UBOOT Upgraded Routers for Routers | [firmware]



Rep: (172)
Upgraded UBOOT loaders | Build OpenWrt / LEDE from source | DD-WRT FIRMWARE | Collect bin (dump) for the programmer

Upgraded UBOOT loaders for routers


Attached Image


Right
Breed
Breed
Screenshots
Attached Image

Attached Image

Attached Image

Attached Image

Attached Image

Attached Image

U-Boot_Mod
u-boot_mod
Attached fileu-boot_for_tp-link_AR9331_by_pepe2k.tar.gz(355.12 KB)


AR7240 - ap91
AR7241 - ap99
AR9331 - ap121
AR9341 - ap123
AR9342 - mi124
AR9344 - db12x
QCA953x - ap143
QCA9558 - ap135

Screenshots
Attached Image


Atheros AR9331
Atheros AR9331:
Attached fileu-boot-ar9331.rar(81 KB)
Attached fileu-boot-ar9331-pisen.rar(81 KB)
Attached fileu-boot-ar9331-wr720nv3_wr710n.rar(80.79 KB)
Attached fileuboot_for_tp-link_tl-mr3020.rar(56.63 KB)

8devices Carambola 2
TP-Link TL-MR3020 v1
TP-Link TL-MR3040 v1 and v2
TP-Link TL-WR703N v1,
TP-Link TL-WR720N v3
TP-Link TL-WR710N v1
TP-Link TL-MR10U v1
TP-Link TL-MR13U v1
TP-Link TL-WR740N v4 (and similar, like TL-WR741ND v4)
TP-Link TL-MR3220 v2
Atheros AR1311
Atheros AR1311 (similar to AR9331)
D-Link DIR-505 H / W ver. A1
Atheros AR9341
Atheros AR9341:
Attached fileu-boot-ar9341.rar(81.27 KB)

Attached fileuboot_for_tp-link_tl-mr3420_v2.rar(55.25 KB)

TP-Link TL-MR3420 v2
TP-Link TL-WR841N / D v8
TP-Link TL-WA830RE v2
TP-Link TL-WA801ND v2
Atheros AR9344
Atheros AR9344:
Attached fileu-boot-ar9344.rar(82.17 KB)
Attached fileu-boot-ar9344-msa2k-3513na.rar(82.45 KB)
Attached fileu-boot-ar9344-mw4530r.rar(82.23 KB)

TP-Link TL-WDR3600 v1
TP-Link TL-WDR43x0 v1
TP-Link TL-WDR3500 v1

4_BEST U-BOOT CONSOLE
FIRMWARE FOR 16MB
FIRMWARE-16MB
If the firmware for your model is not in the list, select according to the characteristics of the device
HOW TO PUSH
U-boot bootloader.
It is always located at the beginning of the flash drive.
Under the bootloader area in the TP-LINK 3020, 3040, 3220, and 3420 routers I’ve tried for different revisions, 128kb or 0x20000 flash memory areas are allocated for the bootloader area.
For flash drives 4m, 8m, 16m, the bootloader will always be here:
0x000000000000-0x000000020000: "u-boot"
Depending on the type and revision of the router, the bootloader file itself may be less than 64kb (0x10000) or longer than 64kb. This is important to understand, because recording is possible only in a clean (wiped) area of ​​the flash drive, and the flash drive rubs sector-by-sector, and the sector length is 64 kilobytes.
bootloader (flashed via TFTP- (if alive)
If there isn’t something on the programmer
Removing backup_ open wrt:
backup u-boot: cat / dev / mtd0>/tmp/backup_u-boot.bin
write to router: mtd write /tmp/uboot.mod u-boot

BACKUP BOOT OPEN WRT:
cat / dev / mtd0>/tmp/backup_u-boot.bin
BOOT firmware:
tpl
tftpboot 0x81000000 u-boot.bin
erase 0x9f000000 + 0x20000
cp.b 0x81000000 0x9f000000 0x20000
bootm 0x9f000000

FIRMWARE firmware:
FIRMWARE firmware:
tpl
tftpboot 0x80000000 code.bin
erase 0x9f020000 + 0x3c0000
cp.b 0x80000000 0x9f020000 0x3c0000
bootm 0x9f020000

