TPLINK MFP TL-PS310U v1.4 original firmware dump needed

[giovy87]

Hello All,

I found this MFP server but it's not working if i plug the power supply all led ar solid (no flash) and the boot sequence it's not starting.
I checked all voltages on the borad and both CPU and SPI memory are properly feeded .
I decided to dump the original firmware form the ESMT F25L004A chip but unfortunately i got only an empty dump, i tried 3 times one using windows an other using linux and the last one attemp was done desoldering the chip from the board but every time i got an empty dump.
I would like to try with a fresh firmware but i cannot find it on the web could someone help me in finding it ?

I also noticed that according to the datasheet the flash should be 4Megabytes but i can read only 512Kb so i suppose that is also broken. could someone highlith a replacement equivalent since i cannot find an identical replacement ?

[fzabkar]

4 Mbits = 512 Kbytes

https://www.farnell.com/datasheets/52728.pdf

[picburner]

Try loading this firmware into the eeprom with your eprom programmer. If it works you've solved it, if it doesn't work at least we tried.
Be sure to select the correct device in the programmer before writing.

[giovy87]

Try loading this firmware into the eeprom with your eprom programmer. If it works you've solved it, if it doesn't work at least we tried.
Be sure to select the correct device in the programmer before writing.

hello thanks for the firmware i also suppose that is the complete one but unfortunately i cannot both read write the spi flash that is not properly recognized by my ch341a programmer. I suppose that is broken. Any suggestion for a replacement ? i found

https://pdf1.alldatasheet.com/datasheet-pdf/download/197512/WINBOND/W25X40.html

seems really similar but i don't know if it will work or not. I cannot find the ESMT one if you have any suggestion please share !

[picburner]

The F25L004A memory can be found here, hoping it is not a fake.

To replace it with another device you must be sure that the commands and the structure are exactly the same, otherwise the tplink micro would not be able to read the contents of the eeprom.
I couldn't tell you, there are quite a few pages to read and compare in the two datasheets.

[giovy87]

thanks a lot I ordered when it will be delivered I will test it !!!

merry Xmas

[giovy87]

just for sharing i found the root cause issue, unfortunately the LDO and ld1117AG is bronek and inject the 5v in the 3.3V rail and destroied the memory. the CPU seems ok since i'm able to see the command signal and the clock one with my oscilloscope .
i ordered also this ldo .
I also checked that the output rail was not short and injecting a 3.3v i can see only 10ma current .
Thanks for the support i will update this topic in any case when the replacement will arrive .

[giovy87]

Hello all,

yesterday i received the spare part and i replaced the regulator now the 3.3V are present this means that i fixed the root cause but unfortunately I'm facing an issue during the memory programming. let me sum up the test that i performed:

- I soldered the memory chip in the adapter provided with ch341a, i double checked the connection and every thing it's ok but when i'm going to program the memory i faced a writing issue and the process aborted
- I tried with two different flash but same issue
- i tried with both imsprog and asprogrammer
- i tried to read and flash a different flash and i was able to complete the writing properly
- i read the sre register and the WEL flag is 1 this means that the chip is writable according to the datsheet
- i tried to delete the flash content and workded fine
- when i try to write some content the programmer face error writing sector 0x0000000
- i tried different programmers ch341a, neoprogrammer, asprogrammer colibri341 but same issue seems that the new chip is detected erasable but for some reason i'm not able to write the dump.
i also tried to put some random content in the memory like 33 but nothing worked.
i double checked and the WP pin is at 3,3V this means that the chip is writable...

I suppose that the memory is working but i'm missing something any suggestion ?

Thanks

------UPDATE -----

insiting with ch341a software i was able to flash the data i disconnected the programmer than connected again , read the content and seems the flashimage expected but same issue no boot ethernet flash are solid and not blinking .

I will double check if the content is present but i have to desolder the flash. if the content is confirmed i saw only two option_

- CPU compromised (how to test it ?)
- wrong software

the CPU is an est e1868m4b but I cannot find the datasheet could someone help ?