Hi, I am trying to use this for tplink be3600 firmware. I have already decrypted the firmware, but the tplink-safeloader tool doesn't find the partition table.
Looking with hex editor, it seems that the "fwup-ptn" is way later in the file for this firmware (offset 0x13BE5D) in the file.
I am trying to inspect "Archer BE3600(JP)_V2_1.0.2 Build 20250328" firmware link. I decrypt it using https://github.com/robbins/tp-link-decrypt
It's quite long, it looks something like this:
Hex View 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
0013BE50 66 77 75 fwu
0013BE60 70 2D 70 74 6E 00 74 61 69 6C 00 76 65 6E 64 6F p-ptn.tail.vendo
0013BE70 72 5F 6E 61 6D 65 00 76 65 6E 64 6F 72 5F 75 72 r_name.vendor_ur
0013BE80 6C 00 70 72 6F 64 75 63 74 5F 6E 61 6D 65 00 70 l.product_name.p
0013BE90 72 6F 64 75 63 74 5F 69 64 00 70 72 6F 64 75 63 roduct_id.produc
0013BEA0 74 5F 76 65 72 00 73 70 65 63 69 61 6C 5F 69 64 t_ver.special_id
0013BEB0 00 6C 61 6E 67 75 61 67 65 00 68 77 5F 69 64 00 .language.hw_id.
0013BEC0 6F 65 6D 5F 69 64 00 6E 65 65 64 20 64 69 63 74 oem_id.need dict
0013BED0 69 6F 6E 61 72 79 00 73 74 72 65 61 6D 20 65 6E ionary.stream en
0013BEE0 64 00 66 69 6C 65 20 65 72 72 6F 72 00 64 61 74 d.file error.dat
0013BEF0 61 20 65 72 72 6F 72 00 69 6E 63 6F 6D 70 61 74 a error.incompat
0013BF00 69 62 6C 65 20 76 65 72 73 69 6F 6E 00 3C 6E 6F ible version.<no
0013BF10 6E 65 3E 00 6E 76 69 64 69 61 2C 74 65 67 72 61 ne>.nvidia,tegra
0013BF20 32 30 2D 65 6D 63 00 6E 76 69 64 69 61 2C 74 65 20-emc.nvidia,te
0013BF30 67 72 61 32 30 2D 65 6D 63 2D 74 61 62 6C 65 00 gra20-emc-table.
0013BF40 6E 76 69 64 69 61 2C 74 65 67 72 61 32 30 2D 6E nvidia,tegra20-n
0013BF50 61 6E 64 00 6E 76 69 64 69 61 2C 74 65 67 72 61 and.nvidia,tegra
I'm not sure if this is the expected fwup-ptn string the program expect, I'm not sure where the offsets are stored.
For reference, here's the support-list from 0x1014
Hex View 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
00001010 73 75 70 70 6F 72 74 2D 6C 69 73 74 support-list
00001020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00001030 00 00 00 00 00 00 00 2C 00 00 03 96 00 00 03 6A .......,.......j
00001040 53 75 70 70 6F 72 74 4C 69 73 74 3A 0A 7B 70 72 SupportList:.{pr
00001050 6F 64 75 63 74 5F 6E 61 6D 65 3A 41 72 63 68 65 oduct_name:Arche
00001060 72 20 42 45 32 32 30 2C 70 72 6F 64 75 63 74 5F r BE220,product_
00001070 76 65 72 3A 31 2E 30 2E 30 2C 73 70 65 63 69 61 ver:1.0.0,specia
00001080 6C 5F 69 64 3A 35 35 35 33 30 30 30 30 7D 0A 7B l_id:55530000}.{
00001090 70 72 6F 64 75 63 74 5F 6E 61 6D 65 3A 41 72 63 product_name:Arc
000010A0 68 65 72 20 42 45 32 32 30 2C 70 72 6F 64 75 63 her BE220,produc
000010B0 74 5F 76 65 72 3A 31 2E 30 2E 30 2C 73 70 65 63 t_ver:1.0.0,spec
000010C0 69 61 6C 5F 69 64 3A 34 35 35 35 30 30 30 30 7D ial_id:45550000}
000010D0 0A 7B 70 72 6F 64 75 63 74 5F 6E 61 6D 65 3A 41 .{product_name:A
000010E0 72 63 68 65 72 20 42 45 32 32 30 57 2C 70 72 6F rcher BE220W,pro
000010F0 64 75 63 74 5F 76 65 72 3A 31 2E 30 2E 30 2C 73 duct_ver:1.0.0,s
00001100 70 65 63 69 61 6C 5F 69 64 3A 34 35 35 35 30 30 pecial_id:455500
00001110 30 30 7D 0A 7B 70 72 6F 64 75 63 74 5F 6E 61 6D 00}.{product_nam
00001120 65 3A 41 72 63 68 65 72 20 42 45 32 32 30 2C 70 e:Archer BE220,p
00001130 72 6F 64 75 63 74 5F 76 65 72 3A 31 2E 30 2E 30 roduct_ver:1.0.0
00001140 2C 73 70 65 63 69 61 6C 5F 69 64 3A 35 33 34 37 ,special_id:5347
