Home     Contact     Projects     Experiments     Circuits     Theory     BLOG     PIC Tutorials     Time for Science     RSS     Terms of services     Privacy policy  
   
 Home      Projects     Experiments     Circuits     Theory     BLOG     PIC Tutorials     Time for Science   

20 December 2010
Author: Giorgos Lazaridis
Reverse-Engineering an LCD Display




The first steps of reverse engineering

The very first step, is to identify what i was looking for: Looking to see how it works? No. See how the chips are interconnected? No. What i am looking for, is to see how to interface this module with the 18-pin ribbon cable that it carries. So, first of all, i need to identify what each cable does, or at least, where it is connected. But first, i need to see what help i can get more. So, i googled for the chips that are vidible on the PCB. There are actually 4 different chips:


  • 73101YXA
  • C324G
  • LC79401
  • LC79431

  • I managed to find the datasheets for two of them, and it proved that it was just enough:

     LC79431 datasheet

     LC79401 datasheet


    These two chips are responsible for the horizontal and vertical scanlines, which is obvious if you see the arrangement on the PCB. I also removed the LCD from its PCB to see what is hidden in between, but i found only PCB traces and vias.


    This is one of the 4 chips responsible for the horizontal data This is one of the 3 chips responsible for the vertical scan lines Between the LCD and the PCB there is only the backlit





    Now what?

    Now that i have some datasheet in my armory, i can start identifying what each pin of the 18-pins connector does. First of all, i had to find the VDD and VSS pins. There should be some! So, i began from the VSS and VDD signals from one of the chips that i had the datasheet. Within half an hour, using of course my magnifier glass (i am getting old), i had some first results:


  • Pin 4: GND
  • Pin 5: VDD
  • Pin 6: GND
  • Pin 9: GND
  • Pin 11: GND
  • Pin 13: GND
  • Pin 15: GND

  • Do you see something strange? There is one VDD and plenty GND (VSS) signals. Why? I did not know by i could suppose that it is used to avoid inter-talking between data lines. This is a very usual technique. If you have ribbon cables and there are data lines with high speed data transmition, then you put between them grounding wires to avoid inter-talking between them. Anyway. There are some more pins to identify. Slowly and carefully i followed all the lines and wrote down where each one goes. Here are all the pins:


    Pin #Goes toPin description (datasheet)
    1IC7 - PIN 82DIO80
    2IC5-7 PIN 96Bidirectional shift register's shift clock (trigger in on trailing edge)
    3IC1-4 PIN 99CP display data acquisition clock (falling edge)
    4GNDGND
    5VDDVDD
    6GNDGND
    7IC1-4 PIN 85 | IC5-7 PIN 84VEE
    8IC1-4 PIN 89 | IC5-7 PIN 89[-]DISPLAY OFF
    9GNDGND
    10IC1-4 PIN 98D1
    11GNDGND
    12IC1-4 PIN 97D2
    13GNDGND
    14IC1-4 PIN 96D3
    15GNDGND
    16IC1-4 PIN 95D4



    LCDs are sensitive in temperature changes, so it is normal to find a thermistor nearby for temperature compensation.

    I was right. between the GND lines there are data lines, D1 through D4.

    Also, there are 2 more pins which i did not mention so far, pin 17 and 18. I followed these lines, and they both ended up on the leads of a tiny SMD part. Nothing else. The part had the ID "TH1"... Does this means THermistor? LCDs are sensitive in temperature changes regarding their contrast, so it is normal to find a thermistor near by for contrast temperature compensation. I put my voltmeter and got a resistance measurements. Then i touched this smd part and the resistance began to decrease. I let it again and the resistance began to increase... It is clearly a NTC thermistor for temperature compensation. That was easy.



    Lets give some POWER!

