A
1.0.0: 33/0A
2.0.0: 33/0A
3.0.0: 33/0A
4.0.0: 33/0A
5.0.0: 33/0A
6.0.0: 33/0A
7.0.0: 33/0A
0.0.1: 33/0A
1.0.1: 33/0A
2.0.1: 33/0A
3.0.1: 33/0A
4.0.1: 33/0A
5.0.1: 33/0A
6.0.1: 33/0A
7.0.1: 33/0A
BlkPgCnt: 00000100
LP:000000FF
TuCnt:00008000
P2lPC:00000010
P2lTuC:00000020
XorPC:00000080
XorTuC:00000100
E 0
C:2
L:FFFFFFFF,FFFFFFFF
P:02912000,12912000
ECC:FF,FF
U:30,O:0,Err:1
BlkVer:009EEEED
wBufIdx:0
<30s same temp 00000012!
<DR>02912000
ATLVP0 ATLWP0
CH:1 CE:0 LUN:1 BLK:120 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:74
R00:9D R01:74
Bad Stripe!
<30s same temp 00000012!
<Vp M0 blk00001120 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<DR>FAIL
<InitTmpBB>Ptu:02912000
<RdPre>Next P:0x02A12000
<RdPre>Read Error! ECODE: 1
<DR>12A12000
ATLVP0 ATLWP0
CH:2 CE:0 LUN:1 BLK:120 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:43
R00:7D R01:70
Bad Stripe!
<30s same temp 00000012!
<Vp M0 blk00001120 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<DR>FAIL
<InitTmpBB>Ptu:12A12000
<DR>12912000
ATLVP0 ATLWP0
CH:1 CE:0 LUN:1 BLK:120 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:74
R00:9D R01:74
Bad Stripe!
<30s same temp 00000012!
<Vp M0 blk00001120 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<DR>FAIL
<InitTmpBB>Ptu:12912000
<Rd>DRPTU:02912000-Sts:00000004
<Rd>DRPTU:12912000-Sts:00000004
<EH>Empty
<CleanET>Ptu:01212000, AuCnt:2
<CleanET>Ptu:01412000, AuCnt:2
<CleanET>Ptu:01A12000,
AuCnt:2
<CleanET>Ptu:01C12000, AuCnt:2
<CleanET>Ptu:02012000, AuCnt:2
<CleanET>Ptu:02112000, AuCnt:2
<CleanET>Ptu:02212000, AuCnt:2
<CleanET>Ptu:02412000, AuCnt:2
<
CleanET>Ptu:02812000, AuCnt:2
<CleanET>Ptu:02912000, AuCnt:2
<EH>EH:40734us.
******EH...Good Bye******
******EH...Good Luck******
<StoreET>Ptu:01212000, AuCnt:2
<StoreET>Ptu:01412000, AuCnt:2
<StoreET>Ptu:01A12000, AuCnt:2
<StoreET>Ptu:01C12000, AuCnt:2
<StoreET>Ptu:02012000, AuCnt:2
<StoreET>Ptu:02112000, AuCnt:2
<StoreET>Ptu:02212000, AuCnt:2
<StoreET>Ptu:02412000, AuCnt:2
<StoreET>Ptu:02812000, AuCnt:2
<StoreET>Ptu:02912000, AuCnt:2
BPC: Enable
Block BPC mode:
000: 00 00 00 01 00 00 00 00
040: 40 10 00 00 00 00 00 00
080: 01 00 08 00 00 00 00 00
0C0: 01 00 02 00 00 00 00 00
100: 80 00 00 00 00 00 80 00
140: 00 00 00 00 00 00 00 80
180: 00 00 00 00 00 00 00 00
1C0: 00 00 80 00 00 00 00 01
200: 00 00 00 00 00 00 00 00
240: 00 00 00 00 02 00 00 00
280: 00 00 00 00 02 00 00 00
2C0: 00 00 08 00 00 00 00 00
300: 00 00 00 00 10 00 00 00
340: 00 40 00 00 00 00 00 00
380: 00 00 00 00 00 00 80 00
3C0: 00 00 01 00 00 02 00 00
400: 00 00 00
Lun BPC mode:
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
Nand BPC mode:
0 0.0.0:00000102
0 1.0.0:00000102
0 2.0.0:00000102
0 3.0.0:00000102
0 4.0.0:00000102
0 5.0.0:00000102
0 6.0.0:00000102
0 7.0.0:00000102
0
0.0.1:00000102
0 1.0.1:00000102
0 2.0.1:00000102
0 3.0.1:00000102
0 4.0.1:00000102
0 5.0.1:00000102
0 6.0.1:00000102
0 7.0.1:00000102
Nand SFBL(0x10)/FA91
(0x08) mode:
0.0.0: 33/0A
1.0.0: 33/0A
2.0.0: 33/0A
3.0.0: 33/0A
4.0.0: 33/0A
5.0.0: 33/0A
6.0.0: 33/0A
7.0.0: 33/0A
0.0.1: 33/0A
1.0.1: 33/0A
2.0.1: 33/0A
3.0.1: 33/0A
4.0.1: 33/0A
5.0.1: 33/0A
6.0.1: 33/0A
7.0.1: 33/0A
BlkPgCnt: 00000100
LP:000000FF
TuCnt:00008000
P2lPC:00000010
P2lTuC:00000020
XorPC:00000080
XorTuC:00000100
E 0
C:2
L:FFFFFFFF,FFFFFFFF
P:02A12000,12A12000
ECC:FF,FF
U:30,O:0,Err:1
BlkVer:009EEEED
wBufIdx:0
<30s same temp 00000012!
