TP-Link Archer C50 (EU) V6.0 - 5 GHz interface not present

Hi,
long story short, I bricked my router :frowning:
I tried flashing back to stock from within LuCI and it didnt work. Then I tried flashing it via TFTP which didnt help. So,as stupid as I am, I decided to flash the SPI Flash directly and completely killed it because I erased before I flashed.

Does anyone of you have a dump of the flash of a working router?

I guess somebody might be able to create this by using dd on the right files below /dev? I don't have access to my device, but if anybody else could check this out, that would be great!

Apart from that I have good news on that the PR has been merged, you can find the latest images now among the official snapshots:
https://downloads.openwrt.org/snapshots/targets/ramips/mt76x8/

Is there everything from flash in there? I think I mainly need the first 0x30000 bytes.

I would expect so, but I don't really know.
From what I see you could probably also use a copy of a v4 or v5 to get things back up and running. Even a v3 copy should work (it seems you lose the extra recovery uboot and could possibly reclaim that space).
Are you sure that putting a complete image with bootloader there does not work? If the v4/v5/v6 images depend on the recovery uboot to be present, maybe a v3 image would avoid that. Note that I know very little about this, I'm just pondering.

The bootloader should be in the factory image, right?

Whats the reason we prepend 196608 bytes when flashing via tftp?

The v4/v5/v6 models come with two bootloaders. One meant for emergency recovery and the regular one. The factory image only includes the regular one I guess.

I suspect this is because it's using the same offset in the source and destination when copying, but it does skip over the first part that contains the recovery logic.

There seems to be more information in the forum thread on the v4. See for instance this post on the partition layout being shifted at the cost of the rootfs, probably to accommodate the recovery logic:

And this explanation around the addition recovery part and wrong offset being used from v4 onward:

I guess the device looks for a bootloader starting at address zero. On v3 that used to be the bootloader just as it came from the stock image, on v4/v5/v6 that is the recovery bootloader that jumps ahead to the second bootloader at address 30000 if all is good. As you don't have the recovery logic anymore, you could try putting the regular bootloader at address zero just as the v3 had it. I don't know if the image to be flashed need to be aware of its partition layout or not. (It seems that not as somebody managed to boot a v4 image on a v3. Otherwise you could try flashing a v3 image and only 5 GHz WiFi would not work.) There is also a comment in that v4 thread about dropping the recovery part and reclaiming the lost space for the rootfs. Maybe you could get that to work.

I also just saw this:

I guess these dumps include the recovery logic.

The v6 has the following layout :

root@OpenWrt:~# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00030000 00010000 "factory-uboot"
mtd1: 00020000 00010000 "boot"
mtd2: 00770000 00010000 "firmware"
mtd3: 00258580 00010000 "kernel"
mtd4: 00517a80 00010000 "rootfs"
mtd5: 00130000 00010000 "rootfs_data"
mtd6: 00010000 00010000 "config"
mtd7: 00010000 00010000 "rom"
mtd8: 00010000 00010000 "romfile"
mtd9: 00010000 00010000 "radio"

The first 0x30000 bytes are indeed the first uboot (at least guessing from the size).
Here's a drive with both uboots :https://drive.google.com/drive/folders/1OCj6ifIJjK1xEC1edgYPpfZ3Lz4HxiAg

@Renaud11232 @jschwart I love you :heart_eyes:
I pieced the factory-uboot and a OEM firmware together and now it boots again :smile:
Only drawback now is that im still missing mtd6-mtd9 obviously so in the Bootlog I can see that it's confused about Mac addresses and stuff, but so far very good progress
Thanks again guys :slight_smile:

1 Like

Well, I just researched some more and I think it's likely that I won't get this thing running properly anymore as in the part I'm missing there is wifi calibration (which is device specific) and that kind of stuff. Without that original data it might run pretty bad I think

So what do we learn from that? Back up flash chips before writing to them and make sure to uncheck the "erase" option lol

I doubt that that calibration data is very specific per unit. I would suggest collecting mtd9 from one or more boxes and just working with that.

The only thing that people might not want to share is the part that contains the default WiFi key (mtd6?). I hope somebody can provide the respective dumps before I can as I don't have access to my box the coming months.

If someone really doesn't want to share that, he could anonymize it in the dump by changing the key in the dump, as even changing one letter would theoretically be enough.

Yes indeed. But also I suspect that partition gets filled with default data by the firmware already. Maybe you could try reading out what you have now and share that so we have a copy of these fresh partitions that were not yet baptized with security keys and MAC addresses.