    I checked and double checked the lines with the voltmeter to make sure that i did not mark as "GND" a "VDD" line, because this would be a mistake that i could do only once... I need to make this LCD work, and i only have one in stock. That makes the challenge harder. When i was sure, i took the ribbon cable out and cut one end. Then i soldered my 0.1'' 18-pins male connector, to plug it in on a breadboard. I connected all the GND wires to the 0 volts, and the VDD to 5 volts. Of course, i previously had read carefully both datasheet. Some chips operate at lower voltages! I hate the smell of a burning chip, especially when there is no re-try. Trial and error does not apply here.

    I decided to put PIN 1 on the oscilloscope (to see what this DIO80 is). I connected Pin 2 and 3 to my function generator. Not directly of-course! Through a transistor to have absolute control of current and voltage. Pin 8 obviousely had to be connected to +5 volts (according to the description). As for the 4 data lines, i pulled half of them down and half of them up through resistors. POWER UP!!!

    Nothing, nothing at all! I was almost sure that this would happen, because i had Pin 7 on the air. But what is this "VEE"? In the datasheets it says that this is the VDD-VEE voltage difference for power supply of the LCD block... Did not make any sense. So, armed with courage i connected it to 5 volts through a resistor... nothing... -5.. nothing. 5 without a resistor... -5 directly... nothing at all.

    Then something happened. With my finger, i touched the wire from Pin 1 (that was connected to the oscilloscope). The LCD blinked for an instance! ITS ALIVE! How stupid of me. This pin was an input and NOT an output. I connected it to +5 volts (through a resistor). I also put pin 7 to ground. And guess what!!!





    This is the very first screen that i got from this LCD. Nothing fancy now that i look it again, but for a moment, i looked like the lost masterpiece of Michelangelo. Obviously, this first pin was the key to start sending scan lines. But hey, if i have it all time on +5, what are these random gaps? Well, when i opened the LCD, i must have moved the connector a little bit and it lost contact. So i re-opened it and re-closed it, this time more carefully. Then, i got a completely black screen.

    But hey, again. If i give 1-0-1-0 to data, why i get a black screen? What is the meaning of these data-lines anyway? A more closely look on the LCD revealed the final secret. Half of the lines were black, and the other half lines were very dark gray. This is obviously the result of a bad contrast, isn't it? Is there a pin that could adjust the contrast? If you thought of this damn pin 7, then you thought correct. I put a 5K potentiometer between this pin and ground, and here are the results:





    That was good but too easy. The next part is to program a PIC and give some life to this sweet LCD. Did i mention that this is 320 by 220 pixels? The external dimensions are 15.5 x 12.5cm, and the visible area is 13.5 by 10.5 cm. I suppose that this is a 6.5'' B/W LCD with backlit. I have not work yet with this backlit. I will later on.


















    Comments

      Name

      Email (shall not be published)

      Website

    Notify me of new posts via email


    Write your comments below:
    BEFORE you post a comment:You are welcome to comment for corrections and suggestions on this page. But if you have questions please use the forum instead to post it. Thank you.


          

  • At 23 February 2014, 15:44:27 user leemidi wrote:   [reply @ leemidi]
    • very cool - nice work man!!!


  • At 11 June 2013, 14:18:43 user Giorgos Lazaridis wrote:   [reply @ Giorgos Lazaridis]
    • @Allan Its all explained in teh 3 pages of this document


  • At 11 June 2013, 13:42:13 user Allan wrote:   [reply @ Allan]
    • Very interesting. Thanks for taking time to make these videos. What exactly does your breadboard circuit do in order to shift (scroll) to the next scan line on the LCD ?


  • At 7 December 2012, 15:33:14 user BBotany wrote:   [reply @ BBotany]
    • 25AA256 might only work with clock to 10MHz (Microchip datasheet). But 104Hz refresh is still pretty good.


  • At 6 December 2012, 19:46:25 user mariwan wrote:   [reply @ mariwan]
    • thanks for the answer.
      I think this will be useful

      http://www.waitingforfriday.com/index.php/Reverse_Engineering_a_1.5_inch_Photoframe


  • At 5 December 2012, 21:16:02 user Giorgos Lazaridis wrote:   [reply @ Giorgos Lazaridis]
    • @Mariwan well... i know that laptop screens have controllers on their sides, so it depends on the controller...


