IT9919 Reverse Engineering
Summary
Dec ??, 2018Experiments reprogramming the firmware of the IT9919 media processor with flashrom and STM32 Blue Pill boards.
Source Information
- v3l0c1r4pt0r: Reverse Engineering the LKV373A
-
- Daniel Kucera's Repository (includes upgrade files, and other captured information).
Collected Firmware
- Backups of the original content of the flash chips: 20181226-lkv-373a-backups.zip
Blue Pill Flash Reading
General Info
Firmware Loading
Software
Wiring
| Serial Port Pin | Blue Pill Pin |
|---|---|
| GND | G |
| RXD | PA9 (TX1) |
| TXD | PA10 (RX1) |
| 3.3V | 3.3 |
Jumpers
- Boot0 (Outboard): 1
- Boot1 (Inboard): 0
Reading/Writing Flash
Wiring
| 23/25/26 Series Pin | Blue Pill Pin |
|---|---|
| 1 (CS#) | PA4 |
| 2 (MISO) | PA6 |
| 3 (WP#) | G for Write Enable, 3.3 for Read-only |
| 4 (GND) | G |
| 5 (MOSI) | PA7 |
| 6 (SCK) | PA5 |
| 7 (HOLD#) | 3.3 |
| 8 (VCC) | 3.3 |
Boot Rom
- Internal Bootloader ROM: 20190318-rom.zip
Call Graph
Functions are labelled with: address, number of instructions, presence of SMED(IA02) and SMAZ comparisons, and register accesses.
