More interesting discoveries inside the HD-A1

If you haven't seen the Toshiba HD-A1 tear-down, you should start there.

New this time is a quick one-minute video which shows my quest to get the M-Systems USB flash drive recognized under XP.  This was filmed before my last post which talks about some initial findings inside the firmware.

Now that I had a few more minutes to dig a little deeper, I found a great freeware ext2fs Installable File System Driver that was able to recognize the USB flash disk under XP.

After looking at the size of various files and folders, I found that there is one specific file named pstorage under /usr that is pretty large: exactly 129.5 megs.  This consumes a little over half of the entire space on the firmware flash disk.  Messages in other parts of the firmware indicate that "pstorage" refers to "Persistent Storage", and apparently there are some menu features to manage what gets stored inside this file.  Inside it's organized as a mountable virtual disk.

Looking at the start of the pstorage file, it looks like a FAT16 partition created with mkdosfs.  The first 512 bytes are the boot sector with the standard messages "FAT16", and "This is not a bootable disk.  Please insert a bootable floppy and press any key to try again".  Also the common hex signature at the end of any boot sector: 55 AA.  The next sector has the common signature for the start of a FAT table: F8 FF FF FF, which indicates a FAT16 table.  The FAT table is filled with zeroes, so nothing allocated.  There is the second FAT is at offset 0x10600, and of course has the same signature and no entries.  It ends at 0x20A00, and the rest of the virtualized disk is all zeroes.  No directory entries whatsoever.  So it's formatted and ready, but just not used for anything out of the box.

There are four configuration files found in /usr/local, one called "capability.conf" with some interesting settings:

PerformanceLevel
EnableHDMIOutput
SupportofHDMI
DirectOutputtoSPDIFofDolbyDigital
DirectOutputtoSPDIFofDTS
ResolutionofSubVideo
SupportofSlowForward
SupportofSlowReverse
SupportofStepForward
SupportofStepReverse

Also in this file are 32 System Parameter Registers (SPRM). These settings are the default parameters for the player, and were around with the original DVD format.  With the old DVD format modifying them allows for things like configuring a player to be region-free.  As far as I'm aware there were only 24 settings available before, so what's interesting now is that here the settings range from 0 to 31, meaning there's now 8 more to learn about.  They've already got values in them, so there's something there.

In terms of testing the actual HD-DVD IDE drive, I installed Vista Beta 1 on a machine and got the same kind of results as with XP.  It can recognize any DVD or CD, but not the HD-DVD movie I tried with it.  Perhaps when Beta 2 is released it will recognize the high def media.  I haven't tried to look sector by sector.

I wish I had more time to dig in further, but work and preparation for the Desert Code Camp are keeping me pretty busy these days.  Plus my curiosity quota is now fully satisfied for this week!  Maybe next week I'll put the unit back together again and actually power it up for once.

 


Feedback

# re: More interesting discoveries inside the HD-A1

You should use GNU/Linux on your computer.

Surely it will be more easy to investigate this kind of hardware!
5/5/2006 6:58 AM | John Doe

# Serial Port

I believe the serial port doesn't do much, really.

If you look at Toshiba's page, there are two HD-DVD player models - the HD-A1, and the HD-XA1. The latter has among it's features, an RS232 control port, "motorized door", and "anti-vibration feet".

5/18/2006 4:54 AM | Worf

# re: More interesting discoveries inside the HD-A1

I can read with my Nec HD DVD drive the entire structure of any HD DVD and i can also copy every files, including the AACS dir. :P

5/23/2006 3:59 AM | Deux

# re: More interesting discoveries inside the HD-A1

Deux - Would you give us more details?

OS, programs used, steps to get it working, etc.

I have the drive out of the HD-A1 and mounted it in a Firewire/USB enclosure. I can see the size of the HD-DVD but can't see the stucture/folders, etc.

It reads regular DVD's, etc. just fine.

Thanks! 8/16/2006 2:00 PM | Bill W

# re: More interesting discoveries inside the HD-A1

re. the firmware... any change to the firmware will involve balancing of the checksum, there could also be a smart protection routine which has been used in some dvd players before. Any changes to bytes may result in the player running a matching routine and could freeze if detected. I would expect that further work will be needed to implement new routines within the existing firmware to get around things like pal disc recognition in addition to changing the region code. We are working on the A1 in our workshop, so will keep you updated.
thanks
Alan at HD-DVD UK 9/27/2006 11:56 PM | Alan at HD-DVD UK

# re: More interesting discoveries inside the HD-A1

Perhaps you can use the same approach as with the Xbox hd-dvd drive:

http://www.dailytech.com/article.aspx?newsid=4920

Just a thought ..

11/16/2006 3:40 AM | dennis_hs

# re: Inside the HD-E1

HD-E1 uncovered, our workshop has removed the lid of the Toshiba HD-E1 to reveal some interesting findings. See the comparison between the HD-E1 and A1 and view the component layout at www.dvdlibrary.co.uk
1/19/2007 1:51 AM | Alan at hd-dvd uk

# re: More interesting discoveries inside the HD-A1

BTW, thanks go to Lorin for his original hard work and sharing his discoveries of the HDA1 article. 1/19/2007 1:58 AM | Alan at hd-dvd uk

# re: Update on the HD-A1

Update on HD-A1... the m-Systems usb uDOC chip is write protected... does anyone have the knowledge on how to deprotect it? or some software that will allow editing of the uDOC saved file. I beleive I can remove the region coding for standard dvd, but cannot write my program to the chip. Any help appreciated. Contact me here or via the dvd library.
thanks, Chipmaster 2/8/2007 6:47 AM | Alan at HD DVD UK

# re: Update on the HD-A1

I would download and read the uDOC datasheet. See if it can enlighten you further. Here's the link:

http://www.m-systems.com/NR/rdonlyres/1E31358E-3E13-48DB-960E-61FC37F731EA/0/uDOC_DS_rev23.pdf|uDOC_DS_rev2.0.pdf 2/15/2007 8:32 PM | Ken

# re: More interesting discoveries inside the HD-A1

Alan, I have a few idea exactically how to unprotect it, and why units are bricking w/ the update, however I need another flash to compare it to.

Let me know how I can contact you! 2/17/2007 9:08 PM | Me!

# re: More interesting discoveries inside the HD-A1

Any update about unprotect operative system?
My player freezes and i'm in italy unable to repair it.
Regards
Luigi 4/11/2007 7:37 AM | luigi

# re: More interesting discoveries inside the HD-A1

Hi me,
sorry for late.. been busy with other pioneer firmware mods.
Contact me by email at mailto:tech@dvdlibrary.co.uk
5/3/2007 6:20 AM | Alan aka Chipmaster

# re: More interesting discoveries inside the HD-A1

Has there been any more findings on this? Do you have to get new firmware? or take the USB Flash device out and use it in your computer to get the HD-DVD drive to get recognized? 11/1/2007 4:06 PM | Tony

# re: Update on HD DVD Players

Hi all,
just a quick update, haven't had much time to spare on these what with launching bluray upgrades, overflow of repairs etc.
Re. the HD-A1 crashing during firmware update... you can get the drive working again by putting the drive in from another identical working player with your players usb chip. You may have to install the other usb chip from the donor machine, then desolder the cmos battery on the main board, then once the player is booted hot swap the drive for the corrupted one, then attempt a firmware update.
Later 3/11/2008 12:17 AM | Chipmaster

Post a comment





 

Please add 8 and 8 and type the answer here:

News


Welcome to my blog.
Here's what we've got on the menu today:

Tag Cloud


Article Categories

Archives

Post Categories

Image Galleries

Syndication: