Venturer STB 7766G DACB technical info.

Smith P.

On Vacation
Original poster
Oct 4, 2003
8,907
2
Bay Area, CA
I'd like to share some tidbits about the Digital-to-Analog Converter Box.

It is based on LG design and use LG chip LGDT1111D as a core of the device.
On PCB installed 32 Mb RAM, 2 MB flash and 32 Kbytes NVRAM for channel's info and your settings.
Also you will find on the board RS-232 and JTAG connectors for debugging SW.

Sample snippet of debug messages during initial boot:
Code:
V1.06.00 Mar  6 2008, 08:58:08 sungwee@sungwee /cygdrive/c/boot_d/boot_1119
Config Baud Rate  : 115200 bps
System Clock Rate : 175 MHz
U-Boot Mem offset : Text/Data [00e00000, 00e19fe7], BSS [00e19fe8, 00e3e90f]

RAM Configuration:
Bank #0: 00000000 32 MB
manufature ID : 0x1, Device ID: 0x49
Flash:  2 MB
In:    serial
Out:   serial
Err:   serial
Set Flash Memory Structure...
Set Region   for Bootrom from 00:00 0x2c000000 (131072bytes)
Set Region01 for Appl    from 00:05 0x2c020000 (917504bytes)
cacheID : 1d0d20d2
write-back, register 7, format C
cache separated
D-cache  4kbytes 4-way 8 words (32bytes)
I-cache  4kbytes 4-way 8 words (32bytes)
Masks:: Index: c0000000, Int: 000000c0, Seg: 000003e0
Compare 00e13dd4 2c013dd4
Boot from address 2c000000
 
Last edited:
If you'll run into debug mode, you can use commands:
Code:
[D2A-BRD #] ?
?       - alias for 'help'
autoboot- set auto boot
b       - boot from server
base    - print or set address offset
bdinfo  - print Board Info structure
boot    - boot from server
bootm   - boot application image from memory
bootp   - boot image via network using BootP/TFTP protocol
cache   - cache operation
cmp     - memory compare
cp      - memory copy
crc32   - checksum calculation
dbgs    - server network address
delay   - delay the whole system
diag    - Go to diag routine at start of flash(default) or ram(index = 1)
echo    - echo args to console
erase   - erase FLASH memory
ether   - set ethernet address
flinfo  - print FLASH memory information
gateway - set gateway IP
go      - start application at address 'addr'
help    - print online help
ifconfig- set/retrieve ipaddr
iminfo  - print header information for application image
load    - load from server
loop    - infinite loop on address range
ls      - Show boot history
mcd     - Change Memory Clock Parameters
md      - memory display
mm      - memory modify (auto-incrementing)
mmu     - MMU operation
model    - change Model Configuration
mtest   - simple RAM test
mw      - memory write (fill)
netmask - set netmask
nm      - memory modify (constant address)
power_on- get IR input for start up
printenv- print environment variables
protect - enable or disable FLASH write protection
rarpboot- boot image via network using RARP/TFTP protocol
rem     - delete boot command entry
reset   - Perform RESET of the CPU
saveenv - save environment variables to persistent storage
sclock  - Change System Clock Rate
setenv  - set environment variables
sto     - store image from server
tftpboot- boot image via network using TFTP protocol
tick    - read timer tick
uart    - change uart enable / disable status
version - print monitor version
vqt     - Do vsb/qam performance test
 
