ROM VER: 1.0.3
CFG 01
Read
ROM VER: 1.0.3
CFG 01
Read EEPROMX
X
========================================================================
Wireless ADSL Gateway DANUBE Loader V1.00.01 build Sep 24 2008 10:11:06
Arcadyan Technology Corporation
========================================================================
MXIC MX29LV640BB bottom boot 16-bit mode found
Copying boot params.....DONE
Press Space Bar 3 times to enter command mode ...123
Yes, Enter command mode ...
[DANUBE Boot]:!
Enter Administrator Mode !
[DANUBE Boot]:
======================
[#] Set Serial Number
[2] Use Normal Firmware
[3] Use ART-Testing Firmware
[9] Taggle ART Firmware Enable/Disable
[A] Set MAC Address
[E] Erase Flash
[G] Run Runtime Code
H] Set Options
[M] Upload to Memory
[P] Print Boot Params
[R] Read from Memory
[T] Memory Test
/U] Upload to Flash
[V] Set Board Version
[W] Write to Memory
[Y] Go to Memory
[Z] Dump DDR Ram Register
[0] Primary = Image 0
[1] Primary = Image 1
======================
[DANUBE Boot]:K
Unzipping Tiny Kernel at 0x80002000 ... [ZIP 1] done
Tiny ETCPIP running ...
In c_entry() function ...
install_exception
Co config = 80008483
sys_irq_init ...
Tiny Kernel System startup...
Unzipping from B001E800 to 80720000 ... done
Uncompressed size = 12667
CPU Clock 333333334 Hz
tcpip_startup...
MXIC MX29LV640BB bottom boot 16-bit mode found
Set flash memory layout to BPARAMS+RECOVER_KERNEL
Bootcode version: V1.00.01
Serial number : R0220080922
Hardware version: ulo
!!No configuration file present!!
default route: 0.0.0.0
default route: 0.0.0.0
BufferInit:
BUF_HDR_SZ=32 BUF_ALIGN_SZ=16 BUFFER_OFFSET=96
BUF_BUFSZ0=384 BUF_BUFSZ1=1632
NUM_OF_B0=24 NUM_OF_B1=800
BUF_POOL0_SZ=9984 BUF_POOL1_SZ=1331200
Buf0_Block 8025fbf8 Buf1_Block 8011abd8
BUF0[0]=0x8025fc00 BUF1[0]=0x8011abe0
buffer0 pointer init OK!
buffer1 pointer init OK!
init_if() ; gConfig.Interface[0].Link_Type is [4]
Interface 0 ip = 127.0.0.1
init_if() ; gConfig.Interface[1].Link_Type is [1]
reset GPIO#19.
DMA g_desc_list=0x801155A0
ETOP_MDIO_CFG=940
RMII_MODE: ETOP_CFG=14a
remove VLAN tag from port 0 to port 5
MAC Address: 00:26:4d:d6:1f:9c
Interface 1 ip = 192.168.2.1
init_if() ; gConfig.Interface[2].Link_Type is [0]
RUNTASK id=1 if_task if0...
RUNTASK id=2 if_task if1...
RUNTASK id=3 timer_task...
RUNTASK id=4 period_task...
RUNTASK id=5 dhcp_daemon...
RUNTASK httpd...
Starting Multitask...
period_task running!!!
httpd: listen at 192.168.2.1:80
Co jest nie tak że nie mogę uzyskać tej części
" Kill your serial terminal (screen: "ctrl+a, k" and confirm exit with "y"). Now you are able to dump the original firmware as shown below.
[root@localhost]# time ./brntool.py –read=ARV752DPW_whole.dump –addr=0xB0000000 –verbose –size=0x800000
Waiting for a prompt… Ok.
………………..!…!…………!…. [abbreviated version, you will see many more dots and exclamation marks]"