近期百度路由器上市了，我们就买了一个玩了，下直接拆掉。

里面的配置是：
CPU: MT7620A
内存: 64MB DDR2 winbond (这个内存价格相比韩国内存便宜很多)
FLASH: 8MB 内存  型号是 MX25L6405D

操作系统部分采用的是MTK官方的SDK没有自己开发出操作系统，这点做的还是有点不如极路由或Speedytel这种厂商，他们自己移植OpenWRT系统，弃用原厂的SDK实现对硬件更高的榨取。

这个板子完全没有做任何加密部分，因此启动信息，请见下面：

    U-Boot 1.1.3 (Nov 1 2013 - 13:49:26)

    Board: Ralink APSoC DRAM: 64 MB
    relocate_code Pointer at: 83fb4000
    enable ephy clock...done. rf reg 29 = 5
    SSC disabled.
    ******************************
    Software System Reset Occurred
    ******************************
    spi_wait_nsec: 29
    spi device id: c2 20 17 c2 20 (2017c220)
    find flash: MX25L6405D
    raspi_read: from:20000 len:1000
    *** Warning - bad CRC, using default environment

    ============================================
    Ralink UBoot Version: 4.1.2.0
    --------------------------------------------
    ASIC 7620_MP (Port5<->None)
    DRAM component: 512 Mbits DDR, width 16
    DRAM bus: 16 bit
    Total memory: 64 MBytes
    Flash component: SPI Flash
    Date:Nov 1 2013 Time:13:49:26
    ============================================
    icache: sets:512, ways:4, linesz:32 ,total:65536
    dcache: sets:256, ways:4, linesz:32 ,total:32768

    ##### The CPU freq = 580 MHZ ####
    estimate memory size =64 Mbytes

    Please choose the operation:
    1: Load system code to SDRAM via TFTP.
    2: Load system code then write to Flash via TFTP.
    3: Boot system code via Flash (default).
    4: Entr boot command line interface.
    7: Load Boot Loader code then write to Flash via Serial.
    9: Load Boot Loader code then write to Flash via TFTP.
    0

    3: System Boot system code via Flash.
    ## Booting image at bc040000 ...
    raspi_read: from:40000 len:40
    Image Name: Ai-BR
    Image Type: MIPS Linux Kernel Image (lzma compressed)
    Data Size: 5018643 Bytes = 4.8 MB
    Load Address: 80000000
    Entry Point: 8000c310
    raspi_read: from:40040 len:4c9413
    Verifying Checksum ... OK
    Uncompressing Kernel Image ... OK
    No initrd
    ## Transferring control to Linux (at address 8000c310) ...
    ## Giving linux memsize in MB, 64

    Starting kernel ...


    LINUX started...

    THIS IS ASIC
    Linux version 2.6.36 (chris@ubuntu-dt) (gcc version 3.4.2) #66 Thu Nov 21 18:35:00 CST 2013

