<DOWNLOADS>

Reader inside

Here there is some info on Reader hardware.

Disassemble the Reader (small Phillips screwdriver is needed)

1. Unscrew 4 screws from the back side of the Reader. Unscrew 1 screw located in the cavity (at left) of the bottom silver panel
2. Gently remove top and bottom silver plastic panels (some lateral movement may be needed)
3. Unscrew 3 silver screw from the bottom side (normally hidden by plastic panel removed at the previous step)
4. Remove 2 brackets from the top side (they are glued with soft glue and can be glued later again).
5. Gently slide the PCB toward the top of the reader (Fig.1)

Fig. 1 --(click to enlarge)---

 

--(click to enlarge)---

The major Reader components are (please see indication at the left image):

A) processor MC9328MXL (ARM920T core) by Freescale Semiconductor

B) RAM 2xK4M561633G (4M x 16Bit x 4 Banks Mobile SDRAM)

C) fast (parallel) flash S29AL016D (16 Megabit (2 M x 8-Bit/1 M x 16-Bit))

D) slow (serial) flash K9F2G08U0A ( 256M x 8 Bit NAND Flash Memory )

E) FPGA Actel ProASIC3 (custom e-ink controller)

F) memory card controller Ricoh R5C807

G) Hitachi's H8/38004 Super Low Power microcontroller.

Console operation (see full story on console recovery at the-ebook forums (in Russian))

Here is a console start-up output:

 

