数码之家

 找回密码
 立即注册

QQ登录

只需一步,快速开始

微信登录

微信扫一扫,快速登录

搜索
查看: 9865|回复: 36

再拆小博WE10C无线路由器,探索刷第三方固件

[复制链接]
发表于 2019-11-24 16:01:51 | 显示全部楼层 |阅读模式
小博已经名存实亡,最后的金币没达到220的也不能提现,只能换高价垃圾货了,再加上原来吸粉留下来的一些设备,不少人都想刷第三方固件发挥余热。说真的如果不吸粉真没人用小博的固件,流控几乎没有,功能也特简单可说没什么功能吧。今天周末有空再拆一台WE10C,仔细了解内部结构后才能探索刷第三方固件的。

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有账号?立即注册 微信登录

x

打赏

参与人数 23家元 +465 收起 理由
人艰不拆了 + 20
10655188 + 20 謝謝分享
moontree + 20 謝謝分享
超级女生 + 20 謝謝分享
阳光使者 + 20 我一直用原厂的或者运营商送的。.

查看全部打赏

发表于 2021-9-24 23:39:12 | 显示全部楼层
要编程器啊,没啥用
回复 支持 反对

使用道具 举报

发表于 2021-9-16 11:47:35 | 显示全部楼层
hfsp 发表于 2020-2-26 09:31
已经刷好爱快了,谢谢!最终只好拆闪存用编程器刷的。

你好,可以分享下吗?
回复 支持 反对

使用道具 举报

发表于 2021-6-15 18:00:49 | 显示全部楼层
找到可以刷的固件了吗?
回复 支持 反对

使用道具 举报

发表于 2020-7-14 18:38:38 | 显示全部楼层
我也有一台 可以分享一下固件吗 刷刷玩
回复 支持 反对

使用道具 举报

 楼主| 发表于 2020-2-26 09:31:16 | 显示全部楼层
hepcboy 发表于 2020-2-26 08:22
应该是可以的,我集客AP的固件也刷过

已经刷好爱快了,谢谢!最终只好拆闪存用编程器刷的。
回复 支持 反对

使用道具 举报

发表于 2020-2-26 08:22:26 | 显示全部楼层
hfsp 发表于 2020-2-23 16:35
这个能像乐视一样改为爱快H3吗?

应该是可以的,我集客AP的固件也刷过
回复 支持 反对

使用道具 举报

 楼主| 发表于 2020-2-23 16:35:06 | 显示全部楼层
hepcboy 发表于 2020-2-23 12:20
这个就是联通沃路由的板子,与乐视的路由GPIO一样.可以用同一个BREED,ART,固件可以用OPENWRT的,科*上网什么 ...

这个能像乐视一样改为爱快H3吗?
回复 支持 反对

使用道具 举报

发表于 2020-2-23 12:20:11 | 显示全部楼层
这个就是联通沃路由的板子,与乐视的路由GPIO一样.可以用同一个BREED,ART,固件可以用OPENWRT的,科*上网什么都行,不过就是无线不太好,只能跑144M
回复 支持 反对

使用道具 举报

 楼主| 发表于 2020-2-22 15:29:36 | 显示全部楼层
正常启动时的TTL输出如下:

U-Boot 1.1.4 (Feb  1 2016 - 18:23:05)

ap143 - Honey Bee 2.0DRAM:  
sri
Honey Bee 2.0
ath_ddr_initial_config(195): (16bit) ddr2 init
tap = 0x00000003
Tap (low, high) = (0x9, 0x36)
Tap values = (0x1f, 0x1f, 0x1f, 0x1f)
128 MB
Top of RAM usable for U-Boot at: 88000000
Reserving 216k for U-Boot at: 87fc8000
Reserving 192k for malloc() at: 87f98000
Reserving 44 Bytes for Board Info at: 87f97fd4
Reserving 36 Bytes for Global Data at: 87f97fb0
Reserving 128k for boot params() at: 87f77fb0
Stack Pointer at: 87f77f98
Now running in RAM - U-Boot at: 87fc8000
Flash Manuf Id 0xc2, DeviceId0 0x20, DeviceId1 0x18
flash size 16MB, sector count = 256
Flash: 16 MB
*** Warning - bad CRC, using default environment