    The CPU feqenuce set to 580 MHz

    MIPS CPU sleep mode enabled.
    PCIE: bypass PCIe DLL.
    PCIE: Elastic buffer control: Addr:0x68 -> 0xB4
    disable all power about PCIe
    CPU revision is: 00019650 (MIPS 24Kc)
    Determined physical RAM map:
    memory: 04000000 @ 00000000 (usable)
    Initrd not found or empty - disabling initrd
    Zone PFN ranges:
    Normal 0x00000000 -> 0x00004000
    Movable zone start PFN for each node
    early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00004000
    Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16256
    Kernel command line: console=ttyS1,57600n8 root=/dev/ram0 console=ttyS0
    PID hash table entries: 256 (order: -2, 1024 bytes)
    Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
    Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
    Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
    Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
    Writing ErrCtl register=00004000
    Readback ErrCtl register=00004000
    Memory: 56188k/65536k available (4353k kernel code, 9348k reserved, 800k data, 3400k init, 0k highmem)
    NR_IRQS:128
    MTK/Ralink System Tick Counter init... cd:804efe78, m:214748, s:32
    console [ttyS1] enabled
    Calibrating delay loop... 386.04 BogoMIPS (lpj=772096)
    pid_max: default: 32768 minimum: 301
    Mount-cache hash table entries: 512
    NET: Registered protocol family 16
    bio: create slab <bio-0> at 0
    SCSI subsystem initialized
    usbcore: registered new interface driver usbfs
    usbcore: registered new interface driver hub
    usbcore: registered new device driver usb
    Switching to clocksource Ralink external timer
    NET: Registered protocol family 2
    IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
    TCP established hash table entries: 2048 (order: 2, 16384 bytes)
    TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
    TCP: Hash tables configured (established 2048 bind 2048)
    TCP reno registered
    UDP hash table entries: 256 (order: 0, 4096 bytes)
    UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
    NET: Registered protocol family 1
    RT3xxx EHCI/OHCI init.
    JFFS2 version 2.2 (NAND) (ZLIB) (RTIME) (c) 2001-2006 Red Hat, Inc.
    fuse init (API version 7.15)
    msgmni has been set to 109
    Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254)
    io scheduler noop registered (default)
    Ralink gpio driver initialized
    RALINK_REG_PIODATA=00fc7f87
    Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
    serial8250: ttyS0 at MMIO 0x10000500 (irq = 37) is a 16550A
    serial8250: ttyS1 at MMIO 0x10000c00 (irq = 12) is a 16550A
    brd: module loaded
    deice id : c2 20 17 c2 20 (2017c220)
    MX25L6405D(c2 2017c220) (8192 Kbytes)
    mtd .name = raspi, .size = 0x00800000 (0M) .erasesize = 0x00000008 (0K) .numeraseregions = 65536
    Creating 6 MTD partitions on "raspi":
    0x000000000000-0x000000800000 : "ALL"
    0x000000000000-0x000000020000 : "Bootloader"
    0x000000020000-0x000000030000 : "Config"
    0x000000030000-0x000000040000 : "Factory"
    0x000000040000-0x000000600000 : "Kernel"
    0x000000600000-0x000000800000 : "Baidu"
    SMACCR1 -- : 0x0000240a
    SMACCR0 -- : 0x64fe4c42
    Ralink APSoC Ethernet Driver Initilization. v3.0 256 rx/tx descriptors allocated, mtu = 1500!
    SMACCR1 -- : 0x0000240a
    SMACCR0 -- : 0x64fe4c42
    PROC INIT OK!
    PPP generic driver version 2.4.2
    PPP MPPE Compression module registered
    NET: Registered protocol family 24
    PPTP driver version 0.8.5


    === pAd = c0198000, size = 625304 ===

    <-- RTMPAllocTxRxRingMemory, Status=0
    <-- RTMPAllocAdapterBlock, Status=0
    AP Driver version-2.7.1.6
    ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
    rt3xxx-ehci rt3xxx-ehci: Ralink EHCI Host Controller
    rt3xxx-ehci rt3xxx-ehci: new USB bus registered, assigned bus number 1
    rt3xxx-ehci rt3xxx-ehci: irq 18, io mem 0x101c0000
    rt3xxx-ehci rt3xxx-ehci: USB 0.0 started, EHCI 1.00
    hub 1-0:1.0: USB hub found
    hub 1-0:1.0: 1 port detected
    ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
    rt3xxx-ohci rt3xxx-ohci: RT3xxx OHCI Controller
    rt3xxx-ohci rt3xxx-ohci: new USB bus registered, assigned bus number 2
    rt3xxx-ohci rt3xxx-ohci: irq 18, io mem 0x101c1000
    hub 2-0:1.0: USB hub found
    hub 2-0:1.0: 1 port detected
    Initializing USB Mass Storage driver...
    usbcore: registered new interface driver usb-storage
    USB Mass Storage support registered.
    nf_conntrack version 0.5.0 (877 buckets, 3508 max)
    matchsize=264
    IPVS: Registered protocols ()
    IPVS: Connection hash table configured (size=4096, memory=32Kbytes)
    IPVS: ipvs loaded.
    GRE over IPv4 demultiplexor driver
    gre: can't add protocol
    ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Restricted Cone
    TCP cubic registered
    NET: Registered protocol family 10
    IPv6 over IPv4 tunneling driver
    NET: Registered protocol family 17
    L2TP core driver, V2.0
    PPPoL2TP kernel driver, V2.0
    802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
    All bugs added by David S. Miller <davem@redhat.com>
    Freeing unused kernel memory: 3400k freed
    init started: BusyBox v1.12.1 (Algorithmics/MIPS FPU Emulator v1.5
    2013-11-18 10:23:01 CST)
    starting devpts: called with bogus options
    pid 31, tty '': '/etc_ro/rcS'
    mount: mounting none on /proc/bus/usb failed: No such file or directory
    Welcome to
    _______ _______ ___ __ ____ _ _ ___
    | ___ \| __ || | |__|| \ | || | / /
    | |___| || |__| || |__ __ | \| || |/ /
    | _ /| _ || || || |\ || usb 1-1: new high speed USB device using rt3xxx-ehci and address 2
    \
    |__| \__\|__| |__||______||__||_| \____||_|\___\

    =System Architecture Department=

    boa: waiting for nvram_daemon
    starting pid 43, tty '/dev/ttyS1': '/bin/monitor'
    starting pid 42, tty '/dev/ttyS1': '/bin/sh'
    XXXXXXXXXXX1:5


    BusyBox v1.12.1 (2013-11-18 10:23:01 CST) built-in shell (ash)
    Enter 'help' for a list of built-in commands.