BACKUP & ART OPEN WRT Firmware:
BACKUP ART OPEN WRT
cat / dev / mtd4>/tmp/backup_art.bin
Firmware ART
tpl
For flash drives 4m:
tftpboot 0x81000000 art.bin
erase 0x9f3f0000 + 0x10000
cp.b 0x81000000 0x9f3f0000 0x10000
bootm 0x9f000000
For flash drives 8m:
tftpboot 0x81000000 art.bin
erase 0x9f7f0000 + 0x10000
cp.b 0x81000000 0x9f7f0000 0x10000
bootm 0x9f000000
For flash drives 16m:
tftpboot 0x81000000 art.bin
erase 0x9fff0000 + 0x10000
cp.b 0x81000000 0x9fff0000 0x10000
bootm 0x9f000000


backup firmware
backup firmware with your settings: cat / dev / mtd5>/tmp/backup_firmware.bin --This firmware can be flashed using the MTD method!
full backup flash:
Code:
cat / dev / mtd0>/tmp/backup_fullflash.bin
cat / dev / mtd5>>/tmp/backup_fullflash.bin
cat / dev / mtd4>>/tmp/backup_fullflash.bin
then copy the backup_fullflash.bin binary file from the / tmp directory on the router to the computer via WinSCP.

At offset 0x1FC0 is the MAC address
You can change it using any hex editor.
in the mac dump, pin: - need to be changed to your
if you edit U-boot
MAC: 0001FE00
KLASS: 0001FF00
PIN: 00020000
if you edit backup_fullflash
MAC: 0001FC00
KLASS: 0001FD00
PIN: 0001FE00
FIRWARE: 00020000



After flashing the bootloader, you must turn off the power of the router, press the buttonRESET or WPS and start the router.
The web interface is located at192.168.1.1

Add RAM up to 64mb
Compatible Chips:
Samsung - K4H511638B
Samsung - K4H511638C
Samsung - K4H511638D
Samsung - K4H511638F
Hynix - HY5DU121622CTP
Infineon - HYB25D512160CE
Micron - MT46V32M16TG
Elpida - EDD5116ADTA
Elpida - EDD5116AFTA
Nanya - NT5DS32M16BS

Chip Statistics
The list of chip series that have been tested and should fit (without suffixes) according to the Western forums for upgrading WL500P:

Samsung K4H511638D
Hynix HY5DU121622CTP
Hynix HY5DU121622CLTP
Hynix HY5DU121622DTP
Hynix HY5DU121622DLTP
Micron MT46V32M16TG
Micron MT46V32M16TGZ
Nanya NT5DS32M16BS
infineon HYB25D512160BE
Elixir N2DS51216BT-6K

List of specific chips that have been tested on the wl500g.info forum:

K4H511638D-UCCC (purchased separately (not included in the module))
Samsung K4H511638B-TCB3
Samsung K4H511638D-UCB3
Hynix HY5DU121622CTP-J
Hynix HY5DU121622CTP-D43
Hynix HY5DU121622DTP-D43
Kingston K4H511638C-UCB3
ELPIDA D5116AFTA-5B-E

The list of specific modules whose chips were tested on the wl500g.info forum:

Memory: 512Mb SO-DIMM PC2700
Module: Samsung M470L6524BT0-CB3
[Chips]: Samsung K4H511638B-TCB3

Memory: 512Mb SO-DIMM PC2700 (ROHS)
Module: Samsung M470L6524DU0-CB3
[Chips]: Samsung K4H511638D-UCB3

Memory: 256Mb DIMM
Module: Samsung M368L3324BT
[Chips]: Samsung K4H511638B-TCB3

Memory: 256Mb SO-DIMM
Module: Samsung K4H511638BT0
[Chips]: Samsung K4H511638B-TCB3

Memory: 256Mb DIMM PC2700
Module: Hynix HYMD532646CP6J-J
[Chips]: Hynix HY5DU121622CTP-J

Memory: 256Mb DIMM PC3200
Module: Hynix HYMD532646CP6J-D43
[Chips]: Hynix HY5DU121622CTP-D43

