Temat: Uwaliłem bootloader w Netgear WNDR4300v1, chcę ratować przez JTAG
Hej, zrobiłem głupotę:
ar7240> nand eraseI zrestartowałem router, licząc że U-Boot zostanie...
Nie został. Po restarcie mam coś takiego na konsoli:
WASP BootROM Ver. 1.1
Nand Flash init
ONFI: Control setting = 0xb44
hdr: [0xffffffff : 0xffffffff : 0xffffffff : 0xffffffff]
nand_load_fw: read 2097151 pages
ExcCode 03 -> TLB(store)
EPC bfc01328, BadVAddr ffffffff, Cause 0000000c, Status 10400006
R0 (r0) = 00000000 R8 (t0) = ffffffff R16(s0) = 00000023 R24(t8) = e855100c
R1 (at) = 00000001 R9 (t1) = 000000c0 R17(s1) = 00000800 R25(t9) = bfc010f4
R2 (v0) = 000000ff R10(t2) = 000000ff R18(s2) = 00030000 R26(k0) = ffffffff
R3 (v1) = 00000001 R11(t3) = 000f1b40 R19(s3) = 00010000 R27(k1) = bd007bf0
R4 (a0) = ffffffff R12(t4) = 000003e6 R20(s4) = 00000800 R28(gp) = 3a1bec7e
R5 (a1) = bd004010 R13(t5) = 00000500 R21(s5) = ffffffff R29(sp) = bd007f60
R6 (a2) = 000007ef R14(t6) = 23b65a8a R22(s6) = ffffffff R30(fp) = 00000000
R7 (a3) = ffffffff R15(t7) = 67f03823 R23(s7) = bd000000 R31(ra) = bfc055f0
[bd007f60] 0000002c bfc099c0 001fffff bfc09bb4
[bd007f70] ffffffff 02000040 ffffffff ffffffff
[bd007f80] 000007f0 14012201 00000023 bd000000
[bd007f90] 00030000 b8060004 bd000000 00000184
[bd007fa0] ffffffff bd000000 00000000 bfc00fd0
[bd007fb0] bcfbfd3d 555eb351 ee95f5fa 229c02f6
[bd007fc0] cda5dd8f 06028c88 9a67d509 d6509060
[bd007fd0] ead0e94f 01f80da0 bd007ff0 00000024
[bd007fe0] bd000000 bd007ff0 b8060004 bfc004fcfind_hif: bootstrap = 0xaf055a
WASP BootROM Ver. 1.1
Nand Flash init
ONFI: Control setting = 0xb44
hdr: [0xffffffff : 0xffffffff : 0xffffffff : 0xffffffff]
nand_load_fw: read 2097151 pages
ExcCode 03 -> TLB(store)
EPC bfc01328, BadVAddr ffffffff, Cause 0000000c, Status 10400006
R0 (r0) = 00000000 R8 (t0) = ffffffff R16(s0) = 00000023 R24(t8) = e855100c
R1 (at) = 00000001 R9 (t1) = 000000c0 R17(s1) = 00000800 R25(t9) = bfc010f4
R2 (v0) = 000000ff R10(t2) = 000000ff R18(s2) = 00030000 R26(k0) = ffffffff
R3 (v1) = 00000001 R11(t3) = 000f1b40 R19(s3) = 00010000 R27(k1) = bd007bf0
R4 (a0) = ffffffff R12(t4) = 000003e6 R20(s4) = 00000800 R28(gp) = 3a1bec7e
R5 (a1) = bd004010 R13(t5) = 00000500 R21(s5) = ffffffff R29(sp) = bd007f60
R6 (a2) = 000007ef R14(t6) = 23b65a8a R22(s6) = ffffffff R30(fp) = 00000000
R7 (a3) = ffffffff R15(t7) = 67f03823 R23(s7) = bd000000 R31(ra) = bfc055f0
[bd007f60] 0000002c bfc099c0 001fffff bfc09bb4
[bd007f70] ffffffff 02000040 ffffffff ffffffff
[bd007f80] 000007f0 14012201 00000023 bd000000
[bd007f90] 00030000 b8060004 bd000000 00000184
[bd007fa0] ffffffff bd000000 00000000 bfc00fd0
[bd007fb0] bcfbfd3d 555eb351 ee95f5fa 229c02f6
[bd007fc0] cda5dd8f 06028c88 9a67d509 d6509060
[bd007fd0] ead0e94f 01f80da0 bd007ff0 00000024
[bd007fe0] bd000000 bd007ff0 b8060004 bfc004fcDa radę przywrócić do działania przez JTAG? Mam dostęp do drugiej sztuki WNDR4300v1 z której mogę coś zgrać, żeby zaflashować...