It is, a Freifunk community checked this over their fleet of around 1000 routers (blanking out the MAC addresses), there were almost no duplicates - and if you know what kind of correction values at multiple frequencies are in there, you also understand why those are rather unique.

1 Like

I ran the router for a few minutes and set up basic stuff. Then I did a readout: https://drive.google.com/file/d/1Tve2vWqpt0B6B-v-6WFTm1xNM8qoLoZd/view?usp=sharing

Sadly I think the radio partition is still empty, so I dont think the firmware writes anything by default

Yes indeed, that one I would not expect to get filled up. Just the config one.

Then I am curious if anybody knows anything about the process that manufacturers use to perform this calibration and if this indeed has significant improvements with regards to connectivity.

@leow149 if there is no way to reproduce the calibration data, I guess you can still have a mostly functional radio function, but it will be less optimal.

Yeah, probably
Hope someone can help me out with providing me mtd6-mtd9

1 Like

From an old ath79/ ath9k based device (tl-wdr4300):

Board not detected.

EEPROM 0x1000:
----------------------------------------------------------------------------------------
      EEPROM Version :          2
    Template Version :          2
         MAC Address : 00 02 03 04 05 06
           Cust Data : 00 30 3A 30 32 3A 30 33 3A 30 34 3A 30 35 3A 30 36 00 00 00
----------------------------------------------------------------------------------------
          RegDomain1 :          0
          RegDomain2 :         31
             TX Mask : 0b00000011
             RX Mask : 0b00000011
---------------------------------
            Op Flags : 0b00000010
        Allow 2.4GHz :          1
          Allow 5GHz :          0
 Disable 2.4GHz HT20 :          0
 Disable 2.4GHz HT40 :          0
---------------------------------
            EEP Misc : 0b00000000
          Big Endian :          0
---------------------------------
           RF Silent :          0
           BT Option :          0
          Device Cap :          0
         Device Type :          4
  Power Table Offset :          0
         Tuning Caps :    48    0
---------------------------------
      Feature Enable : 0b01001101
 Enable Tx Temp Comp :          1
 Enable Tx Volt Comp :          0
   Enable Fast Clock :          1
     Enable Doubling :          1
  Internal Regulator :          0
  Enable PAPRD Scale :          0
  Enable Tuning Caps :          1
     XPA Timing Ctrl :          0
---------------------------------
  Misc Configuration : 0b00000010
     Driver Strength :          0
         Thermometer :          0
   Chain Mask Reduce :          0
   Enable Quick Drop :          0
Temp Slope Extension :          0
Enable Bias Strength :          0
---------------------------------
   Write Enable GPIO :          3
   WLAN Disable GPIO :          0
       WLAN LED GPIO :          8
 Rx Band Select GPIO :        255
             Tx Gain :          6
             Rx Gain :          0
              SW Reg : 0x00000001
----------------------------------------------------------------------------------------
     Ant Div Control :          0
              Future : 00 00
---------------------------------
         Misc Enable : 0b00000000
         TX Gain Cap :          0
 Uncompress Checksum :          0
    MinCCApwr 2.4GHz :          0
----------------------------------------------------------------------------------------
  Calibration 2.4GHz :   Chain0 Chain1 Chain2

         Frequency 0 :    2412[1]
         Ref Power 0 :     10      9      0
         Volt Meas 0 :      0      0      0
         Temp Meas 0 :    141    145      0
 RX Noisefloor Cal 0 :      0      0      0
 RX Noisefloor Pwr 0 :      0      0      0
      RX Temp Meas 0 :      0      0      0

         Frequency 1 :    2437[6]
         Ref Power 1 :     10      9      0
         Volt Meas 1 :      0      0      0
         Temp Meas 1 :    141    146      0
 RX Noisefloor Cal 1 :      0      0      0
 RX Noisefloor Pwr 1 :      0      0      0
      RX Temp Meas 1 :      0      0      0

         Frequency 2 :   2462[11]
         Ref Power 2 :      9      8      0
         Volt Meas 2 :      0      0      0
         Temp Meas 2 :    141    145      0
 RX Noisefloor Cal 2 :      0      0      0
 RX Noisefloor Pwr 2 :      0      0      0
      RX Temp Meas 2 :      0      0      0
----------------------------------------------------------------------------------------
   Target 2.4GHz 11B : 1L-5L  5S  11L  11S

