OpenWrt Forum Archive

Topic: The support for D-LINK DIR-510L - 4000mAh, 2x USB

The content of this topic has been archived between 6 Feb 2018 and 5 May 2018. Unfortunately there are posts – most likely complete pages – missing.

okay thank you!

I'm sure you're knowing what you do, else I woud not have had flashed the image.

But such things can always happen.

I come back when the converter arrives. 8-)

(Last edited by lowmaster on 11 Apr 2018, 01:59)

Okay, I have got the equpment,
opened the device,
removed the foil to access the connection points: RX TX GND +
installed win 10 driver
downloaded realterm
soldered wires to rx tx and gnd
...

Please connect tx, rx and gnd to converter. Converter to computer.

Please download putty:
https://www.putty.org/

In first window please serial, COMX (Your COM port) and speed 57600. Then click "open".
Then please start the device, copy all bootlog and paste here.

this is the output i'm getting:

               
CDM56CDL_U03 Jboot B796
JRecovery Version R1.2 2013/10/04 18:32
SPI FLASH: MX25l12805d 16M
.
.

with reset button pressed:

CDM56CDL_U03 Jboot B796Reset button had been pressed

JRecovery Version R1.2 2013/10/04 18:32
SPI FLASH: MX25l12805d 16M
.
.

(Last edited by lowmaster on 13 Apr 2018, 17:35)

And after that nothing happen?

nope

"Recovery" suggests that it may be waiting to TFTP something.

that would explain why lan gets active for a minute...

any suggestions for the procedure to do something?

Please try send ctrl + c or enter. Ypu should see bootloader console. Please paste command list of Your jboot (press ? and enter).

CDM56CDL_U03 Jboot B796
JRecovery Version R1.2 2013/10/04 18:32
SPI FLASH: MX25l12805d 16M
.
...Boot addr = 0x80400000
.................

This is code for propper bootling. first dot line means rading config partition. In rest of jboot routers next phase is  booting (third line). In Your router, is another phase durring boot. It read third partition before recovery mode. I haven't this partition. I think, it is:
0x000000e70000-0x000000ef0000 : "Storage"
0x000000ef0010-0x000000ff0010 : "UI"

lowmaster, which partition backup You make?

I'm trying several key combination by now without success

the only thing is when I press enter while the text above scolls the 2 dots are in 1 line

CDM56CDL_U03 Jboot B796
JRecovery Version R1.2 2013/10/04 18:32
SPI FLASH: MX25l12805d 16M
..

I backuped:
bootloader.bin
config.bin
mdt2.bin
mdt3.bin
mdt4.bin
mdt5.bin
mdt6.bin


BTW,

on the other side of the board I found similar jtags which are labeled like this:

gnd / data / clk / vup

I'm wondering what this is for?

(Last edited by lowmaster on 14 Apr 2018, 23:57)

Could You upload it somewere and give link?

Do You have spi programmer or raspberry pi or banana pi or something like that?

The labeled places could be i2c too.

okay

I think I will need all 2 packages then.

links updated

(Last edited by lowmaster on 15 Apr 2018, 21:03)

I found the problem. The space between 0x000000010000 (end of bootloader) and 0x000000210000 (start of kernel) is the difference between DIR-510 and another jboot devices. Bootloader have hidden partiiton.

I'am not sure, that we can make router working without mtd0 dump.

Does anybody have DIR-510L and can make dump? I look on ebay but there is zero devices.

I bought a new one off amazon for 39 euros yesterday

so maybe tomorrow I have it here.

but is mdt0 not the bootloader.bin??

(Last edited by lowmaster on 16 Apr 2018, 06:00)

lowmaster wrote:

I bought a new one off amazon for 39 euros yesterday

so maybe tomorrow I have it here.

but is mdt0 not the bootloader.bin??

Yes, bootloader.bin is mtd0. If You upload it to device, it will be unbricked.
When You unbrick device, we can try upload proper image.

chkdsk wrote:
lowmaster wrote:

I bought a new one off amazon for 39 euros yesterday

so maybe tomorrow I have it here.

but is mdt0 not the bootloader.bin??

Yes, bootloader.bin is mtd0. If You upload it to device, it will be unbricked.
When You unbrick device, we can try upload proper image.


Noooo!!!
lowmaster, do not flash that 16M file to the old router!

The /dev/mtd0 is the "Whole" - the full backup specific to every router, that backup should be kept on a safe place.
Create that backup and name it "dlink_dir-510l-whole-xxxxxxx.bin", where xxxxxxx is the router's MAC address.


Do you have the backup bootloader.bin (which is 16 MByte) from 2018-04-09 12:10:34?


