What my little evil eye can see inside JetBook - Page 2

sobkas · 12-11-2009, 08:16 PM

Quote:

Originally Posted by GA Russell

Guys, are you going through all this just to put a dictionary on your Libre?

I can assure you that I have done It for even less important(for you) reason. As a RockBox user I can also tell that idea of custom firmware is tempting.

sobkas · 12-11-2009, 08:26 PM

Quote:

Originally Posted by Kralik

I personally think it would be extremely fun to reverse engineer and/or reprogram the jetBook. Computer programming and tinkering in general is a hobby of mine. Just think of the fun it would be if you didn't have to wait for ECTACO or Aluratek to program in a feature if you could do it yourself...

sobkas, thanks for sharing. I'm looking forward to anything else you find, and I will probably be doing some investigation of my own.

Most of software they use *IS* actually open(GPL or LGPL) so you can ask them about source code if you like(at least you should be able).

GA Russell · 12-11-2009, 08:58 PM

I see!

Well, let us know what you decide to do!

Kralik · 12-12-2009, 09:44 AM

sobkas,

could you please post the contents of /sbin/flash.sh from the Aluratek mtd2?

sobkas · 12-12-2009, 12:18 PM

Quote:

Originally Posted by Kralik

sobkas,

could you please post the contents of /sbin/flash.sh from the Aluratek mtd2?

inittab:

Code:

# Boot-time system configuration/initialization script.
# This is run first except when booting in single-user mode.
#
::sysinit:/etc/rcS
#::respawn:/usr/X11R6/bin/startx

# /bin/sh invocations on selected ttys
#
# Start an "askfirst" shell on the console (whatever that may be)
#::askfirst:/bin/sh
# Start an "askfirst" shell on /dev/tty2
#tty2::askfirst:/bin/sh

#
# Example how to put a getty on a modem line.
#ttyS0::respawn:/sbin/getty -x0 -s 38400 ttyS0
ttySMX0::respawn:-/bin/sh

# Stuff to do before rebooting
::ctrlaltdel:/bin/umount -a -r > /dev/null 2>&1
::ctrlaltdel:/sbin/swapoff -a > /dev/null 2>&1

It looks like there is working console. Connecting correct pins on board to serial port in computer might do the trick. Only if somebody could post high quality images of board itself?

Kralik · 12-12-2009, 01:06 PM

I've disassembled the jetBook before but I'm not sure if the pictures I took will provide enough detail for you. In the meantime, I've been experimenting with the Aluratek firmware and found out why it is failing to flash on the jetBook... now how to bypass it... :P

sobkas · 12-12-2009, 09:32 PM

Quote:

Originally Posted by Kralik

I've disassembled the jetBook before but I'm not sure if the pictures I took will provide enough detail for you.

Unfortunately it's not.
From what I have found on the net it might be MC9328MX1 or MC9328MXL. In spec there is 200MHz, so for now I assume that first one is used. Actually checking it might help.

Quote:

Originally Posted by Kralik

In the meantime, I've been experimenting with the Aluratek firmware and found out why it is failing to flash on the jetBook... now how to bypass it... :P

I have found "MC9328MX1 i.MX Integrated Portable System Processor Reference Manual".
I don't want to void the warrant jet so I will check this out now. Picture of chip would be nice.

By the way, good work with modified firmware. Can you post a patch for modified files in it?

Kralik · 12-12-2009, 09:46 PM

Quote:

Originally Posted by sobkas

By the way, good work with modified firmware. Can you post a patch for modified files in it?

I posted the firmware itself here:

http://drop.io/jetBookLibre

The only file modified was /bin/run.sh. There is an entire section added to the Aluratek firmware that tests for certain numbers in a part of mtdblock2. After modifying the file, I regenerated md5sum. Also removed run.sh~ since it wasn't needed.

