Today I've tried to dump the original bootloader using the ping hack perl script described here:
http://oldwiki.openwrt.org/OpenWrtDocs( … 4XLGi.html

I managed to download some utilities on RAM, so i can transfer files outside it the device (netcat). The only missing part is reading the flash.
Issuing:
dd if=/dev/mtd0
Doesn't produce any output!!! I need to find a tool that let me dump the entire flash... something like a raw image. Any idea? Maybe I'll open a new topic on this.

Other infos about the original firmware:

mattia@jiraiya:~/Scrivania$ perl inject.pl "mount -l"
[~] mount -l
/dev/mtd0 on / type squashfs (ro)
proc on /proc type proc (rw,nodiratime)
none on /dev/pts type devpts (rw)
tmpfs on /tmp type tmpfs (rw)
/dev/ram0 on /web/img type ext2 (rw)

mattia@jiraiya:~/Scrivania$ perl inject.pl "ls -l /proc/mtd"
[~] ls -l /proc/mtd
-r--r--r--    1 0        0               0 /proc/mtd

mattia@jiraiya:~/Scrivania$ perl inject.pl "cat /proc/mtd"
[~] cat /proc/mtd

mattia@jiraiya:~/Scrivania$ perl inject.pl "ls -l /dev/mtd*"
[~] ls -l /dev/mtd*
brw-rw-rw-    1 0        0         31,   0 /dev/mtd0
brw-rw-rw-    1 0        0         31,   1 /dev/mtd

mtd0 is the root filesystem, the mtdX entry for the bootloader seems missing!!! o.o

@LanMasterD
I hope you get well soon!!!

(Last edited by AraKs on 20 Jun 2009, 08:17)

I found this inside OSBRiDGE GPL code:

static struct mtd_partition osbridge_parts[] = {
    { name: "bootloader", offset: 0, size: 0x10000, },
    { name: "linux", offset: 0x20000, size: 0, },
    { name: "rootfs", offset: 0, size: 0, },
    { name: "flash", offset: 0, size: 0, },
    { name: NULL, },
};

The bootloader is saved in the first 128KB of NAND flash.
Monday i'll try with some nand dump tools. Suggestions?

(Last edited by AraKs on 20 Jun 2009, 14:08)

Gabor has received the board yesterday, and he have already dumped the firmware!
He also found wich crypt algorithm is used by the bootloader.

We'll soon have a lot of good news for 5GXi/5XLi owners

Hi everyone, Gabor introduced official support to our devices!
Details and new discussion should be posted here:
http://forum.openwrt.org/viewtopic.php?id=20811

Regards,
Mattia