12 pagesV  1 2 3 4 5 6 > »  
 
REPLY
> Upgraded UBOOT loaders for routers | [firmware]
kestua
Message#1
21.07.15, 22:18
Free men
********
[offline]

Group: Friendssavagemessiahzine.com
Messages 1548
Check in: 04.09.12

Reputation:-  172  +

Upgraded UBOOT loaders | Build OpenWrt / LEDE from source | DD-WRT FIRMWARE | Collect bin (dump) for the programmer

Upgraded UBOOT loaders for routers


Attached Image


Right
Breed
Breed
Screenshots
Attached Image

Attached Image

Attached Image

Attached Image

Attached Image

Attached Image

U-Boot_Mod
u-boot_mod
Attached fileu-boot_for_tp-link_AR9331_by_pepe2k.tar.gz(355.12 KB)


AR7240 - ap91
AR7241 - ap99
AR9331 - ap121
AR9341 - ap123
AR9342 - mi124
AR9344 - db12x
QCA953x - ap143
QCA9558 - ap135 download


Screenshots
Attached Image


Atheros AR9331
Atheros AR9331:
Attached fileu-boot-ar9331.rar(81 KB)
Attached fileu-boot-ar9331-pisen.rar(81 KB)
Attached fileu-boot-ar9331-wr720nv3_wr710n.rar(80.79 KB)
Attached fileuboot_for_tp-link_tl-mr3020.rar(56.63 KB)

8devices Carambola 2
TP-Link TL-MR3020 v1
TP-Link TL-MR3040 v1 and v2
TP-Link TL-WR703N v1,
TP-Link TL-WR720N v3
TP-Link TL-WR710N v1
TP-Link TL-MR10U v1
TP-Link TL-MR13U v1
TP-Link TL-WR740N v4 (and similar, like TL-WR741ND v4)
TP-Link TL-MR3220 v2
Atheros AR1311
Atheros AR1311 (similar to AR9331)
D-Link DIR-505 H / W ver. A1
Atheros AR9341
Atheros AR9341:
Attached fileu-boot-ar9341.rar(81.27 KB)

Attached fileuboot_for_tp-link_tl-mr3420_v2.rar(55.25 KB)

TP-Link TL-MR3420 v2
TP-Link TL-WR841N / D v8
TP-Link TL-WA830RE v2
TP-Link TL-WA801ND v2
Atheros AR9344
Atheros AR9344:
Attached fileu-boot-ar9344.rar(82.17 KB)
Attached fileu-boot-ar9344-msa2k-3513na.rar(82.45 KB)
Attached fileu-boot-ar9344-mw4530r.rar(82.23 KB)

TP-Link TL-WDR3600 v1
TP-Link TL-WDR43x0 v1
TP-Link TL-WDR3500 v1

4_BEST U-BOOT CONSOLE
wr703n-uboot-with-web-failsafe
china_uboot_ (best)

Breed

Attached Image

FIRMWARE FOR 16MB
FIRMWARE-16MB
If the firmware for your model is not in the list, select according to the characteristics of the device
HOW TO PUSH
U-boot bootloader.
It is always located at the beginning of the flash drive.
Under the bootloader area in the TP-LINK 3020, 3040, 3220, and 3420 routers I’ve tried for different revisions, 128kb or 0x20000 flash memory areas are allocated for the bootloader area.
For flash drives 4m, 8m, 16m, the bootloader will always be here:
0x000000000000-0x000000020000: "u-boot"
Depending on the type and revision of the router, the bootloader file itself may be less than 64kb (0x10000) or longer than 64kb. This is important to understand, because recording is possible only in a clean (wiped) area of ​​the flash drive, and the flash drive rubs sector-by-sector, and the sector length is 64 kilobytes.
bootloader (flashed via TFTP- (if alive)
If there isn’t something on the programmer
Removing backup_ open wrt:
backup u-boot: cat / dev / mtd0>/tmp/backup_u-boot.bin
write to router: mtd write /tmp/uboot.mod u-boot

BACKUP BOOT OPEN WRT:
cat / dev / mtd0>/tmp/backup_u-boot.bin
BOOT firmware:
tpl
tftpboot 0x81000000 u-boot.bin
erase 0x9f000000 + 0x20000
cp.b 0x81000000 0x9f000000 0x20000
bootm 0x9f000000

FIRMWARE firmware:
FIRMWARE firmware:
tpl
tftpboot 0x80000000 code.bin
erase 0x9f020000 + 0x3c0000
cp.b 0x80000000 0x9f020000 0x3c0000
bootm 0x9f020000

BACKUP & ART OPEN WRT Firmware:
BACKUP ART OPEN WRT
cat / dev / mtd4>/tmp/backup_art.bin
Firmware ART
tpl
For flash drives 4m:
tftpboot 0x81000000 art.bin
erase 0x9f3f0000 + 0x10000
cp.b 0x81000000 0x9f3f0000 0x10000
bootm 0x9f000000
For flash drives 8m:
tftpboot 0x81000000 art.bin
erase 0x9f7f0000 + 0x10000
cp.b 0x81000000 0x9f7f0000 0x10000
bootm 0x9f000000
For flash drives 16m:
tftpboot 0x81000000 art.bin
erase 0x9fff0000 + 0x10000
cp.b 0x81000000 0x9fff0000 0x10000
bootm 0x9f000000


backup firmware
backup firmware with your settings: cat / dev / mtd5>/tmp/backup_firmware.bin --This firmware can be flashed using the MTD method!
full backup flash:
Code:
cat / dev / mtd0>/tmp/backup_fullflash.bin
cat / dev / mtd5>>/tmp/backup_fullflash.bin
cat / dev / mtd4>>/tmp/backup_fullflash.bin
then copy the backup_fullflash.bin binary file from the / tmp directory on the router to the computer via WinSCP.