  • At 4 December 2012, 20:39:13 user Mariwan wrote:   [reply @ Mariwan]
    • Thanks for sharing.
      I have a question .. Do you think that it will be possible to use a laptop screen in the same way?


  • At 24 August 2012, 7:22:43 user Giorgos Lazaridis wrote:   [reply @ Giorgos Lazaridis]
    • @kiranvarma-npeducations which software do you mean? The PIC software? It is very messy and i made it only for testing the LCD. If this is what you want, i can certainly give it to you. But it is not commented.


  • At 22 August 2012, 16:45:42 user kiranvarma-npeducations wrote:   [reply @ kiranvarma-npeducations]
    • @Giorgos Lazaridis
      Really thanks for your reply! could you give the software for a trail! I really liked it.


  • At 3 July 2012, 12:28:04 user Giorgos Lazaridis wrote:   [reply @ Giorgos Lazaridis]
    • @kiranvarma-npeducations the software for PC program is visual basic 6, kinda old but still works ;)


  • At 3 July 2012, 8:36:44 user kiranvarma-npeducations wrote:   [reply @ kiranvarma-npeducations]
    • Is that software shown in video is designed by you, its cool! simply generating binary code for bitmap images and serializing.. to LCD panel via some controller (i think from Philips). Which language that u have used to develop software. Final output in LCD panel is mind blowing, you are genius in both software and hardware part. Really amazing video, really reverse engineering. Thanks for such wonderful project tutorial. I will bookmark your site for my learning benefit


  • At 6 May 2012, 20:31:17 user Giorgos Lazaridis wrote:   [reply @ Giorgos Lazaridis]
    • @sdfdsfadsjk But first i will finish my coffee maker for which this LCD is supposed to go. But due to lack of funds, the project will be delayed for a while.


  • At 6 May 2012, 20:03:03 user sdfdsfadsjk wrote:   [reply @ sdfdsfadsjk]
    • I hope you can finish the article sometime. I'm eager to learn how it all comes together.


  • At 21 November 2011, 5:41:30 user Kammenos wrote:   [reply @ Kammenos]
    • @Annonymois sure there are methods for this, but not by hacking the LCD that way. There are programs for example for PCs and others for telephones to do this, there are also very VERY cheap gadgets (http://www.ebay.com/sch/?_kw=gsm%20spy&_clu=2&_fcid=5&_localstpos=&_sop=15&_stpos=&gbr=1). If i were you, i would start with a simple PC format, and then install a firewall on the PC. Any surveillance program installed would then be erased.


  • At 20 November 2011, 22:10:52 user Annonymois wrote:   [reply @ Annonymois]
    • Hi. I saw your YouTube video about reverse engineering an LCD screen. And some posters had said this process is used by hackers in order to spy on people through their computer screens? And I started googling this questions because I perceive I am being watched by people I know. I don't know how. I suspect there is a website where the hackers stream the audio and visuals to the recipients who include friends and so-called family members. They drop subtle hints to me as to the fact they they know what I'm doing by posting comments on YouTube videos I've just watched or they repeat the words I've just spoken by writing it down on my Facebook wall or in my junk email subject line. If you google gang stalking, cause stalking, gas lighting, you will see that there are a lot of people who are experiencing electronic surveillance. It's crazy. I know I saw a real life police show once and they were receiving visual feed from the cell phone of a criminal. I don't know how they did it. But I have been abused by people I know at work and in the last year by my own family because they used to like / love me and now they hate me. My brothers family in particular and my nephew from my sister have been befriended by these cause stalkers and they constantly let me know I'm being watched. They don't admit it but I've heard them talk about private conversations I've had when they were no where near me! It's crazy.

      Once again the question is: can I be seen when I'm in my pajamas in front of my PC monitor, iPhone screen, even if the camera is not pointed at me. Just through the screens? Thank-you


  • At 20 October 2011, 14:11:02 user Tom wrote:   [reply @ Tom]
    • posted photos under this forum topic...

      http://pcbheaven.com/forum/index.php/topic,1386.0.html


  • At 20 October 2011, 5:30:11 user Kammenos wrote:   [reply @ Kammenos]
    • @Tom cool! will you post any images to see what you are making? You can use the forum, or a free image host.


