More backups!!

I had doubts of the integrity of the backups so I decided to re-do them based on the output of fis list. With this I may be able to restore the data in case I would like to revert to the original firmware.

RedBoot> fis list -c                                                          
Name              FLASH addr  Checksum    Length      Entry point             
RedBoot           0x50000000  0x00000000  0x00040000  0x00000000              
RedBoot config    0x50FC0000  0x00000000  0x00001000  0x00000000              
FIS directory     0x50FE0000  0x00000000  0x00020000  0x00000000              
appimg1           0x50040000  0x74FB22F9  0x00760000  0x00000000              
appimg2           0x507A0000  0x74FB22F9  0x00760000  0x00000000              
igwmisc           0x50F00000  0x6BA0CE01  0x00020000  0x00000000              
dhcpdl            0x50F20000  0x6BA0CE01  0x00020000  0x00000000              
igwpri            0x50F40000  0x6BA0CE01  0x00020000  0x00000000              
igwsec            0x50F60000  0x6BA0CE01  0x00020000  0x00000000              
prvcacfg          0x50F80000  0x6BA0CE01  0x00020000  0x00000000              
prvauth           0x50FA0000  0x6BA0CE01  0x00020000  0x00000000              
RedBoot>

jtag> readmem 0x50000000 0x00040000 RedBoot
address: 0x50000000
length:  0x00040000
reading:
addr: 0x50040000
Done.
jtag> readmem 0x50FC0000 0x00001000 RedBoot_config
address: 0x50FC0000
length:  0x00001000
reading:
addr: 0x50FC1000
Done.
jtag> readmem 0x50FE0000 0x00020000 FIS_directory
address: 0x50FE0000
length:  0x00020000
reading:
addr: 0x51000000
Done.
jtag> readmem 0x50F00000 0x00020000 igwmisc
address: 0x50F00000
length:  0x00020000
reading:
addr: 0x50F20000
Done.
jtag> readmem 0x50F20000 0x00020000 dhcpdl
address: 0x50F20000
length:  0x00020000
reading:
addr: 0x50F40000
Done.
jtag> readmem 0x50F40000 0x00020000 igwpri
address: 0x50F40000
length:  0x00020000
reading:
addr: 0x50F60000
Done.
jtag> readmem 0x50F60000 0x00020000 igwsec
address: 0x50F60000
length:  0x00020000
reading:
addr: 0x50F80000
Done.
jtag> readmem 0x50F80000 0x00020000 prvcacfg
address: 0x50F80000
length:  0x00020000
reading:
addr: 0x50FA0000
Done.
jtag> readmem 0x50FA0000 0x00020000 prvauth
address: 0x50FA0000
length:  0x00020000
reading:
addr: 0x50FC0000
Done.
jtag> readmem 0x50040000 0x00760000 appimg1
address: 0x50040000
length:  0x00760000
reading:
addr: 0x507A0000
Done.
jtag> readmem  0x507A0000  0x00760000 appimg2
address: 0x507A0000
length:  0x00760000
reading:
addr: 0x50F00000
Done.
jtag>

I made them in Big Endian and Little Endian.

Backing up firmware!?

Before deleting or modifying the default image I would like to backup the factory image. This task has turned in to a nightmare. BusyBox has being stripped out off any useful command. I can see the different images on the /dev/mtdblock# devices but that is about it.

I have try many things such as:

-NFS: Some of the scripts do mention NFS, but the kernel does not add NFS support, and there are no modules to load.

-HTTPD: binary httpd is hard coded to read from the specified folder and the file system from where the HTML code is loaded is a cramfs mounted read only.

-BusyBox: There are about 10 commands available to the user and none of them seems to be helpful for this task.

-RedBoot: It can load from tftp some code, but I am new to RedBoot… this could be the solution, but I am still learning, maybe someone can guide me on this?

-JTag: This method looks like it is the most likely to succeed but considering the size of the flash, this could take hours? It will be my last thing to try.

So, for now I am a stock, but hopefully I will figure out or maybe someone can make a suggestion?