[Help] Lenovo Yoga Slim 7-14ARE05 (DA0LS3MBAF0) – 25Q80DVN1G Flash Is All FF, USB-C PD Stuck at 5V

[ekozeko333]

Hi all,
I’m trying to recover a Lenovo Yoga Slim 7-14ARE05 with board DA0LS3MBAF0 Rev:F. I’ve run into an unusual issue where USB-C PD is stuck at 4.7–5V and the system won’t boot (keyboard lights flash briefly, then nothing).
🔥 The Problem Started After Suspected ESD/PD Fault
I experienced a power issue or ESD event through a USB-C charger
After that, the NX20P5090 power switch was visibly burned and was replaced
Now the PD controller always negotiates 5V @ 2A, even with known-good chargers
🧠 What I’ve Done So Far
Flashed a known-good 16MB "virgin" BIOS (W25Q128JW_1.8V) including DMI regions
Verified BIOS and EC flash using CH341A (1.8V adapter, verified writes/reads)
Power rails seem fine; fan and keyboard LED briefly respond
Still no PD negotiation to 9V/15V/19V, and board does not POST
⚠️ Critical Finding – Empty PD SPI Flash


I found a second SPI flash chip:
W25Q80DVN1G (1MB, 3.3V)
Located near USB-C ports and HDMI
Connected to TPS65988 USB-C PD controller (as confirmed in schematic, see attached)

💥 I dumped this chip and it is completely empty – all bytes are FF!
I re-read it multiple times to be sure.
❓My Questions
Why would the PD flash chip (25Q80DV) be totally blank?
Can ESD or a PD overcurrent event cause this?
Could a bad BIOS flash or TPS failure erase it?
Is the TPS65988 dead if it can't boot from SPI?
Or can it be recovered by flashing the correct firmware to this chip?
Where can I get a known-good dump (1MB) for this flash?
Is this blank PD firmware the root cause of stuck 5V PD and no power-up?
🧾 Summary
BIOS/EC verified, flashed, still no boot
TPS65988 likely cannot initialize — its SPI flash is blank
USB-C stuck at 5V, no 19V negotiation, no battery charging
Board behavior points to missing PD controller firmware/config
Need help locating valid firmware or confirming recovery method

Thanks to everyone in advance for guidance or sharing working dumps. 🙏

[SMDFlea]

You can request the PD firmware in the bios requests sub forum. You can try one thats posted for a different model and see what happens - https://www.badcaps.net/forum/troubl...34#post1511939

[Ponto da Manutenção]

I need more detailed information about your case.

Equipment serial number?
Original BIOS backup?
I didn't quite understand, did you write or record the (EC IT5570VG)?
I'm posting a (Firmware - ThinkPad USB-C Dock Gen 2 40AS).

[ekozeko333]

You can request the PD firmware in the bios requests sub forum. You can try one thats posted for a different model and see what happens - https://www.badcaps.net/forum/troubl...34#post1511939

Model name: 82A2
Factory ID: CS20
S/N: LR0E6ZCM

neither EC IT5570VG I didnt touch it. record or wrote... The initial text was a bit missleading with the EC. I didnt rewrite the EC only the bios and only read the SPI FLASH W25Q80DVSSIG--> it was empty.

what happened exactly? did the esd wipe out the memory?

[Ponto da Manutenção]

I do not recommend this recorder model (CH341A)...it is not reliable..

Here is your repaired file.

[ekozeko333]

I do not recommend this recorder model (CH341A)...it is not reliable..

Here is your repaired file.

I suspect that I cannot write anything to the pd flash (25Q80DV).. it appears to be dead. Likely from the esd damage?

I tried SPI with Asprogrammer using ch341A.

Whats much better then the CH341A?

[Ponto da Manutenção]

I have 4 recorder models, but I recommend these two.

XGecu T76 USB3.0

Svod 4

[ekozeko333]

A little update.

the 25Q80DV is DEAD.
Ive ordered a new one, comes this saturday.
Will try to solder a empty 25Q80DV to the board and let the bios flash it on BOOT TIME. I might get lucky. IF not, then I will need someone to provide me with a working dump from the 25Q80DV.
Wish me luck, will report back.

[Ponto da Manutenção]

A little update.

the 25Q80DV is DEAD.
Ive ordered a new one, comes this saturday.
Will try to solder a empty 25Q80DV to the board and let the bios flash it on BOOT TIME. I might get lucky. IF not, then I will need someone to provide me with a working dump from the 25Q80DV.
Wish me luck, will report back.

I posted the file for you to record on (25Q80DV)...

[ekozeko333]

I posted the file for you to record on (25Q80DV)...

The original content size is 1024 for the 25Q80DV ???
Panamera_fw_duce2_Ver5_07_007.bin ---> 512kb ?

do I flash it from 0x00000000 the 512kb? thats ok?