Before killing the new router too, please provide some basic info after logging into router through ssh/telnet/uart!

  • dmesg

  • cat /proc/cpuinfo

  • cat /proc/meminfo

  • cat /proc/interrupts

  • cat /proc/partitions

  • cat /proc/mtd

  • cat /proc/iomem

  • cat /proc/bus/usb/devices

  • ./gpiodump-mipsel-static - from jclehner/gpiodump-mt7620

  • ifconfig -a

  • brctl show

Please provide a screenshot from the emergency flashing site of the working router - please include the browser's address bar too!
Could you access that page of the bricked router too?

Emergency Flashing topic @ DLINK

@xabolcs

The router is bricked. We talk about reflash with SPI programmer.

Now I see! ... But it should be renamed from bootloader.bin! wink



Here is the binwalk output of http://174.137.163.116/bootloader.bin

DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------
13188         0x3384          LZMA compressed data, properties: 0x5D, dictionary size: 8388608 bytes, uncompressed size: 89456 bytes
65592         0x10038         LZMA compressed data, properties: 0x5D, dictionary size: 33554432 bytes, uncompressed size: 2694312 bytes
942080        0xE6000         Squashfs filesystem, little endian, version 4.0, compression:gzip, size: 1205152 bytes, 843 inodes, blocksize: 131072 bytes, created: 2013-08-28 12:36:26
2162744       0x210038        LZMA compressed data, properties: 0x5D, dictionary size: 33554432 bytes, uncompressed size: 4185244 bytes
3670016       0x380000        Squashfs filesystem, little endian, version 4.0, compression:gzip, size: 9789140 bytes, 1314 inodes, blocksize: 131072 bytes, created: 2018-02-15 05:12:45
14614528      0xDF0000        Squashfs filesystem, little endian, version 4.0, compression:gzip, size: 157665 bytes, 14 inodes, blocksize: 131072 bytes, created: 2016-09-07 08:38:08
15138816      0xE70000        JFFS2 filesystem, little endian
15663120      0xEF0010        Squashfs filesystem, little endian, version 4.0, compression:gzip, size: 988560 bytes, 435 inodes, blocksize: 131072 bytes, created: 2016-09-08 06:11:20
16711744      0xFF0040        Zlib compressed data, default compression

okay, all stuff arrived today. Now I have this:

http://174.137.163.116/DIR-510L.JPG

What can I do now?

8-)

This is the recovery page of the new router. It comes up when press and hold reset while it boots. the upper LED blinks fast in this mode, then you can connect to its wlan named dir510l without a wireless-key:

http://174.137.163.116/dir510recovery.jpg

The bricked one does not come up with anything useful. Just the Lan port comes up and goes down after a minute. I checked all common IP's of d-link ant tp-link routers to connect, but nothing. No dhcp in any direction. No packets received, just sent from the Notebooks LAN interface.

The results of the commands:

dmesg

abled
Calibrating delay loop... 386.04 BogoMIPS (lpj=772096)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
NET: Registered protocol family 16
RALINK_GPIOMODE = 9d
RALINK_GPIOMODE = 9d
PPLL_CFG1=0xe6c000
MT7620 PPLL lock
PPLL_DRV =0x80080504
start PCIe register access
RALINK_PCI_PCICFG_ADDR = 1000f0

