README for ar725w_factory_full_flash.bin.gz This is a complete image of the factory flash from an Airlink101 AR725W wireless router. Airlink is no longer providing any sort of support for the device, and despite my pleas has not released an archive of the firmware that came with the device. This image was obtained using nvram restore cat /dev/mtdblock/0 > /tmp/config.bin and fetching config.bin over the web interface. As such, it does not have the right header to flash over the web interface. I have not figured out the header format yet so this must be done with the device's serial console using the u-Boot firmware command line. Map: 0x000000 - 0x050000 uBoot 0x050000 - 0x130000 Linux Kernel 0x130000 - 0x390000 RootFS 0x390000 - 0x3e0000 LANGUAGE_PACK 0x3e0000 - 0x3f0000 NVRAM 0x3f0000 - 0x400000 NVRAM_FACTORY Flash base is 0xBC400000. NEVER unprotect 0xBC400000 - 0xBC450000 as it contains the u-Boot firmware and **erasing it will brick your device.** This image contains u-Boot from my board but also contains the hardcoded MAC (at 0x40004) of my device. Thus, flashing it will change your device's MAC address unless you patch the image. So, in short, don't do it! I have no idea how to fix a board whose u-Boot has been erased. The MAC in the NVRAM_FACTORY section does not match my device so it apparently is not used for anything.