dpf-ax: unsupported dpf - requests

Good Question.
First thing that comes to mind is the SDK. Hacking the AX206 was only possible (at least for me) because the SDK was availabel on the net.
The SDK the AX208 dpfs are based on is not in the public.

superelchi

superelchi Wrote:
-------------------------------------------------------
> Good Question.
> First thing that comes to mind is the SDK. Hacking
> the AX206 was only possible (at least for me)
> because the SDK was availabel on the net.
> The SDK the AX208 dpfs are based on is not in the
> public.
>
> superelchi


Hello. I don't speak English, and sorry for mistakes.
On this link I found something like SDK for ax208
http://www.appotech.com/dp/platform/digital-photo-frame
Can you check this?

Hi Tohin,

that's the page I meant in my previous post.
There is the SDK, schemetics and docs for the AX206.

For AX208 there is only a flyer...

superelchi

superelchi Wrote:
-------------------------------------------------------
> Hi Tohin,
>
> that's the page I meant in my previous post.
> There is the SDK, schemetics and docs for the
> AX206.
>
> For AX208 there is only a flyer...
>
> superelchi


Thanks for answer!. Sorry for wasting your time. But, do you ask appotech's support for kit? Sorry for my English

Hi Tohin,

I don't think Appotech will be very helpful - after all we would like to get access to the SDK to HACK the device!
Normally such an SDK is only given to paying customers. And they have to sign a NDA (non-disclosure agreement).
But if you dare to ask - you are welcome. ;)

superelchi

Hi,

i have a DPF from Weltbild:

Running on windows - unable to detect flash size
Reading 100000 bytes from flash...
Flash written to file 'fulldump_win_20150527-211631.bin'.

Looking for firmware.............: Found (coby, 128x128 px).
Looking for Openwin..............: Found.
Looking for LcdIniTbl............: Found.
Looking for backlight & contrast.: Found, Found.
Looking for known signatures.....: Found.

Your dpf is compatible with model ['eachdesk_tumbler'].

Flash with SPI Programmer on Windows with fw_disp_eachdesk_tumbler.bin fails!

FLASH info is Cmd-9f: ID: 0xc84015c8
FLASH info is Cmd-ab: ID: ox14141414
FLASH info is Cmd-90: ID: 0xc814c814 
Can't find flash info, please add its info to flash library according to the flash ID

Can you give me a correct FlashLib.ini?

PS: Orginal flash dump attached.

Thanks
Chris



Edited 2 time(s). Last edit at 05/31/2015 04:13PM by cni.

Hi Chris,

please try attached FlashLib.ini.

superelchi

Hi superelchi,

another day - another display...;-)

This time it is an August DP150A. The firmware made for a display with the same name does not work...;-(

Could you please have a look at the attached one.

Again I bought it at a....n.com

Regards and thx in advance

newmats



Edited 1 time(s). Last edit at 05/29/2015 04:49AM by newmats.

Hi newmats,

work already done. But not in the svn...

$ ./identify.py fulldump_20150528-165047.bin 
Looking for firmware.............: Found (buildwin, 128x128 px).
Looking for Openwin..............: Found.
Looking for LcdIniTbl............: Found.
Looking for backlight & contrast.: Found, Found.
Looking for known signatures.....: Found.

Your dpf is compatible with model ['august_dp150l'].

Please used attached fw.

superelchi

Hi superelchi,

works like a charm!

Thx so much

newmats

superelchi Wrote:
-------------------------------------------------------
> Hi Chris,
>
> please try attached FlashLib.ini.
>
> superelchi

Hi superelchi,

works, thanks!

Chris

I have a new one, apparently. It's a Vivitar DPF14, MID#0020711,

using the latest svn checkout of dpf-ax-code (revision 52), compiled under linux mint 13 (derived from ubuntu 12.04), sdcc 2.9.0, intelhex-1.5:

% python identify.py /dev/sr1
Detecting & reading dpf flash...
Opening generic SCSI device '/dev/sr1'
Manufacturer: Apple
Size        : 1 MB
Reading 100000 bytes from flash...
Flash written to file 'fulldump_20150703-112226.bin'.

Looking for firmware.............: Found (buildwin, 128x128 px).
Looking for Openwin..............: Found.
Looking for LcdIniTbl............: None.
Looking for backlight & contrast.: Found, None.
Looking for known signatures.....: None.

Sorry, no matching dpf found.