         Frequency 0 :    2412[1]
             Power 0 :   38   38   38   38

         Frequency 1 :   2472[13]
             Power 1 :   38   38   38   38
----------------------------------------------------------------------------------------
   Target 2.4GHz 11G :  6-24  36   48   54

         Frequency 0 :    2412[1]
             Power 0 :   38   38   36   32

         Frequency 1 :    2437[6]
             Power 1 :   38   38   36   32

         Frequency 2 :   2472[13]
             Power 2 :   38   38   36   32
----------------------------------------------------------------------------------------
  Target 2.4GHz HT20 :0-16 1-19  4   5   6   7  12  13  14  15  20  21  22  23

         Frequency 0 :    2412[1]
             Power 0 :  36  36  36  34  32  30  36  33  32  28  32  32  28  20

         Frequency 1 :    2437[6]
             Power 1 :  36  36  36  34  32  30  36  33  32  28  32  32  28  20

         Frequency 2 :   2472[13]
             Power 2 :  36  36  36  34  32  30  36  33  32  28  32  32  28  20
----------------------------------------------------------------------------------------
  Target 2.4GHz HT40 :0-16 1-19  4   5   6   7  12  13  14  15  20  21  22  23

         Frequency 0 :    2422[3]
             Power 0 :  34  34  34  32  30  28  34  32  30  26  32  32  28  20

         Frequency 1 :    2447[8]
             Power 1 :  34  34  34  32  30  28  34  32  30  26  32  32  28  20

         Frequency 2 :   2462[11]
             Power 2 :  34  34  34  32  30  28  34  32  30  26  32  32  28  20
----------------------------------------------------------------------------------------
   Regulatory 2.4GHz : FCC__11B FCC__11G FCC_HT20 FCC_HT40 MKK__11B MKK__11G MKK_HT20 MKK_HT40 ETSI_11B ETSI_11G ETSIHT20 ETSIHT40

         Frequency 0 :  2412[1]  2412[1]  2412[1]  2412[1]  2412[1]  2412[1]  2412[1]  2412[1]  2412[1]  2412[1]  2412[1]  2412[1]
        Power|Edge 0 :   34|0     24|0     24|0     17|0     60|0     60|0     60|0     60|0     29|0     29|0     29|0     29|0  

         Frequency 1 :  2417[2]  2417[2]  2417[2]  2417[2]  2417[2]  2417[2]  2417[2]  2417[2]  2417[2]  2417[2]  2417[2]  2417[2]
        Power|Edge 1 :   34|1     28|1     28|1     21|1     60|1     60|1     60|1     60|1     29|1     29|1     29|1     29|1  

         Frequency 2 : 2462[11] 2462[11] 2462[11] 2462[11] 2472[13] 2472[13] 2472[13] 2472[13] 2472[13] 2472[13] 2472[13] 2472[13]
        Power|Edge 2 :   34|0     26|0     26|0     21|0     60|0     60|0     60|0     60|0     29|0     29|0     29|0     29|0  

         Frequency 3 : 2484[14] 2484[14] 2484[14] 2484[14] 2484[14] 2484[14] 2484[14] 2484[14] 2484[14] 2484[14] 2484[14] 2484[14]
        Power|Edge 3 :   34|1     26|1     26|1     21|1     60|1     60|1     60|1     60|1     29|1     29|1     29|1     29|1  
----------------------------------------------------------------------------------------
 2.4GHz Modal Header : Chain0 Chain1 Chain2
        Ant. Control : 0x0010 0x0010 0x0010
        NF Threshold :     -1      0      0
           xatten1DB :     26     26     26
       xatten1Margin :     17     17     17
          Temp Slope :         31
          Quick Drop :          0
      spur Frequency :  2464[11+]       0x00       0x00       0x00       0x00
 Ant. Common Control : 0x00000110
Ant. Common Control2 : 0x000EEEEE
           Ant. Gain :          0
       Switch Settle :         44
          Volt Slope :          0
       txEndToXpaOff :          0
         txEndToRxOn :          2
      XPA Bias Level :          0
  txFrameToDataStart :         14
       txFrameToPaOn :         14
      txFrameToXpaOn :         14
              txClip :          3
    ADC Desired Size :        -30
            Thresh62 :         28
     PAPRD Rate Mask : 5S 11L 11S HT20_7 HT20_12 HT20_13 SCALE:6
PAPRD Rate Mask HT40 : 5S 11L 11S HT20_7 HT20_12 HT20_13
     switch com spdt :          0
  XLNA Bias Strength :          0
            Reserved : 00 00 00 00 00 00 00 00 00 00 00
        Future Modal : 00 00 00 00 00 00 00
----------------------------------------------------------------------------------------