  • At 20 October 2011, 2:29:47 user Tom wrote:   [reply @ Tom]
    • Kammenos,
      I finally got my display working! It's only 160x80 so I can get great refresh rates from a pic... right now the controller is an 18f2455 and i'm using it's internal ram for the display. Currently it only displays a test image that I stored in program memory, but I plan to add a 5x7 font, a gal for timing logic, external serial display ram, and serial character input... then I'll use it for console output on a couple of hacked linux devices. Thanks for all the information!!

      Charlie,
      Found the spec for your panels on-line. Just making a physical connection to those panels would be very difficult because of the 60+ FPC connector on the stupid thing... unless you have a breakout board in the works? If you can physically connect to it, making a controller is certainly doable. You might need an fpga or something else that's pretty fast to do the more complicated rgb timings.


  • At 4 August 2011, 12:51:17 user Charlie wrote:   [reply @ Charlie]
    • Hello all,

      I have obtained a large (200-300) lot of bare LCD Screens (no driver/controller boards). About half of them are 3.8" Sharp LQ038 screens. These were stored loose in a box and many are obviously broken. I would like to do something with these and I am at this point looking for a simple circuit so that I can test them, also possibly a way to turn them into digital photo frames. I am an Electrical Engineer, but it has been a while since I have done detailed component work like this and I have never worked with Color LCD displays before. Can someone direct me to where I can find some circuit designs that I may be able to use?

      Thank You,


  • At 2 August 2011, 18:34:26 user Kammenos wrote:   [reply @ Kammenos]
    • @Tom its too cool to hear that you are doing fine. I'm waiting for your video to see the results ;)


  • At 2 August 2011, 18:30:42 user Tom wrote:   [reply @ Tom]
    • Just recently got back to my lcd project... The M signal is to drive the LCD voltages: the col/seg drivers use it to alternate the voltage applied to the cells, otherwise the lifespan is shortened. The pic simply alternates M from high to low every frame.

      My lcd is only 160x80, and I've generated a test image with a pic18f2455... I'm only running at 20MHz right now but the refresh rate is good because it's a much smaller screen. Thanks again!!


  • At 29 April 2011, 4:59:56 user Kammenos wrote:   [reply @ Kammenos]
    • @vga the problem that i faced with vga is the speed. a 1024x768 @60hz monitor will receive data with a rate of abput 47.2MHz (1024*768*60). Moreover, the signal comes in 3 analog lines, 0 to 0.7 volts. My knowledge is not sufficient to select the proper chips for the job, read and recreate the signal correctly.


  • At 29 April 2011, 4:30:48 user vga wrote:   [reply @ vga]
    • Can you reverse engineer VGA?
      I have 4 identical LCD monitors.
      I like to wire them together in one LCD screen.
      So from PC will go one vga cable to a box. In this box will be 4 vga outputs for my other 4 screens.


  • At 12 April 2011, 21:00:08 user jparker wrote:   [reply @ jparker]
    • You are very good at debugging (reverse engineering). I like your honesty when you talk about your projects/experiments. You also inspire me to explore some of my broken devices parts. Hang on to the curiosity you have and it will be kind to you in the future I'm sure. Thx for the website.....


  • At 7 April 2011, 17:50:50 user Vasilis Kostelidis wrote:   [reply @ Vasilis Kostelidis]
    • Oh hello. I am sorry I missed your post.

      So, when I say that this is not very flexible, I mean that you have to do everything by yourself, example: Let's say you want to print a string on the screen.

      With your design, you have to take the fonts, calculate the exact position on the screen, take care of the background (and not delete it) and load the image in the external memory.

      With a smart controller, like the SED, you just say that you want to output on the screen the specific string. It will take care of it. I will also not delete the background image, so, when you take the letters out, the background will be there.

