[求助]有大佬帮我拼凑一个TP WAR 1200L的编程器固件吗？

fsy***

手头有一个Ver4.0的WAR 1200L的路由器，内网MAC：54-A7-03-8E-F6-4C 能启动到LED灯闪烁，4个LAN口能用， WAN和无线无法使用。也进不到管理WEB界面。固件已经使用编程器备份下来了。
串口看到的部分log：
........

[    0.510000] m25p80 spi0.0: found w25q128, expected m25p80
[    0.520000] m25p80 spi0.0: w25q128 (16384 Kbytes)
[    0.520000] Searching for RedBoot partition table
[    0.530000] 11 RedBoot partitions found on MTD device spi0.0
[    0.530000] Creating 11 MTD partitions on "spi0.0":
[    0.540000] 0x000000000000-0x000000030000 : "factory_boot"
[    0.550000] 0x000000030000-0x000000038000 : "factory_info"
[    0.550000] 0x000000038000-0x000000040000 : "art"
[    0.560000] 0x000000040000-0x000000060000 : "config"
[    0.570000] 0x000000060000-0x0000001e0000 : "no_uc_config"
[    0.570000] 0x0000001e0000-0x000000210000 : "normal_boot"
[    0.580000] 0x000000210000-0x000000360000 : "kernel"
[    0.590000] 0x000000360000-0x000000f80000 : "rootfs"
[    0.590000] mtd: partition "rootfs" set to be root filesystem
[    0.600000] 0x000000f80000-0x000001000000 : "rootfs_data"
[    0.600000] 0x000000210000-0x000001000000 : "firmware"
[    0.610000] 0x000000000000-0x000001000000 : "flash"
........

[    2.980000] JFFS2 notice: (439) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[    3.910000] Don't opt read len.0X4->0X4200 (magic 0XAB01CD23)
config_read
- init -

Please press Enter to activate this console. Wed Dec 11 09:44:58 UTC 2019
[    6.530000] SQUASHFS error: xz_dec_run error, data probably corrupt
[    6.540000] SQUASHFS error: squashfs_read_data failed to read block 0xa0e24a
[    6.540000] SQUASHFS error: Unable to read fragment cache entry [a0e24a]
[    6.550000] SQUASHFS error: Unable to read page, block a0e24a, size 13f14
[    6.560000] SQUASHFS error: Unable to read fragment cache entry [a0e24a]
[    6.560000] SQUASHFS error: Unable to read page, block a0e24a, size 13f14
[    6.570000] SQUASHFS error: Unable to read fragment cache entry [a0e24a]
[    6.580000] SQUASHFS error: Unable to read page, block a0e24a, size 13f14
[    6.580000] SQUASHFS error: Unable to read fragment cache entry [a0e24a]
[    6.590000] SQUASHFS error: Unable to read page, block a0e24a, size 13f14
[    6.600000] SQUASHFS error: Unable to read fragment cache entry [a0e24a]
[    6.610000] SQUASHFS error: Unable to read page, block a0e24a, size 13f14
/usr/bin/lua: '/usr/lib/lua/uci.so' is not an ELF file
/usr/bin/lua: error loading module 'uci' from file '/usr/lib/lua/uci.so':
        File not found
stack traceback:
        [C]: ?
        [C]: in function 'require'
        /usr/lib/lua/luci/model/uci.lua:1: in main chunk
        [C]: in function 'require'
        /sbin/is_cal:46: in function 'getProductInfo'
        /sbin/is_cal:53: in main chunk
        [C]: ?
[    7.250000] liblogger: module license 'unspecified' taints kernel.
[    7.250000] Disabling lock debugging due to kernel taint
[    8.010000] alg: No test for stdrng (krng)
[    8.360000] ag71xx_mdio: probed





尝试刷入V3.0和V4.1（其实软件版本还是4.0）的编程固件，能正常启动和进入WEB界面，但是由于加密的原因，只有最右一个LAN口可以使用。
V3.0的部分启动log
........