EEPROM 0x5000:
----------------------------------------------------------------------------------------
      EEPROM Version :          2
    Template Version :          2
         MAC Address : 00 02 03 04 05 06
           Cust Data : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
----------------------------------------------------------------------------------------
          RegDomain1 :          0
          RegDomain2 :         31
             TX Mask : 0b00000111
             RX Mask : 0b00000111
---------------------------------
            Op Flags : 0b00000001
        Allow 2.4GHz :          0
          Allow 5GHz :          1
   Disable 5Ghz HT20 :          0
   Disable 5Ghz HT40 :          0
---------------------------------
            EEP Misc : 0b00000000
          Big Endian :          0
---------------------------------
           RF Silent :          0
           BT Option :          0
          Device Cap :          0
         Device Type :          4
  Power Table Offset :          0
         Tuning Caps :    72    0
---------------------------------
      Feature Enable : 0b01001101
 Enable Tx Temp Comp :          1
 Enable Tx Volt Comp :          0
   Enable Fast Clock :          1
     Enable Doubling :          1
  Internal Regulator :          0
  Enable PAPRD Scale :          0
  Enable Tuning Caps :          1
     XPA Timing Ctrl :          0
---------------------------------
  Misc Configuration : 0b00000100
     Driver Strength :          0
         Thermometer :          1
   Chain Mask Reduce :          0
   Enable Quick Drop :          0
Temp Slope Extension :          0
Enable Bias Strength :          0
---------------------------------
   Write Enable GPIO :          3
   WLAN Disable GPIO :          0
       WLAN LED GPIO :          8
 Rx Band Select GPIO :        255
             Tx Gain :          0
             Rx Gain :          0
              SW Reg : 0x00000000
----------------------------------------------------------------------------------------
     Ant Div Control :          0
              Future : 00 00
---------------------------------
         Misc Enable : 0b00000000
         TX Gain Cap :          0
 Uncompress Checksum :          0
      MinCCApwr 5GHz :          0
---------------------------------
Temp Slope Extension :  0   0   0   0   0   0   0   0
----------------------------------------------------------------------------------------
    Calibration 5GHz :   Chain0 Chain1 Chain2

         Frequency 0 :   5180[36]
         Ref Power 0 :    -25    -30    -22
         Volt Meas 0 :      0      0      0
         Temp Meas 0 :    162    162    163
 RX Noisefloor Cal 0 :      0      0      0
 RX Noisefloor Pwr 0 :      0      0      0
      RX Temp Meas 0 :      0      0      0

         Frequency 1 :   5240[48]
         Ref Power 1 :    -17    -20    -14
         Volt Meas 1 :      0      0      0
         Temp Meas 1 :    163    164    162
 RX Noisefloor Cal 1 :      0      0      0
 RX Noisefloor Pwr 1 :      0      0      0
      RX Temp Meas 1 :      0      0      0

         Frequency 2 :   5320[64]
         Ref Power 2 :    -14    -18    -12
         Volt Meas 2 :      0      0      0
         Temp Meas 2 :    163    163    164
 RX Noisefloor Cal 2 :      0      0      0
 RX Noisefloor Pwr 2 :      0      0      0
      RX Temp Meas 2 :      0      0      0

         Frequency 3 :  5500[100]
         Ref Power 3 :     -8    -10     -7
         Volt Meas 3 :      0      0      0
         Temp Meas 3 :    163    163    163
 RX Noisefloor Cal 3 :      0      0      0
 RX Noisefloor Pwr 3 :      0      0      0
      RX Temp Meas 3 :      0      0      0

         Frequency 4 :  5620[124]
         Ref Power 4 :     -8     -9     -6
         Volt Meas 4 :      0      0      0
         Temp Meas 4 :    162    163    163
 RX Noisefloor Cal 4 :      0      0      0
 RX Noisefloor Pwr 4 :      0      0      0
      RX Temp Meas 4 :      0      0      0

         Frequency 5 :  5700[140]
         Ref Power 5 :    -11    -12     -8
         Volt Meas 5 :      0      0      0
         Temp Meas 5 :    162    163    163
 RX Noisefloor Cal 5 :      0      0      0
 RX Noisefloor Pwr 5 :      0      0      0
      RX Temp Meas 5 :      0      0      0

