Xiaomi 3G (MIR3G) - Breed bootloader - Configure Dual boot OpenWrt / PandoraBox / Padvan

thanks again, now that i see that the link to the original bootloader is working please don't bother to re-upload again.. already downloaded!

@dartraiden thank you for the instructions to make my mir3g sort-of immortal :slight_smile:
Also saw you made a nice script to translate the Chinese webinterface of BREED but how to use that script, with GreaseMonkey?

For me many problems

Before save all mtdxx
cat /proc/mtd
cat /proc/mtd xxx > mtdx.bin with x part of flash
save in your computer with WinSCP

Finally i have removed flash memory
Add SPI W25Q128 with PBR-M1 pandorabox firmware ( used mtdx files with hexedit for save mtd parameters & files )
I use CH341 for flash SPI memory
Short J10 & J11

Run fine ...

My mtd files with pandorabox firmware and chinese pages removed :

mtd0: 00030000 00010000 "u-boot"
mtd1: 00010000 00010000 "u-boot-env"
mtd2: 00010000 00010000 "Factory"
mtd3: 01000000 00010000 "fullflash"
mtd4: 00fb0000 00010000 "firmware"
mtd5: 00184efd 00010000 "kernel"
mtd6: 00e0b103 00010000 "rootfs"
mtd7: 00070000 00010000 "rootfs_data"
mtd8: 00020000 00010000 "panic_oops"

https://mega.nz/file/SZozEKzJ#CQhvIa8bQNSC5Igah6y6vwqOJIeqWa1DIBkSxacSRQA

Install as usual from

1 Like

How can I restore my MTD partitions based on your files? I want to completely get rid of all pandorabox and breed files. I'm sure something in them messed up with my router since it hasn't been the same ever since I flashed breed.

@oiac320

My files are only for a box modified with a SPI ( 8 pins ) flash EEProm 16 Mo

Can you tell me how to change flash spi

  • step1: remove nand flash
    Step 2 add R4 is 4 ,7kohm
    Step 3: flash uboot spi and solder mainboard
    Step 4: short j111
    But no light go on and uart not run
    Can you help me

Step1: remove nand flash
Step 2 add R4 is 4 ,7kohm ??? for me no
Step 3: flash uboot spi and solder mainboard
Step 4: short J10 & J11

Your router xiami 3g? Do you has full flash for w25q128? You do not have R4 (that connect pin3 to pin8 of flash)

Mine is R3G PCB M035_R0102

https://4pda.ru/forum/index.php?showtopic=837667&st=17240

i use at this time PandoraBox firmware for PBR-M1

I user your firmware (mtd3) but not boot. I follow short j11 and j10 , remove r4 but not work.
I do follow this web
(https://4pda.ru/forum/index.php?showtopic=837667&st=1000#entry65661552)

Have you tested with the serial console ?

Have you tested a hard reset ?

Before change to spi flash, serial works but now it does not.
I have already your firmware in my spi flash now but it not boot, no light, no serial.
Could you photograph your main board. J11,J10 FLASH. R4

I confirm that my another xiami 3g works with spi 16mb with your method

  • short j10 and j11
    -remove nand flash and use spi flash 25q128
    But your firmware very strange now:
    -with having internet network wan port , Lan port does not received ip from router. It receives ip from upper router
  • with no cable in wan port, lan port can receive from router.
    It means I can not install package for this router from internet.

For firmware you can use also 4pda firmware or http://downloads.pangubox.com:6380/pandorabox/18.12/targets/ralink/mt7621/

I have compiled PBR-M1 version & not many free space
I use only in relay mode
For the ports LAN & WAN are untagged LAN 2 ( wan ) LAN 3 & 4

For package downloads.pangubox.com:6380/pandorabox not run all the time
This day is OK

For big packages i think that is possible to run with PBR-M2 firmware & W25Q2568FV
*

Thank you for your help.
I have another question?
In your firmware I can not go to breed boot( press reset button and plug power in), network can not have ip. I set static ip is 192.168.1.1

  • when router booted. I go to router by ssh and put firmware(padavan or openwrt) by command: Mtd -r write /tmp/firmwre_file firmware. Or i put bootloader to tmp
    All command was lock, can not flash firmware or bootloader.

And another question is I use 25q256 with 16pin does it work?
Sorry my English because I am vietnamese.

With PandoraBox firmware i have tested just at this time with serial console ( ComX 115200):

1 -reset default -> firstboot yes -> reboot -f
2 - login root password admin
3 - ifconfig br-lan 192.168.1.5 ( my computer is 192.168.1.10) )
4 - i connect network cable ( the 2 * LAN or WAN port )
5 - i can ping my computer 192.168.1.10
After i configure without problem with the web page 192.168.1.5 root admin
*
WIth reset button ( 10 seconds )
I can connect webpage 192.168.1.1
*
For the 25Q256 i have not tested but sure with 8 pins not 16
*

A little info:

This day http://downloads.pangubox.com:6380/ is ok ...

I try to usb 16pins to 8pins spi then it was death.
I presss reset button and plug power but can not into breedboot and only red led light. I think maybe uboot fail.
I go to firmware page but it has 22mb and my bios only 16mb.
Please tell me how to flash openwrt or padavan for my router
I fell the bios is lock to flash now.

< 16M
http://downloads.pangubox.com:6380/pandorabox/18.10/targets/ralink/mt7621/

for recover have you a USB serial port adapter

usb 16pins to 8pins ???