Digital photo frame data recovery

[inflex]

Client bought to me a digital photo frame that they plugged 12V in to, instead of 5V, subsequently a few things went "pop".

I've looked over the board and have decided it's probably best to just remove the TSOP48 flash chip and have it recovered directly, rather than trying to go down the rabbit hole of trying to repair the whole board.

Anyone out there who can provide the reading & possibly decoding service for the TSOP48 flash chip ( not sure if this one will have wear levelling block arrangements ). Actual photo extraction from the read/decoded data won't be required, that's something I can do here.

Attachments

Entire board

Fried chip (USB interface/bridge possibly)

Flash chip

[HaQue]

I can do it for you

[inflex]

I can do it for you

I'll send you a PM HaQue.

[jeremyb]

I'd try finding an identical picture frame and swapping the blown IC

[inflex]

I'd try finding an identical picture frame and swapping the blown IC

I had considered that; though realistically, perhaps the better option would be to swap the *flash* chip in to the brand new hardware. I removed the USB bridge chip and the system still was very dead, so there is a bunch of additional damage likely across the board ( not surprising the DC IN isn't really protected until you get to the 1117 ADJ reg in the lower-mid board areas.

For now the flash chip has been removed and sent off to be recovered (assuming it's still alive).

[fzabkar]

What was the part number of the bridge IC?

[inflex]

What was the part number of the bridge IC?

Unfortunately the meltdown zone on the bridge chip ruined the numbering.

At this point, I now have the RAW data off the NAND flash chip and I'm going through the process of reassembling it. Thus far I have partial JPEGs and hopefully in the next day or two I should get the sectors sequenced correctly and the rest will come out.

Regards,
Paul.

[fzabkar]

I was curious because it seems odd that the device would require a USB bridge when the AM7331 SoC has its own built-in USB OTG controllers.

http://www.actions-micro.com/product.html#AM7331

[inflex]

Agreed, it could be something completely different. Either way, the board isn't being repaired because it just isn't cost-economical to do so. I unfortunately cannot find a replacement digital photo frame as the client has long since lost the brand/ID of it.

I'm moderately close to resolving the NAND Flash organisation, especially since it's not even XOR'd, and is using a fairly standard 4K+224byte layout.

[inflex]

Still in the process of writing my software to reconstruct JPEG fragments ( I could rely on the NAND FLASH AUX data, but I'm curious to also see if I can do it without relying on that so as to make it universally generic.

[bhaal]

Hi guys,

HaQue I have one for you, this stick came from a client as faulty but they need their data off, I will attach photos as well.

The controller chip has the following details:
6983
A605119-10F
141STA1

And the NAND has:
Y9A0A111295KA
2C05361042KHD

When connecting it to a Linux USB host (I've tried multiple machines) it powers up, but will not respond to the setup address. The dmesg output is as follows:

[38120.864135] usb 3-14: new full-speed USB device number 9 using xhci_hcd
[38120.976353] usb 3-14: device descriptor read/64, error -71
[38121.080381] xhci_hcd 0000:00:14.0: Setup ERROR: setup context command for slot 8.
[38121.080384] usb 3-14: hub failed to enable device, error -22
[38121.192540] usb 3-14: new full-speed USB device number 10 using xhci_hcd
[38121.304663] usb 3-14: device descriptor read/64, error -71
[38121.408823] xhci_hcd 0000:00:14.0: Setup ERROR: setup context command for slot 9.
[38121.408828] usb 3-14: hub failed to enable device, error -22
[38121.520932] usb 3-14: new full-speed USB device number 11 using xhci_hcd
[38121.521050] usb 3-14: Device not responding to setup address.
[38121.725233] usb 3-14: Device not responding to setup address.
[38121.929386] usb 3-14: device not accepting address 11, error -71
[38122.041489] usb 3-14: new full-speed USB device number 12 using xhci_hcd
[38122.041596] usb 3-14: Device not responding to setup address.
[38122.245878] usb 3-14: Device not responding to setup address.
[38122.449963] usb 3-14: device not accepting address 12, error -71
[38122.450027] usb usb3-port14: unable to enumerate USB device

So I am assuming that the controller has put it's toes up, I am hoping the NAND hasn't attempted the same :/

Top side:

Bottom side:

HaQue, you think you might be able to help with this one?

[fzabkar]

I have a few ideas as to how you may be able to repair the board economically. It involves patching in your own 1.2V and 3.3V supplies. Also the "4863" device is an audio amp (APA4863 or LM4863), so it can be removed.

FYI, here is a circuit diagram for a photo frame using the same AM7331 SoC:
ftp://relay.alkotel.ru/service/DPF/TF-1 ... AM7331.PDF