Announcement

Collapse
No announcement yet.

User Profile

Collapse

Profile Sidebar

Collapse
Avatar
eigma
Member
Last Activity: 11-30-2024, 06:08 PM
Joined: 01-18-2021
Location: Montreal
  •  
  • Filter
  • Time
  • Show
  • Source
Clear All
new posts

  • Some handwritten notes for main board power circuit....
    See more | Go to post

    Leave a comment:


  • Okay, wow, I think I got it. It was a single bit flip in the SPI flash. Details below:

    After confirming I could compute the CRC correctly, I thought most of the flash dump looked valid, so there must be only some very small corruption. Maybe it was a single bit. (I have seen this before on a cheap WRT54G router) So I wrote a script to brute-force every possible bit flip, and check CRC, it took 18 hours, and found one:

    [CODE]
    $ venv/bin/python3 spi_crc_brute.py samsung-un40h5003af.bin | tee spi_crc_brute.log
    At 0x20000:
    00000000: 80 00 02 00 00 00 20...
    See more | Go to post

    Leave a comment:


  • Ha! I was using flashrom 1.4.0.. but seems there have been changes. I built flashrom from Git (~v1.5.0-rc1), I think this brings better support for WP (write protect) features of the chip, and was able to program the flash (despite the "Protection mode: hardware"...)!

    [CODE]
    $ ./builddir/flashrom -p ft2232_spi:type=2232H,port=B,divisor=100 -c W25Q32FV --wp-status
    flashrom v1.5.0-rc1 (git:v1.5.0-rc1) on Darwin 23.6.0 (arm64)
    ...
    Protection range: start=0x00000000 length=0x00400000 (all)
    Protection mode: hardware


    $ ./builddir/flashrom...
    See more | Go to post

    Leave a comment:


  • In a few days I will get access to SMD soldering equipment and try to remove the SPI chip.

    Until then, I spent some time understanding SPI flash dump file format, and comparing to the clean genuine firmware file downloaded from Samsung (T-MXL1JAUSC.bin). From [URL="https://github.com/neuschaefer/mstar-mboot/blob/962e8b8258378dded694883a9f9acb7058d34631/sboot/src/MSDecompress.c#L1346"]sboot/src/MSDecompress.c[/URL] we see there is a header at 0x20000 including a CRC32. The CRC32 algorithm seems unusual, not compatible with standard Python zlib.crc32. After more searching,...
    See more | Go to post

    Leave a comment:


  • I'm sorry, can you explain more? MStar is broken or SPI chip is broken?

    I tried to erase SPI chip and write a firmware from Samsung website, for a very similar model (though not exactly the same). The firmwares have the same first 4 KB, many other similarities, maybe a chance to work.

    But I cannot erase the flash chip:

    [CODE]
    $ flashrom -p ft2232_spi:type=2232H,port=B,divisor=100 -w T-MXL1JAUSC-4mb.bin
    flashrom v1.3.0 on Darwin 23.6.0 (arm64)
    flashrom is free software, get the source code at https://flashrom.org

    Calibrating...
    See more | Go to post

    Leave a comment:


  • FYI I'm working on a TV which has the same CPU as this thread (MStar AEON / Eden). Here's my thread with some info: [URL]https://www.badcaps.net/forum/troubleshooting-hardware-devices-and-electronics-theory/troubleshooting-tvs-and-video-sources/3511810-samsung-un40h5003-boot-loop-every-~8-seconds[/URL]

    I was able to decompress the firmware from mine, it's some kind of gzip (possibly modified) and yields a ~3.2 MB file. If you're still working on your project, and you want to send me your SPI dump, I can probably decompress it.

    Would also appreciate if you could take a...
    See more | Go to post

    Leave a comment:


  • SPI flash dump attached.

    HDMI to ground - all values in ohms: [TABLE="border: 1, cellpadding: 0, cellspacing: 0"]
    [TR]
    [TD] [/TD]
    [TD] [/TD]
    [TD]CN401_H1[/TD]
    [TD]CN404_H2[/TD]
    [/TR]
    [TR]
    [TD]1[/TD]
    [TD]TMDS data2+[/TD]
    [TD]30M[/TD]
    [TD]33M[/TD]
    [/TR]
    [TR]
    [TD]2[/TD]
    [TD]TMDS data2 shield[/TD]
    [TD]0[/TD]
    [TD]0[/TD]
    [/TR]
    [TR]
    [TD]3[/TD]
    [TD]TMDS data2−[/TD]
    ...
    See more | Go to post

    Leave a comment:


  • Samsung UN40H5003 boot loop every ~8 seconds

    Hi, I rescued a Samsung UN40H5003AF (H = 2014 FHD) from the curb. Symptoms are: standby (red) light comes on, stays on for 8 seconds, flickers off, then comes back on, and the cycle continues.

    Service manual: [url]https://www.electronica-pt.com/esquema/tv/samsung-esquemas-tv/samsung-un40h5003af-chassis-u8la-71272/[/url]

    SMPS board: checked voltages, all seem normal (A13V = 12.8V, UD = 3.3V, PWM_BLU = 0.77V, PS_OnOff = 5.5V). Remove 10p cable to main board -> backlight comes on. I think this means SMPS board and backlight are good.

    Main board: BN94-07592P...
    See more | Go to post

  • Re: Enermax Tomahawk ETK450AWT PSU Repair

    Thanks everyone for the kind words. (I neglected to enable e-mail notifications and only just noticed the replies)

    Thanks also for the tips about capacitor quality. For a while I figured "replace all the caps" was some misguided effort rooted in myth - but having spotted such a failure myself first hand, I'm starting to understand the wisdom.

    I'm not sure if I'll use the PSU (I've already ordered and installed a replacement) but all good to know anyway.

    sam_sam_sam, glad you found the inf...
    See more | Go to post

    Leave a comment:


  • Enermax Tomahawk ETK450AWT PSU Repair

    A few weeks ago my computer power supply (Enermax Tomahawk ETK450AWT) stopped working. Of course this led me down a reverse engineering and circuit debugging rabbit hole ;-) I also learned about capacitor Equivalent series resistance along the way, and wrote an article about it all. Here are some sneak peeks:







    And the full article:
    [url]https://github.com/cpatulea/src/blob/master/psu/enermax-etk450awt-repair.md#enermax-tomahawk-etk450awt-psu-repair[/url]

    Enjoy!https://A few weeks ago my computer ...ermax Tomahawk...
    See more | Go to post

  • Re: New Members - please post your introductions here

    Hello, just registered here. Software developer by trade but recently venturing into electronics. Managed to build a 300 MHz one-transistor oscillator earlier this year ([url]https://foulab.org/projects/eigma/fan/[/url]) and recently repaired a 450 watt ATX power supply. You'll have to check my post in "Troubleshooting Power Supplies" for that one! :-)Re: New Members - please post your i...o electronics.
    See more | Go to post

    Leave a comment:

No activity results to display
Show More
Working...
X