<DR>02A12000
ATLVP0 ATLWP0
CH:2 CE:0 LUN:1 BLK:120 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:43
R00:7D R01:70
Bad Stripe!
<30s same temp 00000012!
<Vp M0 blk00001120 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<DR>FAIL
<InitTmpBB>Ptu:02A12000
<RdPre>Next P:0x02B12000
<DR>12A12000
ATLVP0 ATLWP0
CH:2 CE:0 LUN:1 BLK:120 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:43
R00:7D R01:70
Bad Stripe!
<30s same temp 00000012!
<Vp M0 blk00001120 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<DR>FAIL
<InitTmpBB>Ptu:12A12000
<Rd>DRPTU:02A12000-Sts:00000004
<Rd>DRPTU:12A12000-Sts:00000004
<EH>Empty
<CleanET>Ptu:01212000, AuCnt:2
<CleanET>Ptu:01412000, AuCnt:2
<CleanET>Ptu:01A12000,
AuCnt:2
<CleanET>Ptu:01C12000, AuCnt:2
<CleanET>Ptu:02012000, AuCnt:2
<CleanET>Ptu:02112000, AuCnt:2
<CleanET>Ptu:02212000, AuCnt:2
<CleanET>Ptu:02412000, AuCnt:2
<
CleanET>Ptu:02812000, AuCnt:2
<CleanET>Ptu:02912000, AuCnt:2
<CleanET>Ptu:02A12000, AuCnt:2
<EH>EH:30412us.
******EH...Good Bye******
******EH...Good Luck******
<StoreET>Ptu:01212000, AuCnt:2
<StoreET>Ptu:01412000, AuCnt:2
<StoreET>Ptu:01A12000, AuCnt:2
<StoreET>Ptu:01C12000, AuCnt:2
<StoreET>Ptu:02012000, AuCnt:2
<StoreET>Ptu:02112000, AuCnt:2
<StoreET>Ptu:02212000, AuCnt:2
<StoreET>Ptu:02412000, AuCnt:2
<StoreET>Ptu:02812000, AuCnt:2
<StoreET>Ptu:02912000, AuCnt:2
<StoreET>Ptu:02A12000, AuCnt:2
BPC: Enable
Block BPC mode:
000: 00 00 00 01 00 00 00 00
040: 40 10 00 00 00 00 00 00
080: 01 00 08 00 00 00 00 00
0C0: 01 00 02 00 00 00 00 00
100: 80 00 00 00 00 00 80 00
140: 00 00 00 00 00 00 00 80
180: 00 00 00 00 00 00 00 00
1C0: 00 00 80 00 00 00 00 01
200: 00 00 00 00 00 00 00 00
240: 00 00 00 00 02 00 00 00
280: 00 00 00 00 02 00 00 00
2C0: 00 00 08 00 00 00 00 00
300: 00 00 00 00 10 00 00 00
340: 00 40 00 00 00 00 00 00
380: 00 00 00 00 00 00 80 00
3C0: 00 00 01 00 00 02 00 00
400: 00 00 00
Lun BPC mode:
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
Nand BPC mode:
0 0.0.0:00000102
0 1.0.0:00000102
0 2.0.0:00000102
0 3.0.0:00000102
0 4.0.0:00000102
0 5.0.0:00000102
0 6.0.0:00000102
0 7.0.0:00000102
0
0.0.1:00000102
0 1.0.1:00000102
0 2.0.1:00000102
0 3.0.1:00000102
0 4.0.1:00000102
0 5.0.1:00000102
0 6.0.1:00000102
0 7.0.1:00000102
Nand SFBL(0x10)/FA91
(0x08) mode:
0.0.0: 33/0A
1.0.0: 33/0A
2.0.0: 33/0A
3.0.0: 33/0A
4.0.0: 33/0A
5.0.0: 33/0A
6.0.0: 33/0A
7.0.0: 33/0A
0.0.1: 33/0A
1.0.1: 33/0A
2.0.1: 33/0A
3.0.1: 33/0A
4.0.1: 33/0A
5.0.1: 33/0A
6.0.1: 33/0A
7.0.1: 33/0A
BlkPgCnt: 00000100
LP:000000FF
TuCnt:00008000
P2lPC:00000010
P2lTuC:00000020
XorPC:00000080
XorTuC:00000100
E 0
C:2
L:FFFFFFFF,FFFFFFFF
P:02C12000,12C12000
ECC:FF,FF
U:30,O:0,Err:1
BlkVer:009EEEED
wBufIdx:0
<30s same temp 00000012!
