Support for ipTIME A2004MU based on RTL8197F

I'm trying to build OpenWrt for ipTIME A2004MU (RTL8197F, 64MB/8MB), but the manufacturer refuses to release the firmware's source code. (They said it is planned 'before July'.) Is there any way I can add support for this device without it?

+Edit: stock firmware (12.16.2) + wireless WAN extension? mode bootlog:


Booting...
init_ram
 00000102 W init ddr ok

DRAM Type: DDR2
        DRAM frequency: 533MHz
        DRAM Size: 64MB
JEDEC id 1C7017, EXT id 0x1c70
found en25qh64
flash vendor: EON
en25qh64, size=8MB, erasesize=4KB, max_speed_hz=41000000Hz
auto_mode=0 addr_width=3 erase_opcode=0x00000020
GPIO CONTROL: fdffffb5
GPIO DIRECTION: 0200004a
GPIODATA: 0540000a
=>CPU Wake-up interrupt happen! GISR=89000004

---Realtek RTL8197F boot code at 2019.12.03-10:38+0900 v3.4.11B.9 (999MHz)
Delay 1 second.
Magic Number: raw_nv 00000000
Check Firmware(00040000) : size: 0x005bbfc8 ---->[ OK ]
Jump to image start=0x80a00000...
decompressing kernel:
Uncompressing Linux... done, booting the kernel.
done decompressing kernel.
start address: 0x804c4020
Linux version 3.10.90 (rtlac@ski) (gcc version 4.4.7 (Realtek MSDK-4.4.7 Build 2001) ) #482 Thu Jul 29 13:44:27 KST 2021
bootconsole [early0] enabled
CPU revision is: 00019385 (MIPS 24Kc)
Determined physical RAM map:
 memory: 04000000 @ 00000000 (usable)
Zone ranges:
  Normal   [mem 0x00000000-0x03ffffff]
Movable zone start for each node
Early memory node ranges
  node   0: [mem 0x00000000-0x03ffffff]
Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
Built 1 zonelists in Zone order, mobility grouping off.  Total pages: 4088
Kernel command line: console=ttyS0,38400 root=/dev/mtdblock1
PID hash table entries: 256 (order: -4, 1024 bytes)
Dentry cache hash table entries: 8192 (order: 1, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 0, 16384 bytes)
Writing ErrCtl register=00035d71
Readback ErrCtl register=00035d71
Memory: 40080k/65536k available (4900k kernel code, 25456k reserved, 2384k data, 192k init, 0k highmem)
SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
NR_IRQS:192
Realtek GPIO IRQ init
Calibrating delay loop... 666.41 BogoMIPS (lpj=3332096)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 2048
NET: Registered protocol family 16
<<<<<Register PCI Controller>>>>>
Do MDIO_RESET
Find PCIE Port, Device:Vender ID=b82210ec
Realtek GPIO controller driver init
INFO: registering sheipa spi device
bio: create slab <bio-0> at 0
SCSI subsystem initialized
INFO: sheipa spi driver register
INFO: sheipa spi probe
Switching to clocksource MIPS
NET: Registered protocol family 2
TCP established hash table entries: 2048 (order: 0, 16384 bytes)
TCP bind hash table entries: 2048 (order: -1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP: reno registered
UDP hash table entries: 1024 (order: 0, 16384 bytes)
UDP-Lite hash table entries: 1024 (order: 0, 16384 bytes)
NET: Registered protocol family 1
squashfs: version 4.0 (2009/01/31) Phillip Lougher
fuse init (API version 7.22)
msgmni has been set to 78
Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254)
io scheduler noop registered (default)
Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x18147000 (irq = 17) is a 16550A
console [ttyS0] enabled, bootconsole disabled
console [ttyS0] enabled, bootconsole disabled
rtl819x_led: probe of rtl819x_led.1 failed with error -16
Realtek GPIO Driver for Flash Reload Default
Init IPTIME GPIO:
loop: module loaded
m25p80 spi0.0: change speed to 15000000Hz, div 7
JEDEC id 1C7017
m25p80 spi0.0: found en25qh64, expected m25p80
flash vendor: EON
m25p80 spi0.0: en25qh64 (8192 Kbytes) (41000000 Hz)
2 rtkxxpart partitions found on MTD device m25p80
Creating 2 MTD partitions on "m25p80":
0x000000000000-0x000001000000 : "boot+cfg+linux+rootfs"
mtd: partition "boot+cfg+linux+rootfs" extends beyond the end of device "m25p80" -- size truncated to 0x800000
0x000000270000-0x000001000000 : "rootfs"
mtd: partition "rootfs" extends beyond the end of device "m25p80" -- size truncated to 0x590000
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
PPP generic driver version 2.4.2
NET: Registered protocol family 24
MPPE/MPPC encryption/compression module registered
Realtek WLAN driver - version 1.7 (2015-10-30)(SVN:Unversioned symlink)
DFS function - version 2.0.14
Adaptivity function - version 9.3.4
Do MDIO_RESET
Find PCIE Port, Device:Vender ID=b82210ec