*** Warning *** : PCIe WLAN Module not found !!!
In:    serial
Out:   serial
Err:   serial
Net:   ath_gmac_enet_initialize...
No valid address in Flash. Using fixed address
No valid address in Flash. Using fixed address
ath_gmac_enet_initialize: reset mask:c02200
Scorpion ---->S27 PHY*
S27 reg init
: cfg1 0x800c0000 cfg2 0x7114
eth0: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
eth0 up
Honey Bee ---->  MAC 1 S27 PHY *
S27 reg init
ATHRS27: resetting s27
ATHRS27: s27 reset done
: cfg1 0x800c0000 cfg2 0x7214
eth1: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :10
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10
eth1 up
eth0, eth1
Setting 0x181162c0 to 0x2041a100
Hit any key to stop autoboot:  0
continue
## Booting image at 9fe80000 ...
continue
   Image Name:   
                 :ppleOS
   Created:      2019-04-18   7:12:37 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    935953 Bytes = 914 kB
   Load Address: 80060000
   Entry Point:  80060000
   Verifying Checksum at 0x9fe80040 ...OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80060000) ...
## Giving linux memsize in bytes, 134217728

Starting kernel ...

[    0.000000] Linux version 3.3.8 (jenkins@mesos-jenkins-c5467957-docker-ripple-os) (gcc version 4.6.3 20120201 (prerelease) (Linaro GCC 4.6-2012.02) ) #1 Thu Apr 18 15:12:14 CST 2019
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU revision is: 00019374 (MIPS 24Kc)
[    0.000000] SoC: Qualcomm Atheros QCA9531 rev 2
[    0.000000] Clocks: CPU:550.000MHz, DDR:400.000MHz, AHB:200.000MHz, Ref:25.000MHz
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone PFN ranges:
[    0.000000]   Normal   0x00000000 -> 0x00008000
[    0.000000] Movable zone start PFN for each node
[    0.000000] Early memory PFN ranges
[    0.000000]     0: 0x00000000 -> 0x00008000
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line:  board=XIAOBO-WE10C console=ttyS0,115200 mtdparts=spi0.0:256k(u-boot)ro,64k(u-boot-env),14528k(rootfs),1472k(kernel),64k(art)ro,16000k@0x50000(firmware) rootfstype=squashfs,jffs2 noinitrd
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[    0.000000] Writing ErrCtl register=00000000
[    0.000000] Readback ErrCtl register=00000000
[    0.000000] Memory: 126484k/131072k available (2155k kernel code, 4588k reserved, 407k data, 200k init, 0k highmem)
[    0.000000] SLUB: Genslabs=9, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS:83
[    0.000000] Calibrating delay loop... 366.18 BogoMIPS (lpj=1830912)
[    0.060000] pid_max: default: 32768 minimum: 301
[    0.060000] Mount-cache hash table entries: 512
[    0.070000] NET: Registered protocol family 16
[    0.070000] gpiochip_add: registered GPIOs 0 to 17 on device: ath79
[    0.080000] MIPS: machine is XiaoBo WE10C
[    0.080000] ar71xx: invalid MDIO id 1
[    0.490000] bio: create slab <bio-0> at 0
[    0.500000] Switching to clocksource MIPS
[    0.510000] NET: Registered protocol family 2
[    0.510000] IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.510000] TCP established hash table entries: 4096 (order: 3, 32768 bytes)
[    0.520000] TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
[    0.520000] TCP: Hash tables configured (established 4096 bind 4096)
[    0.530000] TCP reno registered
[    0.530000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.540000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.540000] NET: Registered protocol family 1
[    0.570000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.570000] JFFS2 version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.580000] msgmni has been set to 247
[    0.590000] io scheduler noop registered
[    0.590000] io scheduler deadline registered (default)
[    0.600000] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
[    0.620000] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11) is a 16550A
[    0.630000] console [ttyS0] enabled, bootconsole disabled
[    0.630000] console [ttyS0] enabled, bootconsole disabled
[    0.640000] m25p80 spi0.0: found mx25l12805d, expected m25p80
[    0.650000] m25p80 spi0.0: [0xc22018] not support read UNIQUE ID!
[    0.660000] m25p80 spi0.0: mx25l12805d (16384 Kbytes)
[    0.660000] 6 cmdlinepart partitions found on MTD device spi0.0