      My first monochrome LCD, like yours, didn't have a smart controlle, I put the LC7981 controller on it and it worked. My second monochrome LCD was this:
      http://www.allelectronics.com/make-a-store/item/LCD-101/256-X-128-LCD-PANEL//1.html

      I had to do a change there. It's been a long time and I don't remember but here is bottom line: The SED1335 supports a 16 bit address bus and the memory on this LCD is only 8 kBytes. I found an 32 kBytes RAM with the same layout as the 8 kBytes. The difference was that the 8 kBytes RAM had two NC lines in the place of the two extra address lines on the 32 kBytes RAM. So, I replaced the RAM, hardwired the NC pins to the correct SED1335 pins and it worked perfectly :)

      Good luck with that if you decide to go with it.


  • At 28 March 2011, 5:15:49 user Kammenos wrote:   [reply @ Kammenos]
    • @Tom 1. Yes, square wave signal for both
      2. i am not sure what these pins do. in my case, the 3 79430 chops have their 3 M pins connected to a strange chip labeled 73101YXA at pin #3. When i began to RE, i could not find any info about this chip. Luckily, i did not have to. If you manage to find something about pin M or this chip, please email me to upload it for others.


  • At 27 March 2011, 21:10:58 user Tom wrote:   [reply @ Tom]
    • Nice work! You gave me the idea to work on my own 160x80 lcd which has the same common and segment driver. Two questions if you don't mind...
      1. you said you connected your pins 2 and 3 (CP for the 79431 and 79401) to your function generator - was this just a square wave connected to both CP inputs?
      2. what is the M pin (pin 94 on the 79430 and pin 86 on the 79401) on your lcd connected to? i have a pin on my connector that goes to M on the drivers and i'm not sure what to do with it... the specs say M is an input - "LCD drive output alternating current (AC) signal"
      Once I figure those two points out I'll make up some programmable logic to take the place of all the discrete TTL chips. Thanks!!


  • At 5 March 2011, 12:07:48 user bodyartcrew wrote:   [reply @ bodyartcrew]
    • hi!
      nice vids,

      I got exactly the same lcd optrex dmf 500081n f.fw-2 96z2m1.
      They were used in so called "Maas" cofee machine prepaid system.
      it came also with the complete controller and keypad.
      If needed i can provide the datasheet of the lcd .

      Good work!

      Greetings Halriasa


  • At 26 February 2011, 22:17:45 user Kammenos wrote:   [reply @ Kammenos]
    • Bill, i really had no idea of this SED1335! I might give it a try. But what do you mean that this is not very flexible?


  • At 25 February 2011, 19:47:01 user Bill Kostelidis wrote:   [reply @ Bill Kostelidis]
    • Hello there.

      The solution you are taking, although very creative, it is not too flexible. You cannot do many things with this design.

      What I would suggest, after of course you finish with the current design, is to put a SED1335 controller hooked up in there. The controller is so easy to play with, you will find so many drivers in C or assembly.

      And if you want to re-invent the wheel (I assume you want, we engineers are the same yes?) then you can write them yourself!

      You can buy the SED1335 on a board if you like
      http://www.shopeio.com/inventory/details.asp?id=773&x=Seiko%20LCDC-1330-32A

      Have fun!
      Bill.


  • At 17 February 2011, 13:58:52 user Salomon wrote:   [reply @ Salomon]
    • I would like to reverse eng. a BB color LCD.


  • At 16 February 2011, 6:50:04 user Kammenos wrote:   [reply @ Kammenos]
    • Jonathan you know what? your idea has a strong base, and i will certainly give it a shot! i think it will work. thank you for reading posting this comment!


  • At 16 February 2011, 1:00:33 user Jonathan wrote:   [reply @ Jonathan]
    • I think the 16F1934 can do it without extra hardware, using the MSSP and sacrificing four I/O lines.

      You can have a 32MHz INTOSC (8MHz with 4x PLL; see section 5.2.2.6 of the 16F1934 data sheet). You can also use the MSSP to fetch bytes from the external memory for you at one bit per CPU cycle while sending the previous byte to the LCD, or get display data from internal program memory or even RAM instead.

