could you please provide the bin file and the mac address location?
Edit: found the address: 0x7DF100
I have made a dump of the flash (using flashrom), downloaded stock firmware, removed first 512B from stock bin (header, which is not being flashed), appended rest of the partitions from dump and flashed it.
mac address is in flash the same as is on the case. ie. not reversed
I just read the chip contents and searched for MAC in CH341A.exe. Then I edited MAC directly in HEX dump in burner software and burned it back to the flash. I believe there was only one MAC for WiFi, 5GHzr MAC was just ofsett by 2.
Anyway, write down all your MAC before, search them in HEX and edit them to whatever you like. Burn it back to flash and that's it.
Hey,
unfortunately I did not read this before. So I flashed already with a EZP2010 Programmer the orginal OEM, after I noticed I tried to flash the US-Firmware OEM to my EU device. I guess that is why I got to that f... point here. JTAG isn't working even with a 3,3V Serial-Adapter. So I think there has something else going on. There is just the power LED and the fourth led (INTERNET LED) just flashing for a second. No TFTPD possible.
It doesn't write proper onto the chip. There is just a few bits in the beginning written. I tried it serveral times. Always the same result.