*************** MT7620 PCIe RC mode *************
bio: create slab <bio-0> at 0
vgaarb: loaded
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
pci 0000:00:00.0: reg 14: [mem 0x00000000-0x0000ffff]
pci 0000:00:00.0: supports D1
pci 0000:00:00.0: PME# supported from D0 D1 D3hot
pci 0000:00:00.0: PME# disabled
pci 0000:01:00.0: reg 10: [mem 0x00000000-0x000fffff]
pci 0000:01:00.0: PME# supported from D0 D3hot D3cold
pci 0000:01:00.0: PME# disabled
pci 0000:01:00.1: reg 10: [mem 0x00000000-0x000fffff]
pci 0000:01:00.1: supports D1
pci 0000:01:00.1: PME# supported from D0 D1 D3hot D3cold
pci 0000:01:00.1: PME# disabled
pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x201fffff]
pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff]
pci 0000:00:00.0: BAR 1: set to [mem 0x20200000-0x2020ffff] (PCI address [0x20200000-0x2020ffff]
pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff]
pci 0000:01:00.0: BAR 0: set to [mem 0x20000000-0x200fffff] (PCI address [0x20000000-0x200fffff]
pci 0000:01:00.1: BAR 0: assigned [mem 0x20100000-0x201fffff]
pci 0000:01:00.1: BAR 0: set to [mem 0x20100000-0x201fffff] (PCI address [0x20100000-0x201fffff]
pci 0000:00:00.0: PCI bridge to [bus 01-01]
pci 0000:00:00.0:   bridge window [io  disabled]
pci 0000:00:00.0:   bridge window [mem 0x20000000-0x201fffff]
pci 0000:00:00.0:   bridge window [mem pref disabled]
PCI: Setting latency timer of device 0000:00:00.0 to 64
BAR0 at slot 0 = 0
bus=0x0, slot = 0x0
res[0]->start = 0
res[0]->end = 0
res[1]->start = 20200000
res[1]->end = 2020ffff
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
bus=0x1, slot = 0x0
res[0]->start = 20000000
res[0]->end = 200fffff
res[1]->start = 0
res[1]->end = 0
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
bus=0x1, slot = 0x0
res[0]->start = 20100000
res[0]->end = 201fffff
res[1]->start = 0
res[1]->end = 0
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
Switching to clocksource MIPS
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
UDP hash table entries: 256 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
PCI: CLS 80 bytes, default 32
RT3xxx EHCI/OHCI init.
squashfs: version 4.0 (2009/01/31) Phillip Lougher
JFFS2 version 2.2 (NAND) (ZLIB) (RTIME) (c) 2001-2006 Red Hat, Inc.
msgmni has been set to 245
Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254)
io scheduler noop registered (default)
pci_hotplug: PCI Hot Plug PCI Core version: 0.5
Ralink gpio driver initialized
Enable Ralink GDMA Controller Module
GDMA IP Version=3
spidrv_major = 217
Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x10000500 (irq = 37) is a 16550A
serial8250: ttyS1 at MMIO 0x10000c00 (irq = 12) is a 16550A
brd: module loaded
deice id : c2 20 18 c2 20 (2018c220)
MX25L12805D(c2 2018c220) (16384 Kbytes)
mtd .name = raspi, .size = 0x01000000 (0M) .erasesize = 0x00000010 (0K) .numeraseregions = 4096
Creating 8 MTD partitions on "raspi":
0x000000000000-0x000001000000 : "Whole"
0x000000000000-0x000000010000 : "Bootloader"
0x000000210000-0x000000380000 : "Kernel"
0x000000380000-0x000000df0000 : "RootFS"
0x000000df0000-0x000000e70000 : "MyDLink"
0x000000e70000-0x000000ef0000 : "Storage"
0x000000ef0010-0x000000ff0010 : "UI"
mtd: partition "UI" doesn't start on an erase block boundary -- force read-only
0x000000ff0000-0x000001000000 : "Config"
rdm_major = 253
SMACCR1 -- : 0x0000000c
SMACCR0 -- : 0x432880f8
Ralink APSoC Ethernet Driver Initilization. v3.0  256 rx/tx descriptors allocated, mtu = 1500!
SMACCR1 -- : 0x0000000c
SMACCR0 -- : 0x43288071
PROC INIT OK!
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
NET: Registered protocol family 24
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
u32 classifier
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (1965 buckets, 7860 max)
ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Restricted Cone
arp_tables: (C) 2002 David S. Miller
TCP cubic registered
NET: Registered protocol family 17
Bridge firewalling registered
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
Freeing unused kernel memory: 168k freed
Algorithmics/MIPS FPU Emulator v1.5
Raeth v3.0 (Tasklet,SkbRecycle)

phy_tx_ring = 0x07fbc000, tx_ring = 0xa7fbc000

phy_rx_ring0 = 0x07fbd000, rx_ring0 = 0xa7fbd000
SMACCR1 -- : 0x0000000c
SMACCR0 -- : 0x43288071
CDMA_CSG_CFG = 81000000
GDMA1_FWD_CFG = 20710000
phy 0, reg 0, val 0x3900
phy 0, reg 0, val 0x3900
switch register base addr to system register 0xb0000000
write offset 0x60, value 0x695
phy 1, reg 0, val 0x3900
phy 2, reg 0, val 0x3900
phy 3, reg 0, val 0x3900
phy 4, reg 0, val 0x3900
phy 0, reg 0, val 0x3300
phy 0, reg 0, val 0x3300
device eth2 entered promiscuous mode
NET: Registered protocol family 10
device eth2.1 entered promiscuous mode
br0: port 1(eth2.1) entering learning state
br0: port 1(eth2.1) entering learning state
ramtd_erase: addr:ff0000 len:0
ramtd_write: to:ff0000 len:10
ramtd_write: to:ff0010 len:55e
ramtd_write: to:ff0000 len:1
addrconf_dad_completed 7
rt2860v2_ap: module license 'unspecified' taints kernel.
Disabling lock debugging due to kernel taint
addrconf_dad_completed 7
addrconf_dad_completed 7
addrconf_dad_completed 7
Length of MAC:6
 mac:78:54:2e:9d:3b:33:
----