Messages during kernel and app boot time:
Code:
[D2A-BRD #] boot
flash --- <NULL>
MMU CR : 000510f8 (00004000)-> 000550fb
Latest Biz section(1):0x2c020000
Processing BIZ file-from Flash: 0x2c020000
No Aux data are found
[Application Code]
Loading[5] Image from 2c020800 to 00010000(+1022815)
  -- TRY 0 ==>  2341280 bytes loaded in 0.797 sec, rc=0
  -- Checking CRC32[Bin ] ==>  Good, in 0.194 sec
Load Image to 00010000...
Start from    00010000...
MMU CR : 000540fb (00004000)-> 000540fa
cacheID : 1d0d20d2
write-back, register 7, format C
cache separated
D-cache  4kbytes 4-way 8 words (32bytes)
I-cache  4kbytes 4-way 8 words (32bytes)
Masks:: Index: c0000000, Int: 000000c0, Seg: 000003e0
MMU CR : 000550fa (00004000)-> 000550ff
000.020:root    ] >> InitPool  ]]  [0x002e3000-0x01000000]
000.021:root    ] SM_MAT_POOL[ 4] = 0x002e3000(0x004000)
000.022:root    ] SM_MAT_POOL[ 8] = 0x002e7000(0x00c000)
000.023:root    ] SM_MAT_POOL[16] = 0x002f3000(0x018000)
000.024:root    ] SM_MAT_POOL[32] = 0x0030b000(0x030000)
000.025:root    ] SM_MAT_POOL[64] = 0x0033b000(0x0a0000)
000.026:root    ] >> InitBuddy ]] Addr=0x3db000, Size=0xc25000
000.028:root    ] >> Total Free Heap Size = 0xcf1000
Stack... 336860180 002cf3a8
New Application booted, uart = 0xfe000000, baud = 115200



System Clock : 175MHz
Starting  V4.3.39 , Apr  1 2008, 15:19:20, from @:/cygdrive/d/Project/alco/source/TMVB_L204F_TEST/app/d2stb