But the following models have partial signature matches: august_dp150a clas_ohlson kgmedia_m16 tao_80013 
One of these firmwares MAY work for your dpf.

And then, attempting to flash back even its own firmware:

% ./hiddetach 
Detaching dpf at 2-2:1.0... done.

% python restore.py fulldump_20150703-112226.bin -f
Found AX206 DPF (bootloader)
Manufacturer: Apple
Size        : 1 MB
Erase full flash...
Reading USB: Resource temporarily unavailable
Traceback (most recent call last):
  File "restore.py", line 38, in <module>
    flash_restore(d, data)
  File "restore.py", line 14, in flash_restore
    d.eraseFlash() # erase full flash
SystemError: 145:(ffffff92): Unknown error

So, switching to windows and SPI Programmer:

SPI Programmer 2009-1-5.a

Please wait for checking Flash ID
FLASH info is Cmd-9f: 0xc84014c8
FLASH info is Cmd-ab: 0x13131313
FLASH info is Cmd-90: 0xc813c813

Can't find the flash info, please add its info to the flash library according to the flash ID

Many thanks for any assistance you can provide!

--Eric

Hi Eric,

please try attached fw.
Don't know why restore.py did not work. Maybe not root?
Anyway: you can use the FlashLib.ini from a couple of post above for Windows.

superelchi

Hello! I am new to DPF hacking, and I am struggling to succesfully hack my first device. I have tried all sorts of different ways and I have been unsuccessful every time. The only things i have been able to do successfully is dump the firmware with a program called ax20xdump.exe and use a python script to identify the file to get this input:

Looking for firmware.............: Found (buildwin, 320x240 px).
Looking for Openwin..............: Found.
Looking for LcdIniTbl............: Found.
Looking for backlight & contrast.: Found, None.
Looking for known signatures.....: None.

Sorry, no matching dpf found.

But the following models have partial signature matches: dx104838 dx104838_3
One of these firmwares MAY work for your dpf.

Included with this post is my .bin file. Here is the link to the device that the screen is coming from.

http://www.amazon.com/National-Geographic-Digital-Photo-Thermometer/dp/B007U6C5FA

Its frustrating that I have not been able to figure this out as I have spent 8 hours solid working on this. Between reading, downloading, installing, Linux, Windows, etc. LOL! I really would appreciate a gentle but solid nudge in the right direction.

I have tried using the flashing tool SPI Programmer 2009-1-5.a and I always get the output:

Please wait for checking Flash ID
FLASH info is Cmd-9f : ID:0xef301600
FLASH info is Cmd-90 : ID:0xefffefff
Can't find the flash info, please add its info to flash library according to the flash ID

I get this even when I try to flash my dump file back into the device.

ANY help would CERTAINLY be appreciated. I want to use this LCD with my Raspberry Pi 2.

Thanks!
Choyce

Wow! A (new) 240x320 ax206!
Haven't seen one for quite a while. :)

I know gettin started is hard - but you are almost there.
Looks like your flash chip is not supported by ProgSPI.exe. Please try the FlashLib.ini from here. Should work.

Can you upload your original fw? I will have a look....

superelchi

Thanks for the QUICK response! Man I am so stoked that you responded right away! I have to go do some things (work) lol, but when I get back to the office, I will give it a shot!

Quick question though, what firmware do i choose out of that HUGE list?

Thanks again,
Choyce



Edited 1 time(s). Last edit at 08/06/2015 12:08PM by KritixChoyce.

Ok, I couldn't wait that long. I tried it and it worked!!!

KritixChoyce Wrote:
-------------------------------------------------------
> Ok, I couldn't wait that long. I tried it and it
> worked!!!

You are welcome. :)
Can you tell me what worked? Reflashing the original fw or one from dpf-ax?

superelchi

HEY! Sorry so much for the late response. I had a bit of trouble with a security system I was working on and it took MUCH longer than I anticipated.

So in response to your question! Below is the firmware file that I chose that worked:

fw_dx104838_3.bin

The first one I tried was fw_dx104838.bin and i could tell that it was modified because I could see the eyes on the screen but they were really dark because the back light was not lit up. Once I tried _3, it appeared to work as it should.

I haven't had any time to play with it today and probably won't until this afternoon.

Just out of curiosity, what other projects do you work on? Do you do anything with the Raspberry Pi? If you want we can continue this conversation in a private message.

Also, what program are you using to examine the dump file i gave you?