At offset 0x1FC0 is the MAC address
You can change it using any hex editor.
in the mac dump, pin: - need to be changed to your
if you edit U-boot
MAC: 0001FE00
KLASS: 0001FF00
PIN: 00020000
if you edit backup_fullflash
MAC: 0001FC00
KLASS: 0001FD00
PIN: 0001FE00
FIRWARE: 00020000



After flashing the bootloader, you must turn off the power of the router, press the buttonRESETorWPSand start the router.
The web interface is located at192.168.1.1

Add RAM up to 64mb
Compatible Chips:
Samsung - K4H511638B
Samsung - K4H511638C
Samsung - K4H511638D
Samsung - K4H511638F
Hynix - HY5DU121622CTP
Infineon - HYB25D512160CE
Micron - MT46V32M16TG
Elpida - EDD5116ADTA
Elpida - EDD5116AFTA
Nanya - NT5DS32M16BS

Chip Statistics
The list of chip series that have been tested and should fit (without suffixes) according to the Western forums for upgrading WL500P:

Samsung K4H511638D
Hynix HY5DU121622CTP
Hynix HY5DU121622CLTP
Hynix HY5DU121622DTP
Hynix HY5DU121622DLTP
Micron MT46V32M16TG
Micron MT46V32M16TGZ
Nanya NT5DS32M16BS
infineon HYB25D512160BE
Elixir N2DS51216BT-6K

List of specific chips that have been tested on the wl500g.info forum:

K4H511638D-UCCC (purchased separately (not included in the module))
Samsung K4H511638B-TCB3
Samsung K4H511638D-UCB3
Hynix HY5DU121622CTP-J
Hynix HY5DU121622CTP-D43
Hynix HY5DU121622DTP-D43
Kingston K4H511638C-UCB3
ELPIDA D5116AFTA-5B-E

The list of specific modules whose chips were tested on the wl500g.info forum:

Memory: 512Mb SO-DIMM PC2700
Module: Samsung M470L6524BT0-CB3
[Chips]: Samsung K4H511638B-TCB3

Memory: 512Mb SO-DIMM PC2700 (ROHS)
Module: Samsung M470L6524DU0-CB3
[Chips]: Samsung K4H511638D-UCB3

Memory: 256Mb DIMM
Module: Samsung M368L3324BT
[Chips]: Samsung K4H511638B-TCB3

Memory: 256Mb SO-DIMM
Module: Samsung K4H511638BT0
[Chips]: Samsung K4H511638B-TCB3

Memory: 256Mb DIMM PC2700
Module: Hynix HYMD532646CP6J-J
[Chips]: Hynix HY5DU121622CTP-J

Memory: 256Mb DIMM PC3200
Module: Hynix HYMD532646CP6J-D43
[Chips]: Hynix HY5DU121622CTP-D43

Memory: 256Mb DIMM PC3200
Module: Hynix HYMD532646CP6J-D43
[Chips]: Hynix HY5DU121622DTP-D43

Memory: 512Mb DIMM PC2700
Module: Kingston KVR333X64SC25 / 512
[Chips]: Kingston K4H511638C-UCB3

Memory: 512Mb PC2700
Module: Kingston KVR400X64SC3A / 512
[Chips]: Hynix HY5DU121622CTP-D43

Memory: 256Mb SO-DIMM PC2700 (ROHS)
Module: Transend TS32MSD64V3M
[Chips]: ELPIDA D5116AFTA-5B-E

Module: Samsung M368L3324BT without a suffix
[Chips]: Samsung K4H511638B without a suffix

Module: Samsung K4H511638B without a suffix
[Chips]: Samsung K4H511638B without a suffix

Module: Samsung M470L6524BT
[Chips]: Samsung K4H511638B without a suffix

Memory: 512Mb PC2700
Module: Kingston KVR400X64SC3A / 512
[Chips]: Nanya NT5DS32M16BS

Memory: 256Mb PC2100 # 2700 #
Module: Kingston KVR400X64SC2.5A / 256
[Chips]: infineon HYB25D512160BE
Partition Locations
FOR STABLE WIFI OPERATION -save-and fill in the native art-section (wifi calibration)

0x00000000-0x00020000: "boot"
0x00020000-0x00120000: "kernel"
0x00120000-0x003e0000: "rootfs"
0x003e0000-0x003f0000: "config"
0x003f0000-0x00400000: "art"

