Perfectly undestood.
Thank you all for looking a way around.
I just found this: https://openwrt.org/toh/tp-link/archer_c60_v2
Another possible method of installation is directly to the flash chip (W25Q64). First you need to obtain a dump of the chip (by reading the chip from your device or by finding a dump on the internet). The partition map is located at the address 0x7df800 on the chip:
partition factory-boot base 0x00000 size 0x1fb00 partition default-mac base 0x1fb00 size 0x00200 partition pin base 0x1fd00 size 0x00100 partition product-info base 0x1fe00 size 0x00100 partition device-id base 0x1ff00 size 0x00100 partition fs-uboot base 0x20000 size 0x10000 partition os-image base 0x30000 size 0x100000 partition file-system base 0x130000 size 0x6a9500 partition soft-version base 0x7d9500 size 0x00100 partition support-list base 0x7d9600 size 0x00100 partition extra-para base 0x7d9700 size 0x00100 partition profile base 0x7d9800 size 0x03000 partition default-config base 0x7dc800 size 0x03000 partition partition-table base 0x7df800 size 0x00800 partition user-config base 0x7e0000 size 0x0c000 partition certificate base 0x7ec000 size 0x04000 partition radio base 0x7f0000 size 0x10000
To install OpenWrt, we need to replace the os-image and file-system partitions with the OpenWrt firmware, and copy everything else. First copy everything preceding these two partitions:
dd if=archer_c60_ac1350_v2.bin of=owrt_frankenstein.bin bs=1 count=196608
Then copy the OpenWrt image:
dd if=openwrt-19.07.3-ath79-generic-tplink_archer-c60-v3-squashfs-sysupgrade.bin bs=1 count=4653056 >> owrt_frankenstein.bin
Add padding to match the size of os-image+file-system:
dd if=/dev/zero bs=1 count=3380480 | tr “\000” “\377” >>owrt_frankenstein.bin
And lastly, copy everything else:
dd if=archer_c60_ac1350_v2.bin bs=1 skip=8230144 >> owrt_frankenstein.bin
To verify, you can check that the file size is equal to the size of your original dump.
The resulting file can be written to the flash chip. This method has been successfully tested with a v3 device, although using a flash dump from v2.
Flash Layout
dev: size erasesize name mtd0: 00030000 00010000 "u-boot" mtd1: 007a0000 00010000 "firmware" mtd2: 00180000 00010000 "kernel" mtd3: 00620000 00010000 "rootfs" mtd4: 00360000 00010000 "rootfs_data" mtd5: 00020000 00010000 "tplink" mtd6: 00010000 00010000 "art"
Are these steps helpful to do what I´m looking for?