    # scsi0 : usb-storage 1-1:1.0
    ----------support asp+++
    server_name :192.168.8.1+++
    boa: server version Boa/0.94.14rc21
    boa: server built Nov 21 2013 at 16:13:51.
    boa: starting server pid=49, port 80
    scsi 0:0:0:0: Direct-Access Generic Flash Disk 8.07 PQ: 0 ANSI: 4
    sd 0:0:0:0: [sda] 16441344 512-byte logical blocks: (8.41 GB/7.83 GiB)
    sd 0:0:0:0: [sda] Write Protect is off
    sd 0:0:0:0: [sda] Assuming drive cache: write through
    sd 0:0:0:0: [sda] Assuming drive cache: write through
    sda: sda1
    sd 0:0:0:0: [sda] Assuming drive cache: write through
    sd 0:0:0:0: [sda] Attached SCSI removable disk
    Password for 'admin' changed
    rmmod: ralink_wdt: No such file or directory
    rmmod: cls: No such file or directory
    rmmod: hw_nat: No such file or directory
    rmmod: raeth: No such file or directory
    insmod: bridge.ko: module not found
    insmod: mii.ko: module not found
    insmod: raeth.ko: module not found

    ##### disable 1st wireless interface #####
    rmmod: rt2860v2_ap_net: No such file or directory
    rmmod: rt2860v2_ap: No such file or directory
    rmmod: rt2860v2_ap_util: No such file or directory
    insmod: rt2860v2_ap_util.ko: module not found
    insmod: rt2860v2_ap.ko: module not found
    insmod: rt2860v2_ap_net.ko: module not found
    insmod: nf_conntrack_proto_gre.ko: module not found
    insmod: nf_nat_proto_gre.ko: module not found
    insmod: nf_conntrack_pptp.ko: module not found
    insmod: nf_nat_pptp.ko: module nRX DESC a2a2c000 size = 2048
    ot found
    RTMP_TimerListAdd: add timer obj c02016c8!
    RTMP_TimerListAdd: add timer obj c01a0070!
    RTMP_TimerListAdd: add timer obj c019fc64!
    RTMP_TimerListAdd: add timer obj c01a0040!
    RTMP_TimerListAdd: add timer obj c01a03e8!
    RTMP_TimerListAdd: add timer obj c01a0138!
    RTMP_TimerListAdd: add timer obj c01a0168!
    RTMP_TimerListAdd: add timer obj c01a0328!
    RTMP_TimerListAdd: add timer obj c01a0358!
    RTMP_TimerListAdd: add timer obj c01d8034!
    RTMP_TimerListAdd: add timer obj c01d8150!
    RTMP_TimerListAdd: add timer obj c01d8060!
    RTMP_TimerListAdd: add timer obj c01cf85c!
    RTMP_TimerListAdd: add timer obj c019d530!
    RTMP_TimerListAdd: add timer obj c01cf570!
    APSDCapable[0]=0
    APSDCapable[1]=0
    APSDCapable[2]=0
    APSDCapable[3]=0
    APSDCapable[4]=0
    APSDCapable[5]=0
    APSDCapable[6]=0
    APSDCapable[7]=0
    APSDCapable[8]=0
    APSDCapable[9]=0
    APSDCapable[10]=0
    APSDCapable[11]=0
    APSDCapable[12]=0
    APSDCapable[13]=0
    APSDCapable[14]=0
    APSDCapable[15]=0
    Key1Str is Invalid key length(0) or Type(0)
    Key2Str is Invalid key length(0) or Type(0)
    Key3Str is Invalid key length(0) or Type(0)
    Key4Str is Invalid key length(0) or Type(0)
    1. Phy Mode = 9
    2. Phy Mode = 9
    E2PROM: D0 target power=0xff20
    E2PROM: 40 MW Power Delta= 0
    3. Phy Mode = 9
    RTMP_TimerListAdd: add timer obj c019d12c!
    AntCfgInit: primary/secondary ant 0/1
    Initialize RF Central Registers for E2 !!!
    Initialize RF Central Registers for E3 !!!
    Initialize RF Channel Registers for E2 !!!
    Initialize RF Channel Registers for E3 !!!
    Initialize RF DCCal Registers for E2 !!!
    Initialize RF DCCal Registers for E3 !!!
    D1 = 1, D2 = 4, CalCode = 7 !!!
    RT6352_Temperature_Init : BBPR49 = 0x1
    RT6352_Temperature_Init : TemperatureRef25C = 0xfffffff7
    Current Temperature from BBP_R49=0xfffffff7
    TX BW Filter Calibration !!!
    RX BW Filter Calibration !!!
    LOFT Calibration Done!
    IQCalibration Start!
    IQCalibration Done! CH = 0, (gain= 0, phase=3e)
    IQCalibration Start!
    IQCalibration Done! CH = 1, (gain= 0, phase=3d)
    TX IQ Calibration Done!
    RTMPSetPhyMode: channel is out of range, use first channel=0
    MCS Set = ff ff 00 00 01
    SYNC - BBP R4 to 20MHz.l
    RTMP_TimerListAdd: add timer obj c01cfb48!
    Main bssid = 24:0a:64:fe:4c:42
    <==== rt28xx_init, Status=0
    0x1300 = 00064380
    ifconfig: ioctl 0x8913 failed: No such device
    brctl: bridge br0: No such device or address
    Raeth v3.0 (Tasklet,SkbRecycle)

