cohomology
Occasional Visitor
So I am trying to help a friend with his bricked rt-ac3100 and had no success no matter what. The router cannot be put into recovery so I hooked up TTL. I managed to flash asus-merlin 384.13 but then the console seems to be stuck. I waited about 10 minutes and rebooted the router but everything remained exactly the same as before the flash. I am attaching the console output and hopefully someone with more experience can help me out. Thanks.
Code:
Beagle Term. https://github.com/beagleterm/beagle-term
Device found on /dev/ttyUSB0 via Connection ID 1
Digital core power voltage set to 1.05V
SHMOO VER 1.13
PKID07DC06011801080000000000001A103F01000000
S3000020F
00001750
RDLYW0 00000004
RDENW0 00000042
RDQSW0
0000000000111111111122222222223333333333444444444455555555556666
0123456789012345678901234567890123456789012345678901234567890123
00 --------++++++++++++++++++++++++++++X+++++++++++++++++++++++++--
01 ------------++++++++++++++++++++++++++X+++++++++++++++++++++++++
02 -------------+++++++++++++++++++++++++X+++++++++++++++++++++++++
03 ------------++++++++++++++++++++++++++X+++++++++++++++++++++++++
04 ------++++++++++++++++++++++++++X++++++++++++++++++++++++++-----
05 -------++++++++++++++++++++++++++++X++++++++++++++++++++++++++--
06 ---------+++++++++++++++++++++++++++X++++++++++++++++++++++++++-
07 --------++++++++++++++++++++++++++X++++++++++++++++++++++++++---
08 ------+++++++++++++++++++++++++++++X+++++++++++++++++++++++++++-
09 --------++++++++++++++++++++++++++++X++++++++++++++++++++++++++-
10 --------++++++++++++++++++++++++++++X++++++++++++++++++++++++++-
11 -------+++++++++++++++++++++++++++X++++++++++++++++++++++++++---
12 ---+++++++++++++++++++++++++++X+++++++++++++++++++++++++++------
13 ----++++++++++++++++++++++++++X++++++++++++++++++++++++++-------
14 ---+++++++++++++++++++++++++++X+++++++++++++++++++++++++++------
15 ---++++++++++++++++++++++++++X++++++++++++++++++++++++++--------
PW0
0000000000111111111122222222223333333333444444444455555555556666
0123456789012345678901234567890123456789012345678901234567890123
00 --------++++++++++++++++++++++++++++X+++++++++++++++++++++++++--
01 -----------++++++++++++++++++++++++++X++++++++++++++++++++++++++
02 --------------+++++++++++++++++++++++++X++++++++++++++++++++++++
03 -----------++++++++++++++++++++++++++X++++++++++++++++++++++++++
04 -------++++++++++++++++++++++++++X+++++++++++++++++++++++++-----
05 -------++++++++++++++++++++++++++++X++++++++++++++++++++++++++--
06 ----------+++++++++++++++++++++++++++X+++++++++++++++++++++++++-
07 --------++++++++++++++++++++++++++X++++++++++++++++++++++++++---
08 -------++++++++++++++++++++++++++++X+++++++++++++++++++++++++++-
09 --------++++++++++++++++++++++++++++X++++++++++++++++++++++++++-
10 --------++++++++++++++++++++++++++++X++++++++++++++++++++++++++-
11 ------+++++++++++++++++++++++++++X+++++++++++++++++++++++++++---
12 ----+++++++++++++++++++++++++++X++++++++++++++++++++++++++------
13 ----++++++++++++++++++++++++++X++++++++++++++++++++++++++-------
14 ---+++++++++++++++++++++++++++X+++++++++++++++++++++++++++------
15 ---++++++++++++++++++++++++++X++++++++++++++++++++++++++--------
NW0
0000000000111111111122222222223333333333444444444455555555556666
0123456789012345678901234567890123456789012345678901234567890123
00 -+++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++
01 -----+++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++
02 --------++++++++++++++++++++++++++++X+++++++++++++++++++++++++++
03 -----+++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++
04 ----++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++
05 ----++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++
06 -----+++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++
07 ---++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++
08 ++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++
09 --+++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++
10 --+++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++
11 --+++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++--
12 ++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++---
13 ++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++---
14 ++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++----
15 +++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++-----
WRDQW0
0000000000111111111122222222223333333333444444444455555555556666
0123456789012345678901234567890123456789012345678901234567890123