Memory: 256Mb DIMM PC3200
Module: Hynix HYMD532646CP6J-D43
[Chips]: Hynix HY5DU121622DTP-D43

Memory: 512Mb DIMM PC2700
Module: Kingston KVR333X64SC25 / 512
[Chips]: Kingston K4H511638C-UCB3

Memory: 512Mb PC2700
Module: Kingston KVR400X64SC3A / 512
[Chips]: Hynix HY5DU121622CTP-D43

Memory: 256Mb SO-DIMM PC2700 (ROHS)
Module: Transend TS32MSD64V3M
[Chips]: ELPIDA D5116AFTA-5B-E

Module: Samsung M368L3324BT without a suffix
[Chips]: Samsung K4H511638B without a suffix

Module: Samsung K4H511638B without a suffix
[Chips]: Samsung K4H511638B without a suffix

Module: Samsung M470L6524BT
[Chips]: Samsung K4H511638B without a suffix

Memory: 512Mb PC2700
Module: Kingston KVR400X64SC3A / 512
[Chips]: Nanya NT5DS32M16BS

Memory: 256Mb PC2100 # 2700 #
Module: Kingston KVR400X64SC2.5A / 256
[Chips]: infineon HYB25D512160BE
Partition Locations
FOR STABLE WIFI OPERATION -save-and fill in the native art-section (wifi calibration)

0x00000000-0x00020000: "boot"
0x00020000-0x00120000: "kernel"
0x00120000-0x003e0000: "rootfs"
0x003e0000-0x003f0000: "config"
0x003f0000-0x00400000: "art"

MAC numbers, PIN, router version.
MAC address in almost all routers starts with the address 0x1FC00 . Under the MAC address is allocated, respectively, 6 bytes.
Router version starts with the address 0x1FD00 . The entry of the 3420 router of the second revision looks like this: 3420000200000001
PIN starts with the address 0x1FE00 . The length is 8 bytes. PIN, for example, 80751205 (the one that you see on the nameplate of the router) in the firmware file will look like 3830373531323035.
for 2m flash
MAC - at position --5FF8


Calibration table of the Wi-Fi radio module (art).
Under the area of ​​the calibration table of the Wi-Fi (art) radio module in TP-LINK routers, 64kb (0x10000) of memory in the flash drive is allocated. art is always located at the end of the flash drive.
For flash drives 4m:
0x0000003f0000-0x000000400000: "art"
For flash drives 8m:
0x0000007f0000-0x000000800000: "art"
For flash drives 16m:
0x000000ff0000-0x000001000000: "art"