000.031:root    ] creating Queue   uiMain ... qid is 0x002d0160
000.032:root    ] creating Queue cqMain   ... qid is 0x002d0194
000.033:root    ] creating Queue cqChch   ... qid is 0x002d01c8
000.034:root    ] creating Queue CqUsrDat ... qid is 0x002d01fc
000.035:root    ] creating Queue  SqParse ... qid is 0x002d0230
000.036:root    ] creating Queue  SqDelay ... qid is 0x002d0264
000.037:root    ] creating Queue  SqInput ... qid is 0x002d0298
000.038:root    ] creating Queue SqScreen ... qid is 0x002d02cc
000.038:root    ] creating Queue  SqFlash ... qid is 0x002d0300
000.039:root    ] creating Queue tuner0Q  ... qid is 0x002d0334
000.040:root    ] creating Queue     SqIR ... qid is 0x002d0368
000.041:root    ]  11 Message queues are created
000.042:root    ] creating Sema4  VDPVSyn ...
000.042:root    ] creating Sema4 MuteSema ...
000.042:root    ] creating Sema4  OSDSema ...
000.042:root    ] creating Sema4 CmMainSm ...
000.043:root    ] creating Sema4  DCS_Inp ...
000.043:root    ] creating Sema4  DCS_Par ...
000.043:root    ] creating Sema4  DCS_Scr ...
000.043:root    ] creating Sema4  DCS_Fla ...
000.044:root    ] creating Sema4  DCS_Inm ...
000.044:root    ] creating Sema4 SectFilr ...
000.044:root    ] creating Sema4   AInfo  ...
000.044:root    ] creating Sema4   VInfo  ...
000.045:root    ] creating Sema4  NvmSem  ...
000.045:root    ] creating Sema4      IR  ...
000.045:root    ] creating Sema4    TIME  ...
000.045:root    ]  15 Semaphores are created
000.046:root    ]   0 Partitions are created
000.046:root    ] Configuring D2A_MODE
manufature ID : 0x1, Device ID: 0x49
000.140:root    ] Flash size: 2MB
000.180:root    ] >> InitPool  ]]  [0x01000000-0x01084000]
000.181:root    ] >> InitBuddy ]] Addr=0x1000000, Size=0x084000
000.182:root    ] >> Total Free Heap Size = 0xd6e368
000.635:root    ] NVRAM] found at  0:0xa2 : PageSize  64
000.657:root    ] CN NVM ] Size of Source List   = 12
000.657:root    ] CN NVM ] Source List from allocation
000.657:root    ] CN NVM ] Size of Mapping Buf   = 12
000.658:root    ] CN NVM ] Mapping Buffer from allocation
000.658:root    ] CN NVM ] Size of NVRAM         = 27904
000.659:root    ] CN NVM ] NVRAM Buffer from allocation : 27904 bytes
000.660:root    ] CN NVM ] number of Windows     = 1
000.660:root    ] CN NVM ] number of Sources     = 1
000.660:root    ] CN NVM ]   SRC00               = ANT0 TV(VSB ANT)
000.661:root    ] SOURCE 00 : 69 channels (0x003e1024)
000.662:root    ] NVRAM divided 2 parts : 312:27592 bytes
000.663:root    ] NVRAM for VCH : 27592 bytes, (each 250 bits (32 bytes), total 862 vchs)
000.664:root    ] vch_stat : 003e520c
000.664:root    ] NUM_OF_SOURCE    : 1
000.664:root    ] NUM_OF_TV_INPUT  : 1
000.665:root    ] NUM_OF_TV_SOURCE : 1
000.665:root    ] CM_NUM_WINDOWS   : 1
000.666:root    ] NUM_VCH_ENTRY    : 862
Num Of Sources : 1
 Index  0 : InputID  0, Type :             DTV00 (0x00000001,0x00000001)
Src2OrderTable, 0
Order2SrcTable, 0
Src2OrderTable2, 0
Order2SrcTable2, 0
000.668:root    ] CN NVM ] Sizeof(CNVM_CM_Data.header) = 24
000.668:root    ] CN NVM ] Num VCH Entries       = 862
000.669:root    ] CN NVM ] Size of  VCH Entry    = 250
000.669:root    ] CN NVM ] Initial Flag          = 179
001.044:root    ] cm_ReadMap 1343
001.045:root    ] cm_ReadMap 1378
001.045:root    ] cm_ReadMap 1402
001.046:root    ] CM NVM ] Reading 48 Virtual Channel Informations
001.046:root    ] [VCH] Insert  00, 0.12.11.1
001.047:root    ] [VCH] Insert  00, 0.12.11.2
001.048:root    ] [VCH] Insert  00, 0.19.20.1
001.048:root    ] [VCH] Insert  00, 0.19.20.4
001.049:root    ] [VCH] Insert  00, 0.24.7.1
001.050:root    ] [VCH] Insert  00, 0.24.7.2
001.050:root    ] [VCH] Insert  00, 0.24.7.3
001.051:root    ] [VCH] Insert  00, 0.27.26.1
001.052:root    ] [VCH] Insert  00, 0.27.26.2
001.052:root    ] [VCH] Insert  00, 0.29.5.1
001.053:root    ] [VCH] Insert  00, 0.30.9.1
001.053:root    ] [VCH] Insert  00, 0.30.9.2
001.054:root    ] [VCH] Insert  00, 0.30.9.3
001.055:root    ] [VCH] Insert  00, 0.30.9.4
001.055:root    ] [VCH] Insert  00, 0.30.9.5
001.056:root    ] [VCH] Insert  00, 0.33.32.1
001.056:root    ] [VCH] Insert  00, 0.33.32.2
001.057:root    ] [VCH] Insert  00, 0.33.32.4
001.057:root    ] [VCH] Insert  00, 0.33.32.5
001.058:root    ] [VCH] Insert  00, 0.34.66.1
001.059:root    ] [VCH] Insert  00, 0.34.66.2
001.059:root    ] [VCH] Insert  00, 0.39.38.1
001.060:root    ] [VCH] Insert  00, 0.41.65.1
001.060:root    ] [VCH] Insert  00, 0.41.65.2
001.061:root    ] [VCH] Insert  00, 0.41.65.3
001.062:root    ] [VCH] Insert  00, 0.41.65.4
001.062:root    ] [VCH] Insert  00, 0.43.43.1
001.063:root    ] [VCH] Insert  00, 0.43.43.2
001.063:root    ] [VCH] Insert  00, 0.43.43.3
001.064:root    ] [VCH] Insert  00, 0.45.44.1
001.065:root    ] [VCH] Insert  00, 0.47.68.1
001.066:root    ] [VCH] Insert  00, 0.49.48.1
001.066:root    ] [VCH] Insert  00, 0.49.48.2
001.067:root    ] [VCH] Insert  00, 0.50.54.1
001.068:root    ] [VCH] Insert  00, 0.50.54.2
001.068:root    ] [VCH] Insert  00, 0.50.54.3
001.069:root    ] [VCH] Insert  00, 0.50.54.4
001.070:root    ] [VCH] Insert  00, 0.51.14.1
001.071:root    ] [VCH] Insert  00, 0.52.36.1
001.071:root    ] [VCH] Insert  00, 0.52.36.2
001.072:root    ] [VCH] Insert  00, 0.56.2.1
001.072:root    ] [VCH] Insert  00, 0.56.2.2
001.073:root    ] [VCH] Insert  00, 0.57.4.1
001.073:root    ] [VCH] Insert  00, 0.57.4.2
001.074:root    ] [VCH] Insert  00, 0.57.4.3
001.075:root    ] [VCH] Insert  00, 0.63.42.1
001.075:root    ] [VCH] Remove  0.62.62.3
001.076:root    ] [VCH] Insert  00, 0.62.64.1
001.078:root    ] [VCH]  47 Virtual Channel has been added
001.093:root    ] Initializing   MPX      Resources
001.113:root    ] Initializing   AtvCC    Resources
001.113:root    ] Initializing   TmrRsc   Resources
001.114:root    ] creating Task  Tuner0  , Prio= 35, Stk=  8192 fp 000cf6f4...
001.116:root    ] creating Task  UImain  , Prio= 48, Stk= 16384 fp 00054c94...
001.117:root    ] creating Task  CMtune  , Prio= 41, Stk=  8192 fp 00033f50...
001.118:root    ] creating Task  CMStat  , Prio= 40, Stk=  8192 fp 0004a8f0...
001.120:root    ] creating Task  CCParser, Prio= 29, Stk= 16384 fp 00072128...
001.121:root    ] creating Task  CCPeriod, Prio= 27, Stk=  8192 fp 00072048...
001.122:root    ] creating Task  CCFlash , Prio= 26, Stk=  8192 fp 00070a4c...
001.123:root    ] creating Task  DccScren, Prio= 31, Stk=  8192 fp 0007975c...
001.124:root    ] creating Task  DccParse, Prio= 33, Stk=  8192 fp 00077de0...
001.126:root    ] creating Task  DccInput, Prio= 34, Stk=  8192 fp 000779dc...
001.127:root    ] creating Task  DccDelay, Prio= 30, Stk=  8192 fp 00076398...
001.128:root    ] creating Task  DccFlash, Prio= 32, Stk=  8192 fp 000795e8...
001.129:root    ] creating Task  IRtask  , Prio= 37, Stk=  8192 fp 000cbf40...
001.131:root    ] creating Task  KeyBoard, Prio= 24, Stk=  8192 fp 00012904...
001.132:root    ] creating Task  SysTimer, Prio= 53, Stk=  8192 fp 000ac8a0...
001.133:root    ]  15 Tasks are created
001.133:root    ] Set Flash Memory Structure...
001.134:root    ] Set Region   for Bootrom from 00:00 0x2c000000 (131072bytes)
001.136:root    ] Set Region01 for Appl    from 00:05 0x2c020000 (917504bytes)
001.139:root    ] creating Task    psipMt, Prio= 12, Stk= 16384 fp 0003223c...
001.140:root    ] creating Task   SecRecv, Prio= 19, Stk= 16384 fp 0001fca4...
001.141:root    ] creating Task    psipPt, Prio= 11, Stk= 16384 fp 0002e160...
001.142:root    ] creating Task     psiPt, Prio= 10, Stk= 16384 fp 00029684...
001.144:root    ] creating Task    psipTm, Prio= 13, Stk= 16384 fp 0002137c...
001.145:root    ] creating Task    psipCl, Prio=  9, Stk= 16384 fp 0002cd84...
001.145:CMtune  ] CM Task] Start CM_Tuner1
 
