Unlocking HDMI-CEC on a NT14M firmware (with a 1-byte edit?)

[bascule]

Hi there! I've been poking around a UN55J6201/QS01 TV I've inherited through a property purchase trying desperately to get Anynet+/HDMI-CEC working. It's really frustrating because as far as I can tell this TV has the hardware and firmware support for HDMI-CEC but it's effectively locked out via a lineup code, possibly because it seems to be a Black Friday model.

While I've largely worked around the absence of HDMI-CEC to turn the TV on/off via Sofabaton I am haunted by the fact that these TVs appear to be entirely Anynet+ capable and as far as I am able to ascertain a 1-byte setting in a configuration file is what is preventing Anynet+ from working. I haven't posted here before but it seems like the place to ask?

My TV has a T-N14M6AKUC-1110.1 firmware, and my research into this particular firmware lead me here and to ample prior art, so thanks y'all for all your previous investigations! I was able to get into the factory menu an enable the options to dump a debug log via EX-LINK via which I got the following string:

> lineup = UJ6203

My working theory is Anynet+/HDMI-CEC is explicitly disabled for this "lineup", if anyone can confirm that (possibly "OSIsSupportCEC" is the relevant function). I've been curious if there is some way to modify this value, say to "UH6203", which would literally be a 1-byte edit. I've found references to it being stored in Factory_Part1.dat.

It seems like there has been a lot of work to be able to mount and edit the filesystem which I haven't really gotten into in depth yet, but can anyone confirm I'm on the right track?