No commercial links

Sorry, I had to close comments due to permanent spam. Too much cleanup work.

2017-05-25

Philips 46PFL8007 - QFU1.1E LA - no standby LED - Boot EEPROM 7CT3 25P10 reprogrammed

I bought this Philips as defect and didn't ask any questions. The description said it wouldn't switch on anymore. Well, that did not sound so bad. I had fixed another QFU1.1 this year with a dead standby supply.

At pickup the seller told me that the TV had been fixed during warranty with the same symptoms. The mainboard was the culprit then. Uh oh...

When I plugged it in, the standby LED did not light up. Standby voltage was present. The LED is controlled by the main processor (the standby processor section). The only voltage the stdby proc. takes in is the 3.3V standby. Nothing else. The LEDs are fed with the same voltage.

I studied the service manual thoroughly and the only conclusion was that the processor was in trouble. I ran a reflow session in the oven. Did not help.

In the Iwenzo repair forum, I got the hint to reprogram the standby software flash ROM. For that you need two things:

  • The software binary for the QFU1.1 platform SPI boot EEPROM. Version 77.02.
  • An EEPROM programmer.
My adventures with the UART adapters you can read HERE. This TV did not produce any log whatsoever. The CPU was not running any boot program.

I also purchased an EEPROM programming device called SkyPro USB Programmer. It is made by Coright. The software installed flawlessly on Win10. I had to desolder the Flash ROM 7CT3 and solder it on an adapter board, which then went into the programmer's socket.

The chip sits under the upper right corner of the white heatsink. The sink has to be removed carefully. It is mounted with two spring bolts, which are easy to release, and an adhesive foil. The foil does not survive the process.

I tried a test clip from Aliexpress first directly on the board. This was like lottery. The clip did not attach properly and I got only nonsense results.

The software then identified the Flash as 25P10 (128k) instead of a 25MP05 (64k), which is listed in the service manual.

Now, the hardest problem was to find the right software as there are a number of versions floating around in the net. The QFU1.1 has two variants. One for Fusion 67.0.0 and one for Fusion 77.02.08. This device needs the 77 version.

The 77.04.08 is QFU 1.2 and will not fit. It is used in the xxx8 series, not the xxx7.

To add to the confusion, 77.02.08 is also supposed to work for QFU 2.1. This is only used in the 6007 model, however.

This is the software that worked for meDOWNLOAD

A peek into the binary files

The first diff shows the good file to the left, which finally revived the set, and the scrambled one to the right, which I read from the EEPROM initially. You see that the first block is wiped out with garbage. There were more garbled blocks further up the address space.


The second diff shows the Fusion 77 to the left and the Fusion 67 to the right. If you have a file at hand and like to investigate which version it is, take a HEX viewer and study the first block.


Notes


I first did not realize that the TV was actually fixed because I didn't insert the flat cable to the TCON properly. It looked totally fine, yet it wasn't sitting right. The sockets on the mainboard have a locking mechanism. You need to push the two black knobs down. I failed to do that and broke off the locking nose on the cable. The cable then does not sit very well anymore.

The TV was stuck in a boot loop because of the cable. The log displayed weird errors about the DVB-S tuner. In hindsight, it must have been trouble with the I2S bus.

I stumbled over the solution while testing another board where I made the same mistake with the cable again! This time I caught it rebooting immediately after I had touched the cable.

I once destroyed a not properly seated cable. A trace went up in smoke. Be very careful with those.

Don't forget to plug all wire harnesses into the mainboard. If the WLAN is missing, you will also get a loop.

So what is going on with those QFU chassis?


A number of devices with similar symptoms are mentioned in repair forums and sold on eBay/classifieds. What's going on here? How can an EEPROM, which is otherwise fully functional, lose blocks of its memory? What I know is that the processor gets really hot. I measured 57° celsius at 21° room temperature with an open back cover. Now extrapolate that to 30° and closed cover. I recon it will be 70° or more. Does the EEPROM get grilled? I don't know.

15 comments:

  1. Nice going!
    I read here (see in google and translate) that alike current PUS models the spi can be updated through some usb file and pressing key on boot.
    http://monitor.espec.ws/section31/topic231583.html
    Anyway, I like to try when I pickup one like these, good to see yours is now working.

    ReplyDelete
    Replies
    1. The QFU chassis have a variety of possible failures. Mine was worst case where onle reflashing with hardware helps. Some others at least allow to start a backup software and that revives the SPI.

      Delete
    2. Good morning ,
      Do you have the nand memory software?

      Delete
    3. Not for QFU1.1, yet. Only for QFU1.2. I am planning to read the NAND of this device.

      Delete
    4. Hello
      very nice engineering job.
      You've mentioned 77.04.08 is QFU 1.2
      I have a 46pfl8008 and looking for it, can you help me find it?

      Delete
    5. Find what exactly? The SPI image is here: https://drive.google.com/open?id=10lj7nKMmD4B9_HfMALqUjCRQmL3T34zg
      The NANDs cannot be programmed the simple way I've learned in the meantime.

      Delete
  2. ''I once destroyed a not properly seated cable. A trace went up in smoke'' - I had same situation... in that case you burned only ribbon cable or m. board?

    ReplyDelete
    Replies
    1. Only the cable, luckily. Found brand new ones on eBay.

      Delete
  3. hello
    The upload is empty on the link after mount the disk daemon tool
    Do you have the binary as a file?
    I am an individual looking to repair his television
    Regards

    ReplyDelete
    Replies
    1. Sorry, I don't understand your question. Which upload is empty? What's "disk daemon tool" to do with all this? The .bin file that I have linked here are meant to be put into a eeprom burner.

      Delete
  4. Hello. I have a 60PFL8708S/12 I believe its QFU 1.2? It suddenly died on me and now has this 2 blink every 3 sec. Does take some time for the LED to start though. I have taken the tv apart and measured all voltagtes which was fine. There was a 3.3v and 2 x 12v. OK. Now the mainboard does look in great shape by the looks. Could look like a brand new actually. However I could see on the plastic cover off the TV that there was great heat at the CPU (Fusion) and the Power supply. I guess thats normal with this chassis. The mainboard is impossible to get as a sparepart. I REALLY wanna fix it. How to approach? You think reballing the BGA would be first step? thanks

    ReplyDelete
    Replies
    1. Hi, reballing is actually a waste of time. I practiced it for a few times and the results were frustrating. My current advice for these boards is to put them in a pre-heated oven (215°C) for about 5 minutes. The heat sink is best removed before that. Just heat the sink with hot air and carefully twist it until it gives up. Also cover the plastic parts with tin foil. If the device works after the baking, glue the heatsink back on with a thermal glue. I highly recommend to cut out the back cover where the sink sits to improve cooling.

      The baking process can be controlled better with a cheap temp measurement device, which use a "K" type sensor. Attach the sensor to the board or to the CPU if possible. With temperature control, you are able to check if the board reaches the 215° and also whether the oven is accurate.

      The board must reach the peak temp for a few seconds and then it can cool off immediately.

      Delete
  5. Hello, can I advise you?
    Tv Philips 32hfl5008, after changing something in the menu settings, it stopped responding to panache, the guest and the master remote do not work. The diode does not flash when the signal from the remote control is sent. The red LED is on in standby mode. The tty console is reporting, you can see it starting up to a point. The side panel works. What are the possible repair scenarios?

    ReplyDelete
    Replies
    1. try inter service menu by press buttom and make rest manufacture

      Delete

Note: Only a member of this blog may post a comment.