Mobileread
PocketBook 611 internal SD card image, help to recover
#1  lukyp 01-26-2023, 06:27 AM
Hello guys,

I would be very pleased if somebody could send me an internal SD card image for PocketBook 611.


I got an old PocketBook 611 from electric trash, but without internal SD card, it looks like it is fully functional (does not have big scratches), I just had to replace a battery (because its battery was about 3 cm thick )


I have followed this guide (translated over google translator).
I'm able to boot a firmware update dialog (central button + forward button), put SWUPDATE.BIN onto 4-th fat32 partition. Device reports that firmware update was successful and device will now restart. After restart it:
- left side of the main button lights on
- both sides of the main button lights on
- screen flash for a half a second
- screen is empty

When I power a device to power supply (or PC), it is showing a battery charging dialog and both sides of main button are blinking.
When connected to PC, it is not able to identify a USB device

/dev/sdb is an internal device SD card:

My partitions
Code
Device Boot Start End Sectors Size Id Type
/dev/sdb1 32768 1081343 1048576 512M 83 Linux
/dev/sdb2 1081344 2129919 1048576 512M 83 Linux
/dev/sdb3 2129920 3178495 1048576 512M 83 Linux
/dev/sdb4 3178496 4227071 1048576 512M 83 Linux
Created filesystems
Code
mkfs.ext2 /dev/sdb1
mkfs.ext2 /dev/sdb2
mkfs.ext2 /dev/sdb3
mkdosfs -F 32 -I /dev/sdb4
copied firmware file(SWUPDATE.BIN) to /dev/sdb4

Boot up a firmware update dialog and installed firmware SUCCESFULLY.

But after restart of device, it is showing just empty screen (as mentioned earlier).

When I check partitions after installation I found they are shrink to minimal size, sdb1 has free about 1MB and sdb2 has free 0 bytes !!!

I found on 0x200 there is something like:
SN-E6063222M06597 8_1111101246 which can be device serial number + something.

Is it kind of hash of SD card id and device id.

I have tried multiple firmware versions, firmware sw_20130205_611_EURO_us_br_16.0_611_239_user.zip was able to identify serial ID of a device other firmwares reported device id as 00000000000000000 (with a message, cannot read a device id)

There is something about serial ids, it is for a different type of device, it generated 4 bytes long file .freezestatus

I do not have a serial cable to connect a device using UART to PC to have an access to boot log.

Could you please help me with that?
Thank you,
Lukas
Reply 

#2  lukyp 01-26-2023, 09:38 AM
Hello,

What I have tried:
I have extracted monitor.app application which I guess is responsible for that

firmware 15.8
Code
nm -D monitor.app|grep -i serial
0000fa68 T get_serial_num
0000e9ec T ioc_getserialnumber
firmware 16.0
Code
nm -D monitor.app|grep -i serial
00014fcc T get_serial_num
00013bc8 T ioc_getserialnumber
0002b9f4 B serialnum
Code
strings monitor.app |grep -i serial
serialnum
ioc_getserialnumber
get_serial_num
Serial Number:
%s/%s/serial
Serial number: %s
monitor: cannot locate serial number
/var/run/serial
But, there is no word freezestatus in a whole image (stored as a plain text, maybe it is encrypted, or it is not using in a this device at all).

Tried:

Generated file .freezestatus
Code
./serial --serial_number SN-E6063222M06597 --sd_serial 0x058F63666433
and this version too:
Code
./serial --serial_number E6063222M06597 --sd_serial 0x058F63666433
then copied this file to /dev/sdb3 and /dev/sdb4

Tried to write this into offset 0x200:
Code
echo -en "SN-E606321AF12297\08_1111101246\0"|dd bs=1 seek=512 conv=notrunc of=/dev/sdb
But still does not work.


This thread is about replacing of hardware SD card serial id with a known one (which come from original SD card). But I do not have original SD card, so this is not helpful for me too.

In that thread it is mentioned:
Quote
Changing that will result in constant bootloop.
But in my case, there is no bootloop, there is just a blank screen or charging battery screen (when attached to charger).


I was able to run other application (snake):
I replaced symlink of pocketbook to monitor.app
Code
ln -sf bin/snake.app pocketbook
And application was running !!!
Clock worked too:
Code
ln -sf bin/clock.app pocketbook
But issue is that monitor.app does not work

Do you have an idea how to continue, what else I can try? Run it in qemu and debug it?
Maybe try to get monitor.app from this device

Do you think that monitor.app from TL3/626 would work on PocketBook 611?
Reply 

Today's Posts | Search this Thread | Login | Register