00001150 30 30 30 30 7D 0A 7B 70 72 6F 64 75 63 74 5F 6E 0000}.{product_n
00001160 61 6D 65 3A 41 72 63 68 65 72 20 42 45 32 32 30 ame:Archer BE220
00001170 2C 70 72 6F 64 75 63 74 5F 76 65 72 3A 31 2E 30 ,product_ver:1.0
00001180 2E 30 2C 73 70 65 63 69 61 6C 5F 69 64 3A 34 33 .0,special_id:43
00001190 34 31 30 30 30 30 7D 0A 7B 70 72 6F 64 75 63 74 410000}.{product
000011A0 5F 6E 61 6D 65 3A 41 72 63 68 65 72 20 42 45 32 _name:Archer BE2
000011B0 32 30 2C 70 72 6F 64 75 63 74 5F 76 65 72 3A 31 20,product_ver:1
000011C0 2E 30 2E 30 2C 73 70 65 63 69 61 6C 5F 69 64 3A .0.0,special_id:
000011D0 34 42 35 32 30 30 30 30 7D 0A 7B 70 72 6F 64 75 4B520000}.{produ
000011E0 63 74 5F 6E 61 6D 65 3A 41 72 63 68 65 72 20 42 ct_name:Archer B
000011F0 45 32 32 30 2C 70 72 6F 64 75 63 74 5F 76 65 72 E220,product_ver
00001200 3A 31 2E 30 2E 30 2C 73 70 65 63 69 61 6C 5F 69 :1.0.0,special_i
00001210 64 3A 35 32 35 35 30 30 30 30 7D 0A 7B 70 72 6F d:52550000}.{pro
00001220 64 75 63 74 5F 6E 61 6D 65 3A 41 72 63 68 65 72 duct_name:Archer
00001230 20 42 45 32 32 30 2C 70 72 6F 64 75 63 74 5F 76 BE220,product_v
00001240 65 72 3A 32 2E 30 2E 30 2C 73 70 65 63 69 61 6C er:2.0.0,special
00001250 5F 69 64 3A 34 41 35 30 30 30 30 30 7D 0A 7B 70 _id:4A500000}.{p
00001260 72 6F 64 75 63 74 5F 6E 61 6D 65 3A 41 72 63 68 roduct_name:Arch
00001270 65 72 20 42 45 33 36 30 30 2C 70 72 6F 64 75 63 er BE3600,produc
00001280 74 5F 76 65 72 3A 32 2E 30 2E 30 2C 73 70 65 63 t_ver:2.0.0,spec
00001290 69 61 6C 5F 69 64 3A 34 41 35 30 30 30 30 30 7D ial_id:4A500000}
000012A0 0A 7B 70 72 6F 64 75 63 74 5F 6E 61 6D 65 3A 41 .{product_name:A
000012B0 72 63 68 65 72 20 42 45 33 32 30 30 2C 70 72 6F rcher BE3200,pro
000012C0 64 75 63 74 5F 76 65 72 3A 31 2E 30 2E 30 2C 73 duct_ver:1.0.0,s
000012D0 70 65 63 69 61 6C 5F 69 64 3A 35 35 35 33 30 30 pecial_id:555300
000012E0 30 30 7D 0A 7B 70 72 6F 64 75 63 74 5F 6E 61 6D 00}.{product_nam
000012F0 65 3A 41 72 63 68 65 72 20 42 45 32 33 30 2C 70 e:Archer BE230,p
00001300 72 6F 64 75 63 74 5F 76 65 72 3A 32 2E 30 2E 30 roduct_ver:2.0.0
00001310 2C 73 70 65 63 69 61 6C 5F 69 64 3A 35 35 35 33 ,special_id:5553
00001320 30 30 30 30 7D 0A 7B 70 72 6F 64 75 63 74 5F 6E 0000}.{product_n
00001330 61 6D 65 3A 41 72 63 68 65 72 20 42 45 32 33 30 ame:Archer BE230
00001340 2C 70 72 6F 64 75 63 74 5F 76 65 72 3A 32 2E 30 ,product_ver:2.0
00001350 2E 30 2C 73 70 65 63 69 61 6C 5F 69 64 3A 34 35 .0,special_id:45
00001360 35 35 30 30 30 30 7D 0A 7B 70 72 6F 64 75 63 74 550000}.{product
00001370 5F 6E 61 6D 65 3A 41 72 63 68 65 72 20 42 45 32 _name:Archer BE2
00001380 33 30 2C 70 72 6F 64 75 63 74 5F 76 65 72 3A 32 30,product_ver:2
00001390 2E 30 2E 30 2C 73 70 65 63 69 61 6C 5F 69 64 3A .0.0,special_id:
000013A0 34 41 35 30 30 30 30 30 7D 0A 73 6F 66 74 2D 76 4A500000}.soft-v
000013B0 65 72 73 69 6F 6E ersion
Hi, I am trying to use this for tplink be3600 firmware. I have already decrypted the firmware, but the tplink-safeloader tool doesn't find the partition table.
Looking with hex editor, it seems that the "fwup-ptn" is way later in the file for this firmware (offset 0x13BE5D) in the file.
I am trying to inspect "Archer BE3600(JP)_V2_1.0.2 Build 20250328" firmware link. I decrypt it using https://github.com/robbins/tp-link-decrypt
It's quite long, it looks something like this:
I'm not sure if this is the expected fwup-ptn string the program expect, I'm not sure where the offsets are stored.
For reference, here's the support-list from 0x1014