|
本帖最后由 dsanke 于 2019-7-28 13:23 编辑
跟论坛其他拆解一模一样,USB部分全缺,不好补,RAM也不好换。
刷旧版CFE后,再在CFE里刷固件,直接砖
直接刷16M和8M的华硕都不能开机(补充,4089版本能开机,能看到WIFI,能PING通,WEB管理界面打不开,TTL进去看mtdblock2的CPU占用特别高。5xxxx的版本刷进去直接不启动,TTL进去看走完CFE就没了,像是直接启动不了。)看了华硕源码,博通的RAM是自适应的,不知道怎么回事。
直接刷基于原版的固件都没问题 例如美版官改等
CFE是192.168.0.1,按reset大概23秒能进,按大概18秒的时候192.168.1.1能进CFE,很快就消失(这里TTL看是3秒wait)
CFE内的部分参数与旧版CFE不一致,贴出来这部分不同的,看起来像发射功率调低了,RAM大小不一样,其他看不懂:
旧版CFE:
- 0:cck2gpo=0x0
- 0:extpagain2g=0x3
- 0:maxp2ga0=0x70
- 0:maxp2ga1=0x70
- 0:mcs2gpo0=0x4433
- 0:mcs2gpo1=0x8866
- 0:mcs2gpo2=0x4433
- 0:mcs2gpo3=0x8866
- 0:mcs2gpo4=0x4433
- 0:mcs2gpo5=0xaa88
- 0:mcs2gpo6=0x4433
- 0:mcs2gpo7=0xaa88
- 0:ofdm2gpo=0x88664433
- 0:pa2gw0a0=0xfe67
- 0:pa2gw0a1=0xfe7d
- 0:pa2gw1a0=0x1cbd
- 0:pa2gw1a1=0x1dc2
- 0:pa2gw2a0=0xf903
- 0:pa2gw2a1=0xf8f1
- 0:triso2g=0x5
- boardflags3=0x40000183
- clkfreq=900,533
- sb/1/boardflags3=0x40000183
- sb/1/epagain5g=3
- sb/1/maxp5ga0=0x6a,0x6a,0x6a,0x6a
- sb/1/maxp5ga1=0x6a,0x6a,0x6a,0x6a
- sb/1/mcsbw205ghpo=0x99873322
- sb/1/mcsbw205glpo=0x99873322
- sb/1/mcsbw205gmpo=0x99873322
- sb/1/mcsbw405ghpo=0x99873322
- sb/1/mcsbw405glpo=0x99873322
- sb/1/mcsbw405gmpo=0x99873322
- sb/1/mcsbw805ghpo=0x99873322
- sb/1/mcsbw805glpo=0x99873322
- sb/1/mcsbw805gmpo=0x99873322
- sb/1/pa5ga0=0xff1b,0x1c05,0xfc94,0xff28,0x1d82,0xfc7c,0xff1f,0x1d06,0xfc7c,0xff21,0x1ce0,0xfc81
- sb/1/pa5ga1=0xff1f,0x1cb2,0xfc83,0xff2e,0x1dbc,0xfc7f,0xff21,0x1c78,0xfc8b,0xff1d,0x1bf1,0xfc91
- sb/1/pa5gbw4080a0=0xff32,0x1d41,0xfc96,0xff2d,0x1ccf,0xfc9c,0xff27,0x1cd3,0xfc90,0xff30,0x1d1f,0xfc95
- sb/1/pa5gbw4080a1=0xff26,0x1c46,0xfc9f,0xff18,0x1a78,0xfcc0,0xff15,0x19f0,0xfccb,0xff32,0x1d8c,0xfc84
- sb/1/rxgains5gelnagaina0=5
- sb/1/rxgains5gelnagaina1=5
- sb/1/rxgains5ghelnagaina0=5
- sb/1/rxgains5ghelnagaina1=5
- sb/1/rxgains5ghtrisoa0=10
- sb/1/rxgains5ghtrisoa1=10
- sb/1/rxgains5gmelnagaina0=5
- sb/1/rxgains5gmelnagaina1=5
- sb/1/rxgains5gmtrisoa0=10
