How to format /mtd rwarea/ to reset USB hack
Enabling serial input and recover your TV from bricked hack
- Enable debug mode in service menu
- Build ExLink cable
The codes mentioned below are often device (and firmware) specific, so you may need to check for the correct codes specific to your model.
- Connect your communications software and open the serial port
I usually use Mac. Even I could open the port and I could see the info from the TV I couldn't interact with keyboard. So I decided to use HyperTerminal. The old Windows built-in communications software. Windows 7 does not include this software, but you can download it from the web. Just Google it.
- Turn on your TV set, if everything is connected like described at the steps before the serial log should be shown at the serial terminal.
- The TV will keep on sending info, but when the debug log slow down a bit, send next command.
- Enter 10041004 (when typing the digits No Input is shown at the serial terminal) and confirm with Enter.
- In my case the SERIAL INPUT MANAGE was activated just pressed 10041004. No ENTER was needed.
after that you should see:
[SERIAL INPUT MANAGE] serial input ENABLE!!!!!
- Now enter 81588
- You will see this:
Aleady made Scenario File...so delete file @@@@@@@@@@@ Key Record Start @@@@@@@@@@@
- Now enter 20089999
- You will see this:
====================================
[ TOP Debug Menu]
------------------------------------
1 : SubSystem Print On/Off
2 : Platform Print Setting
3 : TD Print Setting
4 : Performance Print Setting
5 : Sdal Print Setting
6 : Sdal Trace Setting
10 : Factory Debug
11 : TD Debug
12 : SubSystem DBG
13 : SubSystem Info Print
20 : Performance File Write
21 : Louvre Print Setting
------------------------------------
70 : Jade Debug
80 : PVR Debug
====================================
99 : Exit
====================================
DBG> :
- Now enter 2
- You will see this:
Input Start Level << :
- Now enter 0
- You will see this:
Input End Level << :
- Now enter 0
- You will see this:
====================================
[Platform Debug List]
------------------------------------
1. Basic Platform
2. Advanced Platform
3. Java
------------------------------------
99 : Exit
====================================
cmd>
- Now enter 2
- You will see this:
====================================
[Platform Debug List]
------------------------------------
1 : FrontRunner Debug
2 : DeviceManager Debug
3 : InfoLink Debug
4 : NetworkManager Debug
5 : PVR Debug
6 : MediaPlay Debug
7 : CEC Debug
8 : PSA Debug
9 : SWU Debug
10 : DMR Debug
11 : PMR Debug
12 : HNC Debug
13 : MoIP Debug
------------------------------------
99 : Exit
====================================
cmd>
- Now enter 2
- You will see this:
====================================
[DeviceManager Debug Module]
------------------------------------
1 : [OFF] DevMgr 2 : [OFF] DevMgr_SS
====================================
Debug Level = Fatal
====================================
80 : All OFF
81 : All ON
85 : Set Debug Level
====================================
90 : DeviceManager MW Debug
91 : DeviceManager SS Debug
92 : ROSE Print Setting
93 : ROSE Debug (For UNIPLAYER)
99 : Exit
====================================
cmd>
- Now enter 90
- You will see this:
====================================
[ Device Manager - TOP Debug Menu]
------------------------------------
01 : Start DeviceManager
02 : Stop DeviceManager
03 : Suspend Mode Test
04 : Start Stress Test
05 : Stop Stress Test
------------------------------------
11 : USB Test
12 : DLNA, FLASH, ODD, HDD, MoIP Test
====================================
21 : Print ALL Device Info
22 : Print Device Info with KEY
23 : Print ALL Partition Info
====================================
FF : Exit
====================================
DBG> : 0x
- Now enter 12
- You will see this:
====================================
[ MISC Debug Menu]
------------------------------------
01 : PRINT DLNA Device Info
02 : PRINT FLASH Device Info
03 : PRINT ODD Device Info
04 : PRINT HDD Device Info
05 : PRINT MoIP Device Info
====================================
11 : FLASH, HDD Format Test
====================================
88 : Shell
====================================
FF : Exit
====================================
DBG> : 0x
- Now enter 11
- You will see this:
Input Partition Key :
- Now enter, mtd_rwarea partition number. How to check partition number and some known partition numbers are here.
NB! You can damage your TV if wrong partition number is entered!