[    0.500000] m25p80 spi0.0: found w25q128, expected m25p80
[    0.510000] m25p80 spi0.0: w25q128 (16384 Kbytes)
[    0.510000] @@-----debug wvr1300g--tplink flash parse--------
[    0.520000] 10 tp-link partitions found on MTD device spi0.0
[    0.530000] Creating 10 MTD partitions on "spi0.0":
[    0.530000] 0x000000000000-0x000000030000 : "factoryBoot"
[    0.540000] 0x000000030000-0x000000038000 : "factoryInfo"
[    0.540000] 0x000000038000-0x000000040000 : "art"
[    0.550000] 0x000000040000-0x000000070000 : "bootloader"
[    0.560000] 0x000000070000-0x000000070600 : "tpHead"
[    0.560000] 0x000000070600-0x0000001c0000 : "kernel"
[    0.570000] mtd: partition "kernel" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[    0.580000] 0x0000001c0000-0x000000d60000 : "rootfs"
[    0.590000] mtd: partition "rootfs" set to be root filesystem
[    0.590000] 0x000000d60000-0x000000f60000 : "rootfs_data"
[    0.600000] 0x000000f60000-0x000000f80000 : "log"
[    0.610000] 0x000000000000-0x000001000000 : "firmware"
[    0.610000] Mirror/redirect action on
[    0.620000] nf_conntrack version 0.5.0 (1973 buckets, 7892 max)
[    0.620000] ip_tables: (C) 2000-2006 Netfilter Core Team

........
V4.1（其实软件版本还是4.0）部分启动log：

........

[    0.520000] m25p80 spi0.0: found w25q128, expected m25p80
[    0.530000] m25p80 spi0.0: w25q128 (16384 Kbytes)
[    0.530000] Searching for RedBoot partition table
[    0.540000] 11 RedBoot partitions found on MTD device spi0.0
[    0.540000] Creating 11 MTD partitions on "spi0.0":
[    0.550000] 0x000000000000-0x000000030000 : "factory_boot"
[    0.550000] 0x000000030000-0x000000038000 : "factory_info"
[    0.560000] 0x000000038000-0x000000040000 : "art"
[    0.570000] 0x000000040000-0x000000060000 : "config"
[    0.570000] 0x000000060000-0x0000001e0000 : "no_uc_config"
[    0.580000] 0x0000001e0000-0x000000210000 : "normal_boot"
[    0.590000] 0x000000210000-0x000000360000 : "kernel"
[    0.590000] 0x000000360000-0x000000fd0000 : "rootfs"
[    0.600000] mtd: partition "rootfs" set to be root filesystem
[    0.600000] 0x000000fd0000-0x000001000000 : "rootfs_data"
[    0.610000] 0x000000210000-0x000001000000 : "firmware"
[    0.620000] 0x000000000000-0x000001000000 : "flash"


........

请问[    0.610000] 0x000000210000-0x000001000000 : "firmware"  这个地址就是固件的偏移地址吗？

我需要把V4.1的哪几个分区拷贝到我坏的4.0分区就可以正常了呢？
或者哪位大佬能否帮我把V4.1的固件和我原来的固件拼凑出一个正常的固件？

3个编程器固件在：
链接: https://pan.baidu.com/s/154XRtfEoalYyIEZTfTe0rw?pwd=2ewa 提取码: 2ewa 复制这段内容后打开百度网盘手机App，操作更方便哦

非常感谢！


另外请问：串口里面Ctrl+B每次时间都按不对，有什么诀窍吗？

fsy***

把V4.1 的0x000000210000-0x000001000000 用winhex拷贝到V4.0对应区域。正常启动了，WIFI，LAN跟管理后台都正常，暂时不知有什么问题。
发现加密与芯片也有关系，换一个w25Q128，写入同样的内容，只有最右边LAN可以用，MAC地址等都是正常的。