Flash Extractor
Soft-Center
About     Shop     Downloads     Manual     Library     Forum     Services     Contacts
PNY MicroSD SM Based - ad 3a 18 03 - 32GB   Search  Register  Log in
This topic is locked: you cannot edit posts or make replies.
Author Message
jeremyb



Joined: 09 Dec 2008
Posts: 1876
Location: RecoverMyFlashDrive.com Bridgeport, CT, USA

PostPosted: Sun Aug 21, 2022 21:57    Post subject: PNY MicroSD SM Based - ad 3a 18 03 - 32GB
Reply with quote

Weird case, the MicroSD actually works (FAT32) but returns data with bit errors. (ie: ECC = OFF).

SM 1150_31 and SM 1150_27 layouts fit ECC but not XOR or SA.

I'm working on dump quality but need help with XOR and SA

Uploading dump...

Thanks..
arvika



Joined: 18 Nov 2009
Posts: 2453
Location: Poland

PostPosted: Tue Aug 23, 2022 2:15    Post subject:
Reply with quote

Dumps are completely wrong. 01_01 at the beginning have 3 repeat pages. Later dump is bad, too much zeroes, you can look on HEX, you should see it Smile Second dump do not have repeats, just too much zeroes.
It could be wrong RR values.
jeremyb



Joined: 09 Dec 2008
Posts: 1876
Location: RecoverMyFlashDrive.com Bridgeport, CT, USA

PostPosted: Thu Aug 25, 2022 4:43    Post subject:
Reply with quote

Uploaded dumps using the new methodology, they shouldn't have that issue anymore..

Upload Complete
jeremyb



Joined: 09 Dec 2008
Posts: 1876
Location: RecoverMyFlashDrive.com Bridgeport, CT, USA

PostPosted: Thu Aug 25, 2022 19:05    Post subject:
Reply with quote

Methodology:

Im going to call this phenomenon Page Bleed where by modifying the Read Retry registers will cause the contents of one of the WL pages to replace another. In WL mode there are lower, middle and upper pages. In my experiments if all the registers are written to, even with a value of zero, it will cause page upper to bleed into page lower causing it to have an identical read to page upper.. (ie: page lower = page upper).

This chip (ad 3a 18 03) uses Hynix v3-7 which has seven registers which control the following pages:
Page Lower : 2, 6
Page Middle: 1, 3, 5
Page Upper : 0, 4

In my opinion (I might be wrong about this) the registers are a 16bit number with most and least significant values. The MSB values appear to be 6, 5, and 4. In my case I was able to ignore the rest of the registers (2, 1, 4, 0).

To find the correct values:
1. Reconnect the reader to flush any previous settings
2. Load test retry with an initialization value of
Hynix v3-7 / -- -- -- -- -- -- 00
3. Use Tune with a Regs of 6 (Page Lower), Delta of 128, and Repeat of 1
4. Repeat for Regs 5 and 4 (not necessary in my case) modifying the position of the register in step 2 and register value in step 3.

Once done load the values, eg: Hynix v3-7 / -- -- -- -- -- -- -- fc into the initialization value and do a Test Read, the read should look good.. DONT copy the updated value into NAND reader as it was loaded the flash memory chip by the last step, just read it normally.

From experience it seems like page upper always reads perfectly with these chips with no adjustment, page lower and page middle need the adjustments but using Find Saddle or Find Base will cause page bleed to occur, so the good value from page upper will transfer to page lower making it appear that you have a good read when you dont.

In this case page middle had very little corruption, it was all in page lower. To get the best read modify the initialization value +/- 4 for each register and re-read/ecc combine.

I also read this chip at 2.2v using my own voltage adapter, it gave me a slightly better read.
arvika



Joined: 18 Nov 2009
Posts: 2453
Location: Poland

PostPosted: Fri Aug 26, 2022 2:03    Post subject:
Reply with quote

Now dumps are ok (except still bad quality at some parts).

32GB MicroSD

1 - ID: ad 3a 18 03
2 - dumps

page: 18448
block: 768p
sector: 1150_31
XOR: 2384C9, 384p, cover DA + SA
It could be sector slow assembler.


I will send XOR to Sergey on skype.




Joined: 26 Aug 2005
Posts: 19932

Flash-Extractor developer

PostPosted: Sun Oct 02, 2022 18:23    Post subject:
Reply with quote

Model added to FE_1134
Display posts from previous:   
This topic is locked: you cannot edit posts or make replies. All times are GMT + 4 Hours
Page 1 of 1

 

Last added
FC1179   45 3c 98 b3   1x1   v2 20-82-00709-A0 TLGA60 128GB   45 48 a7 93   1x1 Monolith USB_129   45 3e 98 b3   1x1 CBM2199E   ad 3a 14 03   1x2 Monolith Micro SD_64   98 3c 98 b3   1x1 IS918M   2c a4 08 32   1x1 AU6998SN   2c 84 64 54   1x1   Ref Monolith SD_45   ec 3a 94 43   1x1 FC1179   45 3c 98 b3   1x1 SM3257-AA   ec d7 98 ca   1x2
News
23.01.2023 Power adapter in stock
18.11.2022 Experiment
21.10.2022 License without support
23.09.2022 The End
11.11.2021 Legs for NR
Other products
Soft-Center ltd.