Encrypted back with aespipe and 128 bits. I used this method since I could verify that it made the original "out.tar" turn back exactly into original firmware ".bin"

sobkas · 12-13-2009, 01:09 PM

For now I will play with emulator.
After brief tweaking I was able to boot this(softgun):

Code:

Unknown NAND Flash, Assume Samsung 1Gbits
Loading bootup Logo
Logo in SDRAM now!
TMD2 LCD


DBMX1 Linux Bootloader ver 0.3.8
Copyright (C) 2002 Motorola Semiconductors Hong Kong Ltd.


FCLK = 200, BCLK = 96






Copying kernel from NAND to RAM ...
Bad Block at 0x0
Bad Block at 0x40
Bad Block at 0x80
Bad Block at 0xC0
Bad Block at 0x100
Bad Block at 0x140
Bad Block at 0x180
Bad Block at 0x1C0
Bad Block at 0x200
Bad Block at 0x240
Bad Block at 0x280
Bad Block at 0x2C0
Bad Block at 0x300
Bad Block at 0x340
Bad Block at 0x380
Bad Block at 0x3C0
Booting kernel ...

Uncompressing Linux...................................... done, booting the kernel.

It needs some work to actually make it work, but I believe it can be done(If I find some time).

bberry · 12-15-2009, 10:00 PM

Quote:

Originally Posted by sobkas

For now I will play with emulator.
After brief tweaking I was able to boot this(softgun):
It needs some work to actually make it work, but I believe it can be done(If I find some time).

Сould you post your config or a diff with your changes to softgun? I would like to try it also but this emulator is new for me. I appreciate the changes even if the they are partial/incomplete.

sobkas · 12-17-2009, 11:48 PM

For now I don't have much only this:

Code:

Processor	: ARM920Tid(wb) rev 0 (v4l)
BogoMIPS	: 99.94
Features	: swp half thumb 
CPU implementer	: 0x41
CPU architecture: 4T
CPU variant	: 0x1
CPU part	: 0x920
CPU revision	: 0
Cache type	: write-back
Cache clean	: cp15 c7 ops
Cache lockdown	: format A
Cache format	: Harvard
I size		: 16384
I assoc		: 64
I line length	: 32
I sets		: 8
D size		: 16384
D assoc		: 64
D line length	: 32
D sets		: 8

Hardware	: GSL ebook rev.1
Revision	: 0000
Serial		: 0000000000000000

and this:

Code:

dev:    size   erasesize  name
mtd0: 00010000 00010000 "bootloader"
mtd1: 00090000 00010000 "kernel"
mtd2: 00060000 00010000 "rootfs"
mtd3: 00200000 00020000 "E-Kernel"
mtd4: 08200000 00020000 "E-Rootfs firmware"
mtd5: 00100000 00020000 "Bootup Image"
mtd6: 07500000 00020000 "USB Data"
mtd7: 00600000 00020000 "X Image"

part of dmesg:

Code:

 Channel 8 is granted for LCD!
imxfb init success!!!
Serial: IMX driver
imx-uart.0: ttySMX0 at MMIO 0xe0006000 (irq = 30) is a IMX
options: 0
***DISABLE CONSOLE***
imx-uart.1: ttySMX1 at MMIO 0xe0007000 (irq = 24) is a IMX
options: 0
***DISABLE CONSOLE***
loop: loaded (max 8 devices)
PPP generic driver version 2.4.2
Found WM8731 at address 0x1b
physmap flash device: 100000 at 10000000
Found: Spansion S29AL008D
phys_mapped_flash: Found 1 x16 devices at 0x0 in 16-bit bank
number of JEDEC chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
3 cmdlinepart partitions found on MTD device phys_mapped_flash
Creating 3 MTD partitions on "phys_mapped_flash":
0x00000000-0x00010000 : "bootloader"
0x00010000-0x000a0000 : "kernel"
0x000a0000-0x00100000 : "rootfs"
ebook_init:369
Read ID
makercode = 0xec
devicecode = 0xda
dontcare = 0x10
info = 0x95
Read ID done
NAND device: Manufacturer ID: 0xec, Chip ID: 0xda (Samsung NAND 256MiB 3,3V 8-bit)
Scanning device for bad blocks
Bad eraseblock 241 at 0x01e20000
Using static partition definition
Creating 5 MTD partitions on "ebook-nand":
0x00000000-0x00200000 : "E-Kernel"
0x00200000-0x08400000 : "E-Rootfs firmware"
0x08400000-0x08500000 : "Bootup Image"
0x08500000-0x0fa00000 : "USB Data"
0x0fa00000-0x10000000 : "X Image"
usb: imx_udc version: 0.5
<7>imx: requested frequency 199967000 Hz, mpctl0 at boot 0x07462f03
<7>imx: new PLL parameters pd=1 mfd=838 mfi=11 mfn=771, freq=199966720
<6>imx: set frequency 199966720 Hz, running from MPLL
i.MX mmc driver
Advanced Linux Sound Architecture Driver Version 1.0.11rc2 (Wed Jan 04 08:57:20 2006 UTC).
CSB536FS WM8731 audio support initialized
ALSA device list:
  #0: 
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 2, 16384 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
TCP bic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
ieee80211: 802.11 data/management/control stack, git-1.1.7
ieee80211: Copyright (C) 2004-2005 Intel Corporation <jketreno@linux.intel.com>
ieee80211_crypt: registered algorithm 'NULL'
ieee80211_crypt: registered algorithm 'WEP'
ieee80211_crypt: registered algorithm 'CCMP'
imx-mmc imx-mmc.0: busy wait for 2 usec in imxmci_cpu_driven_data read, STATUS = 0xa1c0 (0x880)
imx-mmc imx-mmc.0: busy wait for 2 usec in imxmci_cpu_driven_data read, STATUS = 0xa1c0 (0x880)
imx-mmc imx-mmc.0: busy wait for 2 usec in imxmci_cpu_driven_data read, STATUS = 0xa1c0 (0x880)
imx-mmc imx-mmc.0: busy wait for 2 usec in imxmci_cpu_driven_data read, STATUS = 0xa1c0 (0x880)
imx-mmc imx-mmc.0: busy wait for 2 usec in imxmci_cpu_driven_data read, STATUS = 0xa1c0 (0x880)
imx-mmc imx-mmc.0: busy wait for 2 usec in imxmci_cpu_driven_data read, STATUS = 0xa1c0 (0x880)
imx-mmc imx-mmc.0: busy wait for 2 usec in imxmci_cpu_driven_data read, STATUS = 0xa1c0 (0x880)
imx-mmc imx-mmc.0: busy wait for 2 usec in imxmci_cpu_driven_data read, STATUS = 0xa1c0 (0x880)
imx-mmc imx-mmc.0: busy wait for 2 usec in imxmci_cpu_driven_data read, STATUS = 0xa1c0 (0x880)
imx-mmc imx-mmc.0: busy wait for 2 usec in imxmci_cpu_driven_data read, STATUS = 0xa1c0 (0x880)
imx-mmc imx-mmc.0: busy wait for 2 usec in imxmci_cpu_driven_data read, STATUS = 0xa1c0 (0x880)
imx-mmc imx-mmc.0: busy wait for 2 usec in imxmci_cpu_driven_data read, STATUS = 0xa1c0 (0x880)
imx-mmc imx-mmc.0: busy wait for 2 usec in imxmci_cpu_driven_data read, STATUS = 0xa1c0 (0x880)
imx-mmc imx-mmc.0: busy wait for 2 usec in imxmci_cpu_driven_data read, STATUS = 0xa1c0 (0x880)
imx-mmc imx-mmc.0: busy wait for 2 usec in imxmci_cpu_driven_data read, STATUS = 0xa1c0 (0x880)
imx-mmc imx-mmc.0: busy wait for 2 usec in imxmci_cpu_driven_data read, STATUS = 0xa1c0 (0x880)
