[求助]有大佬帮我拼凑一个TP WAR 1200L的编程器固件吗？
本帖最后由 fsyzty 于 2023-11-11 11:18 编辑手头有一个Ver4.0的WAR 1200L的路由器，内网MAC：54-A7-03-8E-F6-4C 能启动到LED灯闪烁，4个LAN口能用， WAN和无线无法使用。也进不到管理WEB界面。固件已经使用编程器备份下来了。
串口看到的部分log：
........
[ 0.510000] m25p80 spi0.0: found w25q128, expected m25p80
[ 0.520000] m25p80 spi0.0: w25q128 (16384 Kbytes)
[ 0.520000] Searching for RedBoot partition table
[ 0.530000] 11 RedBoot partitions found on MTD device spi0.0
[ 0.530000] Creating 11 MTD partitions on "spi0.0":
[ 0.540000] 0x000000000000-0x000000030000 : "factory_boot"
[ 0.550000] 0x000000030000-0x000000038000 : "factory_info"
[ 0.550000] 0x000000038000-0x000000040000 : "art"
[ 0.560000] 0x000000040000-0x000000060000 : "config"
[ 0.570000] 0x000000060000-0x0000001e0000 : "no_uc_config"
[ 0.570000] 0x0000001e0000-0x000000210000 : "normal_boot"
[ 0.580000] 0x000000210000-0x000000360000 : "kernel"
[ 0.590000] 0x000000360000-0x000000f80000 : "rootfs"
[ 0.590000] mtd: partition "rootfs" set to be root filesystem
[ 0.600000] 0x000000f80000-0x000001000000 : "rootfs_data"
[ 0.600000] 0x000000210000-0x000001000000 : "firmware"
[ 0.610000] 0x000000000000-0x000001000000 : "flash"
........
[ 2.980000] JFFS2 notice: (439) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 3.910000] Don't opt read len.0X4->0X4200 (magic 0XAB01CD23)
config_read
- init -
Please press Enter to activate this console. Wed Dec 11 09:44:58 UTC 2019
[ 6.530000] SQUASHFS error: xz_dec_run error, data probably corrupt
[ 6.540000] SQUASHFS error: squashfs_read_data failed to read block 0xa0e24a
[ 6.540000] SQUASHFS error: Unable to read fragment cache entry
[ 6.550000] SQUASHFS error: Unable to read page, block a0e24a, size 13f14
[ 6.560000] SQUASHFS error: Unable to read fragment cache entry
[ 6.560000] SQUASHFS error: Unable to read page, block a0e24a, size 13f14
[ 6.570000] SQUASHFS error: Unable to read fragment cache entry
[ 6.580000] SQUASHFS error: Unable to read page, block a0e24a, size 13f14
[ 6.580000] SQUASHFS error: Unable to read fragment cache entry
[ 6.590000] SQUASHFS error: Unable to read page, block a0e24a, size 13f14
[ 6.600000] SQUASHFS error: Unable to read fragment cache entry
[ 6.610000] SQUASHFS error: Unable to read page, block a0e24a, size 13f14
/usr/bin/lua: '/usr/lib/lua/uci.so' is not an ELF file
/usr/bin/lua: error loading module 'uci' from file '/usr/lib/lua/uci.so':
File not found
stack traceback:
: ?
: in function 'require'
/usr/lib/lua/luci/model/uci.lua:1: in main chunk
: in function 'require'
/sbin/is_cal:46: in function 'getProductInfo'
/sbin/is_cal:53: in main chunk
: ?
[ 7.250000] liblogger: module license 'unspecified' taints kernel.
[ 7.250000] Disabling lock debugging due to kernel taint
[ 8.010000] alg: No test for stdrng (krng)
[ 8.360000] ag71xx_mdio: probed
尝试刷入V3.0和V4.1（其实软件版本还是4.0）的编程固件，能正常启动和进入WEB界面，但是由于加密的原因，只有最右一个LAN口可以使用。
V3.0的部分启动log
........