    phy_tx_ring = 0x00cd8000, tx_ring = 0xa0cd8000

    phy_rx_ring0 = 0x00cd9000, rx_ring0 = 0xa0cd9000
    SMACCR1 -- : 0x0000240a
    SMACCR0 -- : 0x64fe4c42
    ESW: Link Status Changed - Port2 Link UP
    CDMA_CSG_CFG = 81000000
    GDMA1_FWD_CFG = 20710000
    vconfig: ioctl error for rem: No such device
    vconfig: ioctl error for rem: No such device
    rmmod: 8021q: No such file or directory
    insmod: 8021q.ko: module not found
    ##### config Ralink ESW vlan partition (LLLLW) #####
    switch reg write offset=2004, value=ff0003
    switch reg write offset=2104, value=ff0003
    switch reg write offset=2204, value=ff0003
    switch reg write offset=2304, value=ff0003
    switch reg write offset=2404, value=ff0003
    switch reg write offset=2504, value=ff0003
    switch reg write offset=2010, value=810000c0
    switch reg write offset=2110, value=810000c0
    switch reg write offset=2210, value=810000c0
    switch reg write offset=2310, value=810000c0
    switch reg write offset=2410, value=810000c0
    switch reg write offset=2510, value=810000c0
    switch reg write offset=2610, value=81000000
    switch reg write offset=2710, value=81000000
    switch reg write offset=2604, value=20ff0003
    switch reg write offset=2704, value=20ff0003
    Special Tag Disabled
    switch reg write offset=2610, value=81000000
    switch reg write offset=2014, value=10001
    switch reg write offset=2114, value=10001
    switch reg write offset=2214, value=10001
    switch reg write offset=2314, value=10001
    switch reg write offset=2414, value=10002
    switch reg write offset=2514, value=10001
    REG_ESW_WT_MAC_ATC is 0x7ff0002
    done.
    device ra0 entered promiscuous mode
    device eth2.1 entered promiscuous mode
    device eth2 entered promiscuous mode
    killall: udhcpc: no process killed
    killall: pppd: no process killed
    killall: l2tpd: no process killed
    killall: openl2tpd: no process killed
    udhcpc (v1.12.1) started
    killall: dnrd: no process killed
    br0: port 2(eth2.1) entering learning state
    br0: port 2(eth2.1) entering learning state
    br0: port 1(ra0) entering learning state
    br0: port 1(ra0) entering learning state
    ifconfig: ioctl 0x8914 failed: Cannot assign requested address
    ifconfig: ioctl 0x8914 failed: Cannot assign requested address
    br0: port 2(eth2.1) entering forwarding state
    br0: port 1(ra0) entering forwarding state
    killall: udhcpd: no process killed
    Set: phy[0].reg[0] = 3900
    Set: phy[1].reg[0] = 3900
    SeESW: Link Status Changed - Port2 Link Down
    t: phy[2].reg[0] = 3900
    Set: phy[3].reg[0] = 3900
    Set: phy[0].reg[0] = 3100
    Set: phy[1].reg[0] = 3100
    Set: phy[2].reg[0] = 3100
    Set: phy[3].reg[0] = 3100
    Unknown option: -I
    Unknown option: ra0
    rm: cannot remove '/etc/radvd.conf': No such file or directory
    ADDRCONF(NETDEV_UP): sit0: link is not ready
    ***** sda *****
    /sbin/automount_boot.sh: line 13: chkexfat: not found
    /sbin/automount_boot.sh: line 14: chkhfs: not found
    /sbin/automount_boot.sh: line 15: chkntfs: not found
    FAT: utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
    mount: mounting /dev/sda on /media/sda failed: Invalid argument
    FAT: utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
    mount: mounting /dev/sda on /media/sda failed: Invalid argument
    FAT: utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
    mount: mounting /dev/sda on /media/sda failed: Invalid argument