MAC numbers, PIN, router version.
MAC addressin almost all routers starts with the address0x1FC00. Under the MAC address is allocated, respectively, 6 bytes.
Router versionstarts with the address0x1FD00. The entry of the 3420 router of the second revision looks like this: 3420000200000001
PINstarts with the address0x1FE00. The length is 8 bytes. PIN, for example, 80751205 (the one that you see on the nameplate of the router) in the firmware file will look like 3830373531323035.
for 2m flash
MAC - at position --5FF8


Calibration table of the Wi-Fi radio module (art).
Under the area of ​​the calibration table of the Wi-Fi (art) radio module in TP-LINK routers, 64kb (0x10000) of memory in the flash drive is allocated. art is always located at the end of the flash drive.
For flash drives 4m:
0x0000003f0000-0x000000400000: "art"
For flash drives 8m:
0x0000007f0000-0x000000800000: "art"
For flash drives 16m:
0x000000ff0000-0x000001000000: "art"


Programs
Attached fileWinpcap_4_1_3.exe(893.68 KB)

Attached fileBreedEnter.exe(45.5 KB)
Attached fileHerculesSetup.zip(567.13 KB)

Attached filehercules_3-2-8.exe(1.24 MB)
Attached Image

Attached filebabyftp.zip(40.19 KB)

Attached fileHW_VirtualSerialPort.zip(1.18 MB)

Attached filewinscp573setup.rar(5.4 MB)

FULL DUMP ROUTERS
FULL DUMP
LIST of dumps

DIR-320 (A)
DWL-2100AP
ASUS RT-G32_b1_f.zip
DIR-300_b.5.dom.ru.rar
DIR-300A1FULLDUMP.rar
DIR-300B7.zip
DIR-300NRU HW B1.rar
DIR-400.rar
DIR-601vb1-dlinkfirmware.7z
DIR-615 E4 Dump Work.rar
DIR-615_AP99-AR7240-RT-091105-00.rar
DIR-615_k2_1_0_19.zip
DIR-615RevK1.rar
DIR-620_HWA1_FW1.21.rar
DIR-620D1-1.3.10full_dump.rar
DSL-2500UBRUD HW Ver. D1.rar
DSL-2540.7z 1.8
DSL-2640C2.rar 3.3
DSL-2640U_BRU_C2.7z
DSL-2650U v1.0.10_dump full.7z 6.0
DSL-2740.7z 3.7
DSL-2750U (repair flash & manual) .zip 19.3
DSL_2650NRU_v_1_0_11_17082011_fix_bad_fw_Update.zip
FAST-FW150R.rar
FAST-FW300R_20DCE6A9E4AE_98804894.7z
GETNET GR-124W.rar
MERCURY MW150Rv10.rar
MERCURY MW305R + .rar
QTECH QDSL-1040WU (analogue DSL-2750U & DSL-2650U) .7z
TD-W8951 (moded) .rar 1
TD-W8951ND_v4_QH16-104HIP_ (EN25Q16) _mac6470023ED2A9.rar
TD-W8951ND full dump_v 5.0_A0F3C1F454DA.7z
TD-W8951ND ver5.0.zip
TD-W8960N.7z 3.8
TD-W8961ND_V2_old.rar
TD-W8961ND full dump sborka v3.zip
TD-WN8901G_v3.rar
TENDA-W308R_ok.rar
TENDA-W311R_4mb_flash_ralink.rar
TENDA-W316R_original.rar
TL-MR3020.7z
TL-MR3220 v1.bin.7z
TL-MR3220 v2.0 fullflash factory.rar
TL-MR3220_v1.rar
TL-MR3220V2 Dump fullflash 3220v2.rar
TL-MR3420_v1.rar
TL-MR3420v2.zip
TL-WA500G.7z
TL-WA500G_F4-EC-38-FA-F4-87.rar
TL-WA501G.rar
TL-WA501G_00-1D-0F-D9-FE-1B.rar
TL-WA501G_00-19-E0-65-3A-B4.rar
TL-WA501G_01.rar
TL-WA601G_ver1_test2_dellconfig.zip
TL-WA701ND.7z
TL-WA701ND_74EA3AC1BF88_30718333.7z
TL-WA701ND_940C6DAC60EA_15306760.7z
TL-WA801ND_90F652642AD9_62318884.7z
TL-WA801ND_B0487ADFEF51_14264481.7z
TL-WA801ND_F4EC38B99430_22157287.7z
TL-WA801ND rabochij ver 1.2 B0-48-7A-DF-EF-51.bin.7z
TL-WA5110G_D8-5D-4C-D7-5C-A6.rar
TL-WA5110G_D8-5D-4C-D7-5C-A6.bin.7z
TL-WA5210 (new) .rar
TL-WA5210G (oreg) .rar
TL-WA7510N.bin.7z
TL-WA7510N_F8D111B165BE.7z
TL-WR340_WA500_mak D85D4CFB5112.bin.7z
TL-WR340_work_01.7z
TL-WR542.7z 1
TL-WR543_94_0C_6D_EE_12_70.7z
TL-WR702N 90-F6-52-70-6F-44.rar
TL-WR720N 64-70-02-CE-E9-34.rar
TL-WR740_hw4_2.zip
TL-WR741ND_V4.rar
TL-WR741ND_V350MHz_D85D4CD61C2C_65480403.rar
TL-WR741ND_V350MHz_orig_11605119.rar
TL-WR743v2_000000.rar
TL-WR802N.rar
TL-WR841ND_original.bin.7z
TL-WR841ND_V6_V7_54E6FCA5EEC2_35579113.rar
TL-WR841ND_V6_V7_D85D4CEDA888_99681081.rar
TL-WR841ND_V6_V7_F8D11161E6C8_15681119.rar
TL-WR841Nv9 (notest) .rar
TL-WR841Nver83.rar
TL-WR841v83.rar
TL-WR940N_1_4_fullflash.rar
TL-WR941ND_V2_00212765BE14_51967994.rar
UBNT airrouter.rar
UBNT BULLET2_00156DABE3D0.rar
UBNT BULLET2_002722166B76.rar
UBNT BULLET M2.rar
UBNT NS2_00156DAB944A_V401 (write2) .rar
UBNT NS2_00156DD2DD74.rar
UBNT NS2_Loco_00156DE4B20D.rar
UBNT NS M2.rar
UBNT NS M2 LOCO NSLm2.7z
UBNT NS M2 MX25 Nano.rar
UBNT NS M2 nanosM2.rar
UBNT NS M2 orig25x64.rar
UBNT NS M2 origin mine .rar
uboot.ar9331.7z
ZYXEL-Keenetic Lite A.1.rar
ZYXEL-KEENETIK_LITE_B_3E7C87.zip