- sb/1/rxgains5gmtrisoa1=10
- sb/1/rxgains5gtrisoa0=10
- sb/1/rxgains5gtrisoa1=10
- sb/1/swctrlmap_5g=0x909,0x02020000,0x03030000,0x0,0x3ff
- sdram_config=0x01c7
- wait_time=10
复制代码
电信版CFE:
- 0:cck2gpo=0x2222
- 0:extpagain2g=0x0
- 0:maxp2ga0=0x64
- 0:maxp2ga1=0x64
- 0:mcs2gpo0=0x3333
- 0:mcs2gpo1=0xbb88
- 0:mcs2gpo2=0x3333
- 0:mcs2gpo3=0xbb88
- 0:mcs2gpo4=0x3333
- 0:mcs2gpo5=0xbb88
- 0:mcs2gpo6=0x3333
- 0:mcs2gpo7=0xbb88
- 0:ofdm2gpo=0xbb883333
- 0:pa2gw0a0=0xfe70
- 0:pa2gw0a1=0xfe65
- 0:pa2gw1a0=0x19D6
- 0:pa2gw1a1=0x1a48
- 0:pa2gw2a0=0xf997
- 0:pa2gw2a1=0xf97d
- 0:triso2g=4
- boardflags3=0x40000182
- clkfreq=900,392
- sb/1/boardflags3=0x40000182
- sb/1/epagain5g=0
- sb/1/maxp5ga0=0x60,0x60,0x60,0x60
- sb/1/maxp5ga1=0x60,0x60,0x60,0x60
- sb/1/mcsbw205ghpo=0x99882200
- sb/1/mcsbw205glpo=0x99882200
- sb/1/mcsbw205gmpo=0x99882200
- sb/1/mcsbw405ghpo=0x99882200
- sb/1/mcsbw405glpo=0x99882200
- sb/1/mcsbw405gmpo=0x99882200
- sb/1/mcsbw805ghpo=0x99882200
- sb/1/mcsbw805glpo=0x99882200
- sb/1/mcsbw805gmpo=0x99882200
- sb/1/pa5ga0=0xff24,0x1C3A,0xfc7F,0xff29,0x1CB2,0xfc76,0xff21,0x1B87,0xfc93,0xff24,0x1C92,0xfc74
- sb/1/pa5ga1=0xff33,0x1D0a,0xfc77,0xff29,0x1C7F,0xfc78,0xff25,0x1BC5,0xfc8E,0xff27,0x1C58,0xfc7F
- sb/1/pa5gbw4080a0=0xff23,0x1C97,0xfc77,0xff2B,0x1CF6,0xfc76,0xff29,0x1D0E,0xfc6F,0xff27,0x1D31,0xfc68
- sb/1/pa5gbw4080a1=0xff2B,0x1CBF,0xfc7B,0xff2A,0x1C88,0xfc82,0xff27,0x1C59,0xfc84,0xff2A,0x1D53,0xfc68
- sb/1/rxgains5gelnagaina0=3
- sb/1/rxgains5gelnagaina1=3
- sb/1/rxgains5ghelnagaina0=3
- sb/1/rxgains5ghelnagaina1=3
- sb/1/rxgains5ghtrisoa0=5
- sb/1/rxgains5ghtrisoa1=5
- sb/1/rxgains5gmelnagaina0=3
- sb/1/rxgains5gmelnagaina1=3
- sb/1/rxgains5gmtrisoa0=5
- sb/1/rxgains5gmtrisoa1=5
- sb/1/rxgains5gtrisoa0=5
- sb/1/rxgains5gtrisoa1=5
- sb/1/swctrlmap_5g=0x00000101,0x06060000,0x02020000,0x000000,0x3ff
- sdram_config=0x0187
- wait_time=3
复制代码
继续研究,待更新 |
|