 found 8822B !!!
halmac_check_platform_api ==========>
12089M
HALMAC_MAJOR_VER = 0
HALMAC_PROTOTYPE_VER = 0
HALMAC_MINOR_VER = 0
halmac_init_adapter_88xx ==========>
halmac_init_adapter Succss
IS_RTL8822B_SERIES value8 = a
MACHAL_version_init


#######################################################
SKB_BUF_SIZE=4432 MAX_SKB_NUM=1024
#######################################################

MACHAL_version_init
RFE TYPE =0


#######################################################
SKB_BUF_SIZE=3032 MAX_SKB_NUM=400
#######################################################

RFE TYPE =0
RFE TYPE =0
RFE TYPE =0
RFE TYPE =0
RFE TYPE =0
u32 classifier
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (626 buckets, 2504 max)
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP: cubic registered
Twin IP Module Init
--> Init Smart QoS Monitor
Initializing XFRM netlink socket
NET: Registered protocol family 17
NET: Registered protocol family 15
Ebtables v2.0 registered
l2tp_core: L2TP core driver, V2.0
l2tp_ppp: PPPoL2TP kernel driver, V2.0
8021q: 802.1Q VLAN Support v1.8
Realtek FastPath:v1.03

Probing RTL819X NIC-kenel stack size order[0]...
Switch API version: v1.2.12, chip id: 0x6367-0020
===> rtk_qos_init() ...... done
EFMD - MAX_PRE_ALLOC_RX_SKB = 2048
EFMD - rtl865x_maxPreAllocRxSkb = 2058
eth0 added. vid=9 Member port 0x10f...
eth1 added. vid=8 Member port 0x10...
[peth0] added, mapping to [eth1]...
m25p80 spi0.0: change speed to 41000000Hz, div 3
SQUASHFS error: Xattrs in filesystem, these will be ignored
SQUASHFS error: unable to read xattr id index table
VFS: Mounted root (squashfs filesystem) readonly on device 31:1.
Freeing unused kernel memory: 192K (80720000 - 80750000)

Checking System Requirements *******************************************

DRAM SIZE  : Mounted->64 Mbytes
FLASH SIZE : Requirement->8 Mbytes / Mounted->8 Mbytes -----------> [OK]


/bin/sh: can't create /proc/sys/kernel/core_pattern: nonexistent directory
alias:a2004m version:12.162
Restore Config ( 4909 bytes )
FTM is disable in SAVE header
enable 0 interval