Attached files

Attached file3420v1.backup_art.rar(521 bytes)
Attached filebackup_art_3420_V.2.2.rar(461 bytes)


Post has been editedstp101 - 26.12.18, 20:43
kestua
Message#2
20.10.15, 13:14
Free men
********
[offline]

Group: Friendssavagemessiahzine.com
Messages 1548
Check in: 04.09.12

Reputation:-  172  +

wr703n-uboot-with-web-failsafe

china_uboot_ (best)
firmware for 16mb

Attached files

Attached filetp-link_uboot.zip(2.31 MB)


Post has been editedkestua - 20.10.15, 19:15


--------------------
SL ._._ A SL ._._._._ AM.
ILOVEDRUM& BASS
Reggae
shdensh
Message#3
06.02.16, 22:12
Experienced
******
[offline]

Group: Friendssavagemessiahzine.com
Messages 430
Check in: 08.11.10

Reputation:-  43  +

* kestua, tell me for mr3420 with 4 mb flash which uboot to sew, breed-ar9341.bin or Chinese uboot-ar9341.bin or uboot -for-tplink-mr3420v2.bin from your archive?

Post has been editedshdensh - 06.02.16, 22:22
kestua
Message#4
02.05.16, 07:24
Free men
********
[offline]

Group: Friendssavagemessiahzine.com
Messages 1548
Check in: 04.09.12

Reputation:-  172  +

* shdensh,According to your revision, see what percentage you have in the header.
Description of wiki routers

wiki.openwrt.org/en/start

Post has been editedkestua - 02.05.16, 07:27


--------------------
SL ._._ A SL ._._._._ AM.
ILOVEDRUM& BASS
Reggae
bsb5068
Message#5
02.05.16, 15:42
Local
*****
[offline]

Group: Friendssavagemessiahzine.com
Messages 127
Check in: 26.01.09
Huawei P Smart FIG-LX1

Reputation:-  8  +

I'm confused, tell me, please, do I have ART in my “right place†at the router?
this uboot works fine with my NOR, will there be problems during further work with the point?
Just a little confusing "m25p80 spi0.0: found mx25l12805d, expected m25p80".

*****************************************
* U-Boot 1.1.4 (Jun 19 2013) *
*****************************************

AP121 (AR9331) U-Boot for TL-MR3220 v2

DRAM: 64 MB
FLASH: Macronix MX25L128 (16 MB)

LED on during eth initialization ...

Hit any key to stop autobooting: 1 0

Booting image at: 0x9F020000 ...
Uncompressing kernel image ...
Ok
Starting kernel ...

