I apologize for necro-posting, but this was the only thread I was able to google about the subject.
The darkhaven wiki has very little information on this unit. I think that the flash chip is the one labelled HN4668GC, but I have been unable to find a datasheet for it.
However, Netgear's telnetEnable utility works with the Gearguy/Geardog combo, and I was able to get some info. I'm not sure whether this helps anyone, or if there's some specific commands I can use to get suitable information.
Notably, "dmesg" and "uname" don't appear to work. What I was able to get was:
# lsmod
Module Size Used by
MultiSsidControl 816 0 (unused)
br_dns_hijack 11456 0 (unused)
br_dhcp_filter 1744 0 (unused)
acos_nat 428736 0 (unused)
wl_high 1178160 0 (unused)
ehci-hcd 26560 0 (unused)
usb-storage 26928 0 (unused)
usbcore 77680 1 [wl_high ehci-hcd usb-storage]
wl 2325344 0 (unused)
dpsta 3616 0 [wl_high wl]
et 54912 0 (unused)
igs 15648 0 [wl]
emf 20112 0 [wl igs]
ctf 12416 0 (unused)
# cat /proc/mtd
dev: size erasesize name
mtd0: 00040000 00010000 "boot"
mtd1: 00700000 00010000 "linux"
mtd2: 0065d758 00010000 "rootfs"
mtd3: 00010000 00010000 "ML1"
mtd4: 00010000 00010000 "ML2"
mtd5: 00010000 00010000 "ML3"
mtd6: 00010000 00010000 "ML4"
mtd7: 00010000 00010000 "ML5"
mtd8: 00010000 00010000 "ML6"
mtd9: 00010000 00010000 "ML7"
mtd10: 00010000 00010000 "T_Meter1"
mtd11: 00010000 00010000 "T_Meter2"
mtd12: 00010000 00010000 "POT"
mtd13: 00010000 00010000 "board_data"
mtd14: 00010000 00010000 "nvram"
# mount
rootfs on / type rootfs (rw)
/dev/root on / type squashfs (ro)
none on /dev type devfs (rw)
proc on /proc type proc (rw)
ramfs on /tmp type ramfs (rw)
none on /proc/bus/usb type usbdevfs (rw)
So, it looks like mtd2 is larger than 4MB.
If there's anything else I can do to provide useful info, please let me know. I would really love to get OpenWRT on here.