The Huawei B593s-22 is a 4G LTE CPE router. It supports multicast firmware upgrade – a method where firmware is broadcast over the local network via UDP multicast, and the router listens for it in a special recovery/bootloader mode.

The tool toolexe (or variants like multicast_upgrade_tool.exe) is a Windows-based utility that sends the firmware image to the router over multicast.

b593s22_upgrade_tool.exe --mode multicast ^
    --mcast-group 239.255.10.99 ^
    --port 7000 ^
    --interface "Eth0" ^
    --ttl 32 ^
    --firmware "HGW_B593s22_V100R001C00SPC100.bin" ^
    --rate-limit 5000 ^
    --retry-count 3 ^
    --timeout 300 ^
    --log "C:\isp_logs\b593_upgrade_$(date).csv"

Optional flags:

Before executing the tool, verify:

# 1. Ensure all B593s22 are on same VLAN and IGMP snooping is enabled
show igmp snooping vlan 100

Fix: Your NAND flash has bad blocks. The tool should skip them. If it aborts, you need a different version of toolexe (one with "Skip Bad Block" feature).

NEVER interrupt the ToolExe during the [WRITING_NAND] phase (after 95%). The B593s22 has no bootloader recovery via LAN if the primary u-boot is corrupted. Always use a UPS on both the technician's PC and the switch stack. Keep a serial-to-TTL adapter (3.3V, baud 115200) on hand to debrick via tftp 0x81000000 in U-Boot console.


This content is for educational and internal ISP use. Reverse engineering the B593s22 bootloader may violate local laws and Huawei's EULA.

This is a Windows executable tool (often named Huawei_Flash_Tool.exe, Balong_USB_Downloader.exe, or specifically b593_flasher.exe). This tool bypasses the standard web GUI upgrade (which refuses unsigned or unofficial firmware) and writes the bootloader and system image directly to the NAND flash memory via a backdoor USB serial mode.

The "toolexe" is crucial. You cannot perform a multicast upgrade using the 192.168.1.1 web interface. You must use this low-level executable.

Fix: You flashed the wrong firmware (e.g., B593s12 firmware on s22). You need to perform a recovery flash using the same toolexe but with the official stock firmware first, then retry the multicast version.