[    0.670000] Creating 6 MTD partitions on "spi0.0":
[    0.670000] 0x000000000000-0x000000040000 : "u-boot"
[    0.680000] 0x000000040000-0x000000050000 : "u-boot-env"
[    0.690000] 0x000000050000-0x000000e80000 : "rootfs"
[    0.690000] mtd: partition "rootfs" set to be root filesystem
[    0.700000] mtd: partition "rootfs_data" created automatically, ofs=490000, len=9F0000
[    0.710000] 0x000000490000-0x000000e80000 : "rootfs_data"
[    0.720000] 0x000000e80000-0x000000ff0000 : "kernel"
[    0.720000] 0x000000ff0000-0x000001000000 : "art"
[    0.730000] 0x000000050000-0x000000ff0000 : "firmware"
[    0.760000] ag71xx_mdio: probed
[    0.760000] eth0: Atheros AG71xx at 0xba000000, irq 5
[    1.320000] eth0: Found an AR934X built-in switch
[    2.360000] eth1: Atheros AG71xx at 0xb9000000, irq 4
[    2.920000] ag71xx ag71xx.0: eth1: connected to PHY at ag71xx-mdio.1:04 [uid=004dd042, driver=Generic PHY]
[    2.930000] nf_conntrack version 0.5.0 (1976 buckets, 7904 max)
[    2.930000] TCP cubic registered
[    2.940000] NET: Registered protocol family 17
[    2.940000] 8021q: 802.1Q VLAN Support v1.8
[    2.950000] VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
[    2.960000] Freeing unused kernel memory: 200k freed
- preinit -
- regular preinit -
[    6.530000] JFFS2 notice: (395) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 2 orphan) and 48 of xref (0 dead, 36 orphan) found.
switching to jffs2
- init -
[    8.230000] Loading modules backported from Linux version master-2014-05-22-0-gf2032ea
[    8.240000] Backport generated by backports.git backports-20140320-37-g5c33da0
[    8.390000] cfg80211: Calling CRDA to update world regulatory domain
[    8.400000] cfg80211: World regulatory domain updated:
[    8.400000] cfg80211:  DFS Master region: unset
[    8.410000] cfg80211:   (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time)
[    8.420000] cfg80211:   (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A)
[    8.430000] cfg80211:   (2457000 KHz - 2482000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A)
[    8.440000] cfg80211:   (2474000 KHz - 2494000 KHz @ 20000 KHz), (N/A, 2000 mBm), (N/A)
[    8.440000] cfg80211:   (5170000 KHz - 5250000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
[    8.450000] cfg80211:   (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
[    8.460000] cfg80211:   (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm), (N/A)
[    9.310000] ieee80211 phy0: Atheros AR9531 Rev:2 mem=0xb8100000, irq=47
[    9.320000] cfg80211: Calling CRDA for country: US
[    9.330000] cfg80211: Regulatory domain changed to country: US
[    9.340000] cfg80211:  DFS Master region: FCC
[    9.340000] cfg80211:   (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time)
[    9.350000] cfg80211:   (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 3000 mBm), (N/A)
[    9.360000] cfg80211:   (5170000 KHz - 5250000 KHz @ 80000 KHz), (N/A, 1700 mBm), (N/A)
[    9.370000] cfg80211:   (5250000 KHz - 5330000 KHz @ 80000 KHz), (N/A, 2300 mBm), (0 s)
[    9.370000] cfg80211:   (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 3000 mBm), (N/A)
[    9.380000] cfg80211:   (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 4000 mBm), (N/A)
[    9.400000] Button Hotplug driver version 0.4.1
[    9.470000] PPP generic driver version 2.4.2
[    9.740000] ip_tables: (C) 2000-2006 Netfilter Core Team
[    9.940000] NET: Registered protocol family 24
[   10.470000] xt_time: kernel timezone is -0000
[   10.840000]  Hooked IMQ after mangle on PREROUTING
[   10.840000]  Hooked IMQ after nat on POSTROUTING
[   10.850000] IMQ driver loaded successfully. (numdevs = 2, numqueues = 1)
[   10.940000] Netfilter messages via NETLINK v0.30.
[   10.970000] ip_set: protocol 6
[   11.270000] ctnetlink v0.93: registering with nfnetlink.
[   11.530000] [HKHTTP]init done, ver 0.46
[   11.560000] [KPROXYT]init done, ver 0.13
[   11.580000] [SDPI] version 0.10, register nf_conntrack extent done
[   11.750000] [PBOE] create net_device done
[   11.760000] [PBOE] ppp bridge over ether init done, version:v.0.0.21
[   24.300000] device eth0.3 entered promiscuous mode
[   24.310000] device eth0 entered promiscuous mode

