Created
July 12, 2018 15:44
-
-
Save sowbug/a64048f06ebbf4746f43e0bc21b5b43b to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # First, go get the stock firmware from the [TP-Link site](https://static.tp-link.com/2018/201803/20180316/Archer%20C9(US)_V3_171215.zip). | |
| # Then unzip it and cd into the resulting directory. | |
| $ ls -l | |
| total 14956 | |
| -rw-r--r-- 1 miket miket 14820016 Dec 15 2017 c9v4_eu-us-ca_up_1-3-1-20171215rel35219.bin | |
| -rw-r--r-- 1 miket miket 112046 Sep 14 2015 'GPL License Terms.pdf' | |
| -rw-r--r-- 1 miket miket 373590 Oct 14 2016 'How to upgrade TP-LINK Wireless AC Router.pdf' | |
| $ binwalk c9v4_eu-us-ca_up_1-3-1-20171215rel35219.bin | |
| DECIMAL HEXADECIMAL DESCRIPTION | |
| -------------------------------------------------------------------------------- | |
| 155672 0x26018 LZMA compressed data, properties: 0x5D, dictionary size: 65536 bytes, uncompressed size: 327460 bytes | |
| 241100 0x3ADCC TRX firmware header, little endian, image size: 1916928 bytes, CRC32: 0xF7F42AEE, flags: 0x0, version: 1, header size: 28 bytes, loader offset: 0x1C, linux kernel offset: 0x0, rootfs offset: 0x0 | |
| 241128 0x3ADE8 LZMA compressed data, properties: 0x5D, dictionary size: 65536 bytes, uncompressed size: 4562560 bytes | |
| 2158029 0x20EDCD Squashfs filesystem, little endian, version 4.0, compression:xz, size: 12413672 bytes, 2645 inodes, blocksize: 262144 bytes, created: 2017-12-15 01:46:56 | |
| 14573322 0xDE5F0A XML document, version: "1.0" | |
| 14581037 0xDE7D2D XML document, version: "1.0" | |
| 14582469 0xDE82C5 Unix path: /var/run/appflow/tccpipe</listen_path> | |
| 14586651 0xDE931B Unix path: /usr/share/miniupnpd/firewall.include</path> | |
| 14590726 0xDEA306 Unix path: /cover.jpg/AlbumArtSmall.jpg/albumartsmall.jpg/AlbumArt.jpg/albumart.jpg/Album.jpg/album.jpg/Folder.jpg/folder.jpg/Thumb.jpg/thu | |
| 14595966 0xDEB77E Unix path: /usr/local/bin/jiggle_firewall</exec> | |
| 14596812 0xDEBACC Unix path: /usr/local/bin/apply_appflow</exec> | |
| # The 1916901 figure is 2158029 - 241128 | |
| $ dd if=c9v4_eu-us-ca_up_1-3-1-20171215rel35219.bin of=c9-loader.bin skip=241128 iflag=skip_bytes bs=1916901 count=1 | |
| 1+0 records in | |
| 1+0 records out | |
| 1916901 bytes (1.9 MB, 1.8 MiB) copied, 0.00746417 s, 257 MB/s | |
| # 12415293 is 14573322 - 2158029 | |
| $ dd if=c9v4_eu-us-ca_up_1-3-1-20171215rel35219.bin of=c9-squashfs.bin skip=2158029 iflag=skip_bytes bs=12415293 count=1 | |
| 1+0 records in | |
| 1+0 records out | |
| 12415293 bytes (12 MB, 12 MiB) copied, 0.0318187 s, 390 MB/s | |
| # This repo came from https://github.com/lede-project/source/, and then I hacked on it until | |
| # I could `gcc trx.c`. I had to change to `#define TRX_MAX_LEN 0xF20000` to get it to handle the larger file sizes. | |
| $ ~/src/source-master/tools/firmware-utils/src/a.out -f c9-loader.bin -f c9-squashfs.bin > c9-webflash.bin | |
| mjn3's trx replacement - v0.81.1 | |
| # You can check and see whether your files turn out the same as mine. | |
| $ shasum *.bin | |
| ce5b20da5dc60a10935ad3f743f8d12bc9664aa2 c9-loader.bin | |
| da1a28a6ab4b233dda104e7f7bcb00d55bee65e0 c9-squashfs.bin | |
| 71b876578be3d42446778633602689b4f1ed5afd c9v4_eu-us-ca_up_1-3-1-20171215rel35219.bin | |
| d362c4288a4b870d305d41180488f0bc88091192 c9-webflash.bin | |
| # Now go to the DD-WRT admin tab and flash c9-webflash.bin using the web UI. | |
| # It'll take a few minutes, and in the end you'll have a stock Archer C9, without having to open the case. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Can't find the file a.out
Can you give me link to repo with this file?