      Instead of 11*80 instructions to display a line, try 14*40 or less, something like:

      ; send one line to LCD
      ; RD[7..4] LCD data, RD[3..0] N/C, RB0 -DCLK
      ; setup FSR1L/H and dotcnt (6)
      do_dots:
      MOVF INDF1,W ;1 (2 for PM, try MOVIW for internal mem)
      INCF FSR1L ; 1 (remove for SSPBUF)
      MOVWF tmp70,F ;1 store byte
      MOVWF PORTD,F ;1 output high nybble
      BCF PORTB,0 ;1 strobe
      BSF PORTB,0 ;1 unstrobe
      SWAPF tmp70,W ;1 read low nybble
      MOVWF PORTD,F ;1 output
      BCF PORTB,0 ;1 strobe
      BSF PORTB,0 ;1 unstrobe
      DECFSZ dotcnt ;1 next byte
      GOTO do_dots ;2

      FSR1 could point to SSPBUF (which can easily keep up), linear RAM, or program memory (+1 cycle per 8 bits). If using RAM, save one cycle by removing the write to tmp70 and changing SWAPF INDF1,W. If using internal memory, try the MOVIW INDF1++ instruction instead of the MOVF/INCF pair to save 1 cycle.

      At 138000 cycles per frame (worst case rounded up), you can maintain a ~58Hz refresh rate at 32MHz with no extra hardware.

      Of more interest is that with small changes you can store tiles in program memory for easy character display. It is slightly slower, but can (barely) achieve 50Hz screen refresh with a fully tile-based screen layout. For example, code to choose among 64 tiles, 16x16 pixels in size (2kword program memory), might look like:

      ; draw 16 lines with tiles
      ; set FSR0 to tile index base
      ; set FSR1H to tile bitmap base, must be 256-byte aligned
      MOVLW 10h
      MOVWF linecnt
      do_lines:
      MOVLW 80h ;1
      ADDWF lineoffset ;1
      BTFSC STATUS,Z ;1
      INCF FSR1H ;1
      MOVLW 14h ;1
      MOVWF dotcnt ;1
      do_dots:
      MOVIW INDF0++ ;1 (2 for PM)
      ANDLW 3Fh ;1 just for safety, can be eliminated
      IORWF lineoffset,W ;1
      MOVWF FSR1L ;1
      ; [MOVF INDF1,W... essentially the old inner loop, twice...
      ; but instead of INCF FSR1L, do BSF FSR1L,6 to get 2nd byte]
      DECFSZ dotcnt
      GOTO do_dots
      ADDFSR FSR1,-20 ;1 correct tile index ptr for next scan
      ; [strobe LCLK...]
      DECFSZ linecnt
      GOTO do_lines

      You get the idea.


  • At 15 February 2011, 15:06:29 user Luke wrote:   [reply @ Luke]
    • Was a Raymarine fathom-meter, from the resolution of the screen seems also provide a kind of graphic for the bottom view.

      it's around 2003 product, made by 3 different board: sounder, main pbc with "CPU" and LCD driver


  • At 24 December 2010, 19:25:24 user Kammenos wrote:   [reply @ Kammenos]
    • At the end, this article will reveal the raw power of the combinational circuits over the sequential circuits. The video will be uploaded within a couple of hours. I will finish this page tomorrow.


  • At 24 December 2010, 19:05:32 user Luis wrote:   [reply @ Luis]
    • Simply Awsome, all this to the conclusion that pic is not enough, very educative. Always is a pleaasure read your articles



    delicious
    digg
    reddit this Reddit this
    Faves



     HOT in heaven!


    NEW in heaven!



    New Theory: AC electric motor working principle



     Contact     Forum     Projects     Experiments     Circuits     Theory     BLOG     PIC Tutorials     Time for Science     RSS   

    Site design: Giorgos Lazaridis
    © Copyright 2008
    Please read the Terms of services and the Privacy policy