Project Easybox

Easy Box to OpenWrt

Roughly following https://openwrt.org/toh/astoria/arv752dpw22 (as of 2019-05-25)

Hardware Preparation

• USB2Serial adapter for 3.3V with 3 cables ending in female dupont
• Small x-screwdriver
• Something to open the box (prying tool, --screwdriver or similar)

Open the Box

• unscrew the 2 x-Screws on the bottom
• pry open the front cover. Needs much force, may break the plastic noses.
• Unscrew the 4 x-Screws on the mainboard edges
• Put the mainboard out to see the serial connector in the center (4 pins, 1 (marked with a triangle) is 3.3V, then tx, rx and gnd.

Connect Serial

• First connect ground -> ground, then rx -> tx and tx -> rx
• Plugin the adapter to a pc
• On the pc start a terminal emulator (screen, putty, minicom, ...)
  • Configure the terminal emulator to use the new com port for the serial adapter (e.g. COM10 or /dev/ttyUSB2 or ...)
  • Configure baud rate 115200
• Plug in the power supply of the Easybox into its mainboard

If you see messages appearing now, all good. If not try swapping rx and tx connections and press restart button or repower

My Boot Messages from the Original Box

ROM VER: 1.0.3
CFG 01
Read EEPROMX
 X



=======================================================================
Wireless ADSL Gateway DANUBE Loader V1.04.00 build Mar 19 2010 10:00:29
                    Arcadyan Technology Corporation
=======================================================================
MXIC MX29LV640BB bottom boot 16-bit mode found

Copying boot params.....DONE


Press Space Bar 3 times to enter command mode ...
Flash Checking 
Flash Checking - fw/ui... Passed.
Image[1] at 0xb00b0000, len:1999780, type:0
Image[2] at 0xb0298400, len:968414, type:10
Image[3] at 0xb0384c00, len:272391, type:11
Image[4] at 0xb03c7800, len:259453, type:12
Image[5] at 0xb0407000, len:150508, type:60
Image[6] at 0xb042c000, len:452105, type:90
Firmware image at 0, ART image at -1

Run-up Normal Firmware...

Unzipping firmware at 0x80002000 ... [ZIP 3] [ZIP 1]  done
Run-time code running ...

In c_entry() function ...
install_exception 
Co config = 80008483
[INIT] Interrupt ...


 DANUBE_BCU_CON:0x4009FFFF
 DANUBE_BCU_ECON:0x00000000
 DANUBE_BCU_EADD:0x00000000
 DANUBE_BCU_ECON:0x00000000

 DANUBE_SLAVE_BCU_CON:0x4009FFFF
 DANUBE_SLAVE_BCU_ECON:0x00000000
 DANUBE_SLAVE_BCU_EADD:0x00000000
 DANUBE_SLAVE_BCU_EDAT:0x00000000##### _ftext      = 0x80002000
##### _fdata      = 0x807989C0
##### __bss_start = 0x808425E4
##### end         = 0x83467160
allocate_memory_after_end> len 695332, ptr 0x8346f160
##### Backup Data from 0x807989C0 to 0x8346F160~0x83518D84 len 695332
##### Backup Data completed
##### Backup Data verified
[GPIO FLOW] SetGpio() Begin ..
gptu: totally 6 16-bit timers/counters
Init timer = 0
************************ LED all ON
************************ LED all OFF
[GPIO FLOW] SetGpio() End.
[INIT] System Log Pool startup ...
[INIT] MTinitialize ..
[INIT] usrclk
CPU Clock 333333334 Hz
mips_counter_frequency:166666667
r4k_offset: 00028b0a(166666)
init_US_counter : time1 = 260467 , time2 = 40260499, diff 40000032
US_counter = 48
 cnt1 40987793 cnt2 40990037, diff 2244
Runtime code version: 30.05.211
System startup...
[INIT] Memory COLOR 0, 5000000 bytes ..
[INIT] Memory COLOR 1, 262144 bytes ..
[INIT] Memory COLOR 2, 8516576 bytes ..
danube pci startup...
PCI clock 33.3MHz
cut-off PCI internal clock
DANUBE_GPIO_P1_ALTSEL0=65c7
DANUBE_GPIO_P1_ALTSEL1=0
DANUBE_GPIO_P1_DIR=c1fe
[PCI-SCAN] get PCI dev-0e, func-00(0x70), class:0x0280, vid:0x1814, did:0x3592
[PCI-SCAN] get PCI dev-0f, func-00(0x78), class:0x0c03, vid:0x1106, did:0x3038
[PCI-SCAN] get PCI dev-0f, func-01(0x79), class:0x0c03, vid:0x1106, did:0x3038
[PCI-SCAN] get PCI dev-0f, func-02(0x7a), class:0x0c03, vid:0x1106, did:0x3104
Scanning bus 00
Found 00:70 [1814/3592] 000280 00
Found 00:78 [1106/3038] 000c03 00
Found 00:79 [1106/3038] 000c03 00
Found 00:7a [1106/3104] 000c03 00
Fixups for bus 00
Bus scan for 00 returning with max=00
[pcibios_init] PCI slot 0e, function 00...
35921814 04000007 02800000 00008000 18000000 00000000 00000000 00000000 
00000000 00000000 00000000 35921814 00000000 00000040 00000000 04020100 

[pcibios_init] PCI slot 0f, function 00...
30381106 02100000 0c030062 00801600 00000000 00000000 00000000 00000000 
1ae00001 00000000 00000000 30381106 00000000 00000080 00000000 00000100 

[pcibios_init] PCI slot 0f, function 01...
30381106 02100000 0c030062 00801600 00000000 00000000 00000000 00000000 
1ae00021 00000000 00000000 30381106 00000000 00000080 00000000 00000200 

[pcibios_init] PCI slot 0f, function 02...
31041106 02100000 0c032065 00801600 18010000 00000000 00000000 00000000 
00000000 00000000 00000000 31041106 00000000 00000080 00000000 00000300 

interrupt pin 2 not supported!
wrong interrupt pin 2
interrupt pin 3 not supported!
wrong interrupt pin 3
MXIC MX29LV640BB bottom boot 16-bit mode found
Set flash memory layout to Boot Parameters found !!!
Bootcode version: V1.04.00
Serial number: R0432551622
Hardware version: 01B
01.07.2011-10:36:41
[BUILD-PIN] PIN:R0432551622, MAC:88252CADD77A, Key:NULL
[BUILD-WPA]: Key:5B51BC66B
[BUILD-PIN]: PIN:57020860, len=8
MXIC MX29LV640BB bottom boot 16-bit mode found
MXIC MX29LV640BB bottom boot 16-bit mode found
read_config_from_flash> unknown config
[CONFIG] read_config_from_flash ret=0
MXIC MX29LV640BB bottom boot 16-bit mode found


nLen:98, Magic:0x33343536

my CFGVersionMagic = 33343536, old CFGVersionMagic on flash = 33343536
my CFGsize = 234464, my CFGDescSize = 38365
my Version = 30.05.211, Version on flash= 30.05.219
[CONFIG] old cfg version:[30.05.219], [3.0.5.2.19.100]
source CFGsize = 234464, CFGDescSize = 38365
MXIC MX29LV640BB bottom boot 16-bit mode found
OldCfgHexSize:12499
Unzipping from 816C2EB0 to 816B98C0 ... [ZIP 2] allocate_memory_after_end> len 81516, ptr 0x83518da0
done
Uncompressed size = 38363
Tail1 : END_III_Config_t

Size of Old CFG_DESC is :38363!!!
useCfgDesc:1
MyCfgHexSize:12499
Unzipping from 816B67D4 to 816AD1E4 ... [ZIP 2] done
Uncompressed size = 38363
My CFGDescSize:38365
useCfgDesc:1
Tail : END_III_Config_t

useCfgDesc:3

Restore Config file from ver:30.05.219!!!

