All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 12 posts ] 
Author Message
 Post subject: Digital photo frame data recovery
PostPosted: April 7th, 2015, 1:43 
Offline
User avatar

Joined: May 11th, 2013, 21:08
Posts: 100
Location: Australia
Client bought to me a digital photo frame that they plugged 12V in to, instead of 5V, subsequently a few things went "pop".

I've looked over the board and have decided it's probably best to just remove the TSOP48 flash chip and have it recovered directly, rather than trying to go down the rabbit hole of trying to repair the whole board.

Anyone out there who can provide the reading & possibly decoding service for the TSOP48 flash chip ( not sure if this one will have wear levelling block arrangements ). Actual photo extraction from the read/decoded data won't be required, that's something I can do here.


Attachments:
File comment: Entire board
pic20150407134614.jpg
pic20150407134614.jpg [ 418.64 KiB | Viewed 9554 times ]
File comment: Fried chip (USB interface/bridge possibly)
pic20150407134758.jpg
pic20150407134758.jpg [ 423.92 KiB | Viewed 9554 times ]
File comment: Flash chip
pic20150407134554.jpg
pic20150407134554.jpg [ 345.04 KiB | Viewed 9554 times ]

_________________
You have a backup...right? | Tech Repairs on YouTube
Top
 Profile  
 
 Post subject: Re: Digital photo frame data recovery
PostPosted: April 7th, 2015, 1:46 
Offline
User avatar

Joined: December 4th, 2012, 1:35
Posts: 3779
Location: Adelaide, Australia
I can do it for you


Top
 Profile  
 
 Post subject: Re: Digital photo frame data recovery
PostPosted: April 7th, 2015, 3:41 
Offline
User avatar

Joined: May 11th, 2013, 21:08
Posts: 100
Location: Australia
HaQue wrote:
I can do it for you


I'll send you a PM HaQue.

_________________
You have a backup...right? | Tech Repairs on YouTube


Top
 Profile  
 
 Post subject: Re: Digital photo frame data recovery
PostPosted: April 7th, 2015, 23:03 
Offline

Joined: July 30th, 2012, 3:37
Posts: 308
Location: Fairfield, CT USA
I'd try finding an identical picture frame and swapping the blown IC

_________________
Recover My Flash Drive


Top
 Profile  
 
 Post subject: Re: Digital photo frame data recovery
PostPosted: April 10th, 2015, 3:41 
Offline
User avatar

Joined: May 11th, 2013, 21:08
Posts: 100
Location: Australia
jeremyb wrote:
I'd try finding an identical picture frame and swapping the blown IC


I had considered that; though realistically, perhaps the better option would be to swap the *flash* chip in to the brand new hardware. I removed the USB bridge chip and the system still was very dead, so there is a bunch of additional damage likely across the board ( not surprising the DC IN isn't really protected until you get to the 1117 ADJ reg in the lower-mid board areas.

For now the flash chip has been removed and sent off to be recovered (assuming it's still alive).

_________________
You have a backup...right? | Tech Repairs on YouTube


Top
 Profile  
 
 Post subject: Re: Digital photo frame data recovery
PostPosted: April 10th, 2015, 5:34 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 14945
Location: Australia
What was the part number of the bridge IC?

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Digital photo frame data recovery
PostPosted: April 14th, 2015, 4:23 
Offline
User avatar

Joined: May 11th, 2013, 21:08
Posts: 100
Location: Australia
fzabkar wrote:
What was the part number of the bridge IC?


Unfortunately the meltdown zone on the bridge chip ruined the numbering.

At this point, I now have the RAW data off the NAND flash chip and I'm going through the process of reassembling it. Thus far I have partial JPEGs and hopefully in the next day or two I should get the sectors sequenced correctly and the rest will come out.

Regards,
Paul.