         Frequency 6 :  5745[149]
         Ref Power 6 :    -12    -14    -10
         Volt Meas 6 :      0      0      0
         Temp Meas 6 :    162    163    163
 RX Noisefloor Cal 6 :      0      0      0
 RX Noisefloor Pwr 6 :      0      0      0
      RX Temp Meas 6 :      0      0      0

         Frequency 7 :  5825[165]
         Ref Power 7 :    -18    -18    -13
         Volt Meas 7 :      0      0      0
         Temp Meas 7 :    163    162    163
 RX Noisefloor Cal 7 :      0      0      0
 RX Noisefloor Pwr 7 :      0      0      0
      RX Temp Meas 7 :      0      0      0
----------------------------------------------------------------------------------------
     Target 5GHz 11A :  6-24  36   48   54

         Frequency 0 :   5180[36]
             Power 0 :   32   32   30   26

         Frequency 1 :   5240[48]
             Power 1 :   32   32   30   26

         Frequency 2 :   5320[64]
             Power 2 :   32   32   30   26

         Frequency 3 :  5400[64+]
             Power 3 :   32   32   30   26

         Frequency 4 :  5500[100]
             Power 4 :   32   32   30   26

         Frequency 5 :  5600[120]
             Power 5 :   32   32   30   24

         Frequency 6 :  5700[140]
             Power 6 :   32   32   30   24

         Frequency 7 :  5825[165]
             Power 7 :   32   32   30   24
----------------------------------------------------------------------------------------
    Target 5GHz HT20 :0-16 1-19  4   5   6   7  12  13  14  15  20  21  22  23

         Frequency 0 :   5180[36]
             Power 0 :  32  32  32  30  28  26  32  28  22  22  22  22  22  20

         Frequency 1 :   5220[44]
             Power 1 :  32  32  32  30  28  26  32  28  22  22  22  22  22  20

         Frequency 2 :   5320[64]
             Power 2 :  32  32  32  30  28  26  32  26  22  22  22  22  22  20

         Frequency 3 :  5500[100]
             Power 3 :  32  32  32  30  28  26  32  26  22  22  22  22  22  20

         Frequency 4 :  5600[120]
             Power 4 :  32  32  30  28  26  24  32  24  22  22  22  22  20  18

         Frequency 5 :  5700[140]
             Power 5 :  32  32  30  28  26  24  32  24  22  22  22  22  20  18

         Frequency 6 :  5745[149]
             Power 6 :  32  32  28  26  24  22  32  22  22  22  22  22  18  16

         Frequency 7 :  5825[165]
             Power 7 :  32  32  28  26  24  22  32  22  22  22  22  22  18  16
----------------------------------------------------------------------------------------
    Target 5GHz HT40 :0-16 1-19  4   5   6   7  12  13  14  15  20  21  22  23

         Frequency 0 :   5190[38]
             Power 0 :  32  32  30  28  28  24  32  28  22  22  24  22  20  18

         Frequency 1 :   5230[46]
             Power 1 :  32  32  30  28  28  24  32  28  22  22  24  22  20  18

         Frequency 2 :  5310[60+]
             Power 2 :  32  32  30  28  26  24  32  26  22  22  24  22  20  18

         Frequency 3 : 5510[100+]
             Power 3 :  32  32  30  28  26  22  32  26  22  22  24  22  18  16

         Frequency 4 : 5550[108+]
             Power 4 :  32  32  30  26  24  22  32  24  22  22  24  22  18  16

         Frequency 5 : 5670[132+]
             Power 5 :  32  32  30  26  24  22  32  24  22  22  24  22  18  16

         Frequency 6 : 5755[149+]
             Power 6 :  32  32  30  24  22  20  32  22  22  20  22  20  18  16

         Frequency 7 : 5795[157+]
             Power 7 :  32  32  30  24  22  20  32  22  22  20  22  20  18  16
----------------------------------------------------------------------------------------
     Regulatory 5GHz :  FCC__11A  FCC_HT20  FCC_HT40  MKK__11A  MKK_HT20  MKK_HT40  ETSI_11A  ETSIHT20  ETSIHT40

         Frequency 0 :  5180[36]  5180[36]  5180[36]  5180[36]  5180[36]  5180[36]  5180[36]  5180[36]  5180[36]
        Power|Edge 0 :    24|0      24|0      18|0      60|0      60|0      60|0      18|0      18|0      18|0  