imx-mmc imx-mmc.0: busy wait for 2 usec in imxmci_cpu_driven_data read, STATUS = 0xa1c0 (0x880)
imx-mmc imx-mmc.0: busy wait for 2 usec in imxmci_cpu_driven_data read, STATUS = 0xa1c0 (0x880)
imx-mmc imx-mmc.0: busy wait for 2 usec in imxmci_cpu_driven_data read, STATUS = 0xa1c0 (0x880)
imx-mmc imx-mmc.0: busy wait for 2 usec in imxmci_cpu_driven_data read, STATUS = 0xa1c0 (0x880)
imx-mmc imx-mmc.0: busy wait for 2 usec in imxmci_cpu_driven_data read, STATUS = 0xa1c0 (0x880)
imx-mmc imx-mmc.0: busy wait for 2 usec in imxmci_cpu_driven_data read, STATUS = 0xa1c0 (0x880)
imx-mmc imx-mmc.0: busy wait for 2 usec in imxmci_cpu_driven_data read, STATUS = 0xa1c0 (0x880)
imx-mmc imx-mmc.0: busy wait for 2 usec in imxmci_cpu_driven_data read, STATUS = 0xa1c0 (0x880)
imx-mmc imx-mmc.0: busy wait for 2 usec in imxmci_cpu_driven_data read, STATUS = 0xa1c0 (0x880)
imx-mmc imx-mmc.0: busy wait for 2 usec in imxmci_cpu_driven_data read, STATUS = 0xa1c0 (0x880)
mmcblk0: mmc0:1234 SA02G 1927168KiB 
 mmcblk0: p1
yaffs: dev is 32505860 name is "mtdblock4"
VFS: Mounted root (yaffs2 filesystem) readonly.
Freeing init memory: 72K
Warning: unable to open an initial console.
FAT: utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
Unable to load NLS charset cp437
FAT: codepage cp437 not found
FAT: utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
FAT: bogus number of reserved sectors
VFS: Can't find a valid FAT filesystem on dev mmcblk0.
yaffs: dev is 32505863 name is "mtdblock7"
 imx_keypad_init:  imx_keypad driver loaded!
 power_switch_init:  Power Switch driver loaded!
 battery_init:  battery driver loaded!
yaffs: dev is 32505862 name is "mtdblock6"
g_file_storage gadget: File-backed Storage Gadget, version: 28 November 2005
g_file_storage gadget: Number of LUNs=1
g_file_storage gadget-lun0: ro=0, file: /nf/disk
g_file_storage gadget: transport=Bulk-only (x50)
g_file_storage gadget: protocol=Transparent SCSI (x06)
g_file_storage gadget: VendorID=x0525, ProductID=xa4a5, Release=x0314
g_file_storage gadget: removable=1, stall=1, buflen=524288
g_file_storage gadget: I/O thread pid: 228
FAT: utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
 charging_detect_init:  Charging driver loaded!
~PG is 1
STAT1 is 1
STAT2 is 1
 power_switch_cleanup:  cleaning up....
NT39171 TMD LCD Driver Loaded!
count: 3
buffer: 60
count: 4
buffer: 115
flicker char: 15
imx_keypad_open: Not implemented
imx_keypad_open: Not implemented
 imx_keypad_cleanup:  cleaning up....
 imx_keypad_init:  imx_keypad driver loaded!
 imx_keypad_cleanup:  cleaning up....
 battery_cleanup:  cleaning up....
i.MX Keypad Driver
input: i.MX E-Book Keypad as /class/input/input0
Battery Level Detecter: driver loaded!
Real Time Clock Driver Loaded!
/home/ebook-1020/ebook/buildroot/system/linux-2.6.16.14-imx/drivers/video/imxfb.c:imxfb_blank:424
/home/ebook-1020/ebook/buildroot/system/linux-2.6.16.14-imx/drivers/video/imxfb.c:imxfb_blank:424
g_file_storage gadget: unbind
g_file_storage gadget: File-backed Storage Gadget, version: 28 November 2005
g_file_storage gadget: Number of LUNs=2
g_file_storage gadget-lun0: ro=0, file: /nf/disk
g_file_storage gadget-lun1: ro=0, file: /dev/mmcsd0p1
g_file_storage gadget: transport=Bulk-only (x50)
g_file_storage gadget: protocol=Transparent SCSI (x06)
g_file_storage gadget: VendorID=x0525, ProductID=xa4a5, Release=x0314
g_file_storage gadget: removable=1, stall=1, buflen=524288
g_file_storage gadget: I/O thread pid: 612
FAT: utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
FAT: bogus number of reserved sectors
VFS: Can't find a valid FAT filesystem on dev mmcblk0.
FAT: utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!

