[Silviu]

Pls let us know how u did it would be verry interesting

[derbaron]

hey can you state how you restored the dir-300 ?

thanks!

[Domino_55]

IMPORTANT: ABSOLUTELY NO WARRANTY!!!, but these steps working for me on my three DIR-300.

So, the exact steps to restore the "really" original firmware is:


1. Get the correct image of the board config from here (posted). Thanks for fluffy@prog.ru.

2. Open the file with your favorite hex editor.
- Go to the 0x00000060 offset, and fill in your LAN & WLAN bridge MAC address. It's found on the sticker underneath your router.
- Go to the 0x00000066 offset, and fill in your WAN MAC address. You can get this, if you add +1 to the LAN & WLAN bridge MAC address.
- Go to the 0x0000204c offset, and fill in your pin code (the next 8 bytes, ASCII MODE, NOT HEX). It's found on the sticker underneath your router.
- Go to the 0x0000205c offset, and fill in your WAN MAC address (the next 17 bytes with colons, ASCII MODE, NOT HEX).
- Go to the 0x00002076 offset, and fill in your LAN & WLAN bridge MAC address (the next 17 bytes with colons, ASCII MODE, NOT HEX).
- Go to the 0x0000208f offset, and fill in your LAN & WLAN bridge MAC address (the next 17 bytes with colons, ASCII MODE, NOT HEX).
- Go to the 0x000020b6 offset, and fill in your country code for madwifi. (the next 3 bytes, ASCII MODE, NOT HEX).
Country codes follow the numbering scheme defined in ISO 3166, which can be found here (http://www.davros.org/misc/iso3166.html).
Important: strip leading zeros from country code values mentioned in the standard. Example: in the standard 056 is given as code for Belgium, so you use countrycode=56
If you are from a European country, you don't require to change the current (826) code. With code 826 you will give 13 wireless channels.
- Save the modified file.

3. Flash the original RedBoot and an original DIR-300 firmware. (http://www.shadowandy.net/2007/10/flashing-dir-300-back-to-original-firmware.htm)

4. Set your NIC address to 192.168.20.80/24

5. Enter to the original RedBoot via the WAN port. Original RedBoot's IP address is 192.168.20.81

6. Start a local TFTP server, and serve the previously edited board config file. (bfff0000-10000.bin)

7. Load the previously edited board config to the base memory: load -r -b %{FREEMEMLO} bfff0000-10000.bin

8. And do: fwrite -f 0xbfff0000 -b 0x80036400 -l 0x10000 -e 0x80036400 (-b and -e addresses are from the "load" command, and if it ask, update the non-volatile RedBoot configuration)

9. Fix the firmware entry and flash addresses and size with the following commands (always update the non-volatile RedBoot configuration):
These commands parameters are constant!

fconfig img_entry_addr 0x80040000
fconfig img_flash_addr 0xbfc20000
fconfig img_length 0x003c0000

10. Remove power from your router, and wait about 10 seconds, and power on.

11. Your system will boot up about 1-2 minutes.



The original flash layout is:

0x00000000-0x00030000 RedBoot (196 608 bytes)
0x00030000-0x003f0000 firmware image (3 932 160 bytes)
0x003f0000-0x00400000 board config (65 536 bytes)



Good luck,
Domino_55

P.S.: If you worked or not this howto, please report it in this topic. Thanks!

[vit2142]

It worked for me! MAC is same as on stiker and WPA fully functional now. Thanks for your tutorial, Domino_55.

[wolfen]

It's also working for me. But Domino_55 can you explain please this commands :
fconfig img_entry_addr 0x80040000
fconfig img_flash_addr 0xbfc20000
fconfig img_length 0x003c0000

Where did you get this addresses?

[Domino_55]

I create a full flash backup of a new DIR-300, and I research it.

[wolfen]

Thank you Domino_55 for describing!

[x007]

Please help me what should I do ?
I'm Have DIR-300 with Orginal FW 1.03 im flashed to DD-WRT V24.Sp1. Im back with this turtial http://www.shadowandy.net/2007/10/flashing-dir-300-back-to-original-firmware.htm to orginal FW 1.04 and WPA/2 dont work. What do I do now?
I will give you any information about what you want the router WAN MAC Original, PIN , My Country
Create for me such a modified file *.bin :>

[Domino_55]

[shadowandy]

Not sure if this would help.

Generating DIR-300's board config

[Domino_55]

[shadowandy]

[Domino_55]

[x007]

It has become im crash router !!!
I have access to RedBoot / DD-WRT but if you upload original Redboot come to Emergency Server. I do upload FW and wait 600s and write "Updating Su.....". Im reset router and wait and nothing happens light is only 1 LED power LED

If you try to upload DD-WRT it all goes according to the instructions until the command "fis create linux" then the router does not respond


What do I do now ?

[Domino_55]