^[[A[   31.310000] device wlan0 entered promiscuous mode
^H[   37.430000] br-lan: port 2(wlan0) entered forwarding state
[   37.440000] br-lan: port 2(wlan0) entered forwarding state
[   39.440000] br-lan: port 2(wlan0) entered forwarding state
[   65.170000] u32 classifier
[   65.180000]     Performance counters on
[   65.180000]     input device check on
[   65.180000]     Actions configured



[  165.510000] sysctl: The scan_unevictable_pages sysctl/node-interface has been disabled for lack of a legitimate use case.  If you have one, please send an email to linux-mm@kvack.org.


回复 支持 反对

使用道具 举报

 楼主| 发表于 2020-2-22 15:12:40 | 显示全部楼层
焊上TTL插脚RX、TX和GND,在通电前按下WPS键,可看到如下信息:U-Boot 1.1.4 (Feb  1 2016 - 18:23:05)

ap143 - Honey Bee 2.0DRAM:  
sri
Honey Bee 2.0
ath_ddr_initial_config(195): (16bit) ddr2 init
tap = 0x00000003
Tap (low, high) = (0x9, 0x37)
Tap values = (0x20, 0x20, 0x20, 0x20)
128 MB
Top of RAM usable for U-Boot at: 88000000
Reserving 216k for U-Boot at: 87fc8000
Reserving 192k for malloc() at: 87f98000
Reserving 44 Bytes for Board Info at: 87f97fd4
Reserving 36 Bytes for Global Data at: 87f97fb0
Reserving 128k for boot params() at: 87f77fb0
Stack Pointer at: 87f77f98
Now running in RAM - U-Boot at: 87fc8000
Flash Manuf Id 0xc2, DeviceId0 0x20, DeviceId1 0x18
flash size 16MB, sector count = 256
Flash: 16 MB
*** Warning - bad CRC, using default environment

*** Warning *** : PCIe WLAN Module not found !!!
In:    serial
Out:   serial
Err:   serial
Net:   ath_gmac_enet_initialize...
No valid address in Flash. Using fixed address
No valid address in Flash. Using fixed address
ath_gmac_enet_initialize: reset mask:c02200
Scorpion ---->S27 PHY*
S27 reg init
: cfg1 0x800c0000 cfg2 0x7114
eth0: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
eth0 up
Honey Bee ---->  MAC 1 S27 PHY *
S27 reg init
ATHRS27: resetting s27
ATHRS27: s27 reset done
: cfg1 0x800c0000 cfg2 0x7214
eth1: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :10
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10
eth1 up
eth0, eth1
Setting 0x181162c0 to 0x2041a100
Hit any key to stop autoboot:  0
continue
## Booting image at 9fe80000 ...
continue
Trying eth1
enet1 port1 up
dup 1 speed 1000
--go upgrade for boot:web ip 192.168.186.1--
checksum bad
checksum bad
checksum bad