I must place my script higher in rcS.
And I have prepared special firmware that executes shell scripts from sd cards. My script is similar to sd_detect.

Dennisvjames · 12-29-2009, 09:37 AM

What I would like to see is ECTACO open source their operating system to folks like you...that would help them AND help us. Even if they had a special program that allowed open source folks to offer upgrades but still protected their IP (you know, can't use it on other hardware etc). Despite looking retro the JetBook is a surprisingly good piece of hardware. I have a feeling that we will be waiting a long time for DRM on the regular JetBook even tho they promised it before the end of the year... :-)

travolta · 03-19-2010, 04:29 PM

Quote:

Originally Posted by sobkas

Most of software they use *IS* actually open(GPL or LGPL) so you can ask them about source code if you like(at least you should be able).

Has anyone actually asked them for it?

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Got my Jetbook! (Video reviews inside)	Canuck_in_Japan	Ectaco jetBook	4	07-12-2009 03:17 AM
Other Fiction Trollope, Anthony: An Eye for an Eye, v.1, 16 Jan 2008.	Patricia	BBeB/LRF Books	1	01-15-2008 11:05 PM
Horror Gautier, Théophile: Jettatura: The Evil Eye, IMP,v.1, 1 Nov 2007.	Patricia	IMP Books	0	10-31-2007 10:19 PM
Horror Gautier, Théophile: Jettatura: The Evil Eye, v.1, 1 Nov 2007.	Patricia	Kindle Books	0	10-31-2007 10:17 PM
Horror Gautier, Théophile: Jettatura: The Evil Eye, v.1, 1 Nov 2007.	Patricia	BBeB/LRF Books	0	10-31-2007 10:15 PM

12-11-2009, 08:58 PM	#18
GA Russell Ticats win 4th straight Posts: 7,694 Karma: 31487351 Join Date: Aug 2009 Location: Raleigh, NC Device: Paperwhite, Kindles 10 & 4 and jetBook Lite	I see! Well, let us know what you decide to do!

12-12-2009, 09:44 AM	#19
Kralik Guru Posts: 609 Karma: 1013897 Join Date: Jul 2009 Device: Rooted NST	sobkas, could you please post the contents of /sbin/flash.sh from the Aluratek mtd2?

12-12-2009, 01:06 PM	#21
Kralik Guru Posts: 609 Karma: 1013897 Join Date: Jul 2009 Device: Rooted NST	I've disassembled the jetBook before but I'm not sure if the pictures I took will provide enough detail for you. In the meantime, I've been experimenting with the Aluratek firmware and found out why it is failing to flash on the jetBook... now how to bypass it... :P

12-29-2009, 09:37 AM	#27
Dennisvjames Enthusiast Posts: 40 Karma: 42 Join Date: Oct 2008 Device: Jetbook	What I would like to see is ECTACO open source their operating system to folks like you...that would help them AND help us. Even if they had a special program that allowed open source folks to offer upgrades but still protected their IP (you know, can't use it on other hardware etc). Despite looking retro the JetBook is a surprisingly good piece of hardware. I have a feeling that we will be waiting a long time for DRM on the regular JetBook even tho they promised it before the end of the year... :-)