How to format /mtd rwarea/ to reset USB hack
Enabling serial input and recover your TV from bricked hack
The access codes in this section are device and firmware dependent. Please check forums, in case the codes below doesn't work.
- Connect your communications software and open the serial port
I usually use Mac. Even I could open the port and I could see the info from the TV I couldn't interact with keyboard. So I decided to use HyperTerminal. The old Windows built-in communications software. Windows 7 does not include this software, but you can download it from the web. Just Google it.
- Turn on your TV set, if everything is connected like described at the steps before the serial log should be shown at the serial terminal.
- The TV will keep on sending info, but when the debug log slow down a bit, send next command.
- Enter 10041004 (when typing the digits No Input is shown at the serial terminal) and confirm with Enter.
- In my case the SERIAL INPUT MANAGE was activated just pressed 10041004. No ENTER was needed.
after that you should see:
[SERIAL INPUT MANAGE] serial input ENABLE!!!!!
- Now enter 81588
- You will see this:
Aleady made Scenario File...so delete file @@@@@@@@@@@ Key Record Start @@@@@@@@@@@
- Now enter 20089999
- You will see this:
==================================== [ TOP Debug Menu] ------------------------------------ 1 : SubSystem Print On/Off 2 : Platform Print Setting 3 : TD Print Setting 4 : Performance Print Setting 5 : Sdal Print Setting 6 : Sdal Trace Setting 10 : Factory Debug 11 : TD Debug 12 : SubSystem DBG 13 : SubSystem Info Print 20 : Performance File Write 21 : Louvre Print Setting ------------------------------------ 70 : Jade Debug 80 : PVR Debug ==================================== 99 : Exit ==================================== DBG> :
- Now enter 2
- You will see this:
Input Start Level << :
- Now enter 0
- You will see this:
Input End Level << :
- Now enter 0
- You will see this:
==================================== [Platform Debug List] ------------------------------------ 1. Basic Platform 2. Advanced Platform 3. Java ------------------------------------ 99 : Exit ==================================== cmd>
- Now enter 2
- You will see this:
==================================== [Platform Debug List] ------------------------------------ 1 : FrontRunner Debug 2 : DeviceManager Debug 3 : InfoLink Debug 4 : NetworkManager Debug 5 : PVR Debug 6 : MediaPlay Debug 7 : CEC Debug 8 : PSA Debug 9 : SWU Debug 10 : DMR Debug 11 : PMR Debug 12 : HNC Debug 13 : MoIP Debug ------------------------------------ 99 : Exit ==================================== cmd>
- Now enter 2
- You will see this:
==================================== [DeviceManager Debug Module] ------------------------------------ 1 : [OFF] DevMgr 2 : [OFF] DevMgr_SS ==================================== Debug Level = Fatal ==================================== 80 : All OFF 81 : All ON 85 : Set Debug Level ==================================== 90 : DeviceManager MW Debug 91 : DeviceManager SS Debug 92 : ROSE Print Setting 93 : ROSE Debug (For UNIPLAYER) 99 : Exit ==================================== cmd>
- Now enter 90
- You will see this:
==================================== [ Device Manager - TOP Debug Menu] ------------------------------------ 01 : Start DeviceManager 02 : Stop DeviceManager 03 : Suspend Mode Test 04 : Start Stress Test 05 : Stop Stress Test ------------------------------------ 11 : USB Test 12 : DLNA, FLASH, ODD, HDD, MoIP Test ==================================== 21 : Print ALL Device Info 22 : Print Device Info with KEY 23 : Print ALL Partition Info ==================================== FF : Exit ==================================== DBG> : 0x
- Now enter 12
- You will see this:
==================================== [ MISC Debug Menu] ------------------------------------ 01 : PRINT DLNA Device Info 02 : PRINT FLASH Device Info 03 : PRINT ODD Device Info 04 : PRINT HDD Device Info 05 : PRINT MoIP Device Info ==================================== 11 : FLASH, HDD Format Test ==================================== 88 : Shell ==================================== FF : Exit ==================================== DBG> : 0x
- Now enter 11
- You will see this:
Input Partition Key :
- Now enter, mtd_rwarea partition number. How to check partition number and some known partition numbers are here.
NB! You can damage your TV if wrong partition number is entered!
