BD-D7000 service manual

Samsung's BluRay player related hacks.

sbav1
Official SamyGO Developer
Posts: 374
Joined: Fri Jan 15, 2010 10:20 am

BD-D7000 service manual

Post by sbav1 »

http://elektrotanya.com/samsung_bd-d700 ... nload.html

mirror:
http://www.multiupload.nl/EVWIWEHIHK

I think it's the first publicly available SM for Samsung-SoC based AV devices since A-series, which does contain actual, detailed schematic diagrams ;). Interesting one, does explain/confirm some previous theories & mysteries regarding Samsung Firenze BDP models. Shame there isn't one available for more advanced Samsung D/E series BDP models..

CORRECTION: it's BD-D7000 service manual, not BD-D7500 as stated previously - my mistake :oops:

E3V3A
Posts: 247
Joined: Wed Oct 31, 2012 2:31 am
Location: /dev/zero

Re: BD-D7500 service manual

Post by E3V3A »

Ah! Very nice. Are there any PCB board photos around?
What Micom chip does this thing use?
HW: UE40ES5700SXXH
FW: T-MST10PDEUC-1029.0 Onboot: 1003

User avatar
geo650
Official SamyGO Developer
Posts: 302
Joined: Wed Oct 07, 2009 12:03 pm

Re: BD-D7500 service manual

Post by geo650 »

Great! Thanks.

I can see that internal WiFi module is connected through USB0 (--> page 54). Do you think it is possible to remove WiFi module and connect an internal USB disk/memory instead? In BD-D6900 threre is a smaller 4-pin socket connected to 5V-powered internal WiFi module. Maybe some service-menu settings should be altered (?) and probably some parts added (2 small capacitors, diodes, --> page 57 upper). Right?

sbav1
Official SamyGO Developer
Posts: 374
Joined: Fri Jan 15, 2010 10:20 am

Re: BD-D7500 service manual

Post by sbav1 »

E3V3A wrote:What Micom chip does this thing use?
MC80F0448 from ABOV Semi (previously: MagnaChip, previously: Hynix)
http://www.abov.co.kr/eng/product/info/ ... =mc80f0448

It's not MC08F0448, like stated in Samsung block diagram - apparently service manual author made a typo..

Heck, Samsung really overdid itself with BDP chip choices - that's 3rd substantially different Micom variant in 2011 B-FIR* D-series devices alone (after NEC/Renesas and Sanyo micoms).

sbav1
Official SamyGO Developer
Posts: 374
Joined: Fri Jan 15, 2010 10:20 am

Re: BD-D7500 service manual

Post by sbav1 »

geo650 wrote: I can see that internal WiFi module is connected through USB0 (--> page 54). Do you think it is possible to remove WiFi module and connect an internal USB disk/memory instead?
Why not. But better to be careful, as for internal USB port there is no TPS2553 chip included for overcurrent & reverse voltage protection (in neither BD-D6900, BD-D7000 and HT-D7100). There is a question how much 5V current can be safely drawn from this port in BD-D6900; I guess any USB device with power consumption below 1-1.2A will be reasonably safe. I have no idea what 5V total power budget is for BD-D6900 PSU, but it had to be designed with some overcapacity:
- external USB port overcurrent protection is set on 1.5A in BD-D7000
- HDMI pin 18 (5V supply) overcurrent protection is ca 450mA (10x the specs)
- WiFi module itself draws something in 0.5-0.7A range, unless I'm very much mistaken.
In BD-D6900 threre is a smaller 4-pin socket connected to 5V-powered internal WiFi module. Maybe some service-menu settings should be altered (?) and probably some parts added (2 small capacitors, diodes, --> page 57 upper). Right?
Small capacitors are most likely not needed (in BD-D6900 they seem to be already there - C334 & C335, close to CN302 connector).
I'm assuming CN302 is internal USB connector(???). I'm not 100% sure, cause in my BD-D6900 WiFi module was missing.. Funny story: apparently Samsung authorized service forgot to include it while reassembling the player. Previous owner managed to get the refund/compensation from the service center - quite a lot, after splitting it 50/50 with him, I actually ended with 2x more money then I paid for the whole device :).

The unit works pretty well without WiFi module - no apparent problems. I see there are some settings in service menu related to WiFi (NETWORK Support: Int-Wifi, IPREF: Stopped, WIFI Region: E), but there was no need to alter them.
You do not have the required permissions to view the files attached to this post.

sbav1
Official SamyGO Developer
Posts: 374
Joined: Fri Jan 15, 2010 10:20 am

Re: BD-D7000 service manual

Post by sbav1 »

SDP1004 bootstrap (page 62) looks interesting; a lot of input pins for boot config.. I wonder what they are for exaclty; perhaps there are some other boot choices (not including the obvious OneNAND vs eMMC flash selection). E.g., I suppose there will be an option for booting from SD card (shame the built-in Firenze SD card interface is unused/not connected in any known model). Perhaps there is a serial boot possibility as well, who knows..