[0.000000] Linux version 3.18.23 (buildbot @ builder1) (gcc version 4.8.3 (OpenWrt / Linaro GCC 4.8-2014.04 r47269)) # 1 Sun Jan 31 18:39:35 CET 2016
[0.000000] bootconsole [early0] enabled
[0.000000] CPU0 revision is: 00019374 (MIPS 24Kc)
[0.000000] SoC: Atheros AR9330 rev 1
[0.000000] Determined physical RAM map:
[0.000000] memory: 04000000 @ 00000000 (usable)
[0.000000] Initrd not found or empty - disabling initrd
[0.000000] Zone ranges:
[0.000000] Normal [mem 0x00000000-0x03ffffff]
[0.000000] Movable zone start for each node
[0.000000] Early memory node ranges
[0.000000] node 0: [mem 0x00000000-0x03ffffff]
[0.000000] Initmem setup node 0 [mem 0x00000000-0x03ffffff]
[0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16256
[0.000000] Kernel command line: board = TL-MR3220-v2 console = ttyATH0,115200 rootfstype = squashfs, jffs2 noinitrd
[0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[0.000000] Writing ErrCtl register = 00000000
[0.000000] Readback ErrCtl register = 00000000
[0.000000] Memory: 60812K / 65536K available (2586K kernel code, 128K rwdata, 540K rodata, 256K init, 193K bss, 4724K reserved)
[0.000000] SLUB: HWalign = 32, Order = 0-3, MinObjects = 0, CPUs = 1, Nodes = 1
[0.000000] NR_IRQS: 51
[0.000000] Clocks: CPU: 400.000MHz, DDR: 400.000MHz, AHB: 200.000MHz, Ref: 25.000MHz
[0.000000] Calibrating delay loop ... 265.42 BogoMIPS (lpj = 1327104)
[0.080000] pid_max: default: 32768 minimum: 301
[0.080000] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[0.090000] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[0.100000] NET: Registered protocol family 16
[0.100000] MIPS: machine is TP-LINK TL-MR3220 v2
[0.590000] Switched to clocksource MIPS
[0.590000] NET: Registered protocol family 2
[0.600000] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[0.600000] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[0.600000] TCP: Hash tables configured (established 1024 bind 1024)
[0.610000] TCP: reno registered
[0.610000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[0.620000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[0.630000] NET: Registered protocol family 1
[0.630000] futex hash table entries: 256 (order: -1, 3072 bytes)
[0.650000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[0.650000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[0.660000] msgmni has been set to 118
[0.660000] io scheduler noop registered
[0.670000] io scheduler deadline registered (default)
[0.670000] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[0.680000] ar933x-uart: ttyATH0 at MMIO 0x18020000 (irq = 11, base_baud = 1562500) is a Ar933X UART
[0.690000] console [ttyATH0] enabled
[0.690000] console [ttyATH0] enabled
[0.700000] bootconsole [early0] disabled
[0.700000] bootconsole [early0] disabled
[0.710000] m25p80 spi0.0: found mx25l12805d, expected m25p80
[0.710000] m25p80 spi0.0: mx25l12805d (16384 Kbytes)
[0.720000] 5 tp-link partitions found on MTD device spi0.0
[0.720000] Creating 5 MTD partitions on "spi0.0":
[0.730000] 0x000000000000-0x000000020000: "u-boot"
[0.730000] 0x000000020000-0x00000013f7d8: "kernel"
[0.740000] 0x00000013f7d8-0x000000ff0000: "rootfs"
[0.740000] mtd: device 2 (rootfs) set to be root filesystem
[0.750000] 1 squashfs-split partitions found on MTD device rootfs
[0.750000] 0x000000370000-0x000000ff0000: "rootfs_data"
[0.760000] 0x000000ff0000-0x000001000000: "art"
[0.770000] 0x000000020000-0x000000ff0000: "firmware"
[0.810000] libphy: ag71xx_mdio: probed
[1.400000] ag71xx-mdio.1: Found an AR7240 / AR9330 built-in switch
[1.430000] eth0: Atheros AG71xx at 0xba000000, irq 5, mode: GMII
[2.020000] ag71xx ag71xx.0: connected to PHY at ag71xx-mdio.1: 04 [uid = 004dd041, driver = Generic PHY]
[2.030000] eth1: Atheros AG71xx at 0xb9000000, irq 4, mode: MII
[2.030000] TCP: cubic registered
[2.030000] NET: Registered protocol family 17
[2.040000] bridge: automatic filtering via arp / ip / ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
[2.050000] Bridge firewalling registered
[2.060000] 8021q: 802.1Q VLAN Support v1.8
[2.070000] VFS: Mounted root (squashfs filesystem) readonly on device 31: 2.
[2.080000] Freeing unused kernel memory: 256K (80390000 - 803d0000)
[3.300000] init: Console is alive
[3.300000] init: - watchdog -
[4.830000] usbcore: registered new interface driver usbfs
[4.830000] usbcore: registered new interface driver hub
[4.840000] usbcore: registered new device driver usb
[4.850000] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[4.850000] ehci-platform: EHCI generic platform driver
[4.860000] ehci-platform ehci-platform: EHCI Host Controller
[4.860000] ehci-platform ehci-platform: new USB bus registered, assigned bus number 1
[4.870000] ehci-platform ehci-platform: irq 3, io mem 0x1b000000
[4.900000] ehci-platform ehci-platform: USB 2.0 started, EHCI 1.00
[4.900000] hub 1-0: 1.0: USB hub found
[4.900000] hub 1-0: 1.0: 1 port detected
[5.330000] init: - preinit -
[6.160000] random: procd urandom read with 9 bits of entropy available
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[8.230000] eth0: link up (1000Mbps / Full duplex)
[9.440000] jffs2: notice: (360) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[9.450000] mount_root: switching to jffs2 overlay
[9.500000] eth0: link down
[9.520000] procd: - early -
[9.520000] procd: - watchdog -
[10.350000] procd: - ubus -
[11.370000] procd: - init -
Please press Enter to activate this console.
[12.430000] NET: Registered protocol family 10
[12.450000] ip6_tables: (C) 2000-2006 Netfilter Core Team
[12.470000] Loading modules backported from Linux version master-2015-03-09-0-g141f155
[12.480000] Backport generated by backports.git backports-20150129-0-gdd4a670
[12.490000] ip_tables: (C) 2000-2006 Netfilter Core Team
[12.500000] nf_conntrack version 0.5.0 (954 buckets, 3816 max)
[12.550000] xt_time: kernel timezone is -0000
[12.590000] cfg80211: Calling CRDA to update world regulatory domain
[12.620000] cfg80211: World regulatory domain updated:
[12.620000] cfg80211: DFS Master region: unset
[12.620000] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time)
[12.630000] cfg80211: (2402000 KHz - 2472000 KHz @ 40,000 KHz), (N / A, 2000 mBm), (N / A)
[12.640000] cfg80211: (2457000 KHz - 2482000 KHz @ 20000 KHz, 92000 KHz AUTO), (N / A, 2000 mBm), (N / A)
[12.650000] cfg80211: (2474000 KHz - 2494000 KHz @ 20000 KHz), (N / A, 2000 mBm), (N / A)
[12.660000] cfg80211: (5170000 KHz - 5250000 KHz @ 80,000 KHz, 160,000 KHz AUTO), (N / A, 2000 mBm), (N / A)
[12.670000] cfg80211: (5250000 KHz - 5330000 KHz @ 80,000 KHz, 160,000 KHz AUTO), (N / A, 2000 mBm), (0 s)
[12.680000] cfg80211: (5490000 KHz - 5730000 KHz @ 160000 KHz), (N / A, 2000 mBm), (0 s)
[12.690000] cfg80211: (5735000 KHz - 5835000 KHz @ 80000 KHz), (N / A, 2000 mBm), (N / A)
[12.690000] cfg80211: (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N / A, 0 mBm), (N / A)
[12.780000] PPP generic driver version 2.4.2
[12.790000] NET: Registered protocol family 24
[12.870000] ieee80211 phy0: Atheros AR9330 Rev: 1 mem = 0xb8100000, irq = 2
[12.880000] cfg80211: Calling CRDA for country: US
[12.880000] cfg80211: Regulatory domain changed to country: US
[12.880000] cfg80211: DFS Master region: FCC
[12.890000] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time)
[12.900000] cfg80211: (2402000 KHz - 2472000 KHz @ 40,000 KHz), (N / A, 3000 mBm), (N / A)
[12.910000] cfg80211: (5170000 KHz - 5250000 KHz @ 80,000 KHz, 160,000 KHz AUTO), (N / A, 2300 mBm), (N / A)
[12.920000] cfg80211: (5250000 KHz - 5330000 KHz @ 80,000 KHz, 160,000 KHz AUTO), (N / A, 2300 mBm), (0 s)
[12.930000] cfg80211: (5490000 KHz - 5730000 KHz @ 160000 KHz), (N / A, 2300 mBm), (0 s)
[12.930000] cfg80211: (5735000 KHz - 5835000 KHz @ 80000 KHz), (N / A, 3000 mBm), (N / A)
[12.940000] cfg80211: (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N / A, 4000 mBm), (N / A)
[23.500000] device eth0 entered promiscuous mode
[23.500000] IPv6: ADDRCONF (NETDEV_UP): br-lan: link is not ready
[23.560000] IPv6: ADDRCONF (NETDEV_UP): eth1: link is not ready
[25.690000] eth0: link up (1000Mbps / Full duplex)
[25.690000] br-lan: port 1 (eth0) entered forwarding state
[25.690000] br-lan: port 1 (eth0) entered forwarding state
[25.700000] IPv6: ADDRCONF (NETDEV_CHANGE): br-lan: link becomes ready
[27.690000] br-lan: port 1 (eth0) entered forwarding state
[75.840000] random: nonblocking pool is initialized