Thanks again,
Choyce

Hi superelchi ,

I've got a buildwin 1,5" 128x128px dpf which seems not supported :


Running on windows - unable to detect flash size
Reading 100000 bytes from flash...
Flash written to file 'fulldump_win_20150903-000212.bin'.

Looking for firmware.............: Not found.

This in no known firmware!

Sorry, no matching dpf found.




The manufacturer of this dpf is buildwin, but the flash type looks like Pm25LV040(I find from StartInfoUnicode.ini)

I have tried to run identify.py under debian, but I have got a error:no module named dpf.

Can you help me?thanks a lot!

(the size of fulldump_win_20150903-000212.bin is 1024KB, I can't attach to this message, so I upload StartInfoUnicode.ini file to you for analyze)

Hi waylon,

as identify.py said: "This in no known firmware!".

Your dpf is not an AX206 or it's firmware is not based on the Buildwin SDK for this chip.
And dpf-ax only works with AX206 chips based on the Buildwin SDK.
Sorry, nothing I can do.

But if you can upload the firmware somewhere I will have a look. Just to be sure...

superelchi

Hi superelchi,

Thank you for your quickly response! I have uploaded firmware to http://pan.baidu.com/s/1o6HzKLk ,please check!

waylon

Hi waylon,

good news. I'm getting:

$ ./identify.py fulldump_win_20150903-000212.bin 
Looking for firmware.............: Found (buildwin, 128x128 px).
Looking for Openwin..............: Found.
Looking for LcdIniTbl............: Found.
Looking for backlight & contrast.: Found, Found.
Looking for known signatures.....: Found.

Your dpf is compatible with model ['dx27893'].

So: this dump is compatible with dx27893. You can use the custom firmware fw_dx27893.bin.

superelchi

Hi Superelchi Sir,

I have purchased New 2.4" DPF from below link.

http://www.aliexpress.com/item/2015-Rushed-Alarm-Clock-Video-Playback-2-4-Inch-Multifunctional-LCD-Digital-Photo-Picture-Frame-Album/32417530293.html

This is Brand New 2.4" Digital Photo Frame based on AX206 chip.

I confirmed this by opening the device and checked. IN PCB its printed as U4 AX206

I am able to get the full dump of this device. But not able to find compatible AX206 with is not supported.

I am not able to enter in to Boot mode. I tried menu+ reset mode and also long press menu button. I removed the battery and tried menu+reset but still without success.

Computer is not detecting the Boot mode. I tried in 3 Computers with different USB cables without success.
I am able to upload some of the pics to this device and it get recognized without any issues. But not able to enter into boot mode.

I have attached some of the Photo PICS and firmware.

----------------------------
dmesg output :

2642.552221] usb 2-2: new full-speed USB device number 3 using ohci-pci
[ 2642.940916] usb 2-2: New USB device found, idVendor=1908, idProduct=0102
[ 2642.940921] usb 2-2: New USB device strings: Mfr=2, Product=3, SerialNumber=0
[ 2642.940925] usb 2-2: Product: Digital Photo Frame
[ 2642.940928] usb 2-2: Manufacturer: BUILDWIN
[ 2643.041173] usb-storage 2-2:1.0: USB Mass Storage device detected
[ 2643.041429] scsi2 : usb-storage 2-2:1.0
[ 2643.041536] usbcore: registered new interface driver usb-storage
[ 2644.221108] usb 2-2: USB disconnect, device number 3
[ 2781.425494] usb 2-2: new full-speed USB device number 5 using ohci-pci
[ 2781.807996] usb 2-2: New USB device found, idVendor=1908, idProduct=0102
[ 2781.808161] usb 2-2: New USB device strings: Mfr=2, Product=3, SerialNumber=0
[ 2781.808175] usb 2-2: Product: Digital Photo Frame
[ 2781.808187] usb 2-2: Manufacturer: BUILDWIN
[ 2781.834381] usb-storage 2-2:1.0: USB Mass Storage device detected
[ 2781.835023] scsi3 : usb-storage 2-2:1.0
[ 2782.870636] scsi 3:0:0:0: CD-ROM buildwin Photo Frame 1.01 PQ: 0 ANSI: 2
[ 2782.890096] sr1: scsi3-mmc drive: 40x/40x writer cd/rw xa/form2 cdda tray
[ 2782.891080] sr 3:0:0:0: Attached scsi CD-ROM sr1
[ 2782.892751] sr 3:0:0:0: Attached scsi generic sg2 type 5

----------------
linuxmint tools # ./detect.py /dev/sg2
Opening generic SCSI device '/dev/sg2'
Manufacturer: Macronix
Size : 2 MB

--------------
./identify.py /dev/sg2
Detecting & reading dpf flash...
Opening generic SCSI device '/dev/sg2'
Manufacturer: Macronix
Size : 2 MB
Reading 200000 bytes from flash...
Flash written to file 'fulldump_20150904-014357.bin'.