         Frequency 1 :  5220[44]  5220[44]  5220[44]  5220[44]  5220[44]  5220[44]  5220[44]  5220[44]  5220[44]
        Power|Edge 1 :    24|1      24|1      24|1      60|1      60|1      60|1      18|1      18|1      18|1  

         Frequency 2 :  5320[64]  5320[64]  5320[64]  5320[64]  5320[64]  5320[64]  5320[64]  5320[64]  5320[64]
        Power|Edge 2 :    24|0      24|0      24|0      60|0      60|0      60|0      18|0      18|0      18|0  

         Frequency 3 : 5400[64+] 5400[64+] 5400[64+] 5400[64+] 5400[64+] 5400[64+] 5400[64+] 5400[64+] 5400[64+]
        Power|Edge 3 :    24|1      24|1      24|1      60|1      60|1      60|1      18|1      18|1      18|1  

         Frequency 4 : 5500[100] 5500[100] 5500[100] 5500[100] 5500[100] 5500[100] 5500[100] 5500[100] 5500[100]
        Power|Edge 4 :    24|0      24|0      24|0      60|0      60|0      60|0      32|0      32|0      32|0  

         Frequency 5 : 5600[120] 5600[120] 5600[120] 5600[120] 5600[120] 5600[120] 5600[120] 5600[120] 5600[120]
        Power|Edge 5 :    24|1      24|1      24|1      60|1      60|1      60|1      32|1      32|1      32|1  

         Frequency 6 :5725[140+]5725[140+]5725[140+]5725[140+]5725[140+]5725[140+]5725[140+]5725[140+]5725[140+]
        Power|Edge 6 :    30|0      30|0      30|0      60|0      60|0      60|0      32|0      32|0      32|0  

         Frequency 7 : 5825[165] 5825[165] 5825[165] 5825[165] 5825[165] 5825[165] 5825[165] 5825[165] 5825[165]
        Power|Edge 7 :    30|1      30|1      30|1      60|1      60|1      60|1      32|1      32|1      32|1  
----------------------------------------------------------------------------------------
   5GHz Modal Header :    Chain0         Chain1         Chain2
        Ant. Control :    0x0010         0x0010         0x0010
        NF Threshold :        -1              0              0
         Range Chain :  Low  Mid  High Low  Mid  High Low  Mid  High
           xatten1DB :   21   25   28   22   25   27   21   25   24
       xatten1Margin :   11   18   11   11   18   11   11   18   11
               Range :  Low  Mid  High
          Temp Slope :   65   78   86
          Quick Drop :    0    0    0
      spur Frequency :  5500[100]       0x00       0x00       0x00       0x00
 Ant. Common Control : 0x00000110
Ant. Common Control2 : 0x00022222
           Ant. Gain :          0
       Switch Settle :         45
          Volt Slope :          0
       txEndToXpaOff :          0
         txEndToRxOn :          2
      XPA Bias Level :         15
  txFrameToDataStart :         14
       txFrameToPaOn :         14
      txFrameToXpaOn :         14
              txClip :          3
    ADC Desired Size :        -30
            Thresh62 :         28
     PAPRD Rate Mask : 5S 11L 11S HT20_7 HT20_12 HT20_13 HT20_22 HT20_23 HT40_0_8_16 HT40_1_3_9_11_17_19 HIGH_SCALE:6
PAPRD Rate Mask HT40 : 5S 11L 11S HT20_7 HT20_12 HT20_13 HT20_22 HT20_23 HT40_0_8_16 HT40_1_3_9_11_17_19 LOW_SCALE:6 MID_SCALE:6
     switch com spdt :          0
  XLNA Bias Strength :          0
            Reserved : 00 00 00 00 00 00 00 00 00 00 00
        Future Modal : 00 00 00 00 00 00 00
----------------------------------------------------------------------------------------
           Frequency :    Low    Mid   High
         PAPRD Scale :  <5400 >=5400 >=5700
               Other :   5180   5500   5785
----------------------------------------------------------------------------------------

ath10k/ ath11k/ ath12k are more complex than that.

1 Like

I'm mainly wondering how much does this data influence compared to for instance adjusting the antennas or rotating the device, generally the environment it's put in. Also there are devices that simply use standard miniPCIe cards which would not be so specifically calibrated. Are those inherently inferior?

dear expert @jschwart , I'm trying to rebuild the image of this binary file. could you please share the configuration for this?

Warmly thank you so much~