See last Toshiba posts for firmware reverse-engineering analysis.
TL;DR version: it would take too long to come up with a useful firmware mod. I'm missing the toolchain, complete source code, compilation instructions, libraries, hardware architecture, ...
In the meantime, I did take the TV apart to fix a broken stand-off.
I cannot see any immediate serial (RS232 or TTL) connections and I did not bother probing for some. I image if any would exist they would come out of the main [MStar] CPU. As such, it's more likely the serial is NDIS-based on production units. There's also the possibility that some pins from VGA or other ports might be repurposed as serial ports upon some special boot sequence. However, the strongest possibility is that I've missed those pins.
The unit is split into several parts:
- MStar processing board that takes care of all inputs (HDMI, USB, Ethernet, ...) and raw LCD output
- Samsung LCD panel board - big custom ASIC handling the LCD output, probably from a standard LVDS input
- IR input and output, ambient sensor and status LED board
- backlight power supply board - I think the TV has either 16 or 16x16=256 LED backlight panels
- main power supply board
From now on it's mostly picture-driven, click on the pictures for the full uncut version.
Mainboard details:
Heatsink removed. The main chip is an MSD388USV-V6 - MStar branded, no data.
The firmware is also MStar branded, I suspect they are using their SDK under an NDA.
Backside of computing board:
Backlight(?) power supply, cover on:
Backlight(?) power supply, cover off:
Panel connectors:
Infrared receiver, ambient light sensor, 3D IR transmitter, status LED. Backside:
Samsung branded LCD Panel driver board:
Main power supply:
TL;DR version: it would take too long to come up with a useful firmware mod. I'm missing the toolchain, complete source code, compilation instructions, libraries, hardware architecture, ...
In the meantime, I did take the TV apart to fix a broken stand-off.
I cannot see any immediate serial (RS232 or TTL) connections and I did not bother probing for some. I image if any would exist they would come out of the main [MStar] CPU. As such, it's more likely the serial is NDIS-based on production units. There's also the possibility that some pins from VGA or other ports might be repurposed as serial ports upon some special boot sequence. However, the strongest possibility is that I've missed those pins.
The unit is split into several parts:
- MStar processing board that takes care of all inputs (HDMI, USB, Ethernet, ...) and raw LCD output
- Samsung LCD panel board - big custom ASIC handling the LCD output, probably from a standard LVDS input
- IR input and output, ambient sensor and status LED board
- backlight power supply board - I think the TV has either 16 or 16x16=256 LED backlight panels
- main power supply board
From now on it's mostly picture-driven, click on the pictures for the full uncut version.
Mainboard details:
Heatsink removed. The main chip is an MSD388USV-V6 - MStar branded, no data.
The firmware is also MStar branded, I suspect they are using their SDK under an NDA.
Backside of computing board:
Backlight(?) power supply, cover on:
Backlight(?) power supply, cover off:
Panel connectors:
Infrared receiver, ambient light sensor, 3D IR transmitter, status LED. Backside:
Samsung branded LCD Panel driver board:
Main power supply:
So what? any news about uart or debug port? How about dumping nand flash without desoldering?
ReplyDeleteWell, I abandoned the project since it does not make any sense to squeeze more out of the lame SoC. I haven't been able to find a serial port at first glance and not from the pictures. There has to be one but it might be shared with the Ethernet pins (while booting) or some other outside plug.
DeleteA firmware dump is not required since the firmware update contains the complete resources (i.e. it is not a partial or incremental update).
I had hoped for at least some code and/or instructions from Toshiba but they failed to deliver something meaningful. See also http://hackcorrelation.blogspot.com/2013/10/toshiba-regza-tl868-firmware-analysis.html .
UART (TTL 3,3V) port is near Toshiba NAND chip (TC58NVG1... picture No.5). It is CN100. But is locked when normal BOOT process go.I see a message only when something wrong with BOOT process. Maybe possible some Ctrl+? combination when BOOTING, but some I try (Ctrl+Z,Ctrl+X, ESC, ENTER) and not lucky.
DeleteHow much would it cost to replace just the LED panel in a LG 47G2 TV? Is there any way to order to panel from an electronics store and install myself (I am pretty handy with electronics).
ReplyDeleteTv wall
I have been reading your posts regularly. I need to say that you are doing a fantastic job. Please keep up the great work.
ReplyDeleteLed video display
hi i need felash dump toshiba led model 42sl833
ReplyDeleteplease help me
DeleteTry pins 10/12/14 on the scart connection for a serial console see the wikipedia article for scart pinout.
ReplyDeleteYour boards not a vestel, but many of the MStar based boards have a serial at 9600bd on the scart.
There's a HUGE amount of maintainence manuals on the internet archive for all makes of toshiba TV the older, the more likley it is you'll find it.