BusyBox v1.23.2 (2016-01-02 18:01:44 CET) built-in shell (ash)

_______ ________ __
| |.-----.-----.-----.| | | |.----.| |_
| - || _ | -__| || | | || _|| _|
|_______|| __|_____|__|__||________||__| |____|
| __ | W I R E L E S S F R E E D O M
-----------------------------------------------------
CHAOS CALMER (05.15.1, r48532)
-----------------------------------------------------
* 1 1/2 oz Gin Shake with a glassful
* 1/4 oz Triple Sec of broken ice and pour
* 3/4 ​​oz Lime Juice unstrained into a goblet.
* 1 1/2 oz Orange Juice
* 1 tsp. Grenadine syrup
-----------------------------------------------------
root @ OpenWrt: / # cat / dev / mtd4>/tmp/backup_art.bin

root @ OpenWrt: / #
root @ OpenWrt: / # df
Filesystem 1K-blocks Used Available Use% Mounted on
rootfs 12800 476 12324 4% /
/ dev / root 2304 2304 0 100% / rom
tmpfs 30532 572 29960 2% / tmp
/ dev / mtdblock3 12800 476 12324 4% / overlay
overlayfs: / overlay 12800 476 12324 4% /
tmpfs 512 0 512 0% / dev

bsb5068
Message#6
02.05.16, 21:32
Local
*****
[offline]