Programs
FULL DUMP ROUTERS
FULL DUMP
LIST of dumps

DIR-320 (A)
DWL-2100AP
ASUS RT-G32_b1_f.zip
DIR-300_b.5.dom.ru.rar
DIR-300A1FULLDUMP.rar
DIR-300B7.zip
DIR-300NRU HW B1.rar
DIR-400.rar
DIR-601vb1-dlinkfirmware.7z
DIR-615 E4 Dump Work.rar
DIR-615_AP99-AR7240-RT-091105-00.rar
DIR-615_k2_1_0_19.zip
DIR-615RevK1.rar
DIR-620_HWA1_FW1.21.rar
DIR-620D1-1.3.10full_dump.rar
DSL-2500UBRUD HW Ver. D1.rar
DSL-2540.7z 1.8
DSL-2640C2.rar 3.3
DSL-2640U_BRU_C2.7z
DSL-2650U v1.0.10_dump full.7z 6.0
DSL-2740.7z 3.7
DSL-2750U (repair flash & manual) .zip 19.3
DSL_2650NRU_v_1_0_11_17082011_fix_bad_fw_Update.zip
FAST-FW150R.rar
FAST-FW300R_20DCE6A9E4AE_98804894.7z
GETNET GR-124W.rar
MERCURY MW150Rv10.rar
MERCURY MW305R + .rar
QTECH QDSL-1040WU (analogue DSL-2750U & DSL-2650U) .7z
TD-W8951 (moded) .rar 1
TD-W8951ND_v4_QH16-104HIP_ (EN25Q16) _mac6470023ED2A9.rar
TD-W8951ND full dump_v 5.0_A0F3C1F454DA.7z
TD-W8951ND ver5.0.zip
TD-W8960N.7z 3.8
TD-W8961ND_V2_old.rar
TD-W8961ND full dump sborka v3.zip
TD-WN8901G_v3.rar
TENDA-W308R_ok.rar
TENDA-W311R_4mb_flash_ralink.rar
TENDA-W316R_original.rar
TL-MR3020.7z
TL-MR3220 v1.bin.7z
TL-MR3220 v2.0 fullflash factory.rar
TL-MR3220_v1.rar
TL-MR3220V2 Dump fullflash 3220v2.rar
TL-MR3420_v1.rar
TL-MR3420v2.zip
TL-WA500G.7z
TL-WA500G_F4-EC-38-FA-F4-87.rar
TL-WA501G.rar
TL-WA501G_00-1D-0F-D9-FE-1B.rar
TL-WA501G_00-19-E0-65-3A-B4.rar
TL-WA501G_01.rar
TL-WA601G_ver1_test2_dellconfig.zip
TL-WA701ND.7z
TL-WA701ND_74EA3AC1BF88_30718333.7z
TL-WA701ND_940C6DAC60EA_15306760.7z
TL-WA801ND_90F652642AD9_62318884.7z
TL-WA801ND_B0487ADFEF51_14264481.7z
TL-WA801ND_F4EC38B99430_22157287.7z
TL-WA801ND rabochij ver 1.2 B0-48-7A-DF-EF-51.bin.7z
TL-WA5110G_D8-5D-4C-D7-5C-A6.rar
TL-WA5110G_D8-5D-4C-D7-5C-A6.bin.7z
TL-WA5210 (new) .rar
TL-WA5210G (oreg) .rar
TL-WA7510N.bin.7z
TL-WA7510N_F8D111B165BE.7z
TL-WR340_WA500_mak D85D4CFB5112.bin.7z
TL-WR340_work_01.7z
TL-WR542.7z 1
TL-WR543_94_0C_6D_EE_12_70.7z
TL-WR702N 90-F6-52-70-6F-44.rar
TL-WR720N 64-70-02-CE-E9-34.rar
TL-WR740_hw4_2.zip
TL-WR741ND_V4.rar
TL-WR741ND_V350MHz_D85D4CD61C2C_65480403.rar
TL-WR741ND_V350MHz_orig_11605119.rar
TL-WR743v2_000000.rar
TL-WR802N.rar
TL-WR841ND_original.bin.7z
TL-WR841ND_V6_V7_54E6FCA5EEC2_35579113.rar
TL-WR841ND_V6_V7_D85D4CEDA888_99681081.rar
TL-WR841ND_V6_V7_F8D11161E6C8_15681119.rar
TL-WR841Nv9 (notest) .rar
TL-WR841Nver83.rar
TL-WR841v83.rar
TL-WR940N_1_4_fullflash.rar
TL-WR941ND_V2_00212765BE14_51967994.rar
UBNT airrouter.rar
UBNT BULLET2_00156DABE3D0.rar
UBNT BULLET2_002722166B76.rar
UBNT BULLET M2.rar
UBNT NS2_00156DAB944A_V401 (write2) .rar
UBNT NS2_00156DD2DD74.rar
UBNT NS2_Loco_00156DE4B20D.rar
UBNT NS M2.rar
UBNT NS M2 LOCO NSLm2.7z
UBNT NS M2 MX25 Nano.rar
UBNT NS M2 nanosM2.rar
UBNT NS M2 orig25x64.rar
UBNT NS M2 origin mine .rar
uboot.ar9331.7z
ZYXEL-Keenetic Lite A.1.rar
ZYXEL-KEENETIK_LITE_B_3E7C87.zip


Attached files

Attached file3420v1.backup_art.rar(521 bytes)
Attached filebackup_art_3420_V.2.2.rar(461 bytes)


Post has been editedstp101 - 26.12.18, 20:43



Rep: (24)
kapevic @ 01.02.20, 21:44*
when I downloaded and I will fill in the flash programmer, you get?

of course



Rep: (156)
Show you how to upgrade the bootloader?
There TP-LINK WDR7500 (Archer C7 v5) c OpenWRT 19.07, want to overclock to 1 GHz percent and Memory 760Mhz.