    NTFS signature is missing.
    Failed to mount '/dev/sda': Invalid argument
    The device '/dev/sda' doesn't seem to have a valid NTFS.
    Maybe the wrong device is used? Or the whole disk instead of a
    partition (e.g. /dev/sda, not /dev/sda1)? Or the other way around?
    NTFS signature is missing.
    Failed to mount '/dev/sda': Invalid argument
    The device '/dev/sda' doesn't seem to have a valid NTFS.
    Maybe the wrong device is used? Or the whole disk instead of a
    partition (e.g. /dev/sda, not /dev/sda1)? Or the other way around?
    NTFS signature is missing.
    Failed to mount '/dev/sda': Invalid argument
    The device '/dev/sda' doesn't seem to have a valid NTFS.
    Maybe the wrong device is used? Or the whole disk instead of a
    partition (e.g. /dev/sda, not /dev/sda1)? Or the other way around?
    ***** sda1 *****
    /sbin/automount_boot.sh: line 13: chkexfat: not found
    /sbin/automount_boot.sh: line 14: chkhfs: not found
    /sbin/automount_boot.sh: line 15: chkntfs: not found
    FAT: utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
    sh: /bin/super_dmz: not found
    ***** sda *****
    /sbin/automount_boot.sh: line 13: chkexfat: not found
    /sbin/automount_boot.sh: line 14: chkhfs: not found
    /sbin/automount_boot.sh: line 15: chkntfs: not found
    ***** sda1 *****
    /sbin/automount_boot.sh: line 13: chkexfat: not found
    /sbin/automount_boot.sh: line 14: chkhfs: not found
    /sbin/automount_boot.sh: line 15: chkntfs: not found
    Set: phy[0].reg[0] = 3300
    Set: phy[1].reg[0] = 3300
    Set: phy[2].reg[0] = 3300
    Set: phy[3].reg[0] = 3300
    killall: dnrd: no process killed
    dnrd --cache=off -L 192.168.8.1 -s 168.95.1.1 -s 8.8.8.8 &
    lanIp:192.168.8.1
    Notice: caching turned off
    Notice: local DNS master turned off
    killall: updateFw: no process killed
    killall: inadyn: no process killed
    killall: phddns: no process killed
    Jan 1 00:00:25 miniupnpd[2128]: received signal 15, good-bye
    Unknown option: -I
    Unknown option: ra0
    Jan 1 00:00:26 miniupnpd[7299]: WPS listening on port 7777
    Jan 1 00:00:26 miniupnpd[7299]: HTTP listening on port 6352
    ESW: Link Status Changed - Port2 Link UP

    ******************1

    ##### Hotplug device init #####
    killall: nmbd: no process killed
    killall: smbd: no process killed
    samba.sh Ai-BR100 WORKGROUP /media/sda1
    /media/sda1
    iptables: No chain/target/match by that name.
    iptables: No chain/target/match by that name.
    smbpasswd -a admin admin
    startsmbfilepwent_internal: file /etc/smbpasswd did not exist. File successfully created.
    Added user admin.
    smbpasswd -a GUEST
    Added user GUEST.
    samba_add_dir.sh mnt1 /media/sda1/ admin GUEST GUEST
    fetchSmbConfig
    fetchSmbConfig: No such file or directory
    /media/sda1/.smb_config: No such file or directory
    killall: ushare: no process killed
    ushare.sh Baidu AV-Router br0 /media/sda1 3
    ushare -D
    sleep 1
    sleep 2
    baiduCmd.sh 100 sda1
    susockc: unable to open socket '/var/baiduevent.susock'. No such file or directory.
    XXXXXXXXXXX2:45
    cat: can't open '/var/run/baidu_daemon.pid': No such file or directory
    kill: you need to specify whom to kill
    /extraApps/baidu_daemon.bin -d sda1 -o BaiduDownload &
    [E- 1 0: 0:46] -------------------------------------------------
    [E- 1 0: 0:46] baidu daemon is running
    [E- 1 0: 0:46] -------------------------------------------------