Group: Friendssavagemessiahzine.com
Messages 127
Check in: 26.01.09
Huawei P Smart FIG-LX1

Reputation:-  8  +

I’ll explain why I got confused, replaced DRAM and NOR with memory, I kind of saved it as ART, and the MAC address went bad.
Because heit turns outin BOOT sits "At the offset 0x1FC00".
Prescribed via the setmac console, everything seems to be fine. Early panicked :)
NBogos
Message#7
01.06.16, 12:52
Visitor
**
[offline]

Group: Active users
Messages 16
Check in: 31.01.16

Reputation:-  4  +

Does anyone have art for tp-link tl-wdr3500 really need it, urgently! :(
kestua
Message#8
03.06.16, 17:00
Free men
********
[offline]

Group: Friendssavagemessiahzine.com
Messages 1548
Check in: 04.09.12

Reputation:-  172  +

Download full dump and trim winhex ohm

Attached files

Attached filetl-wdr3500.rar(6 MB)


Post has been editedkestua - 04.06.16, 09:50


--------------------
SL ._._ A SL ._._._._ AM.
ILOVEDRUM& BASS
Reggae
andydaw
Message#9
08.07.16, 19:14
Visitor
**
[offline]

Group: Active users
Messages 25
Check in: 28.02.09
HP iPAQ hx4700

Reputation:-  1  +

router 3420 v2.4, replaced the flash memory with w25q128, asked to open everything works fine, replaced sdram with Hynix HY5DU121622CTP-J and the router starts from 2-5 times, after it starts up it does not freeze, but I haven’t driven it for a long time. All 3 mikruhi from the SODIMM bar set the same result, the 4th mikruha works for the fifth year in 3420 v1 without rebooting and freezes on open 12.9.
There is a suspicion of memory timings, because 400 MHz memory is needed, but this 333 MHz, can anyone know, is there in the boot where to tighten the timings? percent where the multiplier twists found, the frequency set 500-550 the same result does not start immediately, all the LEDs are on (hanging), you distort the power started and so on 3 microcircuits.
andydaw
Message#10
08.07.16, 21:31
Visitor
**
[offline]

Group: Active users
Messages 25
Check in: 28.02.09
HP iPAQ hx4700

Reputation:-  1  +

I returned my native boot and it worked, but how I liked the Chinese boot, but oh well :)
parshukofff
Message#11
04.09.16, 13:44
Old resident
*******
[online]

Group: Friendssavagemessiahzine.com
Messages 851
Check in: 10.11.13
UleFone Armor 6E

Reputation:-  60  +

Hello, is there a u-boot loader for ralink rt3052 in this thread (tenda 3g300m router)
P.S And then I accidentally messed up my own when I was picking with firmware
plastilincheg
Message#12
09.09.16, 22:10
Local
*****
[offline]

Group: Friendssavagemessiahzine.com
Messages 140
Check in: 21.06.10
Xiaomi Redmi Note 3 Standard Edition

Reputation:-  8  +

Greetings, I installed the breed on the MR3020 and immediately a few questions arose.
1. When uploading the original firmware without boot, when rebooting from the firmware interface, the download hangs on:

Boot and Recovery Environment for Embedded Devices
Copyright (C) 2016 HackPascal<[email protected]>
Build date 2016-08-25 [git-daad6a0]
Version 1.0 (r936)

DRAM: 32MB
Platform: Atheros AR9331 rev 1
Board: Generic board
Clocks: CPU: 400MHz, DDR: 400MHz, AHB: 200MHz, Ref: 25MHz


Such a hang only on the original firmware

2. Flashing breed indicates erase 0x9f000000 + 0x20000, as a result of which the section with the MAC address and password is erased from the sticker. It is clear that later it can be restored through the breed itself, but it’s somehow not a feng shui. Is it possible to wipe only the section where the bootloader is? As I understand it, erase 0x9f000000 + 0x10000

Post has been editedplastilincheg - 09.09.16, 22:12
Tolik-psk
Message#13
25.09.16, 00:22
Visitor
**
[offline]

Group: Active users
Messages 21
Check in: 05.01.10

Reputation:-  2  +

I ask the moderator to add to the header! Replacing DDR with 64mb H5DU5162ETR-E3C was successfully tested under 100% load for 12 hours, only after flashing u-boot pepe2k since the factory uboot set 2.42v memory voltage, but this was not enough for memory which in most cases has VDD, VDDQ = 2.5 V +/- 0.2V, after the uboot pepe2k firmware the voltage went up and became 2.56v !!!!
router mr3420v2 openwrt 15.05.

The factory memory is M13S2561616A 32mb and the ratings are VDD = 2.3V ~ 2.7V, VDDQ = 2.3V ~ 2.7V, 2.42v was enough for it.
Thank you all who participated in the forum, without you I would not have succeeded!

