====== IT9919 Hacking - part 1 - Reading firmware with flashrom ====== In this series I will be hacking around with the IT9919 media processor that powers the Lenkeng LKV373 HDMI Extender Device and the EZCAP 283S which were reviewed in previous videos. In this video I will show some tools and techniques for reading and writing to flash chips with the flashrom open-source flash-reader software and "Blue Pill" STM32F103 board * [[https://odysee.com/@OpenTechLab:f/otl-016-it9919-pt1:8|odysee]] * [[https://www.youtube.com/watch?v=j7JRosD_ua8|YouTube]] * [[https://peertube.social/videos/watch/ad79bda5-8625-4a8c-9494-a2371d573432|PeerTube]] ===== Source Information ===== * [[https://blog.danman.eu/new-version-of-lenkeng-hdmi-over-ip-extender-lkv373a/|Danman's Original Blog Post]] * [[https://github.com/v3l0c1r4pt0r/lkv-wiki/wiki|lkv-wiki]] * [[https://github.com/v3l0c1r4pt0r/lkv-wiki/wiki/Instruction-Set-Architecture|Instruction Set Architecture]] * [[https://github.com/gyrex/CrystalVideo/tree/master/Docs/Parts/ITE%20IT9910%20(H.264%20Encoder)|Leaked IT9910 Data Sheet]] * [[https://drive.google.com/drive/u/0/folders/0B3mWuDyxrXyKZkxwYi1JNllENXc|Daniel Kucera's Repository]] (includes upgrade files, and other captured information). ===== Firmware Backups ===== * Backups of the original content of the flash chips: {{ :videos:016:20181226-lkv-373a-backups.zip |}} ===== Blue Pill Flash Reading ===== ==== General Info ==== * [[http://wiki.stm32duino.com/index.php?title=Blue_Pill|STM32duino Wiki]] ==== Firmware Loading ==== === Software === * Firmware: [[https://github.com/dword1511/stm32-vserprog|stm32-vserproc]] === Wiring === ^ Serial Port Pin ^ Blue Pill Pin ^ | GND | G | | RXD | PA9 (TX1) | | TXD | PA10 (RX1) | | 3.3V | 3.3 | === Jumpers === * Boot0 (Outboard): 1 * Boot1 (Inboard): 0 ==== Reading/Writing Flash ==== === Wiring === {{:videos:016:20190415-flash-resistor-wiring.jpg?400|}} ^ 23/25/26 Series Pin ^ Blue Pill Pin ^ | 1 (CS#) | PA4 | | 2 (MISO) | PA6 | | 3 (WP#) | G for Write Enable, 3.3 for Read-only | | 4 (GND) | G | | 5 (MOSI) | PA7 | | 6 (SCK) | PA5 | | 7 (HOLD#) | 3.3 | | 8 (VCC) | 3.3 |