_________________
You have a backup...right? | Tech Repairs on YouTube


Top
 Profile  
 
 Post subject: Re: Digital photo frame data recovery
PostPosted: April 14th, 2015, 4:32 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 14945
Location: Australia
I was curious because it seems odd that the device would require a USB bridge when the AM7331 SoC has its own built-in USB OTG controllers.

http://www.actions-micro.com/product.html#AM7331

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Digital photo frame data recovery
PostPosted: April 14th, 2015, 4:49 
Offline
User avatar

Joined: May 11th, 2013, 21:08
Posts: 100
Location: Australia
Agreed, it could be something completely different. Either way, the board isn't being repaired because it just isn't cost-economical to do so. I unfortunately cannot find a replacement digital photo frame as the client has long since lost the brand/ID of it.

I'm moderately close to resolving the NAND Flash organisation, especially since it's not even XOR'd, and is using a fairly standard 4K+224byte layout.

_________________
You have a backup...right? | Tech Repairs on YouTube


Top
 Profile  
 
 Post subject: Re: Digital photo frame data recovery
PostPosted: April 23rd, 2015, 23:49 
Offline
User avatar

Joined: May 11th, 2013, 21:08
Posts: 100
Location: Australia
Still in the process of writing my software to reconstruct JPEG fragments ( I could rely on the NAND FLASH AUX data, but I'm curious to also see if I can do it without relying on that so as to make it universally generic.

_________________
You have a backup...right? | Tech Repairs on YouTube


Top
 Profile  
 
 Post subject: Re: Digital photo frame data recovery
PostPosted: April 23rd, 2015, 23:53 
Offline

Joined: April 23rd, 2015, 22:32
Posts: 1
Location: Australia
Hi guys,

HaQue I have one for you, this stick came from a client as faulty but they need their data off, I will attach photos as well.

The controller chip has the following details:
6983
A605119-10F
141STA1

And the NAND has:
Y9A0A111295KA
2C05361042KHD

When connecting it to a Linux USB host (I've tried multiple machines) it powers up, but will not respond to the setup address. The dmesg output is as follows:

[38120.864135] usb 3-14: new full-speed USB device number 9 using xhci_hcd
[38120.976353] usb 3-14: device descriptor read/64, error -71
[38121.080381] xhci_hcd 0000:00:14.0: Setup ERROR: setup context command for slot 8.
[38121.080384] usb 3-14: hub failed to enable device, error -22
[38121.192540] usb 3-14: new full-speed USB device number 10 using xhci_hcd
[38121.304663] usb 3-14: device descriptor read/64, error -71
[38121.408823] xhci_hcd 0000:00:14.0: Setup ERROR: setup context command for slot 9.
[38121.408828] usb 3-14: hub failed to enable device, error -22
[38121.520932] usb 3-14: new full-speed USB device number 11 using xhci_hcd
[38121.521050] usb 3-14: Device not responding to setup address.
[38121.725233] usb 3-14: Device not responding to setup address.
[38121.929386] usb 3-14: device not accepting address 11, error -71
[38122.041489] usb 3-14: new full-speed USB device number 12 using xhci_hcd
[38122.041596] usb 3-14: Device not responding to setup address.
[38122.245878] usb 3-14: Device not responding to setup address.
[38122.449963] usb 3-14: device not accepting address 12, error -71
[38122.450027] usb usb3-port14: unable to enumerate USB device

So I am assuming that the controller has put it's toes up, I am hoping the NAND hasn't attempted the same :/

Top side:
Attachment:
20150424_102042.jpg
20150424_102042.jpg [ 2.19 MiB | Viewed 9142 times ]


Bottom side:
Attachment:
20150424_102020.jpg
20150424_102020.jpg [ 2.08 MiB | Viewed 9142 times ]


HaQue, you think you might be able to help with this one?


Top
 Profile  
 
 Post subject: Re: Digital photo frame data recovery
PostPosted: April 24th, 2015, 0:13 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 14945
Location: Australia
I have a few ideas as to how you may be able to repair the board economically. It involves patching in your own 1.2V and 3.3V supplies. Also the "4863" device is an audio amp (APA4863 or LM4863), so it can be removed.

FYI, here is a circuit diagram for a photo frame using the same AM7331 SoC:
ftp://relay.alkotel.ru/service/DPF/TF-1 ... AM7331.PDF

_________________
A backup a day keeps DR away.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 12 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 10 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group