- If everything goes OK you will see the status of the filesystem and information about if partition has been formated:
Filesystem 1k-blocks Used Available Use% Mounted on /dev/tbml6 3456 3456 0 100% / none 10240 4 10236 0% /dtv none 10240 0 10240 0% /dsm none 235556 0 235556 0% /core none 10240 0 10240 0% /tmp /dev/stl0/14 25478 2480 22998 10% /mtd_rwarea /dev/stl0/19 49664 49664 0 100% /mtd_rocommon /dev/stl0/15 91080 87336 3744 96% /mtd_exe /dev/stl0/16 40832 40832 0 100% /mtd_appdata /dev/stl0/13 10942 130 10812 1% /mtd_contents /dev/stl0/20 102368 47600 54768 46% /mtd_swu /dev/stl0/21 401712 76112 325600 19% /mtd_rwcommon Filesystem 1k-blocks Used Available Use% Mounted on /dev/tbml6 3456 3456 0 100% / none 10240 4 10236 0% /dtv none 10240 0 10240 0% /dsm none 235556 0 235556 0% /core none 10240 0 10240 0% /tmp /dev/stl0/19 49664 49664 0 100% /mtd_rocommon /dev/stl0/15 91080 87336 3744 96% /mtd_exe /dev/stl0/16 40832 40832 0 100% /mtd_appdata /dev/stl0/13 10942 130 10812 1% /mtd_contents /dev/stl0/20 102368 47600 54768 46% /mtd_swu /dev/stl0/21 401712 76112 325600 19% /mtd_rwcommon rootfs on / type rootfs (rw) /dev/root on / type squashfs (ro) none on /proc type proc (rw) none on /sys type sysfs (rw) none on /dev/sam type tmpfs (rw) none on /dtv type tmpfs (rw) none on /dsm type tmpfs (rw) none on /core type tmpfs (rw) none on /tmp type tmpfs (rw) /dev/stl0/19 on /mtd_rocommon type squashfs (ro) /dev/stl0/15 on /mtd_exe type rfs (ro,codepage=cp949,vfat,fcache(blks)=128) /dev/stl0/16 on /mtd_appdata type squashfs (ro) /dev/stl0/13 on /mtd_contents type rfs (rw,codepage=utf8,vfat,fcache(blks)=128) /dev/stl0/20 on /mtd_swu type rfs (rw,codepage=cp949,vfat,fcache(blks)=128) /dev/stl0/21 on /mtd_rwcommon type rfs (rw,codepage=utf8,vfat,fcache(blks)=128) none on /proc/bus/usb type usbfs (rw) This program is operated over FSR based The flash memory blocks have been erased successfully. +---------------------------------------------------------------------+ | stl.format : STL-level Partitioning Tool for Flash Block Devices | +---------------------------------------------------------------------+ This partition does not have GWL attribute [Block size : 256 KB] [Total unit : 112] [Block Device Information for /dev/bml0/14] -------------------------------------------- Total number of sectors = 51200 (25 MB/28 MB) -------------------------------------------- STL format complete. Success to format Filesystem 1k-blocks Used Available Use% Mounted on /dev/tbml6 3456 3456 0 100% / none 10240 4 10236 0% /dtv none 10240 0 10240 0% /dsm none 235556 0 235556 0% /core none 10240 0 10240 0% /tmp /dev/stl0/19 49664 49664 0 100% /mtd_rocommon /dev/stl0/15 91080 87336 3744 96% /mtd_exe /dev/stl0/16 40832 40832 0 100% /mtd_appdata /dev/stl0/13 10942 130 10812 1% /mtd_contents /dev/stl0/20 102368 47600 54768 46% /mtd_swu /dev/stl0/21 401712 76112 325600 19% /mtd_rwcommon /dev/stl0/14 25478 130 25348 1% /mtd_rwarea rootfs on / type rootfs (rw) /dev/root on / type squashfs (ro) none on /proc type proc (rw) none on /sys type sysfs (rw) none on /dev/sam type tmpfs (rw) none on /dtv type tmpfs (rw) none on /dsm type tmpfs (rw) none on /core type tmpfs (rw) none on /tmp type tmpfs (rw) /dev/stl0/19 on /mtd_rocommon type squashfs (ro) /dev/stl0/15 on /mtd_exe type rfs (ro,codepage=cp949,vfat,fcache(blks)=128) /dev/stl0/16 on /mtd_appdata type squashfs (ro) /dev/stl0/13 on /mtd_contents type rfs (rw,codepage=utf8,vfat,fcache(blks)=128) /dev/stl0/20 on /mtd_swu type rfs (rw,codepage=cp949,vfat,fcache(blks)=128) /dev/stl0/21 on /mtd_rwcommon type rfs (rw,codepage=utf8,vfat,fcache(blks)=128) none on /proc/bus/usb type usbfs (rw) /dev/stl0/14 on /mtd_rwarea type rfs (rw,codepage=utf8,vfat,fcache(blks)=128)
- Now your system is clean. On next reboot your TV will regenerate that partition, and your devices will be mounted again as before.
- Now you've learn this lesson, you can hack your TV again :)