[CONFIG] DS_Tail:[t_ARV752DPW]
[CONFIG] load_config ret=1
[updateConfig] flash version:[30.05.219], [3.0.5.2.19.100]
[updateConfig] code version:[30.05.211], [3.0.5.2.11.100]
##@@!! voip_generate_LACDN> accountidx=0, outboundProxy = 
##@@!! userId = 
##@@!! local_area = 
##@@!! destination_number = 
##@@!! voip_generate_LACDN> accountidx=1, outboundProxy = 
##@@!! userId = 
##@@!! local_area = 
##@@!! destination_number = 
##@@!! voip_generate_LACDN> accountidx=2, outboundProxy = 
##@@!! userId = 
##@@!! local_area = 
##@@!! destination_number = 
##@@!! voip_generate_LACDN> accountidx=3, outboundProxy = 
##@@!! userId = 
##@@!! local_area = 
##@@!! destination_number = 
##@@!! voip_generate_LACDN> accountidx=4, outboundProxy = 
##@@!! userId = 
##@@!! local_area = 
##@@!! destination_number = 
##@@!! voip_generate_LACDN> accountidx=5, outboundProxy = 
##@@!! userId = 
##@@!! local_area = 
##@@!! destination_number = 
##@@!! voip_generate_LACDN> accountidx=6, outboundProxy = 
##@@!! userId = 
##@@!! local_area = 
##@@!! destination_number = 
##@@!! voip_generate_LACDN> accountidx=7, outboundProxy = 
##@@!! userId = 
##@@!! local_area = 
##@@!! destination_number = 
##@@!! voip_generate_LACDN> accountidx=8, outboundProxy = 
##@@!! userId = 
##@@!! local_area = 
##@@!! destination_number = 
##@@!! voip_generate_LACDN> accountidx=9, outboundProxy = 
##@@!! userId = 
##@@!! local_area = 
##@@!! destination_number = 
!!! Invalid wireless channel range 0 ~ 0
!!! Use default value 1 ~ 13
update Ethernet Uplink related parameters
default route: 0.0.0.0
[CheckUSBBackConf]Erase the garbage config in usbBackConf_s
BufferInit:
BUF_HDR_SZ=160 BUF_ALIGN_SZ=4 BUFFER_OFFSET=416
BUF_BUFSZ0=576 BUF_BUFSZ1=4352
NUM_OF_B0=0 NUM_OF_B1=2000
BUF_POOL0_SZ=0 BUF_POOL1_SZ=9024000
sizeof(BUFFER0)=736,sizeof(BUFFER1)=4512
*BUF0=0x82859be4 *BUF1=0x81fbe9c4
Altgn *BUF0=0x82859c00 *BUF1=0x81fbe9e0
End at BUF0:0x82859c00, BUF1:0x82859be0

BUF0[0]=0x82859c00 BUF1[0]=0x81fbe9e0

buffer0 pointer init OK!
buffer1 pointer init OK!
[qm_lnk_init] CLOCKHZ=1000 ...
[qm_lnk_init] add if 3 into QM link 0
[qm_cbq_enable] no QM attached
[qm_cbq_detach] no QM is attached at link 0
pkt_avgsz=250, pkt_maxsz=1600, mtu=1600
f=1054199/100000, ns_per_byte=758869/1000
ptime=2000000000/1000, cptime=0/1000, offtime=0/1000
New cls: id=0, bw=758 ns/byte, maxd=0 ms,
         maxb=32, minb=2, avgpktsz=250, maxpktsz=1600,
         offtime=0, parent=0, borrow=0
         pri=0, maxidle=31, minidle=-2428,
         maxq=96, clsfg=17
pkt_avgsz=1600, pkt_maxsz=1600, mtu=1600
f=10542/100000, ns_per_byte=75886927/1000
ptime=18446744073709551615/1000, cptime=18446744073709551615/1000, offtime=18446744073709551615/1000
New cls: id=1, bw=75886 ns/byte, maxd=0 ms,
         maxb=16, minb=1, avgpktsz=1600, maxpktsz=1600,
         offtime=108619, parent=81203e50, borrow=81203e50
         pri=5, maxidle=28942, minidle=-242838,
         maxq=48, clsfg=21
qm_cbq_attach(): cbqp->cbq_res=104
pkt_avgsz=250, pkt_maxsz=1600, mtu=1600
f=1043657/100000, ns_per_byte=766534/1000
ptime=2000000000/1000, cptime=0/1000, offtime=0/1000
New cls: id=2, bw=766 ns/byte, maxd=0 ms,
         maxb=32, minb=4, avgpktsz=250, maxpktsz=1600,
         offtime=0, parent=81203e50, borrow=81203e50
         pri=5, maxidle=31, minidle=-2452,
         maxq=48, clsfg=21
pkt_avgsz=250, pkt_maxsz=1600, mtu=1600
f=1/100000, ns_per_byte=4294967295/1000
[qm_cbq_newcls] warning: bandwidth of the class may be low enough to cause INT overflow
ptime=2000000000/1000, cptime=18446744073709551615/1000, offtime=18446744073709551615/1000
New cls: id=3, bw=1342177 ns/byte, maxd=0 ms,
         maxb=16, minb=4, avgpktsz=250, maxpktsz=1600,
         offtime=1366279, parent=81202850, borrow=81202850
         pri=6, maxidle=0, minidle=-4294966,
         maxq=48, clsfg=20
pkt_avgsz=250, pkt_maxsz=1600, mtu=1600
f=1/100000, ns_per_byte=4294967295/1000
[qm_cbq_newcls] warning: bandwidth of the class may be low enough to cause INT overflow
ptime=2000000000/1000, cptime=18446744073709551615/1000, offtime=18446744073709551615/1000
New cls: id=4, bw=1342177 ns/byte, maxd=0 ms,
         maxb=16, minb=4, avgpktsz=250, maxpktsz=1600,
         offtime=1366279, parent=81202850, borrow=81202850
         pri=0, maxidle=0, minidle=-4294966,
         maxq=96, clsfg=21
pkt_avgsz=250, pkt_maxsz=1600, mtu=1600
f=1/100000, ns_per_byte=4294967295/1000
[qm_cbq_newcls] warning: bandwidth of the class may be low enough to cause INT overflow
ptime=2000000000/1000, cptime=18446744073709551615/1000, offtime=18446744073709551615/1000
New cls: id=5, bw=1342177 ns/byte, maxd=0 ms,
         maxb=16, minb=4, avgpktsz=250, maxpktsz=1600,
         offtime=1366279, parent=81202850, borrow=81202850
         pri=1, maxidle=0, minidle=-4294966,
         maxq=48, clsfg=23
pkt_avgsz=250, pkt_maxsz=1600, mtu=1600
f=1/100000, ns_per_byte=4294967295/1000
[qm_cbq_newcls] warning: bandwidth of the class may be low enough to cause INT overflow
ptime=2000000000/1000, cptime=18446744073709551615/1000, offtime=18446744073709551615/1000
New cls: id=6, bw=1342177 ns/byte, maxd=0 ms,
         maxb=16, minb=4, avgpktsz=250, maxpktsz=1600,
         offtime=1366279, parent=81202850, borrow=81202850
         pri=2, maxidle=0, minidle=-4294966,
         maxq=48, clsfg=23
pkt_avgsz=250, pkt_maxsz=1600, mtu=1600
f=1/100000, ns_per_byte=4294967295/1000
[qm_cbq_newcls] warning: bandwidth of the class may be low enough to cause INT overflow
ptime=2000000000/1000, cptime=18446744073709551615/1000, offtime=18446744073709551615/1000
New cls: id=7, bw=1342177 ns/byte, maxd=0 ms,
         maxb=16, minb=4, avgpktsz=250, maxpktsz=1600,
         offtime=1366279, parent=81202850, borrow=81202850
         pri=3, maxidle=0, minidle=-4294966,
         maxq=48, clsfg=23
pkt_avgsz=250, pkt_maxsz=1600, mtu=1600
f=1/100000, ns_per_byte=4294967295/1000
[qm_cbq_newcls] warning: bandwidth of the class may be low enough to cause INT overflow
ptime=2000000000/1000, cptime=18446744073709551615/1000, offtime=18446744073709551615/1000
New cls: id=8, bw=1342177 ns/byte, maxd=0 ms,
         maxb=16, minb=4, avgpktsz=250, maxpktsz=1600,
         offtime=1366279, parent=81202850, borrow=81202850
         pri=4, maxidle=0, minidle=-4294966,
         maxq=48, clsfg=23
pkt_avgsz=250, pkt_maxsz=1600, mtu=1600
f=1043657/100000, ns_per_byte=766534/1000
ptime=2000000000/1000, cptime=0/1000, offtime=0/1000
New cls: id=9, bw=766 ns/byte, maxd=0 ms,
         maxb=16, minb=4, avgpktsz=250, maxpktsz=1600,
         offtime=0, parent=81202850, borrow=81202850
         pri=6, maxidle=31, minidle=-2452,
         maxq=48, clsfg=20
CLOCKHZ=1000
gConfig.Interface[0].IP_Addr = 127.0.0.1
gConfig.Interface[0].Subnet_Mask = 255.255.255.255
***** [iput_IpLinkUp] ifno=0, link_type:12
TRAP(linkUp) : send ok!
Interface 0 ip = 127.0.0.1