00 ++++++++++++++++++++++++++X+++++++++++++++++++++++++---------++-
01 +++++++++++++++++++++++++++X+++++++++++++++++++++++++++-------+-
02 ++++++++++++++++++++++++++++X+++++++++++++++++++++++++++-+------
03 ++++++++++++++++++++++++++++X+++++++++++++++++++++++++++-+------
04 +++++++++++++++++++++++++X+++++++++++++++++++++++++----------++-
05 ++++++++++++++++++++++++++X++++++++++++++++++++++++++---------+-
06 ++++++++++++++++++++++++++X+++++++++++++++++++++++++---------++-
07 +++++++++++++++++++++++++++X++++++++++++++++++++++++++--------+-
08 ++++++++++++++++++++++++++X+++++++++++++++++++++++++------------
09 +++++++++++++++++++++++++++X+++++++++++++++++++++++++++---------
10 +++++++++++++++++++++++++++X+++++++++++++++++++++++++++---------
11 ++++++++++++++++++++++++++X+++++++++++++++++++++++++------------
12 +++++++++++++++++++++++++X++++++++++++++++++++++++-----------++-
13 ++++++++++++++++++++++++X++++++++++++++++++++++++---------------
14 ++++++++++++++++++++++++X+++++++++++++++++++++++--------------+-
15 ++++++++++++++++++++++++X++++++++++++++++++++++++-------------+-
WRDMW0 00000026
WRDMW0 00000025
ADDR
0000000000111111111122222222223333333333444444444455555555556666
0123456789012345678901234567890123456789012345678901234567890123
00 +++++++++++++++++++++++S+++++++X++++++++++++++++++++++++++++++++
Decompressing...done
CFE version 7.14.131.1608 (r589038) based on BBP 1.0.37 for BCM947XX (32bit,SP,)
Build Date: äº 11æ 17 16:37:23 CST 2015 (ham@xpdev)
Copyright (C) 2000-2008 Broadcom Corporation.
Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
DDR Clock: 800 MHz
Info: DDR frequency set from clkfreq=1400,*800*
et2: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 7.14.131.1608 (r589038)
CPU type 0x0: 1400MHz
Tot mem: 524288 KBytes
CFE mem: 0x00F00000 - 0x017A7AE0 (9075424)
Data: 0x00F500A4 - 0x00F505E4 (1344)
BSS: 0x00F505F0 - 0x00FA5AE0 (349424)
Heap: 0x00FA5AE0 - 0x017A5AE0 (8388608)
Stack: 0x017A5AE0 - 0x017A7AE0 (8192)
Text: 0x00F00000 - 0x00F46540 (288064)
Device eth0: hwaddr 70-4D-7B-E4-4D-78, ipaddr 192.168.1.1, mask 255.255.255.0
gateway not set, nameserver not set
Null Rescue Flag.
boot the image...
go load
Loader:raw Filesys:tftp Dev:eth0 File:: Options:(null)
Loading: TFTP Server.
..tftp retry wait 0
Failed.
Could not load :: Interrupted
CFE> ^C
CFE> ^C
CFE> ^C
CFE> show
Incomplete command: "show"
Available "show" commands: clocks, devices
*** command status = -2
CFE> show clocks
Current clocks: 1400/800/250/125 Mhz.
*** command status = 0
CFE> show devices
Device Name Description
------------------- ---------------------------------------------------------
uart0 NS16550 UART at 0x18000300
uart1 NS16550 UART at 0x18000400
nflash0 Zentel NAND flash size 131072KB
nflash0.boot Zentel NAND flash offset 0 size 512KB
nflash0.nvram Zentel NAND flash offset 80000 size 1536KB
nflash0.trx Zentel NAND flash offset 200000 size 1KB
nflash0.os Zentel NAND flash offset 20001C size 129024KB
nflash1.boot Zentel NAND flash offset 0 size 512KB
nflash1.nvram Zentel NAND flash offset 80000 size 1536KB
nflash1.trx Zentel NAND flash offset 200000 size 63488KB
nflash1.brcmnand Zentel NAND flash offset 4000000 size 65536KB
eth0 Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller
*** command status = 0
CFE> flash
flash [options] filename [flashdevice]
Copies data from a source file name or device to a flash memory device.
The source device can be a disk file (FAT filesystem), a remote file
(TFTP) or a flash device. The destination device may be a flash or eeprom.
If the destination device is your boot flash (usually flash0), the flash
command will restart the firmware after the flash update is complete
-noerase Don't erase flash before writing
-norescue Don't check anything
-offset=* Begin programming at this offset in the flash device
-size=* Size of source device when programming from flash to flash
-noheader Override header verification, flash binary without checking
-ndump dump nand flash
-block=* which block to dump
-forceflash Dangerous Command, Don't use if you don't know what you do
-erase Erase the partition, can set the offset and length
-cfe write to flash and stay at cfe command mode
-mem Use memory as source instead of a device
*** command status = -2
CFE> nvram erase
*** command status = 0
CFE> flash -noheader : nflash1.trx
Reading ::
TFTP Server.
..tftp retry wait 0
- last blk -
Done. 37343232 bytes read
Download of 0x239d000 bytes completed
Write kernel and filesystem binary to FLASH
Programming...copysize=37343232, amtcopy=37343232
done. 37343232 bytes written