还有个奇怪的事,按着WPS键不放,有时可进入ath>状态,可什么符号也不能输入?这是为什么?
回复 支持 反对

使用道具 举报

发表于 2019-12-2 07:38:27 | 显示全部楼层
感谢路由器大婶分享
回复 支持 反对

使用道具 举报

发表于 2019-11-30 20:46:06 | 显示全部楼层
我一直用原厂的或者运营商送的。

打赏

参与人数 3家元 +40 收起 理由
锰子 + 10 歡迎探討
zx61107 + 10 謝謝分享
wska + 20

查看全部打赏

回复 支持 反对

使用道具 举报

 楼主| 发表于 2019-11-29 17:16:07 | 显示全部楼层
壹陆陆捌 发表于 2019-11-29 10:49
你有可用的固件吗?

AX150据说可刷H3呀,你看TB上好多卖家都是那么介绍的,但这个WE10C查产上四海产的,没恢复固件的方法或没找到。也就刷不了其它固件,闪存也没AX150的8脚拆起来方便,我拆过AX150,你可查看下。
回复 支持 反对

使用道具 举报

发表于 2019-11-29 10:49:10 | 显示全部楼层
hfsp 发表于 2019-11-28 20:44
要换就换AX150的吧,可刷爱快H3,这个还没找到合适的固件可刷。

你有可用的固件吗?
回复 支持 反对

使用道具 举报

 楼主| 发表于 2019-11-28 20:44:24 | 显示全部楼层
壹陆陆捌 发表于 2019-11-28 20:43
本来也想换几个你这个型号的,刚上去一看没了

要换就换AX150的吧,可刷爱快H3,这个还没找到合适的固件可刷。
回复 支持 反对

使用道具 举报

发表于 2019-11-28 20:43:16 | 显示全部楼层
hfsp 发表于 2019-11-28 20:40
小博这公司没味,你那点钱提不了,我也是没办法后来买了个POE电源,多的几十元只能给他们了。 ...

本来也想换几个你这个型号的,刚上去一看没了:sweat:
回复 支持 反对

使用道具 举报

 楼主| 发表于 2019-11-28 20:40:47 | 显示全部楼层
壹陆陆捌 发表于 2019-11-28 20:15
看了这个才想到里面还有点钱,可惜被TX这么一搞,小博也是够了。

小博这公司没味,你那点钱提不了,我也是没办法后来买了个POE电源,多的几十元只能给他们了。
回复 支持 反对

使用道具 举报

发表于 2019-11-28 20:15:40 | 显示全部楼层
看了这个才想到里面还有点钱,可惜被TX这么一搞,小博也是够了。
回复 支持 反对

使用道具 举报

 楼主| 发表于 2019-11-28 13:54:28 | 显示全部楼层
loadbxh 发表于 2019-11-28 05:00
一体猫就那个德行.硬件设计能力还跟不上水平.魔百盒跟黑猫精灵的区别吧.建议换AC路由 ...

你看清楚没有?这个是猫吗?如果是猫也是国宝猫:titter:
回复 支持 反对

使用道具 举报

您需要登录后才可以回帖 登录 | 立即注册 微信登录

本版积分规则

APP|手机版|小黑屋|关于我们|联系我们|法律条款|技术知识分享平台

闽公网安备35020502000485号

闽ICP备2021002735号-2

GMT+8, 2025-9-11 08:39 , Processed in 0.218400 second(s), 14 queries , Gzip On, Redis On.

Powered by Discuz!

© 2006-2025 MyDigit.Net

快速回复 返回顶部 返回列表