I_SB_EN pin (AJ14): this might be "secure boot enable" (i.e., well known 0x303F0038 register bit #0 checked by bootloader for skipping onboot & kernel cmac hash checks). Or is it "serial boot enable"? Not likely, that would be a wishfull thinking ;)

Connection between SoC <-> Micom labeled "BOOT_MODE" (page 60): I believe it's used to distinguish between normal/power-up boot VS suspend-to-ram/"3sec" sleep mode resume.

Two JTAG interfaces, for ARM & audio engine (?).

Quite a lot of general-purpose SoC pins connected to test pads in this model which are not actually used for anything (UART2 TX/RX, I_EXTINT0, b_GPIO2-b_GPIO6 etc.). In comparison, BD-D6900 mainboard looks much more "BOM-optimised" :( .

E3V3A
Posts: 247
Joined: Wed Oct 31, 2012 2:31 am
Location: /dev/zero

Re: BD-D7000 service manual

Post by E3V3A »

According to wiring on page 62.

Code: Select all

NAND_FLASH - Hi
NAND_RNB   - Hi
BOOT_CFG0 - Lo
BOOT_CFG1 - Lo
BOOT_CFG2 - Hi
SB_EN - Lo
Then on page 60 you have BOOT_MODE mapped to "b_GPIO7" (AM7) from "10B5>", which I cannot find the connection to...
Do you know anything about the processor for this thing?
I think you're right about most of what you said. Most embedded processors has a boot from serial mechanism. Then given the amount of serial IF's on that board + the Micom JIG, I wouldn't be surprised. We could try to connect our ExLinks to some of these internal UARTs to look for early debug output, and force SB_EN or BOOT_CFG0 hi... to see what happens.
HW: UE40ES5700SXXH
FW: T-MST10PDEUC-1029.0 Onboot: 1003

sbav1
Official SamyGO Developer
Posts: 374
Joined: Fri Jan 15, 2010 10:20 am

Re: BD-D7500 service manual

Post by sbav1 »

sbav1 wrote: for internal USB port there is no TPS2553 chip included for overcurrent & reverse voltage protection (in neither BD-D6900, BD-D7000 and HT-D7100)
Hmm, on the closer inspection - this is not entirely true; in HT-D7100 there is an additional (3rd) TPS2553 chip on the mainboard, I'm 99% sure it's used for internal USB port protection. Current limit is set to 1.5A (16.5kOhM resistor), just like for external USB. Weird ;)

In comparison with BD-D6900, WiFi module used in HT-D7100 is different (WIDT10B, BN59-0130A), but it seems to be using the same kind of 4-pin connector; I wonder if this module will work in BD-D6900..

sbav1
Official SamyGO Developer
Posts: 374
Joined: Fri Jan 15, 2010 10:20 am

Re: BD-D7000 service manual

Post by sbav1 »

E3V3A wrote: Then on page 60 you have BOOT_MODE mapped to "b_GPIO7" (AM7) from "10B5>", which I cannot find the connection to...
It's connected to ABOV Micom GPIO port - there is similar connecton in HT-D7100 too, I confirmed it's used by onboot for distinguishing between normal (cold) boot, and sleep mode (suspend to RAM) resume boot.
Do you know anything about the processor for this thing?
Which processor? There are at least seven CPU cores (various architectures) embeded in this thing..
SB_EN or BOOT_CFG0 hi... to see what happens.
I've tried to locate SB_EN pin on BD-D6900 & HT-D7100 mainboards, but, so far - no joy, it's not so simple without schematic diagrams.

User avatar
geo650
Official SamyGO Developer
Posts: 302
Joined: Wed Oct 07, 2009 12:03 pm

Re: BD-D7500 service manual

Post by geo650 »

sbav1 wrote:
sbav1 wrote: for internal USB port there is no TPS2553 chip included for overcurrent & reverse voltage protection (in neither BD-D6900, BD-D7000 and HT-D7100)
Hmm, on the closer inspection - this is not entirely true; in HT-D7100 there is an additional (3rd) TPS2553 chip on the mainboard, I'm 99% sure it's used for internal USB port protection. Current limit is set to 1.5A (16.5kOhM resistor), just like for external USB. Weird ;)

In comparison with BD-D6900, WiFi module used in HT-D7100 is different (WIDT10B, BN59-0130A), but it seems to be using the same kind of 4-pin connector; I wonder if this module will work in BD-D6900..
Hello!
Thanks for your detailed answers. I have found that chip near external USB connector but didn't see it on the SM's schematics. Anyways, I am thinking about skiping of additional protection circuits because I am going to mount an internal SDHC card (with USB dongle of course) so no much dangerous currents are expected. But I didn't do any measurements yet so I am not 100% sure it's good idea.
Since I am going to do a non-destructive job, now I am looking for a plug that could be connected to CN302.

Post Reply

Return to “BluRay Players”