- If everything goes OK you will see the status of the filesystem and information about if partition has been formated:
Filesystem 1k-blocks Used Available Use% Mounted on /dev/tbml6 3456 3456 0 100% / none 10240 4 10236 0% /dtv none 10240 0 10240 0% /dsm none 235556 0 235556 0% /core none 10240 0 10240 0% /tmp /dev/stl0/14 25478 2480 22998 10% /mtd_rwarea /dev/stl0/19 49664 49664 0 100% /mtd_rocommon /dev/stl0/15 91080 87336 3744 96% /mtd_exe /dev/stl0/16 40832 40832 0 100% /mtd_appdata /dev/stl0/13 10942 130 10812 1% /mtd_contents /dev/stl0/20 102368 47600 54768 46% /mtd_swu /dev/stl0/21 401712 76112 325600 19% /mtd_rwcommon Filesystem 1k-blocks Used Available Use% Mounted on /dev/tbml6 3456 3456 0 100% / none 10240 4 10236 0% /dtv none 10240 0 10240 0% /dsm none 235556 0 235556 0% /core none 10240 0 10240 0% /tmp /dev/stl0/19 49664 49664 0 100% /mtd_rocommon /dev/stl0/15 91080 87336 3744 96% /mtd_exe /dev/stl0/16 40832 40832 0 100% /mtd_appdata /dev/stl0/13 10942 130 10812 1% /mtd_contents /dev/stl0/20 102368 47600 54768 46% /mtd_swu /dev/stl0/21 401712 76112 325600 19% /mtd_rwcommon rootfs on / type rootfs (rw) /dev/root on / type squashfs (ro) none on /proc type proc (rw) none on /sys type sysfs (rw) none on /dev/sam type tmpfs (rw) none on /dtv type tmpfs (rw) none on /dsm type tmpfs (rw) none on /core type tmpfs (rw) none on /tmp type tmpfs (rw) /dev/stl0/19 on /mtd_rocommon type squashfs (ro) /dev/stl0/15 on /mtd_exe type rfs (ro,codepage=cp949,vfat,fcache(blks)=128) /dev/stl0/16 on /mtd_appdata type squashfs (ro) /dev/stl0/13 on /mtd_contents type rfs (rw,codepage=utf8,vfat,fcache(blks)=128) /dev/stl0/20 on /mtd_swu type rfs (rw,codepage=cp949,vfat,fcache(blks)=128) /dev/stl0/21 on /mtd_rwcommon type rfs (rw,codepage=utf8,vfat,fcache(blks)=128) none on /proc/bus/usb type usbfs (rw) This program is operated over FSR based The flash memory blocks have been erased successfully. +---------------------------------------------------------------------+ | stl.format : STL-level Partitioning Tool for Flash Block Devices | +---------------------------------------------------------------------+ This partition does not have GWL attribute [Block size : 256 KB] [Total unit : 112] [Block Device Information for /dev/bml0/14] -------------------------------------------- Total number of sectors = 51200 (25 MB/28 MB) -------------------------------------------- STL format complete. Success to format Filesystem 1k-blocks Used Available Use% Mounted on /dev/tbml6 3456 3456 0 100% / none 10240 4 10236 0% /dtv none 10240 0 10240 0% /dsm none 235556 0 235556 0% /core none 10240 0 10240 0% /tmp /dev/stl0/19 49664 49664 0 100% /mtd_rocommon /dev/stl0/15 91080 87336 3744 96% /mtd_exe /dev/stl0/16 40832 40832 0 100% /mtd_appdata /dev/stl0/13 10942 130 10812 1% /mtd_contents /dev/stl0/20 102368 47600 54768 46% /mtd_swu /dev/stl0/21 401712 76112 325600 19% /mtd_rwcommon /dev/stl0/14 25478 130 25348 1% /mtd_rwarea rootfs on / type rootfs (rw) /dev/root on / type squashfs (ro) none on /proc type proc (rw) none on /sys type sysfs (rw) none on /dev/sam type tmpfs (rw) none on /dtv type tmpfs (rw) none on /dsm type tmpfs (rw) none on /core type tmpfs (rw) none on /tmp type tmpfs (rw) /dev/stl0/19 on /mtd_rocommon type squashfs (ro) /dev/stl0/15 on /mtd_exe type rfs (ro,codepage=cp949,vfat,fcache(blks)=128) /dev/stl0/16 on /mtd_appdata type squashfs (ro) /dev/stl0/13 on /mtd_contents type rfs (rw,codepage=utf8,vfat,fcache(blks)=128) /dev/stl0/20 on /mtd_swu type rfs (rw,codepage=cp949,vfat,fcache(blks)=128) /dev/stl0/21 on /mtd_rwcommon type rfs (rw,codepage=utf8,vfat,fcache(blks)=128) none on /proc/bus/usb type usbfs (rw) /dev/stl0/14 on /mtd_rwarea type rfs (rw,codepage=utf8,vfat,fcache(blks)=128)
- Now your system is clean. On next reboot your TV will regenerate that partition, and your devices will be mounted again as before.
- Now you've learn this lesson, you can hack your TV again :)
