Page 1 of 3
[howto] Switch boot partitions via micom eeprom C series
Posted: Fri Feb 15, 2013 6:49 pm
by juusso
After successful repair of
damaged D series board AND with help of C series owners
bajinchi (LN55C650) and
hedak (UExx46C7700), we found offsets, where we can switch between partitions by changing bytes on micom eeprom.
Topic is created by moving various related posts
Under construction
Re: [SOLVED] Forced "toggle" to repair bricked TV?
Posted: Fri Feb 15, 2013 11:08 pm
by juusso
Well, you have to:
1. get arduino network interface (+ arduino/arduino uno to work with)
2. identify micom eeprom and solder required wires
3. get dump of micom eeprom in both active partition sets.
4. Try to make hard "toggle" by changing bytes trough your network interface as i did...
i`m pretty sure you`ll find B0 77 and AD CD bytes inside your micom config as on D series as well. But let`s see...
Re: [SOLVED] Forced "toggle" to repair bricked TV?
Posted: Wed Oct 30, 2013 4:34 pm
by bajinchi
Hi there!
I just received a LN55C650, it have a Weltrend WT61P802 chip, which it don?t turn on, don?t receive IR data from the Remote controller... it?s dead... the only activity is the Red light on in the front of the TV.
Is this model "manageable" with this "toggle" trick?
Thanks in advance
Re: [SOLVED] Forced "toggle" to repair bricked TV?
Posted: Wed Oct 30, 2013 6:52 pm
by juusso
no experience on c series. but worth to try
Re: [SOLVED] Forced "toggle" to repair bricked TV?
Posted: Wed Oct 30, 2013 8:24 pm
by bajinchi
Thanks for the quick response, so as my Arduino ONE is broken (don?t know why) I desoldered the S24C0 chip to put it in my programmer, and I have this:
Code: Select all
00000000 CD 01 FF 01 FF 04 01 01 00 FF 73 70 61 FF AD FF ?.?.?....?spa?.?
00000010 FF FF 00 FF FF FF FF FF FF FF FF FF FF FF FF FF ??.?????????????
00000020 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ????????????????
00000030 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ????????????????
00000040 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ????????????????
00000050 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ????????????????
00000060 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ????????????????
00000070 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ????????????????
00000080 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ????????????????
00000090 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ????????????????
000000A0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ????????????????
000000B0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ????????????????
000000C0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ????????????????
000000D0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ????????????????
000000E0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ????????????????
000000F0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ????????????????
Completely different from what is posted here, I try to change the bytes explained, but nothing. The TV is still with the red light and won?t turn on at all.
Any ideas?
Thanks!
Re: [SOLVED] Forced "toggle" to repair bricked TV?
Posted: Sun Nov 03, 2013 12:53 pm
by juusso
what if:
Code: Select all
00000000 CD 01 FF 01 FF 04 01 01 00 FF 73 70 61 FF AD FF ?.?.?....?spa?.?
We know what AD CD and B0 77 do on D series. Offset is different but maybe meaning and function is same?
Try replace CD to 77 and AD to B0:
Code: Select all
00000000 77 01 FF 01 FF 04 01 01 00 FF 73 70 61 FF B0 FF ?.?.?....?spa?.?
Re: C Series EEPROM research
Posted: Sat Jan 11, 2014 5:12 pm
by hedak
OK, but how to toggle?
Software way doesn't seem to work. I can see the output of the script 8282119 mentoined here:
viewtopic.php?f=51&t=5232#p38077
But the reboot comes within the 3 seconds sleep in usb_remount()
So i will have to do it by hardware? Micom?
BTW could you please in short explain, what Micom is and how to idenify its EEPROM?
Re: C Series EEPROM research
Posted: Sat Jan 11, 2014 5:15 pm
by juusso
micom eeprom is located near the big squared shape Weltrend chip. Check photos on my given forum and you will understand what i`m talking about.
/sbin/toggle makes switch of full set of partitions on C series and values for next boot are being stored on that micom`s eeprom. Just as you see, here we again have troubles, dumps of D and C are different. But here we have just few bytes, why don`t experiment with this?
bajinchi wrote:Thanks for the quick response, so as my Arduino ONE is broken (don?t know why) I desoldered the S24C0 chip
Re: C Series EEPROM research
Posted: Sat Jan 11, 2014 5:29 pm
by hedak
OK, thanks
My Weltrend chip seems to be on the backside whilst its EEPROM is on the front, but they are lying nearly on the same X/Y-position. I will try to read the micom EEPROM (S24CS0) tomorrow. How much memory does it have? Or can you give me a datasheet or link?
EDIT: pictures of the micom EEPROM can be found here (the two latter ones):
viewtopic.php?f=15&t=7117&p=53801#p53801
Re: C Series EEPROM research
Posted: Sat Jan 11, 2014 5:33 pm
by juusso