[Ponto da Manutenção]

The original content size is 1024 for the 25Q80DV ???
Panamera_fw_duce2_Ver5_07_007.bin ---> 512kb ?

do I flash it from 0x00000000 the 512kb? thats ok?

-----------------------------------------------------------

How do you know for sure that the file is 1mb if it was blank?

The file I posted is from the manufacturer Lenovo.

"Why would the PD flash chip (25Q80DV) be totally blank?"

[ekozeko333]

I do not recommend this recorder model (CH341A)...it is not reliable..

Here is your repaired file.

I am at the edge of tossing the motherboard out...


I tried the PD firmware you uplaoded on a new spi flash it flashed OK. soldered it back to the MOBO and soldered the BIOS flash.


When I press the power button it goes from 5.1V to 4.8V 3.0A 14.6W. Fluctuates at 2.7-3A.

when I hold the power button it goes again to 0.5A and 5.1V.
with battery (empty) the power charger flashes 3 times. no negotiation.

Measured voltages on the SPI FLASH ok.
Tried the factory bios it doesnt even respond to the power button.

I can try to replace the TPS65988D. could maybe the firmware be not configured? maybe a new firmware config tool needs to be create with the TPS65981_2_6_7_8 Application Customization 6.1.4 ? and config the I/O pins to match the schematics ?

[ekozeko333]

A little update.

I played a little with the tool. used the recommended config (didnt config it for my specific BOARD) I tried to see if anything changes and.. .I GOT 20V on plug in... but it is stuck in looping ( cutting the power completly off from the charger and in loop) config is most likely not OK.

From this I am confident the only problem I am facing right now is the FIRMWARE for the TPS!!

[Ponto da Manutenção]

[CITAÇÃO=ekozeko333; n3669575]

Estou prestes a jogar fora a placa-mãe...


Eu tentei o firmware PD que você uplaoded em um novo flash spi ele piscou OK. soldou-o de volta para o MOBO e soldou o flash BIOS.


Quando pressiono o botão liga / desliga, ele vai de 5.1V para 4.8V 3.0A 14.6W. Flutua em 2,7-3A.

quando eu segurar o botão liga / desliga, ele vai novamente para 0.5A e 5.1V.
Com a bateria (vazia), o carregador de energia pisca 3 vezes. sem negociação.

Tensões medidas no SPI FLASH ok.
Tentei o BIOS de fábrica, ele nem responde ao botão liga / desliga.

Posso tentar substituir o TPS65988D. talvez o firmware não esteja configurado? talvez uma nova ferramenta de configuração de firmware precise ser criada com o TPS65981_2_6_7_8 Personalização de aplicativos 6.1.4? e configurar os pinos de E/S para corresponder aos esquemas? [/ CITAÇÃO]
--------------------------------------------------------------------------

You can monitor the (TPS65988D) or any other IC with a simple and cheap equipment (logic analyzer)...

As you found the (NX20P5090) burned, I recommend doing a check on (reverse conduction) initially by (CN7717)...

[ekozeko333]

[CITAÇÃO=ekozeko333; n3669575]

Estou prestes a jogar fora a placa-mãe...


Eu tentei o firmware PD que você uplaoded em um novo flash spi ele piscou OK. soldou-o de volta para o MOBO e soldou o flash BIOS.


Quando pressiono o botão liga / desliga, ele vai de 5.1V para 4.8V 3.0A 14.6W. Flutua em 2,7-3A.

quando eu segurar o botão liga / desliga, ele vai novamente para 0.5A e 5.1V.
Com a bateria (vazia), o carregador de energia pisca 3 vezes. sem negociação.

Tensões medidas no SPI FLASH ok.
Tentei o BIOS de fábrica, ele nem responde ao botão liga / desliga.

Posso tentar substituir o TPS65988D. talvez o firmware não esteja configurado? talvez uma nova ferramenta de configuração de firmware precise ser criada com o TPS65981_2_6_7_8 Personalização de aplicativos 6.1.4? e configurar os pinos de E/S para corresponder aos esquemas? [/ CITAÇÃO]
--------------------------------------------------------------------------

You can monitor the (TPS65988D) or any other IC with a simple and cheap equipment (logic analyzer)...

As you found the (NX20P5090) burned, I recommend doing a check on (reverse conduction) initially by (CN7717)...

I Think I need a working firmware. there are no shorts anymore.
I will craft one today with the tool and looking at schematic closely the I2C talks at 0x23 address. 011b using a 0.9 divider.

hopefully this will work. will report back today !

[Ponto da Manutenção]

I know it's not the shortest, but since the IC was toasted...it may have damaged communication lines........for example i2c etc.

[ekozeko333]

I know it's not the shortest, but since the IC was toasted...it may have damaged communication lines........for example i2c etc.

right now I am 99.99% sure its the SPI FLASH firmware problem for the PD TPS control because I played with it and managed to get 20V..
uploaded the Texas Instrument program and the project file so far.
good luck if you try to inspec it.