=== pAd = c05f4000, size = 1142176 ===

 RTMPAllocTxRxRingMemory, Status=0
 RTMPAllocAdapterBlock, Status=0
AP Driver version-2.7.1.6
Length of MAC:6
 mac:78:54:2e:9d:3b:34:
----
PCI: Setting latency timer of device 0000:01:00.0 to 64


=== pAd = c0c02000, size = 1632552 ===

 RTMPAllocTxRxRingMemory, Status=0
 RTMPAllocAdapterBlock, Status=0
device_id =0x7650
==>MT76x0_WLAN_ChipOnOff(): OnOff:1, pAd->WlanFunCtrl:0x0, Reg-WlanFunCtrl=0xff000002
MACVersion = 0x76502000
load fw spent 12ms
RX DESC a7714000 size = 2048
RX1 DESC a7715000 size = 2048
cfg_mode=14
cfg_mode=14
wmode_band_equal(): Band Not Equal!
1. Phy Mode = 49
2. Phy Mode = 49
ext_pa_current_setting = 1
3. Phy Mode = 49
AntCfgInit: primary/secondary ant 0/1
ChipStructAssign(): RALINK6590 hook !
MCS Set = ff 00 00 00 01
MT76x0_ChipBBPAdjust():rf_bw=2, ext_ch=1, PrimCh=44, HT-CentCh=46, VHT-CentCh=42
APStartUp(): AP Set CentralFreq at 42(Prim=44, HT-CentCh=46, VHT-CentCh=42, BBP_BW=2)
Main bssid = 78:54:2e:9d:3b:34
== rt28xx_init, Status=0
0x1300 = 00064300
RTMPDrvOpen(1):Check if PDMA is idle!
RTMPDrvOpen(2):Check if PDMA is idle!
device rai0 entered promiscuous mode
br0: port 2(rai0) entering learning state
br0: port 2(rai0) entering learning state
addrconf_dad_completed 7
RX DESC a766b000  size = 2048
RTMP_TimerListAdd: add timer obj c068c6f0!
RTMP_TimerListAdd: add timer obj c0657828!
RTMP_TimerListAdd: add timer obj c06577fc!
RTMP_TimerListAdd: add timer obj c06577d0!
RTMP_TimerListAdd: add timer obj c05fc2d4!
RTMP_TimerListAdd: add timer obj c05fbec8!
RTMP_TimerListAdd: add timer obj c05fc2a4!
RTMP_TimerListAdd: add timer obj c05fc64c!
RTMP_TimerListAdd: add timer obj c05fc39c!
RTMP_TimerListAdd: add timer obj c05fc3cc!
RTMP_TimerListAdd: add timer obj c05fc58c!
RTMP_TimerListAdd: add timer obj c05fc5bc!
RTMP_TimerListAdd: add timer obj c05ff78c!
RTMP_TimerListAdd: add timer obj c05ff380!
RTMP_TimerListAdd: add timer obj c05ff75c!
RTMP_TimerListAdd: add timer obj c05ffb04!
RTMP_TimerListAdd: add timer obj c05ff854!
RTMP_TimerListAdd: add timer obj c05ff884!
RTMP_TimerListAdd: add timer obj c05ffa44!
RTMP_TimerListAdd: add timer obj c05ffa74!
RTMP_TimerListAdd: add timer obj c0602c44!
RTMP_TimerListAdd: add timer obj c0602838!
RTMP_TimerListAdd: add timer obj c0602c14!
RTMP_TimerListAdd: add timer obj c0602fbc!
RTMP_TimerListAdd: add timer obj c0602d0c!
RTMP_TimerListAdd: add timer obj c0602d3c!
RTMP_TimerListAdd: add timer obj c0602efc!
RTMP_TimerListAdd: add timer obj c0602f2c!
RTMP_TimerListAdd: add timer obj c06060fc!
RTMP_TimerListAdd: add timer obj c0605cf0!
RTMP_TimerListAdd: add timer obj c06060cc!
RTMP_TimerListAdd: add timer obj c0606474!
RTMP_TimerListAdd: add timer obj c06061c4!
RTMP_TimerListAdd: add timer obj c06061f4!
RTMP_TimerListAdd: add timer obj c06063b4!
RTMP_TimerListAdd: add timer obj c06063e4!