=================================================================
press magic key to change default setting ...
  LAN MAC : 70:5D:CC:A0:28:04
  WAN MAC : 70:5D:CC:A0:28:05
Bridge Init
device wlan1-va0 is not a slave of br0
device wlan1-va1 is not a slave of br0
device wlan1-va2 is not a slave of br0
----> Regulated Power: 100 20MHz: 100
device wlan1-vxd is not a slave of br0
device wlan1-va0 is not a slave of br0
device wlan1-va1 is not a slave of br0
device wlan1-va2 is not a slave of br0
----> Regulated Power: 100 20MHz: 100
device wlan1 is already a member of a bridge; can't enslave it to bridge br0.
device wlan1-vxd is not a slave of br0
device wlan0-va0 is not a slave of br0
device wlan0-va1 is not a slave of br0
device wlan0-va2 is not a slave of br0
----> Regulated Power: 100 20MHz: 100
device wlan0-vxd is not a slave of br0
killall: dhclient: no process killed
iptables: No chain/target/match by that name.
init_iptv_config ---> 2
Initialized Time: 1388502000
Restart HTTPD
Kill httpdkillall: httpd: no process killed
Start httpdkillall: dhcpd: no process killed
killall: bcrelay: no process killed
killall: pptpd: no process killed
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
killall: xl2tpd: no process killed
Stopping strongSwan IPsec failed: starter is not running
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
unbinding existing nf_queue handler for AF_INET (if any)
binding nfnetlink_queue as nf_queue handler for AF_INET
binding this socket to queue '0'
setting copy_packet mode
killall: auth: no process killed
killall: iapp: no process killed
killall: wscd: no process killed
killall: iwcontrol: no process killed
Only WPA WPA2 WPA-Mixed support for 802.1x
Only WPA WPA2 WPA-Mixed support for 802.1x
Launch iwcontrol: wlan1 wlan0
Register to wlan1
Register to wlan0
iwcontrol RegisterPID to (wlan1)
iwcontrol RegisterPID to (wlan0)
iwcontrol RUN OK
killall: apcpd: no process killed
Enable HW NAT
CPU -> system type              : RTL8197F
First Time ---> No WAN IP -> Dummy WAN IP Set
Init HW NAT -> Local Down/UP
Clear WAN IP
Init HW NAT -> END
killall: pppoe-relay: no process killed
Session Garbage Collecting:Maybe system time is updated.( 1388502005 0 )
Update Session timestamp and try it after 5 seconds again.
ez_ipupdate callback --> time_elapsed: 0
MBRIDGED(34) br_ifname(wlan0-vxd), connection status has changed to 'CONNECTION_TRYING'
killall: igmpproxy: no process killed
iptables: Bad rule (does a matching rule exist in that chain?).
Led Silent Callback
Turn ON All LED
Dynamic Channel Search for wlan1 is OFF
Dynamic Channel Search for wlan0 is OFF
iptables: Bad rule (does a matching rule exist in that chain?).
MBRIDGED(34) br_ifname(wlan0-vxd), connection status has changed to 'CONNECTION_ESTABLISHED'
[DHCPC:Check IP] : Check WAN IP : interface: wlan0-vxd  192.168.200.166, 255.255.255.0
interface=wlan0-vxd
PATH=/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/sbin
HOME=/
ip=192.168.200.166
subnet=255.255.255.0
router=192.168.200.254
dns=182.172.255.180 203.246.162.253
lease=7200
dhcptype=5
serverid=192.168.200.254
Check DHCP PID Elapsed Time: 1
killall: pppoe-relay: no process killed
WAN0 IP: 192.168.200.166
CPU -> system type              : RTL8197F
Init HW NAT -> Local Down/UP
Init HW NAT -> END
killall: upnpd: no process killed
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
iptables: Bad rule (does a matching rule exist in that chain?).
Update Time --> tv.tv_sec : 63f5be7c ---> RETURN : 0
Base: 14668,  Auth Slot: 12805
Auth Counter: 1863, 19737 remained
Session Garbage Collecting:Maybe system time is updated.( 1677049468 1388502017 )
Update Session timestamp and try it after 5 seconds again.
Maybe date is updated!!!
ez_ipupdate callback --> time_elapsed: 0
killall: igmpproxy: no process killed
Led Silent Callback
Turn ON All LED
Dynamic Channel Search for wlan1 is OFF
Dynamic Channel Search for wlan0 is OFF
General Scheduler - No schedule is defined. Turn Off the scheduler
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
ez_ipupdate callback --> time_elapsed: 2
Update Time --> tv.tv_sec : 63f5be7f ---> RETURN : 0


can install netis n4 on it
and tenda ac10