gConfig.Interface[1].IP_Addr = 192.168.1.132
gConfig.Interface[1].Subnet_Mask = 255.255.255.0
ifno=1, vlan=0, vid=1, port_mask=0xf
DANUBE_RCU_RST_STAT Watchdog 0 reset cause flag 0 Watchdog 1 reset cause flag 0
DMA g_desc_list=0x816A7FA0
danube_sw_chip_init: in MII mode
Probe switch chip....RTL8306 ver.series 0 ver.chipid 590 ver.revision 0
Atheros8216 detected
chip_id = 2
init switch chip deriverdanube_sw_chip_init: switch_chip= 2
init QoS for switch 
enter athr_VLANInit
[VLAN] port: 0x000f, ifCount=1
------->add port 2 to vlan 1
------->add port 3 to vlan 1
------->add port 4 to vlan 1
------->add port 5 to vlan 1
mac_0_init: interface 1 registered to VLAN 1, port_mask=f
MAC Address: 88:25:2c:ad:d7:7a
***** [iput_IpLinkUp] ifno=1, link_type:12
TRAP(linkUp) : send ok!
Interface 1 ip = 192.168.1.132

gConfig.Interface[2].IP_Addr = 192.168.1.132
gConfig.Interface[2].Subnet_Mask = 255.255.255.0
[HWLAN] ifno=2 irno=7 port=0x00000000
pci_find_slot bus 0 devfn 70
dev->bus->number 0 dev->devfn 70
pci_find_slot bus 0 devfn 70
dev->bus->number 0 dev->devfn 70
pci_find_slot bus 0 devfn 70
dev->bus->number 0 dev->devfn 70
pci_find_slot bus 0 devfn 70
dev->bus->number 0 dev->devfn 70
pci_find_slot bus 0 devfn 70
dev->bus->number 0 dev->devfn 70
===> rt2860_probe
PCI: Enabling device 00:0e.0 (0007 -> 0006)
pcibios_set_master> lat=0x80
--> RTMPAllocAdapterBlock
RTMP_ADAPTER_mem : 80b009c4, sizeof(RTMP_ADAPTER) 415336


=== pAd = FFFFFFFF80B009C4, size = 415336 ===

<-- RTMPAllocAdapterBlock, Status=0
pAd->CSRBaseAddress =0xffffffffb8000000
AP Driver version-2.2.5.0
NVM is EEPROM
Allocate a net device with private data size=0!
RtmpOSNetDevAttach()--->
<---RtmpOSNetDevAttach(), ret=0
<=== rt2860_probe
***** [iput_IpLinkUp] ifno=2, link_type:12
TRAP(linkUp) : send ok!
Interface 2 ip = 192.168.1.132

gConfig.Interface[3].IP_Addr = 0.0.0.0
gConfig.Interface[3].Subnet_Mask = 0.0.0.0
ppe: ATM init succeeded (firmware version 1.1.0.2.1.13)
ATM_UBR
Init SAR ifno:3 g_atm_vcc[0] CONN:1 VPI/VCI:1/32
MAC Address: 88:25:2c:ad:d7:7b
Interface 3 ip = 0.0.0.0

gConfig.Interface[11].IP_Addr = 0.0.0.0
gConfig.Interface[11].Subnet_Mask = 0.0.0.0
IFLNK_PPPOE init : (Linkp)ifno = 11 idx = 2
IFLNK_PPPOE init : (Driverp)ifno = 11 idx = 3
pppInit> set (PPPShutdownRequest[ifno] = 0)
[pppoe_init]
Interface 11 ip = 0.0.0.0

gConfig.Interface[20].IP_Addr = 0.0.0.0
gConfig.Interface[20].Subnet_Mask = 0.0.0.0
[HWLAN] ifno=20 irno=7 port=0x00000000
***** [iput_IpLinkUp] ifno=20, link_type:12
TRAP(linkUp) : send ok!
Interface 20 ip = 192.168.1.132

gConfig.Interface[21].IP_Addr = 0.0.0.0
gConfig.Interface[21].Subnet_Mask = 0.0.0.0
[HWLAN] ifno=21 irno=7 port=0x00000000
***** [iput_IpLinkUp] ifno=21, link_type:12
TRAP(linkUp) : send ok!
Interface 21 ip = 192.168.1.132

gConfig.Interface[22].IP_Addr = 0.0.0.0
gConfig.Interface[22].Subnet_Mask = 0.0.0.0
[HWLAN] ifno=22 irno=7 port=0x00000000
***** [iput_IpLinkUp] ifno=22, link_type:12
TRAP(linkUp) : send ok!
Interface 22 ip = 192.168.1.132

gConfig.Interface[23].IP_Addr = 0.0.0.0
gConfig.Interface[23].Subnet_Mask = 0.0.0.0
[HWLAN] ifno=23 irno=7 port=0x00000000
***** [iput_IpLinkUp] ifno=23, link_type:12
TRAP(linkUp) : send ok!
Interface 23 ip = 192.168.1.132

gConfig.Interface[25].IP_Addr = 0.0.0.0
gConfig.Interface[25].Subnet_Mask = 0.0.0.0
pppInit> set (PPPShutdownRequest[ifno] = 0)
if_umts_init() WAN interface 25, UMTS-COM1: baudrate=115200 
if_umts_init() MAC:88:25:2C:AD:D7:7B
umtsReceQueueInit() Host controller disable, bypass queue init...
RUNTASK id=2 umtsReceQueueTsk...
RUNTASK id=3 umtsReceTsk...
RUNTASK id=4 umtsWritTsk...
Interface 25 ip = 0.0.0.0

ruleCheck()> Group: 0,  Error: Useless rule index will be truncated, from idx:1
ruleCheck()> Group: 1,  Error: Useless rule index will be truncated, from idx:27
ruleCheck()> Group: 2,  Error: Useless rule index will be truncated, from idx:0
CBAC rule format check succeed !!
reqCBACBuf()> init match pool, Have: 1000
Memory Address: 0xffffffff81166c90 ~ 0xffffffff8116da0c
reqCBACBuf()> init timeGap pool, Have: 10000
Memory Address: 0xffffffff8116da0c ~ 0xffffffff8119e760
reqCBACBuf()> init sameHost pool, Have: 2000
Memory Address: 0xffffffff8119e760 ~ 0xffffffff811ae180
CBAC rule pool initialized !!
[init_if] local_if_mask=0xf80007
[init_if] local_wiredif_mask=0x80002
[init_if] local_wirelessif_mask=0xf00004
[init_if] localorVPN_if_mask=0xf80007
Init NAT data structure
RUNTASK id=5 if_task if0...
RUNTASK id=6 if_task if1...
RUNTASK id=7 if_task if2...
RUNTASK id=8 if_task if3...
RUNTASK id=9 if_task if20...
RUNTASK id=10 if_task if21...
RUNTASK id=11 if_task if22...
RUNTASK id=12 if_task if23...
RUNTASK id=13 if_task if25...
RUNTASK id=14 timer_task...
RUNTASK id=15 conn_mgr...
RUNTASK id=16 main_8021x...
Build Day = Jun 30 2011
RUNTASK id=17 saveRandomSeedTask...
[VFS_init] Start...
[VFS_init] vfsState:1
vfs_codepage_init() TimeZone:23, vfs_cp_idx:23, vfs_cp_ID:5
fat_codePageInit() TimeZone:23, codePage:CP850, cPID:5, cpSize:256, toUpSize:30
ntfs_codepage timezone:23, lan= 0
ntfs_codePageInit() TimeZone:23, codePage:5
==[vfs_register_filesystem]============================
list size:7,  Method:0x807ba324
  1) Type:0x01, Name:FAT12
  2) Type:0x04, Name:FAT16
  3) Type:0x06, Name:FAT16
  4) Type:0x0b, Name:FAT32
  5) Type:0x0c, Name:FAT32
  6) Type:0x0e, Name:FAT16
  7) Type:0x81, Name:Minix
=================================================================
[VFS_init] FAT init OK
==[vfs_register_filesystem]============================
list size:1,  Method:0x807baee0
  1) Type:0x07, Name:NTFS/HPFS
=================================================================
[VFS_init] NTFS init OK
[VFS_init]-[vfs_mount_root] Start...
[VFS_init]-[vfs_mount_root] Init <root> OK...
[VFS_init]-[vfs_mount_root] Init <dev> OK...
[VFS_init]-[vfs_mount_root] Init <mnt> OK...
[0-START]=========================================
  Node 000,  DIR, MountFlag:0x00
[0-END]===========================================
  [1-START]=========================================
    Node 001,  DIR, MountFlag:0x00
  [1-END]===========================================
  [1-START]=========================================
    Node 002,  DIR, MountFlag:0x00
  [1-END]===========================================
dump_inode() freeCnt:77, usedCnt:3
[USB-INIT] main() ====== call UsbSysInit() ... 
[USB] UsbSPoolArray: 80C0F928H ~ 80D87D27, UsbSPool:80C0F980
[USB] UsbMPoolArray: 80D87D28H ~ 80E76127, UsbMPool:80D87D80
[USB] UsbLPoolArray: 80E76128H ~ 80ECE1A7, UsbLPool:80E76180
[USB] Small  Un-Cached Memory(8025): 80C0F980 ~ 80D87C3F
[USB] Medium Un-Cached Memory(230): 80D87D80 ~ 80E7507F
[USB] Large  Un-Cached Memory(21): 80E76180 ~ 80ECA17F
35921814 04000006 02800000 00008000 18000000 00000000 00000000 00000000 
00000000 00000000 00000000 35921814 00000000 00000040 00000000 04020116 
00030001 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 