But they do not understand. Please help. Desirably very detailed step by step and soskrinshotami.



Rep: (22)
Good day.

I have the device:Tp-Link TL-WR841ND v7
CPU:AR7241

The hat found only onbreed'a , Although u-boot This support, but on the page githabe it is not.

Question: Which file to choose?
Attached Image


My answer to your question yourself: Download the second on the list with no additional. inscriptionsbreed-ar724x-r1163.bin . Works, but there is a minus - Chinese.

Post has been editedstandbay - 13.02.20, 17:01



Rep: (1)
Guys help. I need to somehow collect the firmware for the TP-Link TL-WR841N v9.2, is not found. If there is a ready give a link, or tell how to assemble. Chip W25Q128FVSG 16 mb. Dump I took off with the native 4 mb. stick.

Post has been editedGoogle_AU - 20.02.20, 22:38
Reason for editing: added



Rep: (39)
* Google_AU , Breed there for your processor breed-qca953x.bin



Rep: (16)
konstr35 @ 9.02.18, 2:41*
More please tell me is there a way to rewrite Zuhelevsky loader to another (router dir300 B1), because with him except kinetics did not put. And no, this infection does not overwrite.
I tried different ways, but to no avail. Maybe you know the working method.
Flash card programmer s29gl032n there is no such. In an Internet reading these flash drives are sewn through the DVD player, the program MtkTool, but the player is not yet found.
If I am not mistaken on this model is a chip RT3050F, if so, have a couple options.



Rep: (1)
In general, I spent 2 days and came to a standstill. = /

Perhaps I will describe what I went through, in general, I looked like a video on Youtube and there are 2 ways:
1st method was simply copying dump native flash 4MB to 16MB new.The experiment failed
2nd Method said that the need to download the firmware and collect garbage firmware under 16MB and it will work ...
Here is a video in which I have been guided.
In general, I turned my firmware to 16MB.
Result
Attached Image
Attached Image
Attached Image


But this method did not work either.The experiment failed

By the way if you let it kind of help is here to guide and build links OpenWRT:
Manual
Collector and complete the firmware.
Incidentally collector's bottom so it looks like:
Attached Image


Then I found this article and I was interested in U-Boot, he thought he would help me in this situation.
Generally I found already compiled under my router from the author of this miracle:Here.
Finally URA, he showed me the home page to the article forgot to say that before I loader desoldering and solder chip hairdryer probably 10 times back and forth.
To enter the bootloader you need to hold down the reset button (the Reset) during the ignition of lights on the router, and count all the blinking lights 3 times (3 seconds) to get to the web interface. Otherwise, it will load the basic firmware. Before that I was getting the boot loader or looped restart the router or do not like it did not react.

In the end I through U-Boot has decided to put an older version of the firmware from the siteOpenwrtold versionopenwrt-15.05.1-ar71xx-generic-tl-wr841n-v9-squashfs-factory.binAnd you know the firmware to run seemingly Hooray! it works, and displays the 12 megabytes of available and can even be used, but the Internet is not redirected to the consumers, and Wi-Fi module is not initialized and can not even be seen. For fun filled backup of my old settings (Internet still does not work and a menu of Wi-Fi there, but the unit does not work).
Thought to update the firmware, but after the upgrade, all leads to a cyclic restart. And that's all my powers;)

As a result, all the same to collect the correct firmware? If anyone knows pAmagiti))
I edited in Hex editor, firmware, visited the regions to expand manually but through FGM.
And by the way so if anyone knows exactly why we need ART? I think it is necessary for customizations but no more.

breed there for your processor breed-qca953x.bin
I tried to put it, he has started and everything seems ok, but everything is in Chinese and how to use it, I do not know.

Ps. I decided to return to their home until the stick to find a working solution as OpenWRT version higher than 18.06 produce cyclic reboot checked with 4MB and 16MB images.
Waiting for your suggestions.



Rep: (76)
Google_AU @ 24.02.20, 17:23*
Waiting for your suggestions.