[ 0.500000] m25p80 spi0.0: found w25q128, expected m25p80
[ 0.510000] m25p80 spi0.0: w25q128 (16384 Kbytes)
[ 0.510000] @@-----debug wvr1300g--tplink flash parse--------
[ 0.520000] 10 tp-link partitions found on MTD device spi0.0
[ 0.530000] Creating 10 MTD partitions on "spi0.0":
[ 0.530000] 0x000000000000-0x000000030000 : "factoryBoot"
[ 0.540000] 0x000000030000-0x000000038000 : "factoryInfo"
[ 0.540000] 0x000000038000-0x000000040000 : "art"
[ 0.550000] 0x000000040000-0x000000070000 : "bootloader"
[ 0.560000] 0x000000070000-0x000000070600 : "tpHead"
[ 0.560000] 0x000000070600-0x0000001c0000 : "kernel"
[ 0.570000] mtd: partition "kernel" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[ 0.580000] 0x0000001c0000-0x000000d60000 : "rootfs"
[ 0.590000] mtd: partition "rootfs" set to be root filesystem
[ 0.590000] 0x000000d60000-0x000000f60000 : "rootfs_data"
[ 0.600000] 0x000000f60000-0x000000f80000 : "log"
[ 0.610000] 0x000000000000-0x000001000000 : "firmware"
[ 0.610000] Mirror/redirect action on
[ 0.620000] nf_conntrack version 0.5.0 (1973 buckets, 7892 max)
[ 0.620000] ip_tables: (C) 2000-2006 Netfilter Core Team
........
V4.1（其实软件版本还是4.0）部分启动log：
........
[ 0.520000] m25p80 spi0.0: found w25q128, expected m25p80
[ 0.530000] m25p80 spi0.0: w25q128 (16384 Kbytes)
[ 0.530000] Searching for RedBoot partition table
[ 0.540000] 11 RedBoot partitions found on MTD device spi0.0
[ 0.540000] Creating 11 MTD partitions on "spi0.0":
[ 0.550000] 0x000000000000-0x000000030000 : "factory_boot"
[ 0.550000] 0x000000030000-0x000000038000 : "factory_info"
[ 0.560000] 0x000000038000-0x000000040000 : "art"
[ 0.570000] 0x000000040000-0x000000060000 : "config"
[ 0.570000] 0x000000060000-0x0000001e0000 : "no_uc_config"
[ 0.580000] 0x0000001e0000-0x000000210000 : "normal_boot"
[ 0.590000] 0x000000210000-0x000000360000 : "kernel"
[ 0.590000] 0x000000360000-0x000000fd0000 : "rootfs"
[ 0.600000] mtd: partition "rootfs" set to be root filesystem
[ 0.600000] 0x000000fd0000-0x000001000000 : "rootfs_data"
[ 0.610000] 0x000000210000-0x000001000000 : "firmware"
[ 0.620000] 0x000000000000-0x000001000000 : "flash"
........
请问[ 0.610000] 0x000000210000-0x000001000000 : "firmware"这个地址就是固件的偏移地址吗？
我需要把V4.1的哪几个分区拷贝到我坏的4.0分区就可以正常了呢？
或者哪位大佬能否帮我把V4.1的固件和我原来的固件拼凑出一个正常的固件？
3个编程器固件在：
链接: https://pan.baidu.com/s/154XRtfEoalYyIEZTfTe0rw?pwd=2ewa 提取码: 2ewa 复制这段内容后打开百度网盘手机App，操作更方便哦
非常感谢！
另外请问：串口里面Ctrl+B每次时间都按不对，有什么诀窍吗？
把V4.1 的0x000000210000-0x000001000000 用winhex拷贝到V4.0对应区域。正常启动了，WIFI，LAN跟管理后台都正常，暂时不知有什么问题。
发现加密与芯片也有关系，换一个w25Q128，写入同样的内容，只有最右边LAN可以用，MAC地址等都是正常的。
页:
[1]