This post is a little pause in my vacuum reversing trilogy. It is half about electronics, half about digital forensics but somehow it is still 100% of my hobbies ;-)

A friend of mine had faced a harddrive failure recently and wanted her data back. So she sent me the drive instead of giving away one month of salary to an expensive data rescuing company.

Most of the time, replacing the controller board of the harddrive is enough to get your data back. Hopefully some companies like HDDzone allows you to order the exact model of the PCB you want to replace.

One week later, the PCB was in my mail box. Great.

Feeling lucky, I simply unscrewed the original PCB, replaced it by the new one and tried powering up that drive. Heard a small *click* and… nothing. The motors never started to spin, nothing happened. Damned!

In fact, there is a little flash EEPROM on the PCB that contains the drive firmware and the parameters and those on the new board were not the good ones for that drive. If one follows the online guides from HDDZone for replacing harddrive PCBs, it is said that you should swap those components before swapping the PCB. Of course I have a hot air gun for that purpose, but I am not feeling comfortable with that stuff at the moment. I still need some practice.

Moreover, with RoHS reglementation, manufacturers now use lead-free solder and that requires a higher temperature to melt. And overheating a component has some risks: you could damage the component.

Finally, it is quite hot in Paris nowadays (at least from my point of view) so I was not very motivated to get hot air at 280°C with the gun while I already have 28°C in my appartment!

So I decided to do… well, differently!

You might have already guessed it, my idea was of course to swap the content of the EEPROM instead of swaping the component. And that’s why I consider it dirty: I am going to power up the flash directly, without desoldering it and therefore without isolating the other components from the current/voltage I am going to put on the board. That may damage other surrounding components. But I am pretty comfident we are not dealing with high voltage/current and components on a computer harddrive might be protected a little bit and might be able to deal with that without consequences.

The replacement PCB uses a SOIC package so it is very easy to put grips on the pins and plug those to a GoodFET to read/write that chip. But the original one has a QFN package so I still need to solder wires to the pads before being able to interact with it.

According to the datasheet of the Windbond chip (the one on the original PCB) it is somehow protected and the SPI bus requires all the 8 pins to be wired if I want to write on it: the extra ones are for !WP (Write Protect) and !HOLD (inhibits the chip). Those two extra wires need to be connected to VCC.

Here is a picture of the PCB with all the wires soldered: