HDD GURU FORUMS
http://forum.hddguru.com/

Digital photo frame data recovery
http://forum.hddguru.com/viewtopic.php?f=10&t=30888		 Page 1 of 1
Author:  inflex [ April 7th, 2015, 1:43 ]
Post subject:  Digital photo frame data recovery
Client bought to me a digital photo frame that they plugged 12V in to, instead of 5V, subsequently a few things went "pop".

I've looked over the board and have decided it's probably best to just remove the TSOP48 flash chip and have it recovered directly, rather than trying to go down the rabbit hole of trying to repair the whole board.

Anyone out there who can provide the reading & possibly decoding service for the TSOP48 flash chip ( not sure if this one will have wear levelling block arrangements ). Actual photo extraction from the read/decoded data won't be required, that's something I can do here.

Attachments:
File comment: Entire board
pic20150407134614.jpg
pic20150407134614.jpg [ 418.64 KiB | Viewed 12003 times ]
File comment: Fried chip (USB interface/bridge possibly)
pic20150407134758.jpg
pic20150407134758.jpg [ 423.92 KiB | Viewed 12003 times ]
File comment: Flash chip
pic20150407134554.jpg
pic20150407134554.jpg [ 345.04 KiB | Viewed 12003 times ]
Author:  HaQue [ April 7th, 2015, 1:46 ]
Post subject:  Re: Digital photo frame data recovery
I can do it for you
Author:  inflex [ April 7th, 2015, 3:41 ]
Post subject:  Re: Digital photo frame data recovery
HaQue wrote:
I can do it for you


I'll send you a PM HaQue.
Author:  jeremyb [ April 7th, 2015, 23:03 ]
Post subject:  Re: Digital photo frame data recovery
I'd try finding an identical picture frame and swapping the blown IC
Author:  inflex [ April 10th, 2015, 3:41 ]
Post subject:  Re: Digital photo frame data recovery
jeremyb wrote:
I'd try finding an identical picture frame and swapping the blown IC


I had considered that; though realistically, perhaps the better option would be to swap the *flash* chip in to the brand new hardware. I removed the USB bridge chip and the system still was very dead, so there is a bunch of additional damage likely across the board ( not surprising the DC IN isn't really protected until you get to the 1117 ADJ reg in the lower-mid board areas.

For now the flash chip has been removed and sent off to be recovered (assuming it's still alive).
Author:  fzabkar [ April 10th, 2015, 5:34 ]
Post subject:  Re: Digital photo frame data recovery
What was the part number of the bridge IC?
Author:  inflex [ April 14th, 2015, 4:23 ]
Post subject:  Re: Digital photo frame data recovery
fzabkar wrote:
What was the part number of the bridge IC?


Unfortunately the meltdown zone on the bridge chip ruined the numbering.

At this point, I now have the RAW data off the NAND flash chip and I'm going through the process of reassembling it. Thus far I have partial JPEGs and hopefully in the next day or two I should get the sectors sequenced correctly and the rest will come out.

Regards,
Paul.
Author:  fzabkar [ April 14th, 2015, 4:32 ]
Post subject:  Re: Digital photo frame data recovery
I was curious because it seems odd that the device would require a USB bridge when the AM7331 SoC has its own built-in USB OTG controllers.

http://www.actions-micro.com/product.html#AM7331
Author:  inflex [ April 14th, 2015, 4:49 ]
Post subject:  Re: Digital photo frame data recovery
Agreed, it could be something completely different. Either way, the board isn't being repaired because it just isn't cost-economical to do so. I unfortunately cannot find a replacement digital photo frame as the client has long since lost the brand/ID of it.

I'm moderately close to resolving the NAND Flash organisation, especially since it's not even XOR'd, and is using a fairly standard 4K+224byte layout.
Author:  inflex [ April 23rd, 2015, 23:49 ]
Post subject:  Re: Digital photo frame data recovery
Still in the process of writing my software to reconstruct JPEG fragments ( I could rely on the NAND FLASH AUX data, but I'm curious to also see if I can do it without relying on that so as to make it universally generic.
Author:  bhaal [ April 23rd, 2015, 23:53 ]
Post subject:  Re: Digital photo frame data recovery
Hi guys,

HaQue I have one for you, this stick came from a client as faulty but they need their data off, I will attach photos as well.

The controller chip has the following details:
6983
A605119-10F
141STA1

And the NAND has:
Y9A0A111295KA
2C05361042KHD

When connecting it to a Linux USB host (I've tried multiple machines) it powers up, but will not respond to the setup address. The dmesg output is as follows:

[38120.864135] usb 3-14: new full-speed USB device number 9 using xhci_hcd
[38120.976353] usb 3-14: device descriptor read/64, error -71
[38121.080381] xhci_hcd 0000:00:14.0: Setup ERROR: setup context command for slot 8.
[38121.080384] usb 3-14: hub failed to enable device, error -22
[38121.192540] usb 3-14: new full-speed USB device number 10 using xhci_hcd
[38121.304663] usb 3-14: device descriptor read/64, error -71
[38121.408823] xhci_hcd 0000:00:14.0: Setup ERROR: setup context command for slot 9.
[38121.408828] usb 3-14: hub failed to enable device, error -22
[38121.520932] usb 3-14: new full-speed USB device number 11 using xhci_hcd
[38121.521050] usb 3-14: Device not responding to setup address.
[38121.725233] usb 3-14: Device not responding to setup address.
[38121.929386] usb 3-14: device not accepting address 11, error -71
[38122.041489] usb 3-14: new full-speed USB device number 12 using xhci_hcd
[38122.041596] usb 3-14: Device not responding to setup address.
[38122.245878] usb 3-14: Device not responding to setup address.
[38122.449963] usb 3-14: device not accepting address 12, error -71
[38122.450027] usb usb3-port14: unable to enumerate USB device

So I am assuming that the controller has put it's toes up, I am hoping the NAND hasn't attempted the same :/

Top side:
Attachment:
20150424_102042.jpg
20150424_102042.jpg [ 2.19 MiB | Viewed 11591 times ]


Bottom side:
Attachment:
20150424_102020.jpg
20150424_102020.jpg [ 2.08 MiB | Viewed 11591 times ]


HaQue, you think you might be able to help with this one?
Author:  fzabkar [ April 24th, 2015, 0:13 ]
Post subject:  Re: Digital photo frame data recovery
I have a few ideas as to how you may be able to repair the board economically. It involves patching in your own 1.2V and 3.3V supplies. Also the "4863" device is an audio amp (APA4863 or LM4863), so it can be removed.

FYI, here is a circuit diagram for a photo frame using the same AM7331 SoC:
ftp://relay.alkotel.ru/service/DPF/TF-1 ... AM7331.PDF
Page 1 of 1 All times are UTC - 5 hours [ DST ]
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
http://www.phpbb.com/