NBL for arm/dbmx1/ebook : Build 993 (09:35:39, 06/10/07 JST) text = 0x10000000 - 0x1002a764 data = ROM(0x1002a764), RAM(0x8000000 - 0x8002134) bss = 0x8002140 - 0x8003570 heap = 0x8003570 - 0x8203570 amd_nor_register_device(): NOR device 0 : AMD AM29LV160DB nand_register_device(): NAND device 0 : SAMSUNG K9F2G08U0A sdm table read, current block = 2 target_setup(): sdm device 0(nor0) target_setup(): sdm device 1(sbl0) load_sdmimg(): Wf loaded. load_sdmimg(): BootImg loaded. nbl_read_config(): latest nblconfig read from 0x00022800 ... waveform (3) loaded ... loading image ... updating for 39 frames nbl_write_config(): latest nblconfig written to 0x00023000 nbl_exec_linux(): sdm_querybootname(): normal_name = Linux nbl_exec_linux(): sdm_querybootname(): recovery_name = Linux0 DIP SW2 = 0x57 target_get_hwcfg(): Disable Ethernet: ENABLE target_get_hwcfg(): Start Diag : NO target_get_hwcfg(): Disable Console : ENABLE target_get_hwcfg(): Linux or Shell : LINUX target_get_hwcfg(): Boot select : CONFIG nbl_exec_linux(): boot(config): Normal kernel nbl_exec_linux(): kernel select done. nbl_exec_linux(): write back nblconfig... nbl_write_config(): latest nblconfig written to 0x00023800 nbl_exec_linux(): getting kernel parameter... nbl_exec_linux(): loading kernel image Linux ... nbl_exec_linux(): kernel command line = console=ttyDB1,115200n8 noinitrd mem=64M ip=off cscr=0x27000003 root=/dev/mtdblock14 nbl_exec_linux(): invoking linux... Linux version 2.4.17_n12 (root@JPC00030222) (gcc version 2.95.3 20010315 (release/MontaVista)) #9 2007ǯ 4·î 8Æü ÆüÍËÆü 11:26:53 JST Processor: ARM/CIRRUS Arm920Tsid(wb) revision 0 Machine: Motorola DragonBall MX1 (eBook-2) On node 0 totalpages: 16384 zone(0): 16384 pages. zone(1): 0 pages. zone(2): 0 pages. Kernel command line: console=ttyDB1,115200n8 noinitrd mem=64M ip=off cscr=0x27000003 root=/dev/mtdblock14 cscr_setup: 0x27000003 dragonball_init_regs(): Setting registers rtsched version <20011203.1609.50> Console: colour dummy device 80x30 Calibrating delay loop... 98.09 BogoMIPS Memory: 64MB = 64MB total Memory: 62496KB available (1436K code, 326K data, 80K init) Security Scaffold v1.0.0 initialized Dentry-cache hash table entries: 8192 (order: 4, 65536 bytes) Inode-cache hash table entries: 4096 (order: 3, 32768 bytes) Mount-cache hash table entries: 1024 (order: 1, 8192 bytes) Buffer-cache hash table entries: 4096 (order: 2, 16384 bytes) Page-cache hash table entries: 16384 (order: 4, 65536 bytes) POSIX conformance testing by UNIFIX Linux NET4.0 for Linux 2.4 Based upon Swansea University Computer Society NET3.039 Initializing RT netlink socket Registering /proc/dragonball_mx1/ GPIO: dragonball_gpio_init():758 Apr 8 2007 10:48:18 SYSNPM: Apr 8 2007 10:48:18 Starting kswapd JFFS2 version 2.1. (C) 2001, 2002 Red Hat, Inc., designed by Axis Communications AB. pty: 256 Unix98 ptys configured block: 128 slots per queue, batch=32 RAMDISK driver initialized: 16 RAM disks of 8192K size 1024 blocksize smc_probe:1246 (bank & 0xFF00) != 0x3300 loop: loaded (max 8 devices) UART: dragonball_serial_init():1511 Apr 8 2007 10:46:04 ttyDB0 at I/O 0x0 (irq = 29) is a Dragonball ttyDB1 at I/O 0x0 (irq = 23) is a Dragonball MTD(NOR): init_mpu110_map() 10:45:51 Flash device: 0x1000000[bytes] at 0x10000000 cfi_probe: qry_present can't find "QRY" cfi_probe: qry_present can't find "QRY" cfi_probe: qry_present can't find "QRY" cfi_probe: qry_present can't find "QRY" cfi_probe: qry_present can't find "QRY" cfi_probe: qry_present can't find "QRY" cfi_probe: qry_present can't find "QRY" Amd/Fujitsu Extended Query Table v1.0 at 0x0040 number of CFI chips: 1 cfi_cmdset_0002: Disabling fast programming due to code brokenness. MTD(NAND): ebook_nand_init() 10:45:53 NAND device: Manufacture ID: 0xec, Chip ID: 0xda (Samsung K9F2G08U0A) Creating 1 MTD partitions on "MTD/SBL": 0x00000000-0x0f340000 : "sdm device NAND/SBL 0" Creating 1 MTD partitions on "Samsung K9F2G08U0A": 0x00000000-0x10000000 : "eBook-1 NAND flash partition 0" trying to parse SDM table from 'sdm device NAND/SBL 0' SDM table multiplexing supported Creating 1 MTD partitions on "sdm device NOR 0": 0x00000000-0x00040000 : "Loader" Creating 1 MTD partitions on "sdm device NOR 0": 0x001e0000-0x001f0000 : "Reserved" Creating 1 MTD partitions on "sdm device NOR 0": 0x001f0000-0x00200000 : "FIS directory" Creating 1 MTD partitions on "sdm device NAND/SBL 0": 0x00080000-0x00100000 : "nblconfig" Creating 1 MTD partitions on "sdm device NAND/SBL 0": 0x00100000-0x002a0000 : "Linux" Creating 1 MTD partitions on "sdm device NOR 0": 0x00040000-0x00080000 : "Wf" Creating 1 MTD partitions on "sdm device NOR 0": 0x00080000-0x00100000 : "BootImg" Creating 1 MTD partitions on "sdm device NOR 0": 0x001c0000-0x001d0000 : "Id" Creating 1 MTD partitions on "sdm device NOR 0": 0x001d0000-0x001e0000 : "Info" Creating 1 MTD partitions on "sdm device NAND/SBL 0": 0x002a0000-0x00440000 : "Linux0" Creating 1 MTD partitions on "sdm device NAND/SBL 0": 0x00440000-0x00c20000 : "Rootfs2" Creating 1 MTD partitions on "sdm device NAND/SBL 0": 0x00c20000-0x015a0000 : "Rootfs" Creating 1 MTD partitions on "sdm device NAND/SBL 0": 0x015a0000-0x01a00000 : "Fsk" Creating 1 MTD partitions on "sdm device NAND/SBL 0": 0x0f040000-0x0f340000 : "Opt0" Creating 1 MTD partitions on "sdm device NAND/SBL 0": 0x01de0000-0x0f040000 : "Data" found 15 sdm partition(s) SNSC IOA-3 NOR/NAND driver No IOA-3 found NET4: Linux TCP/IP 1.0 for NET4.0 IP Protocols: ICMP, UDP, TCP, IGMP IP: routing cache hash table of 512 buckets, 4Kbytes TCP: Hash tables configured (established 4096 bind 4096) NET4: Unix domain sockets 1.0/SMP for Linux NET4.0. NetWinder Floating Point Emulator V0.95 (c) 1998-1999 Rebel.com VFS: Mounted root (cramfs filesystem). Freeing init memory: 80K INIT: version 2.78 booting Activating swap... CLEANMARKER node found at 0x00000000 has totlen 0xc != normal 0x0 Empty flash at 0x00019d54 ends at 0x0001a000 Console: switching to mono frame buffer device 75x50 1024+0 records in 1024+0 records out 1875+0 records in 1875+0 records out latest nblconfig read from 0x00023800 latest nblconfig written to 0x00024000 Warning: loading /lib/modules/2.4.17_n12/kernel/drivers/sdms/sdms.o will taint the kernel: non-GPL license - Sony NSC Proprietary GPIO (port=1, bit=29) is reserved GPIO (port=1, bit=28) is reserved sdmsdrv(4586): SD/MS Memory Card driver initialize complete Warning: loading /lib/modules/2.4.17_n12/kernel/drivers/sound/libroi2s.o will taint the kernel: non-GPL license - Proprietary Real Time Clock MC9328MX1 Driver v1.10e USB Device(S1R72V17-20070727):MBX-5013 (PORT:C PIN:3) UDC GadgetMass+ Ver.20070727 g_file_storage s1r72v17: Sony Portable Reader System, version: 20 Apl 2007 g_file_storage s1r72v17: Number of LUNs=3 disconnect /dev/raw/raw1: bound to major 122, minor 17 /dev/raw/raw2: bound to major 122, minor 16 /dev/raw/raw3: bound to major 122, minor 1 /dev/raw/raw4: bound to major 122, minor 0 Checking all file systems... Parallelizing fsck version 1.22 (22-Jun-2001) Setting kernel variables. Mounting local filesystems... nothing was mounted Cleaning: /etc/network/ifstate. Hostname: (none). Setting up IP spoofing protection: rp_filter. Disable TCP/IP Explicit Congestion Notification: done. Configuring network interfaces: done. Setting the System Clock using the Hardware Clock as reference... System Clock set. Local time: Wed Dec 16 00:00:03 UTC 1970 Cleaning: /tmp /var/lock /var/run. Initializing random number generator... done. Checking password and group files... done. INIT: Entering runlevel: 3 Mon Jan 1 00:00:00 UTC 2007 MontaVista Linux 3.0, Professional Edition