RTMP_TimerListAdd: add timer obj c06095b4!
RTMP_TimerListAdd: add timer obj c06091a8!
RTMP_TimerListAdd: add timer obj c0609584!
RTMP_TimerListAdd: add timer obj c060992c!
RTMP_TimerListAdd: add timer obj c060967c!
RTMP_TimerListAdd: add timer obj c06096ac!
RTMP_TimerListAdd: add timer obj c060986c!
RTMP_TimerListAdd: add timer obj c060989c!
RTMP_TimerListAdd: add timer obj c060ca6c!
RTMP_TimerListAdd: add timer obj c060c660!
RTMP_TimerListAdd: add timer obj c060ca3c!
RTMP_TimerListAdd: add timer obj c060cde4!
RTMP_TimerListAdd: add timer obj c060cb34!
RTMP_TimerListAdd: add timer obj c060cb64!
RTMP_TimerListAdd: add timer obj c060cd24!
RTMP_TimerListAdd: add timer obj c060cd54!
RTMP_TimerListAdd: add timer obj c060ff24!
RTMP_TimerListAdd: add timer obj c060fb18!
RTMP_TimerListAdd: add timer obj c060fef4!
RTMP_TimerListAdd: add timer obj c061029c!
RTMP_TimerListAdd: add timer obj c060ffec!
RTMP_TimerListAdd: add timer obj c061001c!
RTMP_TimerListAdd: add timer obj c06101dc!
RTMP_TimerListAdd: add timer obj c061020c!
RTMP_TimerListAdd: add timer obj c06133dc!
RTMP_TimerListAdd: add timer obj c0612fd0!
RTMP_TimerListAdd: add timer obj c06133ac!
RTMP_TimerListAdd: add timer obj c0613754!
RTMP_TimerListAdd: add timer obj c06134a4!
RTMP_TimerListAdd: add timer obj c06134d4!
RTMP_TimerListAdd: add timer obj c0613694!
RTMP_TimerListAdd: add timer obj c06136c4!
RTMP_TimerListAdd: add timer obj c0659c2c!
RTMP_TimerListAdd: add timer obj c0659820!
RTMP_TimerListAdd: add timer obj c0659bfc!
RTMP_TimerListAdd: add timer obj c0659fa4!
RTMP_TimerListAdd: add timer obj c0659cf4!
RTMP_TimerListAdd: add timer obj c0659d24!
RTMP_TimerListAdd: add timer obj c0659c5c!
RTMP_TimerListAdd: add timer obj c0659c8c!
RTMP_TimerListAdd: add timer obj c0659cbc!
RTMP_TimerListAdd: add timer obj c0659fd8!
RTMP_TimerListAdd: add timer obj c066305c!
RTMP_TimerListAdd: add timer obj c0663178!
RTMP_TimerListAdd: add timer obj c0663088!
RTMP_TimerListAdd: add timer obj c065a394!
RTMP_TimerListAdd: add timer obj c05f9564!
RTMP_TimerListAdd: add timer obj c05fca1c!
RTMP_TimerListAdd: add timer obj c05ffed4!
RTMP_TimerListAdd: add timer obj c060338c!
RTMP_TimerListAdd: add timer obj c0606844!
RTMP_TimerListAdd: add timer obj c0609cfc!
RTMP_TimerListAdd: add timer obj c060d1b4!
RTMP_TimerListAdd: add timer obj c061066c!
RTMP_TimerListAdd: add timer obj c065a0a4!
APSDCapable[0]=0
APSDCapable[1]=0
APSDCapable[2]=0
APSDCapable[3]=0
APSDCapable[4]=0
APSDCapable[5]=0
APSDCapable[6]=0
APSDCapable[7]=0
APSDCapable[8]=0
APSDCapable[9]=0
APSDCapable[10]=0
APSDCapable[11]=0
APSDCapable[12]=0
APSDCapable[13]=0
APSDCapable[14]=0
APSDCapable[15]=0
default ApCliAPSDCapable[0]=0
eth2: no IPv6 routers present
eth2.1: no IPv6 routers present
2a:55:44:e4:05:1a:
br0: no IPv6 routers present
cb:eb:01:93:83:88:b2:c3:4f:8f:
50:b2:65:62:c1:a3:cb:f9:52:8e:b0:b1:79:c9:b6:97:

eth2.2: no IPv6 routers present
1. Phy Mode = 9
2. Phy Mode = 9
E2PROM: D0 target power=0xff20
E2PROM: 40 MW Power Delta= 0
3. Phy Mode = 9
RTMP_TimerListAdd: add timer obj c05f9128!
AntCfgInit: primary/secondary ant 0/1
Initialize RF Central Registers for E2 !!!
Initialize RF Central Registers for E3 !!!
Initialize RF Channel Registers for E2 !!!
Initialize RF Channel Registers for E3 !!!
Initialize RF DCCal Registers for E2 !!!
Initialize RF DCCal Registers for E3 !!!
D1 = -3, D2 = 9, CalCode = 28 !!!
RT6352_Temperature_Init : BBPR49 = 0xfffffffd
RT6352_Temperature_Init : TemperatureRef25C = 0xfffffff3
Current Temperature from BBP_R49=0xfffffff5
 TX BW Filter Calibration !!!
 RX BW Filter Calibration !!!
LOFT Calibration Done!
IQCalibration Start!
IQCalibration Done! CH = 0, (gain= 1, phase=3d)
IQCalibration Start!
IQCalibration Done! CH = 1, (gain= 0, phase=3c)
TX IQ Calibration Done!
RTMPSetPhyMode: channel is out of range, use first channel=0
MCS Set = ff ff 00 00 01
SYNC - BBP R4 to 20MHz.l
RTMP_TimerListAdd: add timer obj c065a938!
The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
Main bssid = 78:54:2e:9d:3b:33
== rt28xx_init, Status=0
0x1300 = 00064380
br0: port 1(eth2.1) entering forwarding state
device ra0 entered promiscuous mode
br0: port 3(ra0) entering learning state
br0: port 3(ra0) entering learning state
addrconf_dad_completed 7
rai0: no IPv6 routers present
br0: port 2(rai0) entering forwarding state
br0: port 3(ra0) entering forwarding state
ip6_tables: (C) 2000-2006 Netfilter Core Team
Ralink APSoC Hardware Watchdog Timer
Started WatchDog Timer.
Started WatchDog Timer. LoadVlaue: 36600 sysclk: 145000000 TIMEOUT: 60
Stopped WatchDog Timer.
Disable Kernel Mode Watchdog
Started WatchDog Timer.
Started WatchDog Timer. LoadVlaue: 36600 sysclk: 145000000 TIMEOUT: 60
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
rt3xxx-ehci rt3xxx-ehci: Ralink EHCI Host Controller
rt3xxx-ehci rt3xxx-ehci: new USB bus registered, assigned bus number 1
rt3xxx-ehci rt3xxx-ehci: irq 18, io mem 0x101c0000
rt3xxx-ehci rt3xxx-ehci: USB 0.0 started, EHCI 1.00
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
rt3xxx-ohci rt3xxx-ohci: RT3xxx OHCI Controller
rt3xxx-ohci rt3xxx-ohci: new USB bus registered, assigned bus number 2
rt3xxx-ohci rt3xxx-ohci: irq 18, io mem 0x101c1000
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
usb 1-1: new high speed USB device using rt3xxx-ehci and address 2
hub 1-1:1.0: USB hub found
hub 1-1:1.0: 4 ports detected
RTMP_TimerListAdd: add timer obj c06a2498!
RTMP_TimerListAdd: add timer obj c06a2650!
RTMP_TimerListAdd: add timer obj c06f6ffc!
AP SETKEYS DONE - WPA2, AuthMode(7)=WPA2PSK, WepStatus(6)=AES, GroupWepStatus(4)=TKIP

RTMP_TimerListAdd: add timer obj c06f7038!
Rcv Wcid(1) AddBAReq
Start Seq = 00000053
RTMP_TimerListAdd: add timer obj c06fedac!
#


cat /proc/cpuinfo

system type             : Ralink SoC
processor               : 0
cpu model               : MIPS 24Kc V5.0
BogoMIPS                : 386.04
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : yes, count: 4, address/irw mask: [0x0ff8, 0x0ff8, 0x0503, 0x0ff8]
ASEs implemented        : mips16 dsp
shadow register sets    : 1
core                    : 0
VCED exceptions         : not available
VCEI exceptions         : not available

#
cat /proc/meminfo

MemTotal:         125940 kB
MemFree:           82020 kB
Buffers:            5220 kB
Cached:            15280 kB
SwapCached:            0 kB
Active:             6972 kB
Inactive:          16616 kB
Active(anon):       3368 kB
Inactive(anon):     1380 kB
Active(file):       3604 kB
Inactive(file):    15236 kB
Unevictable:           0 kB
Mlocked:               0 kB
SwapTotal:             0 kB
SwapFree:              0 kB
Dirty:                 0 kB
Writeback:             0 kB
AnonPages:          3128 kB
Mapped:             2424 kB
Shmem:              1660 kB
Slab:              11720 kB
SReclaimable:        816 kB
SUnreclaim:        10904 kB
KernelStack:         560 kB
PageTables:          600 kB
NFS_Unstable:          0 kB
Bounce:                0 kB
WritebackTmp:          0 kB
CommitLimit:       62968 kB
Committed_AS:      12804 kB
VmallocTotal:    1048372 kB
VmallocUsed:        8040 kB
VmallocChunk:    1025688 kB
#
cat /proc/interrupts