30381106 02100000 0c030062 00801600 00000000 00000000 00000000 00000000 
1ae00001 00000000 00000000 30381106 00000000 00000080 00000000 00000116 
00031040 00000000 00000800 00000000 00000000 00000000 00000000 00000000 
00000010 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
7e0a0001 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
00002000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
00000000 00000000 00000000 00000000 00000000 03000000 00000000 00000000 

pci_find_slot bus 0 devfn 78
dev->bus->number 0 dev->devfn 70
dev->bus->number 0 dev->devfn 78
setUsbPciInfo() cpu_to_usb_addr_shift[0]:0x60000000, usb_to_cpu_addr_shift[0]:0xa0000000
usb_pci_probe() Found VIA UHCI-1 device in PCI slot 0x78, function 0, baseAddr:0xbae00000
30381106 02100000 0c030062 00801600 00000000 00000000 00000000 00000000 
1ae00021 00000000 00000000 30381106 00000000 00000080 00000000 00000200 
00031040 00000000 00000800 00000000 00000000 00000000 00000000 00000000 
00000010 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
7e0a0001 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
00002000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
00000000 00000000 00000000 00000000 00000000 03000000 00000000 00000000 

pci_find_slot bus 0 devfn 79
dev->bus->number 0 dev->devfn 70
dev->bus->number 0 dev->devfn 78
dev->bus->number 0 dev->devfn 79
setUsbPciInfo() cpu_to_usb_addr_shift[1]:0x60000000, usb_to_cpu_addr_shift[1]:0xa0000000
usb_pci_probe() Found VIA UHCI-2 device in PCI slot 0x79, function 1, baseAddr:0xbae00020
31041106 02100000 0c032065 00801600 18010000 00000000 00000000 00000000 
00000000 00000000 00000000 31041106 00000000 00000080 00000000 00000300 
000b0000 00000000 090020a0 ffff0000 80005a00 00000000 88880b04 00000033 
00012020 00000000 00000001 80000000 00000000 00000000 00000000 00000000 
7e0a0001 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
00000000 00000000 00000000 00000000 00000000 03000000 00000000 00000000 

pci_find_slot bus 0 devfn 7a
dev->bus->number 0 dev->devfn 70
dev->bus->number 0 dev->devfn 78
dev->bus->number 0 dev->devfn 79
dev->bus->number 0 dev->devfn 7a
setUsbPciInfo() cpu_to_usb_addr_shift[2]:0x60000000, usb_to_cpu_addr_shift[2]:0xa0000000
usb_pci_probe() Found VIA EHCI device in PCI slot 0x7a, function 2, baseAddr:0xb8010000
setUsbPciInfo() cpu_to_usb_addr_shift[3]:0x00000000, usb_to_cpu_addr_shift[3]:0x00000000
usb_pci_probe() Found Synopsis OTG, baseAddr:0xbe101000
usb_power_set() isOn:1
usb_power_set() Previous power off:0, current time:0
usb_power_set(1) min time delay:6000, current delay:0
usb_power_set() Need delay:6500 **********
usb_power_set(2) min time delay:6000, current delay:0
usb_hcd_init() func(0):1
localhc_init() install uhci driver(self->driver = 0x8081EDB0, uhci_driver=0x8081EDB0).
usb_pci_attach_device() Enable PCI device...PCI: Enabling device 00:0f.0 (0000 -> 0001)
OK
usb_pci_attach_device() Set latency timer...OK
usb_pci_attach_device() Set bus master...PCI: Enabling bus mastering for device 00:0f.0
pcibios_set_master> lat=0x16
OK
usb_pci_attach_device() Set VIA-UHCI special parameters...OK
usb_pci_attach_device(UHCI) Attach succ...
30381106 02100005 0c030062 00801600 00000000 00000000 00000000 00000000 
1ae00001 00000000 00000000 30381106 00000000 00000080 00000000 00000116 
00030040 00000000 00000800 00000000 00000000 00000000 00000000 00000000 
00000010 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
7e0a0001 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
00002000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
00000000 00000000 00000000 00000000 00000000 03000000 00000000 00000000 

usb_hcd_init() func(1):1
localhc_init() install uhci driver(self->driver = 0x8081EDB0, uhci_driver=0x8081EDB0).
usb_pci_attach_device() Enable PCI device...PCI: Enabling device 00:0f.1 (0000 -> 0001)
OK
usb_pci_attach_device() Set latency timer...OK
usb_pci_attach_device() Set bus master...PCI: Enabling bus mastering for device 00:0f.1
pcibios_set_master> lat=0x16
OK
usb_pci_attach_device() Set VIA-UHCI special parameters...OK
usb_pci_attach_device(UHCI) Attach succ...
30381106 02100005 0c030062 00801600 00000000 00000000 00000000 00000000 
1ae00021 00000000 00000000 30381106 00000000 00000080 00000000 00000200 
00030040 00000000 00000800 00000000 00000000 00000000 00000000 00000000 
00000010 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
7e0a0001 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
00002000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
00000000 00000000 00000000 00000000 00000000 03000000 00000000 00000000 

usb_hcd_init() func(2):1
localhc_init() install ehci driver(self->driver = 0x8081ED84, ehci_driver=0x8081ED84).
usb_pci_attach_device() Enable PCI device...PCI: Enabling device 00:0f.2 (0000 -> 0002)
OK
usb_pci_attach_device() Set latency timer...OK
usb_pci_attach_device() Set bus master...PCI: Enabling bus mastering for device 00:0f.2
pcibios_set_master> lat=0x16
OK
usb_pci_attach_device() Set write invalidate...OK
usb_pci_attach_device() Set VIA-EHCI special parameters...OK
usb_pci_attach_device(EHCI) Attach succ...
31041106 02100016 0c032065 00801600 18010000 00000000 00000000 00000000 
00000000 00000000 00000000 31041106 00000000 00000080 00000000 00000300 
000b0000 00000000 290020a0 ffff0000 80005a00 00000000 88880b04 00000033 
00012020 00000000 00000001 c0000000 00000000 00000000 00000000 00000000 
7e0a0001 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
00000000 00000000 00000000 00000000 00000000 03000000 00000000 00000000 

usb_hcd_init() func(3):1
localhc_init() install otg driver(self->driver = 0x8081ED58, otg_driver=0x8081ED58).
usb_hcd_init(): succ.
[USB-INIT] main() ====== after call UsbSysInit() 
InitCommSys: RESOURCE_BASE = 113, NUMRES = 640
InitCommSys: EVENT_BASE = 239, NUMEVT = 768
InitCommSys: MAILBOX_BASE = 6, NUMMBX = 64
RUNTASK id=19 period_task...