Looking for firmware.............: Not found.

This in no known firmware!

Sorry, no matching dpf found.

------------------
tried changing usb0 to sg2

./hackit1.py /dev/sg2
Opening generic SCSI device '/dev/sg2'
Reading flash...
done
No DPF found. Create a record or look for one
('\xff\xff\xff\xff\xff\xff\xff\xff', '\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff', '\xff\xff\xff\xff\xff\xff\xff\xff')


Can you please help me on this, how can I hack/upload the firmware..and suggest how to enter to Boot mode. Your help will be really appreciated.

Hi superelchi,

Thank you very much!

Why I got the error of "Running on windows - unable to detect flash size "? Does some thing wrong with me?

I have installed a new ubuntu under virturalbox,I get an error when I download code from https://dpf-ax.svn.sourceforge.net/svnroot/dpf-ax/trunk and make it, the error message as follow:

waylon@ubuntn-vm:~/dpf-ax$ cd trunk
waylon@ubuntn-vm:~/dpf-ax/trunk$ cd dpflib
waylon@ubuntn-vm:~/dpf-ax/trunk/dpflib$ make
cc -Wall -fPIC -I../include -g -c -o dpflib.o dpflib.c
In file included from dpflib.c:14:0:
dpf.h:8:17: fatal error: usb.h: 没有那个文件或目录
#include <usb.h>
^
compilation terminated.
<builtin>: recipe for target 'dpflib.o' failed
make: *** [dpflib.o] Error 1


The Chinese "没有那个文件或目录" meaning "no that file", how can I fix this fault?

@ravishankarrs

bad news. Your dpf is not supported by dpf-ax. The dpf needs to be based on the Buildwin SDK for AX206.
Yours is based an the SDK for AX208 (even if it's an AX206):

$ hexdump -n 128 -C fulldump_20150903-182531.bin 
00000000  00 00 42 4c 20 76 32 2e  30 38 15 55 aa 00 00 00  |..BL v2.08.U....|
00000010  1d 7d 00 01 00 00 00 80  40 00 18 20 00 00 00 00  |.}......@.. ....|
00000020  00 00 09 40 01 f0 00 d8  00 00 06 00 00 20 64 00  |...@......... d.|
00000030  04 46 00 00 00 00 00 00  00 00 ff ff ff ff ff ff  |.F..............|
00000040  41 58 32 30 38 20 53 44  4b 20 56 33 2e 30 00 00  |AX208 SDK V3.0..|
00000050  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|

The SDK code for AX208 is not in the public, so there is nothing I can do. Sorry.

An alternative way to put an AX206 into bootloader mode is to remove the battery, press and hold menu and connect the dpf to usb. At least this works for dpf-ax compatible devices. Don't know if this is also true for the AX208 ones..

@waylon

You have to install der usblib dev files to get usb.h. For Ubuntu:

sudo apt-get install libusb-dev

superelchi



Edited 1 time(s). Last edit at 09/04/2015 04:04AM by superelchi.

Hi Superelchi,

I have successfully read firmware under ubuntu, thank you again!

Detecting & reading dpf flash...
Opening generic SCSI device '/dev/sg2'
Manufacturer: Apple
Size : 1 MB
Reading 100000 bytes from flash...
Flash written to file 'fulldump_20150904-212909.bin'.

Looking for firmware.............: Found (buildwin, 128x128 px).
Looking for Openwin..............: Found.
Looking for LcdIniTbl............: Found.
Looking for backlight & contrast.: Found, Found.
Looking for known signatures.....: Found.

Your dpf is compatible with model ['dx27893'].

Hi Waylon,

glad I could help!

superelchi

Hi Superelchi Sir,

Thanks for your help and support. Sad to say that My DPF is not supported.

Will this be supported in the future..

Regards
RaviShankar

Hi RaviShankar,

I don't think AX208 SDK based based dpfs will be supported by dpf-ax.
This is a whole new beast. And the SDK seems to be only available to BuildWin's customers.
I guess you have to sign a NDA to get it.

But if somehow the BuildWin AX208 SDK will be availabe on the net - how knows...

superelchi