           CPU0
  3:        448          Ralink  eth2
  4:      18379          Ralink  ra0
  5:      72859          Ralink  timer
  6:          0          Ralink  ralink_gpio
  7:          0          Ralink  Ralink_DMA
 12:       4419          Ralink  serial
 13:       5600          Ralink  rai0
 17:          0          Ralink  Ralink_ESW
 18:         24          Ralink  ehci_hcd:usb1, ohci_hcd:usb2
 37:       2262          Ralink  serial

ERR:          0
#
cat /proc/partitions

major minor  #blocks  name

  31        0      16384 mtdblock0
  31        1         64 mtdblock1
  31        2       1472 mtdblock2
  31        3      10688 mtdblock3
  31        4        512 mtdblock4
  31        5        512 mtdblock5
  31        6       1024 mtdblock6
  31        7         64 mtdblock7
#
cat /proc/mtd

dev:    size   erasesize  name
mtd0: 01000000 00001000 "Whole"
mtd1: 00010000 00001000 "Bootloader"
mtd2: 00170000 00001000 "Kernel"
mtd3: 00a70000 00001000 "RootFS"
mtd4: 00080000 00001000 "MyDLink"
mtd5: 00080000 00001000 "Storage"
mtd6: 00100000 00001000 "UI"
mtd7: 00010000 00001000 "Config"
#
cat /proc/iomem

00000000-07ffffff : System RAM
  00000000-0030769b : Kernel code
  0030769c-003cdf1f : Kernel data
101c0000-101c0fff : rt3xxx-ehci
  101c0000-101c0fff : ehci_hcd
101c1000-101c1fff : rt3xxx-ohci
  101c1000-101c1fff : ohci_hcd
20000000-2fffffff : PCI MEM1
  20000000-201fffff : PCI Bus 0000:01
    20000000-200fffff : 0000:01:00.0
      20000000-200fffff : 0000:01:00.0
    20100000-201fffff : 0000:01:00.1
  20200000-2020ffff : 0000:00:00.0
#
cat /proc/bus/usb/devices


T:  Bus=02 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=12  MxCh= 1
B:  Alloc=  0/900 us ( 0%), #Int=  0, #Iso=  0
D:  Ver= 1.10 Cls=09(hub  ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
P:  Vendor=1d6b ProdID=0001 Rev= 2.06
S:  Manufacturer=Linux 2.6.36 ohci_hcd
S:  Product=RT3xxx OHCI Controller
S:  SerialNumber=rt3xxx-ohci
C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr=  0mA
I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub  ) Sub=00 Prot=00 Driver=hub
E:  Ad=81(I) Atr=03(Int.) MxPS=   2 Ivl=255ms

T:  Bus=01 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=480 MxCh= 1
B:  Alloc=  0/800 us ( 0%), #Int=  1, #Iso=  0
D:  Ver= 2.00 Cls=09(hub  ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
P:  Vendor=1d6b ProdID=0002 Rev= 2.06
S:  Manufacturer=Linux 2.6.36 ehci_hcd
S:  Product=Ralink EHCI Host Controller
S:  SerialNumber=rt3xxx
C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr=  0mA
I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub  ) Sub=00 Prot=00 Driver=hub
E:  Ad=81(I) Atr=03(Int.) MxPS=   4 Ivl=256ms

T:  Bus=01 Lev=01 Prnt=01 Port=00 Cnt=01 Dev#=  2 Spd=480 MxCh= 4
D:  Ver= 2.00 Cls=09(hub  ) Sub=00 Prot=01 MxPS=64 #Cfgs=  1
P:  Vendor=058f ProdID=6254 Rev= 1.00
C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr=100mA
I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub  ) Sub=00 Prot=00 Driver=hub
E:  Ad=81(I) Atr=03(Int.) MxPS=   1 Ivl=256ms
#

ifconfig -a

apcli0    Link encap:Ethernet  HWaddr 7A:54:2E:9D:3B:33
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

apclii0   Link encap:Ethernet  HWaddr 7A:54:2E:9D:3B:34
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

br0       Link encap:Ethernet  HWaddr 78:54:2E:9D:3B:33
          inet addr:192.168.0.1  Bcast:192.168.0.255  Mask:255.255.255.0
          inet6 addr: fe80::7a54:2eff:fe9d:3b33/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1633 errors:0 dropped:0 overruns:0 frame:0
          TX packets:471 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:10
          RX bytes:59862 (58.4 KiB)  TX bytes:68283 (66.6 KiB)