========== ADSL Modem initialization OK ! ======

[Dhcpd_Start]
RUNTASK id=20 dhcp_daemon...
main()> usb:1, ftp:0
found signature: 78h 56h 34h 12h
ulImgLens=1999780, LENGTH[3]-12=7602164, type:0
length checking OK
[0]2 find End at 0xFFFFFFFFB0298000 len=1999780, type=0
found signature: 78h 56h 34h 12h
ulImgLens=968414, LENGTH[3]-12=7602164, type:10
length checking OK
[1]2 find End at 0xFFFFFFFFB0384800 len=968414, type=10
found signature: 78h 56h 34h 12h
ulImgLens=272391, LENGTH[3]-12=7602164, type:11
length checking OK
[2]2 find End at 0xFFFFFFFFB03C7400 len=272391, type=11
found signature: 78h 56h 34h 12h
ulImgLens=259453, LENGTH[3]-12=7602164, type:12
length checking OK
[3]2 find End at 0xFFFFFFFFB0406C00 len=259453, type=12
---[ LZMA head start in 0xFFFFFFFFB0407000 ]---
found signature: 78h 56h 34h 12h
ulImgLens=150508, LENGTH[3]-12=7602164, type:60
length checking OK
[4]2 find End at 0xFFFFFFFFB042BC00 len=150508, type=60
---[ LZMA head start in 0xFFFFFFFFB042C000 ]---
found signature: 78h 56h 34h 12h
ulImgLens=452105, LENGTH[3]-12=7602164, type:90
length checking OK
[5]2 find End at 0xFFFFFFFFB049A400 len=452105, type=90
Image[1] at 0xB00B0000, len=1999780, type=0
Image[2] at 0xB0298400, len=968414, type=10
Image[3] at 0xB0384C00, len=272391, type=11
Image[4] at 0xB03C7800, len=259453, type=12
Image[5] at 0xB0407000, len=150508, type=60
Image[6] at 0xB042C000, len=452105, type=90
[get_web_address] Web-0:  addr:0xb0298400, len:968414, type:10
[get_web_address] Web-1:  addr:0xb0384c00, len:272391, type:11
[get_web_address] Web-2:  addr:0xb03c7800, len:259453, type:12
getUnZipFileLength: [ZIP 3]
getUnZipFileLength: [ZIP 1]
Unzipping from B0298400 to 83D88800 ... [ZIP 3] [ZIP 2] done
Uncompressed size = 1471846
getUnZipFileLength: [ZIP 3]
getUnZipFileLength: [ZIP 1]
[absread] flash_init: pfs image found at ffffffffb0384c00, size is 1507881 bytes
Unzipping from B0384C00 to 83C18200 ... [ZIP 3] [ZIP 2] done
Uncompressed size = 1507881
RUNTASK httpd...
RUNTASK id=23 SSLClient ...
g_Client_Cert_Array=0x81f28800
RUNTASK id=24 dnsproxy...
RUNTASK id=25 snmp_task...
startNBIOSTask()...
RUNTASK id=26 nbios_main...
RUNTASK id=27 padmin_task_entry...
RUNTASK id=28 dhcpd_mgmt_task...
runDDNS(0) ddns_enable:0, DDNSTaskRun:0, needReRunDDNS:1
runDDNS(1) ddns_enable:0, DDNSTaskRun:0, needReRunDDNS:1
UPnP task run-up... upnpFunc:1
UPNP Device initialize success! slot=29
update_device_OUI: OUI_str=88252C
[0] Allocate mailbox 6
[0] Allocate mailbox 7
FirstUseDate:2013-03-09T11:20:44
RUNTASK id=32 push_daemon...
RUNTASK id=33 wscmain...
RUNTASK id=34 wsc_Send_eap_packet...
RUNTASK id=35 wsc_Send_UPNP_packet...
RUNTASK id=36 WSC_WaitUserAction_Task...
UART RX Output

rzMemory start: 0x81DC8FF0, end 0x81F287F0, size 1439744[0] Allocate resource 113, FreeResource = 1
fpiclk=83333333, rmc=16, fpiclk/rmc=5208333
ifx_ssc_clock = 5208333, baud=2000000
ifx_ssc_set_baud: br = 0

call ifx_ssc_init() = 0
call ifx_ssc_open() = 0
SPI_Init!
RUNTASK id=39 apAppInit...
RUNTASK id=41 isdn_main...
RUNTASK id=42 pppFailBackPeriodCheckTask()...
RUNTASK id=43 detect_acs_connect_task...
RUNTASK id=44 pid_cc_err_stats_task...
start http redir.
RUNTASK id=45 hr_daemon...
RUNTASK id=46 hr_misc_daemon...
RUNTASK id=47 ncidd_main...,  in run_project_task()
Starting Multitask...
phy_change_check... pass
enter adsl_disable_annex_j_b43_carrier_set()
Danube MEI version:1.00.07
Image[1] at 0xB00B0000, len=1999780, type=0
Image[2] at 0xB0298400, len=968414, type=10
Image[3] at 0xB0384C00, len=272391, type=11
Image[4] at 0xB03C7800, len=259453, type=12
Image[5] at 0xB0407000, len=150508, type=60
Image[6] at 0xB042C000, len=452105, type=90
[get_datapump_address] Datapump for Annex A0:-1, B0:4, C0:-1
[get_datapump_address] Datapump for Annex A1:-1, B1:-1, C1:-1
[get_datapump_address] r_img=4, t_img=6
Unzip DSP firmware ...
Unzipping from B0407000 to 81053400 ... [ZIP 2] xSpeedtsk priority is 80
done
Uncompressed size = 302464
ifno2dot1x_if[2]=0
dot1x_wireless_if_mask=0x4
fwrite_specialConfigPara() Save random seed:11399802
MXIC MX29LV640BB bottom boot 16-bit mode found
init psock cnt=1
XHFC r16(CHIP ID)= 0x61
erase from location b00a0000. done
write length 0x5b0
0update_img_hdr = FFFFFFFFA1053400
idx=0 mem_ptr=0xA1053400 size=65536
idx=1 mem_ptr=0xA1063400 size=65536
idx=2 mem_ptr=0xA1073400 size=65536
idx=3 mem_ptr=0xA1083400 size=65536
idx=4 mem_ptr=0xA1093400 size=40320
RUNTASK id=51 Atheros_NetTask .Got MODEM_READY_MSG
..
<-- RTMPAllocTxRxRingMemory, Status=0
Channel=0
ADSL Firmware: 2.1.5.2.1.2 [Annex B:0x4208 0x0]
rtmp_read_wds_from_file() is called !!!
rtmp_read_wds_from_file : WDS disabled 
Magic No. in Boot Param check OK!!!
sould check E2PROM MAC ?????????????????
NICReadEEPROMParameters 882 
NICReadEEPROMParameters 945 
NICReadEEPROMParameters 970 
Change w14 from 9 to 1
Change w14 from 99 to 91
Change w14 from a9 to a1
!! arcISDNIrqEnable: chipId=0
!! arcISDNIrqEnable: chipId=0
[41] Allocate resource 114, FreeResource = 2
[41] Allocate resource 115, FreeResource = 3
[41] Allocate resource 116, FreeResource = 4
[41] Allocate resource 117, FreeResource = 5
sizeof(struct ap_cm)=256
RUNTSK ISDN_ApCM 17
### CAPI 2.0 / 2.024
### Nbr. of ctrls = 2
     ctrl 1: nbr. of B-chnls=2, global opts=0x451
             B1 prots=0x3, B2 prots=0x2, B3 prots=0x1
     ctrl 2: nbr. of B-chnls=2, global opts=0x451
             B1 prots=0x3, B2 prots=0x2, B3 prots=0x1
>>> CAPI_REGISTER (2048/1/8/2048), applId=1
>>> CAPI_REGISTER (2048/1/8/2048), applId=2
ce_l4_proc: 7h cause ah 1h
>>> CAPI_REGISTER (2048/1/8/2048), applId=3
>>> CAPI_REGISTER (2048/1/8/2048), applId=4
>>> CAPI_REGISTER (2048/1/8/2048), applId=5
ce_l4_proc: 7h cause ah 2h
[23] SSLClient> SSLClient() run
[23] sslc_conf_init> ssl client info:
[23] PrivateKey=
[23] MyCertificate=
[23] CaCertificate=
[23] SSL_method=31
[23] verify_mode=1
[23] cipher_suites=ADH:SHA1:HIGH:EXP
[23] tftp_server_ip=140.92.61.131
[23] fn_myCerttificate=ServCert.pem
[23] fn_privateKey=PrivKey.pem
[23] fn_caCertificate=CaCert.pem
[23] sslc_conf_init> ssl client info end:
PKCS12_PBE_add>
PKCS12_PBE_add> support RC4
PKCS12_PBE_add> support DES
PKCS12_PBE_add> support RC2
[23] sslc_conf_init> pCtx=0x81da9a7c in ssld_conf_init

[23] sslc_ctx_reset_cert> re-LoadCACertificate( 3rdCA ) ok!!
[23] sslc_ctx_reset_cert> re-LoadCACertificate( 2ndCA ) ok!!
[23] sslc_ctx_reset_cert> re-LoadCACertificate( 1stCA ) ok!!sslc_ctx_reset_cert> this is pkcs12 type certificate