Very strange place / subject you chose to build flash memory stick with a larger size.
So that the proposal - to move this issue to the topic of openwrt - where the issue has been debated.
Here's the latestexample
Well, or in the subject of your router - there is a chance that someone has already collected for yourself and to share.

And once again: from LOADER NOT DEPEND see whether the firmware all memory !!!



Rep: (1)
123serge123 @ 25.02.20, 09:54*
Very strange place / subject you chose to build flash memory stick with a larger size.
So that the proposal - to move this issue to the topic of openwrt - where the issue has been debated.
Here's the latest example of
Well, or in the subject of your router - there is a chance that someone has already collected for yourself and to share.

And once again: from LOADER NOT DEPEND see whether the firmware all memory !!!


Thanks for the information.



Rep: (3)
Is there Breed loader not only in Chinese but also in English? How can I translate?



Rep: (1)
Hello, someone can be if you need to be custom U-Boot generated under 16 megabytes and a modified firmware for TL-WR841N V9.2 version (16 Megabytes) + ART separate file.
You will find everything hereMaybe someone can help =)
Here is an example of work
openwrt-19.07.1-ar71xx-tiny-tl-wr841-v9-squashfs-factory.bin
Attached Image
Attached Image


Just like there is always a catch, is now explain each of the + firmware is tuned for 16 MB of flash memory:
1) openwrt-19.07.1-ath79-tiny-tplink_tl-wr841-v9-squashfs-factory.bin - Works only visible with64 MB of RAMWhen change my unsubscribe) + it integrated web interface Luci.
2) openwrt-19.07.1-ar71xx-tiny-tl-wr841-v9-squashfs-factory.bin - Works perfectly with32 MB of RAMAnd all Good =) + it integrated web interface Luci.
3) openwrt-19.07.0-ar71xx-tiny-tl-wr841-v9-squashfs-factory.bin - Works all, minus the fact that itLuci no web interface.
4) openwrt-18.06.2-ar71xx-tiny-tl-wr841-v9-squashfs-factory.bin - Everything works, is alsoLuci no web interface(Sorry but I was too lazy to rebuild under the old version, if suddenly someone need it please contact us).

Hyde how to run the U-Boot, I have described here.

Well that's all, Dobby is free;)
As updates OpenWRT, will be poured into your website updated firmware along with a Web Luci interface for this system, and perhaps even in a short time will make the firmware for TL-WR741ND V2 (16 MB), as the patient lies and waits for the stick of Alika).



Rep: (3)
Thank found!

Post has been editedikar225 - 04.03.20, 21:51



Rep: (3)
Good day. Please help me. I have a device UR-321BN ARCTIC WHITE stitched in Padavan for ASUS RT-N14U (base). This device is identical in hardware stuffing ASUS. The site has a Breed loader for RT-N14U. In this regard, help to flash the bootloader on Upvel UR-321BN ARCTIC WHITE. I started reading about it and quite confused. Which teams perform any firmware must stand on the device. Thank you in advance.



Rep: (39)
* Alex_Krycek , Xiaomi Mi Router 3G - discussion (Post svida # 65262189) Padawan loader stitched

Post has been editedabarius - 18.03.20, 08:43



Rep: (0)
Help with router TP 842ND V2. I poured into it through programmer uboot Atheros AR9341 with caps, introduced a poppy address, but does not include wifi router and display ports reversed. Maybe there is someone there fulldamp poke or touch up areas where hex editor. Forum on intelligent not to submit to download, there is no possibility kachyat.



Rep: (39)
* llirika , It was possible to search for in the subject line of your router to search.
TP-LINK TL-WR842ND - Discussion (Post melsem # 80455335)



Rep: (0)
Thank you, good man for the link. All checked - fuldamp working in the web face comes. Like hats and the archives of the dump is not present - to throw. Thank you again this forum and its members, all successful repairs and firmware.



Rep: (30)
I am looking for a breed web tp-link wr 941nd v3, if there is one link give



Rep: (0)
* kestua Bro tell the pancreas as a request for re stokuvuyu firmware TL-WA5210G



Rep: (0)
All I reviewed but can not find on the tp-link archer mr200 v1 bootloader firmware all thanks in advance !!!


Full version    

Help     rules

Time is now: 24/08/20, 23:44