<DR>02C12000
ATLVP0 ATLWP0
CH:4 CE:0 LUN:1 BLK:120 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:53
R00:8B R01:6E
Bad Stripe!
<30s same temp 00000012!
<Vp M0 blk00001120 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<DR>FAIL
<InitTmpBB>Ptu:02C12000
<RdPre>Next P:0x02D12000
<DR>12C12000
ATLVP0 ATLWP0
CH:4 CE:0 LUN:1 BLK:120 PAGE:000
IsSLC:0 Edg:1 Odd:1 Lo:0 Lvp:0 LpO:0 PG:0 EG:0 RG:0
Warning: Empty page!
Former nand trim: R10:53
R00:8B R01:6E
Bad Stripe!
<30s same temp 00000012!
<Vp M0 blk00001120 page000>
<30s same temp 00000012!
Tg:0/F Vp:0/F
FD:1 BB:1
<DR>FAIL
<InitTmpBB>Ptu:12C12000
<Rd>DRPTU:02C12000-Sts:00000004
<Rd>DRPTU:12C12000-Sts:00000004
<EH>Empty
<CleanET>Ptu:01212000, AuCnt:2
<CleanET>Ptu:01412000, AuCnt:2
<CleanET>Ptu:01A12000,
AuCnt:2
<CleanET>Ptu:01C12000, AuCnt:2
<CleanET>Ptu:02012000, AuCnt:2
<CleanET>Ptu:02112000, AuCnt:2
<CleanET>Ptu:02212000, AuCnt:2
<CleanET>Ptu:02412000, AuCnt:2
<
CleanET>Ptu:02812000, AuCnt:2
<CleanET>Ptu:02912000, AuCnt:2
<CleanET>Ptu:02A12000, AuCnt:2
<CleanET>Ptu:02C12000, AuCnt:2
<EH>EH:30689us.
******EH...Good
Bye******
Err!Ptu:13F12000, Ltu:074AF2AF, LastLtu:03BD0705, DummyLtu:03BC1750
<30s same temp 00000012!
DBG_ASSERT: ../Operation/FlsOp_P2LOp.c, line 1227
Save Serial Log in Nor
Len:28149, Start:28149
Len:28173, Start:28173
NOR Space Size:131064
the idea was to see why bootcode adds data to all these sections. now after single boot attempt at least to the section at 0x170000 nothing new has been added
the sections at 0x110000 and 0x130000 seems to be filled with garbage, and it appears there is no special section at 0x120000, it is just space for the content at 0x110000
this time few messages "failed to IDENTIFY (I/O error, err_mask=0x4)"
no idea if the bootcode MU03 is actually compatible with the rest of the data in flash chip. i'll try restoring few more tables back to see how it behaves
Re: Recovering data from 8 pin short circuited nor rom.Possi
Posted: April 21st, 2024, 13:48
by westcoast
trying to boot MU03 loader with erased tables wasn't the best idea it appears. after restoring the dump into nor chip i initially flashed, the drive would no longer get recognized with the same messages as above "failed to IDENTIFY (I/O error, err_mask=0x4)"
took off the chip to read what's in there. i go immediately to 0x170000 section and see that it hasn't been expanded like first time when booted. maybe the software marked this action as performed and skips it now? or it was fooled further and doesn't know about checking it
then i restored the dump i took before experimenting with MU03 loader, drive still not detected, but there is progress - model and FW version are identified by kernel, it still complain about identify data though. at least this cleared doubts about possible hw failure
- Code:
[ 2.235704] ata2.00: failed to IDENTIFY (I/O error, err_mask=0x100)
[ 6.037534] ata2: SATA link up 3.0 Gbps (SStatus 123 SControl 300)
[ 6.404020] ata2.00: failed to IDENTIFY (I/O error, err_mask=0x100)
[ 6.404023] ata2: limiting SATA link speed to 1.5 Gbps
[ 11.541553] ata2: SATA link up 1.5 Gbps (SStatus 113 SControl 310)
[ 13.168175] random: fast init done
[ 13.168188] ata2.00: failed to enable AA (error_mask=0x1)
[ 14.117259] ata2.00: READ LOG DMA EXT failed, trying unqueued
[ 16.163814] ata2.00: failed to get Log Directory Emask 0x1
[ 16.163816] ata2.00: ATA-10: Micron_M600_MTFDDAV256MBF, MA01, max UDMA/133
[ 16.163817] ata2.00: 500118192 sectors, multi 16: LBA48 NCQ (depth 31/32)
[ 16.778558] ata2.00: failed to get Identify Device Data, Emask 0x1
[ 17.436920] ata2.00: failed to IDENTIFY (I/O error, err_mask=0x40)
[ 17.436921] ata2.00: revalidation failed (errno=-5)
[ 17.436956] ata2.00: disabled
[ 17.436968] ata2: exception Emask 0x52 SAct 0x0 SErr 0x280d00 action 0x6 frozen t4
[ 17.437018] ata2: irq_stat 0x08000000, interface fatal error
[ 17.437054] ata2: SError: { UnrecovData Proto HostInt 10B8B BadCRC }
[ 17.437090] ata2: hard resetting link
[ 17.749577] ata2: SATA link up 1.5 Gbps (SStatus 113 SControl 310)
[ 17.749584] ata2: EH complete
took the dump from 2.5" drive and compared it
MA01
- Code:
0x000000 0x10000 bootloader OK
0x010000 0x10000 MFIN1/MFN21 offset 128 ERASED?