[23] sslc_ctx_reset_cert : re-LoadServerCertAndKey() ok!!
[23] sslc_conf_init> sslc_conf_init() ok
[23] SSLClient> want to bind socket for client application!
TRAP(coldStart) : send ok!
[USBLPT] Printer Initialize Fail : Plug Out !!
padmin_task_entry() task running
********** upnp_main() Unsupportted UPnP root device[0]: UPnP
upnp_main(1-0) Run-up UPnP device IGD...
push_daemon> enter. (0, 0)
pd_get_server_socket> listen_port=53057
*********************************************
****Wi-Fi Simple Config Application***** 
Version: Build 2.02.2.DTM1.1, Jun 14 2011 15:01:58
*********************************************
hr_daemon> port 32769.
hr_daemon> ssl port 32770.
Init_SSLServer> input listen_protocol=6, nListenPort=32770
[45] ssld_conf_init> ssl server info:
[45] PrivateKey=
[45] MyCertificate=
[45] CaCertificate=
[45] SSL_method=31
[45] verify_mode=0
[45] cipher_suites=ADH:SHA1:HIGH:EXP
[45] tftp_server_ip=140.92.61.131
[45] fn_myCerttificate=ServCert.pem
[45] fn_privateKey=PrivKey.pem
[45] fn_caCertificate=CaCert.pem
[45] ssld_conf_init> ssl server info end:
[45] pCtx=0x81d94f04 in ssld_conf_init
ssld_ctx_reset_cert> this is pkcs12 type certificate

[45] ssld_ctx_reset_cert : re-LoadServerCertAndKey() ok!!

[45] ssld_ctx_reset_cert> re-LoadCACertificate( 1stCA ) ok!![45] ssld_conf_init> ssld_conf_init() ok
[ncidd]: [ncidd]: <Network Port: 3333>
[ncidd]: lan ip=0xffffffffc0a80184
[ncidd]: ncidd_nwsk() sndlog_sock = 49
[HWLAN] [53] rapi_tmr_task running 
uhci_pci_attach: begin ... 
ptp Daemon task running
TR069: The connection request port is 63065 
lpd Daemon task running
[USB ROOTHUB_LOOP] RUNTASK id=57 lpd_main ...
[USB] lpd_init() End.
printer schedule task running
upnp_Init(0) upnpGlobalInit[1]:0
SSDP Initialization completed...
GenaInit : event_hook is NULL!!

>> Parse Service 'urn:schemas-microsoft-com:service:OSInfo:1' : TRUE
>> Parse Service 'urn:schemas-upnp-org:service:Layer3Forwarding:1' : TRUE
>> Parse Service 'urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1' : TRUE
>> Parse Service 'urn:schemas-upnp-org:service:WANEthernetLinkConfig:1' : TRUE
>> Parse Service 'urn:schemas-upnp-org:service:WANPPPConnection:1' : TRUE
>> Parse Service 'urn:schemas-upnp-org:service:WANIPConnection:1' : TRUE
>> Parse Device 'urn:schemas-upnp-org:device:WANConnectionDevice:1' : TRUE
>> Parse Device 'urn:schemas-upnp-org:device:WANDevice:1' : TRUE
>> Parse Device 'urn:schemas-upnp-org:device:InternetGatewayDevice:1' : TRUE
********** upnp_main1() Record pDevRoot[1]:81d7e3e8

>>>> UPNP init IGD device successfully ...

********** upnp_main() Unsupportted UPnP root device[2]: TR64
upnp_main(3-0) Run-up UPnP device WPS-WCN...
upnp_Init(0) upnpGlobalInit[3]:0

>> Parse Service 'urn:schemas-wifialliance-org:service:WFAWLANConfig:1' : TRUE
>> Parse Device 'urn:schemas-wifialliance-org:device:WFADevice:1' : TRUE
********** upnp_main1() Record pDevRoot[3]:81d53fb0

>>>> UPNP init WPS-WCN device successfully ...

********** upnp_main() Unsupportted UPnP root device[4]: AV Media Server
********** upnp_main() Unsupportted UPnP root device[5]: AV Media Renderer
********** upnp_main() Unsupportted UPnP root device[6]: Printer
uhci_init() UHCI_FRAMELIST_COUNT=1024, alloc size:4096
uhci_init() UHCI_FLBASEADDR:0x00e77000, physicalMem:0x00e77000


>>>>>> usbd_new_device: adding unit bus:1, addr=1, rev=0100, class=9, subclass=0, protocol=0, maxpacket=64, len=18, speed=2

[40] Allocate resource 118, FreeResource = 6
Reset Duslic High begin
Reset Duslic end
IFX TAPI, version 3.7.1.5, (c) 2001-2008 Infineon Technologies AG
[29] Allocate mailbox 8
TAPI_init_task_queue: enter loop..8
[40] Allocate resource 119, FreeResource = 7
IFX VMMC device driver, version 1.3.0.5, (c) 2006-2008 Infineon Technologies AG
IFX MIPS24KEc MPS driver, version 2.0.0.0, (c) 2006-2008 Infineon Technologies AG
123ifx_mps_init_structures request_irq 1 146
ifx_mps_init_structures request_irq 2 147
ifx_mps_init_structures request_irq 3 0 142
ifx_mps_init_structures request_irq 3 1 143
ifx_mps_init_structures request_irq 3 2 144
ifx_mps_init_structures request_irq 3 3 145
VMMC_Open : Major 122 Minor 10 
IFX_TAPI_Create_Device: ndev = 0, TapiDev 81D4C000
[40] Allocate resource 120, FreeResource = 8
[40] Allocate resource 121, FreeResource = 9
[40] Allocate resource 122, FreeResource = 10
[40] Allocate resource 123, FreeResource = 11
[40] Allocate resource 124, FreeResource = 12
[40] Allocate event 239
>>>>>>>>>> OS_GetEventNumber: event 239
VMMC_AddCaps: CODECS = 0
VMMC_AddCaps: CODECS = 0
ifx_tapi_Prepare_Ch: nChannel 0
[40] Allocate resource 125, FreeResource = 13
[40] Allocate resource 126, FreeResource = 14
[40] Allocate resource 127, FreeResource = 15
VMMC_Prepare_Ch: nChannel = 1
[40] Allocate resource 128, FreeResource = 16
[40] Allocate event 240
>>>>>>>>>> OS_GetEventNumber: event 240
ifx_tapi_Prepare_Ch: nChannel 1
[40] Allocate resource 129, FreeResource = 17
[40] Allocate resource 130, FreeResource = 18
[40] Allocate resource 131, FreeResource = 19
VMMC_Prepare_Ch: nChannel = 2
[40] Allocate resource 132, FreeResource = 20
[40] Allocate event 241
>>>>>>>>>> OS_GetEventNumber: event 241
ifx_tapi_Prepare_Ch: nChannel 2
[40] Allocate resource 133, FreeResource = 21
[40] Allocate resource 134, FreeResource = 22
[40] Allocate resource 135, FreeResource = 23
VMMC_Prepare_Ch: nChannel = 3
[40] Allocate resource 136, FreeResource = 24
[40] Allocate event 242
ADSL> READY
>>>>>>>>>> OS_GetEventNumber: event 242
ifx_tapi_Prepare_Ch: nChannel 3
[40] Allocate resource 137, FreeResource = 25
[40] Allocate resource 138, FreeResource = 26
[40] Allocate resource 139, FreeResource = 27
VMMC_Prepare_Ch: nChannel = 4
[40] Allocate resource 140, FreeResource = 28
[40] Allocate event 243
>>>>>>>>>> OS_GetEventNumber: event 243
ifx_tapi_Prepare_Ch: nChannel 4
[40] Allocate resource 141, FreeResource = 29
[40] Allocate resource 142, FreeResource = 30
[40] Allocate resource 143, FreeResource = 31
VMMC_Prepare_Ch: nChannel = 5
[40] Allocate resource 144, FreeResource = 32
[40] Allocate event 244
>>>>>>>>>> OS_GetEventNumber: event 244
ifx_tapi_Prepare_Ch: nChannel 5
[40] Allocate resource 145, FreeResource = 33
[40] Allocate resource 146, FreeResource = 34
[40] Allocate resource 147, FreeResource = 35
VMMC_Prepare_Ch: nChannel = 6
[40] Allocate resource 148, FreeResource = 36
[40] Allocate event 245
>>>>>>>>>> OS_GetEventNumber: event 245
ifx_tapi_Prepare_Ch: nChannel 6
[40] Allocate resource 149, FreeResource = 37
[40] Allocate resource 150, FreeResource = 38
[40] Allocate resource 151, FreeResource = 39
VMMC_Prepare_Ch: nChannel = 7
[40] Allocate resource 152, FreeResource = 40
[40] Allocate event 246
>>>>>>>>>> OS_GetEventNumber: event 246
ifx_tapi_Prepare_Ch: nChannel 7
[40] Allocate resource 153, FreeResource = 41
[40] Allocate resource 154, FreeResource = 42
[40] Allocate resource 155, FreeResource = 43
VMMC_Prepare_Ch: nChannel = 8
[40] Allocate resource 156, FreeResource = 44
[40] Allocate event 247
>>>>>>>>>> OS_GetEventNumber: event 247
VMMC_LL_Open, nDev 0, inode 0 mpsCh 1
ifx_mps_open, inode 1
VMMC_Open --> 81d4c000
VMMC_handle[0] : 81d4c000
VMMC_Open : Major 122 Minor 11 
VMMC_LL_Open, nDev 0, inode 1 mpsCh 2
ifx_mps_open, inode 2
VMMC_Open --> 81d49c90
VMMC_handle[1] : 81d49c90
VMMC_Open : Major 122 Minor 12 
VMMC_LL_Open, nDev 0, inode 2 mpsCh 3
ifx_mps_open, inode 3
VMMC_Open --> 81d4a0fc
VMMC_handle[2] : 81d4a0fc
VMMC_Open : Major 122 Minor 13 
VMMC_LL_Open, nDev 0, inode 3 mpsCh 4
ifx_mps_open, inode 4
VMMC_Open --> 81d4a568
VMMC_handle[3] : 81d4a568
VMMC_Open : Major 122 Minor 14 
VMMC_LL_Open, nDev 0, inode 4 mpsCh 5
ifx_mps_open, inode 5
VMMC_Open --> 81d4a9d4
VMMC_handle[4] : 81d4a9d4
VMMC_Open : Major 122 Minor 15 
VMMC_LL_Open, nDev 0, inode 5 mpsCh 6
ifx_mps_open, inode 6
VMMC_Open --> 81d4ae40
VMMC_handle[5] : 81d4ae40
VMMC_Open : Major 122 Minor 16 
VMMC_LL_Open, nDev 0, inode 6 mpsCh 7
ifx_mps_open, inode 7
VMMC_Open --> 81d4b2ac
VMMC_handle[6] : 81d4b2ac
VMMC_Open : Major 122 Minor 17 
VMMC_LL_Open, nDev 0, inode 7 mpsCh 8
VMMC_Open --> 81d4b718
VMMC_handle[7] : 81d4b718
VMMC_Open : Major 122 Minor 18 
VMMC_LL_Open, nDev 0, inode 8 mpsCh 9
VMMC_Open --> 81d4bb84
VMMC_handle[8] : 81d4bb84
===> 
Set PCM I/F 0 VMMC_handle:81d4c000
ifx_mps_ioctl: FIO_MPS_DOWNLOAD...1
[get_vcpufirmware_address] DSP firmware: [5 -1], dCnt:1
Unzipping from B042C000 to 82D6CD84 ... [ZIP 2] usbd_probe_and_attach,probe 1!
uhci_pci_attach: begin ... 
uhci_init() UHCI_FRAMELIST_COUNT=1024, alloc size:4096
uhci_init() UHCI_FLBASEADDR:0x00ea3000, physicalMem:0x00ea3000