Posted on 09/25/2016, 00:26:

ps memory voltage can be measured on transistors hy4c there 2 of them near the memory.
dmintrius
Message#14
08.11.16, 03:14
Visitor
**
[offline]

Group: Users
Messages 13
Check in: 22.12.10
LG G2

Reputation:-  78  +

I searched for a long time, took Chinese. all from 1 time. tl-mr3220 + 64mbit (mx25l6405d)
1 question for the vehicle: 1 spoiler screenshots, breed in English. Share the AR9331 version.

Post has been editeddmintrius - 08.11.16, 03:19
kestua
Message#15
16.11.16, 17:03
Free men
********
[offline]

Group: Friendssavagemessiahzine.com
Messages 1548
Check in: 04.09.12

Reputation:-  172  +

* dmintrius,

everything is in the hat

china_uboot_ (best)

Post has been editedkestua - 16.11.16, 17:05


--------------------
SL ._._ A SL ._._._._ AM.
ILOVEDRUM& BASS
Reggae
Mikifr
Message#16
13.12.16, 18:44
Visitor
**
[offline]

Group: Active users
Messages 20
Check in: 01.10.13
Xiaomi Mi A2 Lite 3/32

Reputation:-  0  +

I can’t download the firmware from the box. I registered - it did not help.
artem1701
Message#17
14.12.16, 00:34
Smile, gentlemen
*********
[offline]

Group: Banned
Messages 10541
Check in: 13.01.10
Samsung Galaxy S7 EDGE SM-G935F

Reputation:-  978  +

* Mikifr, Perezalete ...


--------------------
We have the funds. We do not have enough mind ... ©
Mikifr
Message#18
14.12.16, 18:39
Visitor
**
[offline]

Group: Active users
Messages 20
Check in: 01.10.13
Xiaomi Mi A2 Lite 3/32

Reputation:-  0  +

I downloaded openwrt-ar71xx-generic-tl-mr3420-v1-squashfs-factory.bin firmware, dropped the ROM from the router, filled it in using the TL866 programmer. Everything went without problems. I turned the ROM back to the router - it doesn't work. The 2,3,4 and WAN LEDs are on. Or should the boot block be cut from this firmware?
kestua
Message#19
14.12.16, 19:29
Free men
********
[offline]

Group: Friendssavagemessiahzine.com
Messages 1548
Check in: 04.09.12

Reputation:-  172  +

* MikiFr,
I need a full 4mb dump + change the pin + mac to my own in winhex
structure
unique router data - MAC address and PIN code are stored in u-boot. at 0x1FC00 is the MAC address.
e.g. 12345678ABCD. only 6 bytes. The PIN code (ASCII HEX) is located at 0x1FE00. e.g. 3132333435363738 (12345678). only 8 bytes. in addition, a router model was found at 0x1FD00.
it looks like this for me: 3420000200000001. as far as I understand, 3420 is the second revision. which means 01 at the end - I don’t know.

4m: u-boot 0-0x20000 firmware 0x20000-0x3F0000 art 0x3F0000-0x400000
8m: u-boot 0-0x20000 firmware 0x20000-0x7F0000 art 0x7F0000-0x800000
16m: u-boot 0-0x20000 firmware 0x20000-0xFF0000 art 0xFF0000-0x1000000
The firmware itself consists of 2 parts - kernel and rootfs. therefore, it is more correct to write it like this:
4m: u-boot 0-0x20000 kernel 0x20000-0x160000 rootfs 0x160000-0x3F0000 art 0x3F0000-0x400000
8m: u-boot 0-0x20000 kernel 0x20000-0x160000 rootfs 0x160000-0x7F0000 art 0x7F0000-0x800000
16m: u-boot 0-0x20000 kernel 0x20000-0x160000 rootfs 0x160000-0xFF0000 art 0xFF0000-0x1000000


Attached files

Attached filebackup_fullflash.rar(3.29 MB)


Post has been editedkestua - 14.12.16, 19:32


--------------------
SL ._._ A SL ._._._._ AM.
ILOVEDRUM& BASS
Reggae
muravell
Message#20
24.12.16, 10:46
Local
*****
[offline]

Group: Friendssavagemessiahzine.com
Messages 270
Check in: 21.12.09

Reputation:-  49  +

Tell me why is everything necessary? This is only if you physically change the memory chip or there are other arguments.


--------------------
elecvlad_ru
Message#21
20.01.17, 01:42
Visitor
**
[offline]

Group: Active users
Messages 18
Check in: 11.12.15

Reputation:-  0  +

The strange thing is, when pouring breed-ar9331.bin on tp-3020, wifi stops working. On the native bootloader, everything is ok. Maybe someone came across?

And another question, how do binaries differ from herehttp://breed.hackpascal.net/
For example these:

[] breed-ar9331-hiwifi-hc6361.bin 2017-01-16 14:37 87K
[] breed-ar9331-mr12u.bin 2017-01-16 14:37 87K
[] breed-ar9331-pisen.bin 2017-01-16 14:37 87K
[] breed-ar9331-wr710n.bin 2017-01-16 14:37 86K
[] breed-ar9331.bin 2017-01-16 14:36 ​​87K

12 pagesV  1 2 3 4 5 6 > » 


 mobile version    Time is now: 07/07/20, 19:11