AirTies Air 5650

For Developers
1

Hi,

I have been trying to reverse engineer of this modem's fimware recently, and I would like to create a wiki page for this device. It's been listed in this link where its chip's details are posted. However when i click to the device I get 404 error.

PS: I haven't opened the device's case, but I have board's pictures from another source.

Here are some information about it.

$ cat /proc/cpuinfo
system type             : 963168VX
processor               : 0
cpu model               : Broadcom4350 V8.0
BogoMIPS                : 398.33
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : no
hardware watchpoint     : no
ASEs implemented        :
shadow register sets    : 1
core                    : 0
VCED exceptions         : not available
VCEI exceptions         : not available

unaligned exceptions            : 1
processor               : 1
cpu model               : Broadcom4350 V8.0
BogoMIPS                : 402.43
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : no
hardware watchpoint     : no
ASEs implemented        :
shadow register sets    : 1
core                    : 0
VCED exceptions         : not available
VCEI exceptions         : not available

unaligned exceptions            : 1

$ cat /proc/mtd
dev:    size   erasesize  name
mtd0: 01000000 00004000 "RootFS"
mtd1: 08000000 00020000 "FlashAll"
mtd2: 00020000 00020000 "Bootloader"
mtd3: 00220000 00020000 "BootloaderConfig"
mtd4: 00220000 00020000 "Config"
mtd5: 00220000 00020000 "ASD"
mtd6: 02200000 00020000 "Kernel"
mtd7: 02200000 00020000 "KernelBackup"
mtd8: 02e60000 00020000 "disk"
mtd9: 00220000 00020000 "edr"
mtd10: 00500000 00020000 "bbt"
2

I have opened up the case for one of them. There are 5 different variations for this modem (5650, 5650TTv1, 5650TTv2, 5650TTv3, 5650MLv3), however even though the case is different, it has been reported that they all have same board. 3 of them are using the same firmware but with different wlan configuration (BCM6362). I have 2 of those variations, TTv2 and MLv3.

I have dumped both devices bootloader. TTv2 has CFE v1.0.38-112.70, other one has both "uboot" and "cfe" information in it, so i am not sure. I wasn't able to boot into CFE mod, so that I can connect to http interface.

They both have 64MB ram, 128MB NAND flash. A crippled Busybox 1.14.1 installed.

Devices are powered by 12v 2A and 12v 1A respectively.:

I don't know what else to report. I hope we can create a wiki entry