>>>>>> usbd_new_device: adding unit bus:2, addr=1, rev=0100, class=9, subclass=0, protocol=0, maxpacket=64, len=18, speed=2

usbd_probe_and_attach,probe 1!
ehci_pci_attach: begin ... 
ehci_pci_attach: ioregs:0xb8010000, irq:95
ehci_init() flsize=1024, alloc size:4096
ehci_init() EHCI_PERIODICLISTBASE:0x00de1000, physicalMem:0x00de1900
ehci_init() sqh->physaddr:0x00c227c2
ehci_init() EHCI_ASYNCLISTADDR:0x00c227c0, physicalMem:0x00c227c0


>>>>>> usbd_new_device: adding unit bus:3, addr=1, rev=0200, class=9, subclass=0, protocol=1, maxpacket=64, len=18, speed=3

done
Uncompressed size = 642816
IFX_MPS: Download firmware (size 642816 bytes)... 123ok!
Version 11.2.4.1.0 up and running...
usbd_probe_and_attach,probe 1!
[USB] dwc3884_start() DWC3884 core version:0x4F54220A, 2.20a
[USB] dwc3884_reset() DANUBE_RCU_UBSCFG:0xBF203018, var:0x00000400
[USB] dwc3884_reset() rstctl:0xBE101010
[USB] dwc3884_start() intsts:0xBE101014, var:0x04008829


>>>>>> usbd_new_device: adding unit bus:4, addr=1, rev=0200, class=9, subclass=0, protocol=1, maxpacket=64, len=18, speed=3