0x030000 0x10000 Identify Device OK
0x040000 0x10000 bootloader backup OK
0x050000 0x10000 unknown1 OK
0x060000 zero tag OK
0x090000 0x20000 empty, serial log on failed boot OK
0x0B0000 0x10000 DSSR table OK
0x0C0000 0x10000 multi DSSR table OK
0x0E0000 0x10000 MSP430 fw OK
0x0F0000 0x10000 DSSR tag (unused backup?) OK
0x110000 0x20000 unknown2 INCOMPLETE?
0x130000 0x10000 unknown3 CORRUPT
0x140000 0x10000 unknown4 CORRUPT offset f40
0x150000 0x10000 unknown5 CORRUPT
0x170000 BbTbl INCOMPLETE?
0x1A0000 BbTbl backup INCOMPLETE?
0x1F0000 0x10000 signature? OK
HP 2.5"
- Code:
0x000000 0x10000 bootloader
0x010000 0x10000 MFIN1/MFN21 offset 128
0x030000 0x10000 Identify Device
0x040000 0x10000 bootloader backup
0x050000 0x10000 unknown1
0x060000 zero tag
0x090000 0x20000 empty, possibly same as on MA01
0x0B0000 0x10000 DSSR tag (unused backup?)
0x0D0000 0x10000 multi DSSR table
0x0E0000 0x10000 MSP430 fw
0x0F0000 0x10000 DSSR table
0x100000 0x10000 unknown6
0x110000 0x20000 unknown2
0x130000 0x10000 unknown3
0x140000 0x20000 unknown4
0x160000 0x10000 unknown5
0x170000 BbTbl
0x1A0000 BbTbl backup
0x1F0000 0x10000 signature?
at 10128 there is this small sector that is zeroed out on m2 drive unlike 2.5" drive where it is filled out. not sure what it's purpose is and would it make sense to copy data from 2.5" dump to this section
MSP430 fw are byte-to-byte identical between the two drives
on 2.5" drive there is table at 0x100000 with zeros mostly and small percentage of random numbers through the table.
also, 2.5" drive has a lot more content in multi DSSR table and unknown4 table. maybe it is depending on drive size and unknown4 is here 0x20000 in size to accomodate for 1TB drives (guess based on fact that in 512GB version data size of this table are beyond 8000)
unknown4 on m2 dump was corrupted as well. thermal strings clearly do not belong there
still unsure what is with m2 table at 0x110000, it would appear as if the content at 120000 has been erased which is part of this table
same goes for BBTBL and it's backup. at first it looked like the dump was good, but then it got expanded during boot, and drive wasn't detected anymore when tried to boot with original dump. on 2.5" drive this table is also larger
Re: Recovering data from 8 pin short circuited nor rom.Possi
Posted: April 22nd, 2024, 10:17
by westcoast
except for corrupted bytes in unknown5 table, there is a lot of missing data too, e.g. 00 00 00 00... looking at this table from working drive there are no zeros
maybe i try to read broken chip at 3.9V but need to work out cooling, drown it in IPA and put everything in freezer probably..
after few restarts last night DRDY/ABRT messages are back, no SN/WWN drive size displayed in disk utility on old laptop
first time after repair these infos weren't displayed as well, then i tried to start the drive on another laptop with SATA3, don't remember exactly how and when, but disk utility on old laptop started to show these info
this time it doesn't even start of SATA3 laptop (softreset failed, 1st FIS failed) but if i plug it into USB-SATA reader kernel detects 256GB device...
edit: i did not try native m2 port, but used m2 to 2.5" adapter this time. no idea if that matters
also BbTbl appears to be bad block table