nice

Whoa! That sounds like a fun box to play with.
Here's a link to the PDF manual, for anyone who is interested.
Oh, runs on 9 volts, for those who want a box for their RV.

Where did you run across this box? Some local store carry it?
Got any inside pictures of it?

edit: found a fuzzy picture shot with an iPhone. Doing some reading about it , now.
 
Last edited:
This is the same Venturer box they were (or are) selling at Target, isn't it?

I considered when it looked like my July 2 coupons would expire before I could get a DTVPal, but it was out-of-stock at every Target in my area.

Here's a link to search for it at a Target near you: ( link )
 
Yes. It is from Target store - I posted price(s) in other thread (PAL). There you can find a picture of PCB the Venturer.
attachment.php
 
I have a question.

The block diagram appears to show digital RGB out into an Analog Devices ADV7123

I have 2 Zenith DTT900s, they use the LG LGDT1111D. Do all LGDT1111D solutions have digital RGB out from block D2A in the diagram (which I assume is the LGDT1111D)?

Is it possible to tap into the board and get a digital or analog RGB signal? Why does the block diagram show an ADV7123 and a DSUB when it's not on the PCB?
 

Attachments

  • ADV7123.gif
    ADV7123.gif
    19.3 KB · Views: 350
Last edited:
It is normal for multi-functional devices like the LG chip; you'll need reference design info to add the ADV7123 to your box and rewrite FW if the outputs controlled by LG.
 
In the block diagram there appears to be a digital RGB out as well, bypassing the ADV7123. Not to sure what would could accept that signal, though.

Do you think the FW would have the RGB pins from block D2A disabled? Would it be possible to figure out which pins were which by deduction? I suppose you can work backward from the plugs and traces on the PCB of a LGDT1111D unit and figure out what many of the pins are.

I've got a spare CECB and am dying to hack it :p
 
stb 7766G1 - RCA or Venturer

Smith, P. or anyone else,

How doe one hookup the RS-233 to the board. I see the connector but does it need an RS-232 interface chip between the computer and the 4 pin connector? If so, I do I get one one. Also what software do you need to access the board via the RS-232?

Teddy
 
Whoa! That sounds like a fun box to play with.
Here's a link to the PDF manual, for anyone who is interested.
Oh, runs on 9 volts, for those who want a box for their RV.

Where did you run across this box? Some local store carry it?
Got any inside pictures of it?

edit: found a fuzzy picture shot with an iPhone. Doing some reading about it , now.

That converter box looks like its made with 10V parts. If so, Radio Shack sells a 12V to 9V DC adapter catalog #: 273-1863.
 
Last edited:
Smith, P. or anyone else,

How doe one hookup the RS-233 to the board. I see the connector but does it need an RS-232 interface chip between the computer and the 4 pin connector? If so, I do I get one one. Also what software do you need to access the board via the RS-232?

Teddy
Here is zip with files for restore your Venturer flash and EEPROM in case if your box lost it. You'll need desolder the chips and use programmer device for that.

Teddy, used RS-232 board like this:
 

Attachments

  • Photo_101408_002.jpg
    Photo_101408_002.jpg
    11.4 KB · Views: 301
  • Venturer.zip
    1 MB · Views: 241
Last edited:
WOW, Thanks for sharing that with people that might know what that is!. Im looking for the last firmware file for the DirecTV Hughes HTL-HD I have lots of LG service software just havent had time to mess with. Do you have the last firmware for the Hughes HTL-HD?.

please respond
 
Here is zip with files for restore your Venturer flash and EEPROM in case if your box lost it. You'll need desolder the chips and use programmer device for that.

Teddy, used RS-232 board like this:

You should be able to flash the EEPROM via the JTAG port without removing the chip.

Also, it's likely that a boot loader exists to allow firmware updating via the RS-232 port.


Does anybody have a data sheet for the LGDT1111D ?
 
You should be able to flash the EEPROM via the JTAG port without removing the chip.

Also, it's likely that a boot loader exists to allow firmware updating via the RS-232 port.


Does anybody have a data sheet for the LGDT1111D ?
I would like to see how you managed JTAG or RS-232 reflashing.
Share please what SW and HW you use for that.