usbd_probe_and_attach(Hub)> Reopen STATIC default pipe OK
scan channel 1 rssi -79
max_rssi[0] -79
scan channel 2 rssi -89
max_rssi[1] -89
scan channel 5 rssi -71
max_rssi[4] -71
scan channel 13 rssi -79
max_rssi[12] -79
Dirtyness = 13.14.3.3.13.1.1.1.0.1.1.1.12.
APAutoSelectChannel pick up ch#9
<==== rt28xx_init, Status=0
0x1300 = 00064320
ND 2 ???
ND 1 ???
pAd->VirtualIfCnt 1
usbd_probe_and_attach,probe 1!
startExplore() usb explore task run-up, slot:0, tsk_id:64, reason:0
usb_hc_install_interrupt() Interrupt disable
usb_hc_install_interrupt() Interrupt disable
usb_hc_install_interrupt() Install EHCI interrupt 95
usb_hc_install_interrupt() Install OTG interrupt 54
USB Module: Version 2.0.0 build Jun 30 2011 02:33:47
usb_explore_task() Begin ...
[htf_dbg]     - OnlineActiveWirless() 1334
WirelessMode 9 BasicRate 15
AutochannelSelect 0 Channel 0 
autoChannel : 9
NEW : channel 9, BW 0(20MHZ), EXTCHA 3(BELOW)
Set_PreAuth_Proc called, PreAuth=1
[signal_1x_reset] ...
>>>>>>>>>>>>>>>>>>>>>>tick 6030
*********************************************
***Waiting for Registrar to connect...***
*********************************************
VMMC_AddCaps: CODECS = 7df
[40] Allocate event 248
>>>>>>>>>> OS_GetEventNumber: event 248
[40] Allocate event 249
>>>>>>>>>> OS_GetEventNumber: event 249
===> 
 VMMC_Ioctl: Phone 1 IFX_TAPI_LINE_TYPE ok!
 VMMC_Ioctl: Phone 1 IFXPHONE_SET_LINEFEED ok!
Set PCM I/F 1 VMMC_handle:81d49c90
===> 
 VMMC_Ioctl: Phone 2 IFX_TAPI_LINE_TYPE ok!
 VMMC_Ioctl: Phone 2 IFXPHONE_SET_LINEFEED ok!
Set PCM I/F 2 VMMC_handle:81d4a0fc
===> 
Set PCM I/F 3 VMMC_handle:81d4a568
===> 
Set PCM I/F 4 VMMC_handle:81d4a9d4
===> 
Set PCM I/F 5 VMMC_handle:81d4ae40
===> 
Set PCM I/F 6 VMMC_handle:81d4b2ac
===> 
Set PCM I/F 7 VMMC_handle:81d4b718
===> 
Set PCM I/F 8 VMMC_handle:81d4bb84
Setting HOOK Related Parameters 0
Setting HOOKFLASH_TIME min 80 ms max 900 ms
Setting HOOKON_TIME min 370 max 370
Setting HOOK Related Parameters 1
Setting HOOKFLASH_TIME min 80 ms max 900 ms
Setting HOOKON_TIME min 370 max 370
Setting HOOK Related Parameters 2
Setting HOOK Related Parameters 3
RUNTASK id=33 VINETIC_DRV_Task...
[68] Allocate mailbox 9
RUNTASK id=68 VINETIC_T38_Task...
RUNTASK id=70 FXO_flash_task...
RUNTASK id=69 VOICE_API_task...
[reset_802dot1x] wireless module ready
config->enablePreAuthen=1
install group key to Mac ASIC ????????????????????????
[reset_802dot1x] 802.1Xv2 ready
ifno2dot1x_if[2]=0
dot1x_wireless_if_mask=0x4
Reset Duslic High begin
Reset Duslic end
ProDAAInitialize: begin now
ProDAAInitialize: Line-Side Device Status 0
Port 2 sytem-side revision 45, line-side revision 6
init_DTMF_data: time 7709
force_daa_offhook ch 2 onoff 1 time 7709
ProDaaOffhook 0 2 onoff 1
CID_Detect CH 2 onoff 0
FXO_PolState_DTMFCID --> Disable DTMF CID
force_daa_offhook ch 2 onoff 0 time 7768
ProDaaOffhook 1 2 onoff 0
CID_Detect CH 2 onoff 1
FXO_PolState_DTMFCID --> Detect Polarity Changed Enable DTMF CID
When * the value is 60000
When * the value is 60000
When * the value is 60000
When * the value is 60000
sys_voip_cfg->cpt.reorder = 425@-230;20(0.24/0.24/1)
TEL_DRV_TONE_REORDER  duration = 480
When * the value is 60000
[40] Allocate resource 157, FreeResource = 45
[40] Allocate mailbox 10
TEL_MGR_Init
[40] Allocate resource 158, FreeResource = 46
tel_mgr_mutex=158
[40] Allocate mailbox 11
 TEL_DM_Init
[40] Allocate resource 159, FreeResource = 47
[40] Allocate resource 160, FreeResource = 48
 TEL_MGR_VoiceChannelInit
 TEL_MGR_SetVoiceChannel 1
 !TEL_MGR_SetVoiceChannel: TEL_PORT_GetPhoneChannelId fail
 TEL_MGR_SetPhoneEC
 !TEL_MGR_SetPhoneEC: TEL_PORT_GetPhoneChannelId fail
 TEL_MGR_SetPhoneVAD
 !TEL_MGR_SetPhoneVAD: TEL_PORT_GetPhoneChannelId fail
 TEL_MGR_SetPhoneGain
Gain Tx -2, Rx -9
 TEL_MGR_SetPhoneJitter
 !TEL_MGR_SetPhoneJitter: TEL_PORT_GetPhoneChannelId fail
 TEL_MGR_SetVoiceChannel 2
 !TEL_MGR_SetVoiceChannel: TEL_PORT_GetPhoneChannelId fail
 TEL_MGR_SetPhoneEC
 !TEL_MGR_SetPhoneEC: TEL_PORT_GetPhoneChannelId fail
 TEL_MGR_SetPhoneVAD
 !TEL_MGR_SetPhoneVAD: TEL_PORT_GetPhoneChannelId fail
 TEL_MGR_SetPhoneGain
Gain Tx -2, Rx -9
 TEL_MGR_SetPhoneJitter
 !TEL_MGR_SetPhoneJitter: TEL_PORT_GetPhoneChannelId fail
 TEL_MGR_SetVoiceChannel 3
 !TEL_MGR_SetVoiceChannel: TEL_PORT_GetPhoneChannelId fail
 TEL_MGR_SetPhoneEC
 !TEL_MGR_SetPhoneEC: TEL_PORT_GetPhoneChannelId fail
 TEL_MGR_SetPhoneVAD
 !TEL_MGR_SetPhoneVAD: TEL_PORT_GetPhoneChannelId fail
 TEL_MGR_SetPhoneGain
Gain Tx -2, Rx -9
 TEL_MGR_SetPhoneJitter
 !TEL_MGR_SetPhoneJitter: TEL_PORT_GetPhoneChannelId fail
 TEL_MGR_SetVoiceChannel 4
 !TEL_MGR_SetVoiceChannel: TEL_PORT_GetPhoneChannelId fail
 TEL_MGR_SetPhoneEC
 !TEL_MGR_SetPhoneEC: TEL_PORT_GetPhoneChannelId fail
 TEL_MGR_SetPhoneVAD
 !TEL_MGR_SetPhoneVAD: TEL_PORT_GetPhoneChannelId fail
 TEL_MGR_SetPhoneGain
Gain Tx -2, Rx -9
 TEL_MGR_SetPhoneJitter
 !TEL_MGR_SetPhoneJitter: TEL_PORT_GetPhoneChannelId fail
[40] Allocate resource 161, FreeResource = 49
[40] Allocate mailbox 12
[72] Allocate resource 162, FreeResource = 50
[72] Allocate resource 163, FreeResource = 51
[SIP_CORE_Task] sip_core_ready
TEL_MGR_SetVoipPhoneEvtHookFunc
TEL_MGR_SetVoipPhoneEvtHookFunc
TEL_MGR_SetVoipPhoneEvtHookFunc
TEL_MGR_SetVoipPhoneEvtHookFunc
[40] Allocate resource 164, FreeResource = 52
[40] Allocate mailbox 13
VOICE_IVR_Init: voice_ivr_channel[0].ivrQueueId = 13
[40] Allocate mailbox 14
VOICE_IVR_Init: voice_ivr_channel[1].ivrQueueId = 14
[40] Allocate mailbox 15
VOICE_IVR_Init: voice_ivr_channel[2].ivrQueueId = 15
[40] Allocate mailbox 16
VOICE_IVR_Init: voice_ivr_channel[3].ivrQueueId = 16
[40] Allocate mailbox 17
VOICE_IVR_Init: voice_ivr_channel[4].ivrQueueId = 17
[40] Allocate mailbox 18
VOICE_IVR_Init: voice_ivr_channel[5].ivrQueueId = 18
[40] Allocate mailbox 19
VOICE_IVR_Init: voice_ivr_channel[6].ivrQueueId = 19
[40] Allocate mailbox 20
VOICE_IVR_Init: voice_ivr_channel[7].ivrQueueId = 20
TEL_MGR_DisableDebug
TEL_MGR_AutoDetection: End U high impedance state 8030
TEL_MGR_AutoDetection: Start calculate time 10030
[reset_802dot1x] wireless module ready
config->enablePreAuthen=1
install group key to Mac ASIC ????????????????????????
[reset_802dot1x] 802.1Xv2 ready
Got MODEM_READY_MSG
ADSL Firmware: 2.1.5.2.1.2 [Annex B:0x4208 0x0]
ADSL> READY
TEL_MGR_AutoDetection: Disconnect NTBA 109983.
ISDN_PSTN_Relay : PSTN
Got MODEM_READY_MSG
ADSL Firmware: 2.1.5.2.1.2 [Annex B:0x4208 0x0]
ADSL> READY

Backup Original Firmware

Get brntool

git clone https://github.com/rvalles/brntool
cd brntool

Enter Easybox Administrator Mode

replace /dev/ttyUSB2 with your com port device name (or use your other favorite terminal emulator)

• run "screen /dev/ttyUSB2 115200"
• power on the box
• hurry press 3x space bar
• type an exclamation mark (!) to enter the administration mode
• exit terminal emulator (screen: [CTRL]+[A], [K], [y])

This is what you should see now:

ROM VER: 1.0.3
CFG 01
Read EEPROMX
 X



=======================================================================
Wireless ADSL Gateway DANUBE Loader V1.04.00 build Mar 19 2010 10:00:29
                    Arcadyan Technology Corporation
=======================================================================
MXIC MX29LV640BB bottom boot 16-bit mode found

Copying boot params.....DONE


Press Space Bar 3 times to enter command mode ...123
Yes, Enter command mode ...


[DANUBE Boot]: 

======================
 [#] Set Serial Number
 [2] Use Normal Firmware
 [3] Use ART-Testing Firmware
 [9] Taggle ART Firmware Enable/Disable
 [A] Set MAC Address
 [E] Erase Flash
 [G] Run Runtime Code
 [H] Set Options
 [P] Print Boot Params 
 [U] Upload to Flash
 [V] Set Board Version
======================

[DANUBE Boot]:!

Enter Administrator Mode !

======================
 [#] Set Serial Number
 [2] Use Normal Firmware
 [3] Use ART-Testing Firmware
 [9] Taggle ART Firmware Enable/Disable
 [A] Set MAC Address
 [E] Erase Flash
 [G] Run Runtime Code
 [H] Set Options
 [M] Upload to Memory
 [P] Print Boot Params 
 [R] Read from Memory
 [T] Memory Test
 [U] Upload to Flash
 [V] Set Board Version
 [W] Write to Memory
 [Y] Go to Memory
 [Z] Dump DDR Ram Register
======================

[DANUBE Boot]:
[screen is terminating]
joachim@job2:~/brntool> 

Now start brntool to save flash into a file (will run ~1h)

joachim@job2:~/brntool> time ./brntool.py --read=ARV752DPW22_orig.dump --addr=0xB0000000 --verbose --size=0x800000
Waiting for a prompt...
Ok.
Addr: 0xb0002710
Size: 8378608
Addr: 0xb0004e20
Size: 8368608
Addr: 0xb0007530
Size: 8358608
...
Addr: 0xb07fb750
Size: 18608
Addr: 0xb07fde60
Size: 8608

real    61m36,584s
user    11m7,547s
sys     2m13,588s