    [W- 1 0: 0:46] Blink version: 0.9.8, arch: UCLINUX
    [I- 1 0: 0:46] got BAIDU_DB_DEVICEID: 898f9738-d930-4db4-a3cf-240a64fe4c42
    [I- 1 0: 0:46] got BAIDU_DB_DEVICENAME: aigale_Ai-BR100
    [I- 1 0: 0:46] got BAIDU_DB_DLNA_NAME: Baidu AV-Router
    [W- 1 0: 0:46] got BAIDU_DB_FW_VERSION: v1.0.0.15
    [W- 1 0: 0:46] Baidu Daemon process ID is 7810
    [W- 1 0: 0:46] TCP thread working...
    [W- 1 0: 0:46] Local thread working...
    [I- 1 0: 0:46] init RTMPWorker success!
    ERROR: Problem accessing the DNS. (addr: msg.link.n.shifen.com)
    ERROR: RTMP_Connect failed!

    [E- 1 0: 0:46] RTMPWorker_start failed!, ret = -1
    [W- 1 0: 0:46] start RTMPWorker error!
    [I- 1 0: 0:46] [bl_init_download_dir]Found download_dir /media/sda1/BaiduDownload
    [I- 1 0: 0:46] [dl_cache_list_init]download list cache path: /media/sda1/BaiduDownload/.baidu_daemon_dl.cache
    [I- 1 0: 0:46] [file_cache_list_init]file cache path: /media/sda1/BaiduDownload/.baidu_daemon_file.cache
    [I- 1 0: 0:46] [bl_init_download_dir]Found ts cache diretory /media/sda1/BaiduDownload/.BaiduDownloadCache
    [I- 1 0: 0:46] 1970 1 1 Thu 0: 0:46
    [E- 1 0: 0:46] push_sdk_start_work_thread fail! rv = -30002
    [F- 1 0: 0:46] init push thread failed with error code[-2]

大家可以看到，系统在启动的时候，还保留了Ralink的信息，而输出内容，基本上是跟Ralink SDK一致的(Ralink已经被MTK收购了).
据说这个是百度跟海联达(aigale)合作的产品，但是从系统启动信息上来看，似乎aigale只是做了PCB而已。 got BAIDU_DB_DEVICENAME: aigale_Ai-BR100
突然发现一个很重要的内容，就是Blink version: 0.9.8, arch: UCLINUX      这个似乎是表示这个软件系统跟blink公司有某种关系。

在系统中用ps指令发现，baidu的功能就是一个baidu_daemon.bin的socket程序而已。好像连接了http://device.baidu.com上面做了啥。


话说99块钱这个东西要么赔钱，要么就不赚钱，7620A这款处理器性能很高。而这个路由器的内存，我们可以换成256MB的，绝对没问题的。但是产品里的软件还是太可怜了，玩家真的没办法玩。


不过有个好消息，这玩意可以支持OpenWRT, OpenWRT是全球最大的开源路由器操作系统。支持1000多种软件包，操作起来跟电脑装个ubuntu类似。

目前美国官方的OpenWRT是支持7620但是没有WIFI驱动。这方面，国内的资深路由器玩家lintel已经实现这方面的支持，据他自己说8号他就可以提供完整的刷机固件包。

他提供了一个地址，在http://downloads.openwrt.org.cn/PandoraBox/BR100  大家可以关注下8号就可以刷机。


这里我向大家介绍下，怎么进入路由器的命令行模式(直接操作linux shell)
1. 首先上淘宝买一个USB串口的小板子PL2303做的那种，几块钱一个就可以。
2. 见图，将GND跟板子连接在一起，RX连接板子的TX，TX连接板子的RX，VCC千万不要接
3. 打开串口终端软件，速率设置为 57600 8 N 1
4. 打开路由器电源
5. 你就可以进到他系统里了。

原文地址：http://bbs.chinaunix.net/thread-4114497-1-1.html

注：本站部分信息可能源于互联网分享，如有侵权，请告知，我们将及时删除！