eth2      Link encap:Ethernet  HWaddr 00:0C:43:28:80:71
          inet6 addr: fe80::20c:43ff:fe28:8071/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1316 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:87145 (85.1 KiB)
          Interrupt:3

eth2.1    Link encap:Ethernet  HWaddr 78:54:2E:9D:3B:33
          inet6 addr: fe80::7a54:2eff:fe9d:3b33/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1292 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:84925 (82.9 KiB)

eth2.2    Link encap:Ethernet  HWaddr 78:54:2E:9D:3B:32
          inet6 addr: fe80::7a54:2eff:fe9d:3b32/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:14 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:1352 (1.3 KiB)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:431 errors:0 dropped:0 overruns:0 frame:0
          TX packets:431 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:47328 (46.2 KiB)  TX bytes:47328 (46.2 KiB)

ra0       Link encap:Ethernet  HWaddr 78:54:2E:9D:3B:33
          inet6 addr: fe80::7a54:2eff:fe9d:3b33/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1689 errors:0 dropped:0 overruns:0 frame:0
          TX packets:383 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:117585 (114.8 KiB)  TX bytes:40499 (39.5 KiB)
          Interrupt:4

ra1       Link encap:Ethernet  HWaddr 7A:54:2E:9C:3B:33
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

rai0      Link encap:Ethernet  HWaddr 78:54:2E:9D:3B:34
          inet6 addr: fe80::7a54:2eff:fe9d:3b34/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
          Interrupt:13

rai1      Link encap:Ethernet  HWaddr 7A:54:2E:9C:3B:34
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

wds0      Link encap:Ethernet  HWaddr 78:54:2E:9D:3B:33
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

wds1      Link encap:Ethernet  HWaddr 78:54:2E:9D:3B:33
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

wds2      Link encap:Ethernet  HWaddr 78:54:2E:9D:3B:33
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

wds3      Link encap:Ethernet  HWaddr 78:54:2E:9D:3B:33
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

wdsi0     Link encap:Ethernet  HWaddr 78:54:2E:9D:3B:34
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

wdsi1     Link encap:Ethernet  HWaddr 78:54:2E:9D:3B:34
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

wdsi2     Link encap:Ethernet  HWaddr 78:54:2E:9D:3B:34
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

wdsi3     Link encap:Ethernet  HWaddr 78:54:2E:9D:3B:34
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

#
brctl show

bridge name     bridge id               STP enabled     interfaces
br0             8000.78542e9d3b33       no              eth2.1
                                                        rai0
                                                        ra0
#
# ./gpiodump-mipsel-static
GPIOMODE = 0x00000795
  SUTIF_SHARE_MODE     = 0, disabled       [default]
  WDT_RST_MODE         = 0, WDT_RST_N      [default]
  PA_G_GPIO_MODE       = 0, normal
  ND_SD_GPIO_MODE      = 0, NAND
  PERST_GPIO_MODE      = 0, PERST_N
  EPHY_LED_GPIO_MODE   = 0, normal         [default]
  WLED_GPIO_MODE       = 0, normal
  SPI_REFCLK0_MODE     = 0, normal
  SPI_GPIO_MODE        = 0, normal         [default]
  RGMII2_GPIO_MODE     = 1, GPIO           [default]
  RGMII1_GPIO_MODE     = 1, GPIO           [default]
  MDIO_GPIO_MODE       = 3, reserved
  UARTL_GPIO_MODE      = 0, normal
  UARTF_SHARE_MODE     = 5, GPIO,UARTF
  I2C_GPIO_MODE        = 1, GPIO           [default]
#

(Last edited by lowmaster on 18 Apr 2018, 06:18)

ok.

First step is install software:
https://www.youtube.com/watch?v=L0ChYNwunUE
Second, how to use Clips:
https://www.youtube.com/watch?v=wUWroks_Rd0

3:
Put clips on MX25L12835FM. If MX25L12835FM have diffenent case than so-8 ( clips does't fit), You must resolder memory to programmer.

4:
Use app CH341a Programmer and reflash the flash. (If You use clips, turn router on. Some devices must be in reset durring flashing.) You use bootloader.bin file (whole mtd0).

5: Unplug clips/ resolder and reboot the device

oookay,

I had to de-solder... then writing bootloader.bin was successfull,

but verify failed

also if I compare the new content from the chip after read and save, it is not the same like the sourcefile...

I though before I put the chip back, I ask if this is okay

tried to erase with flashrom:

flashrom -c MX25L12835F/MX25L12845E/MX25L12865E -E
flashrom v0.9.9-97-g29333a0 on Windows 6.2 (x86)
flashrom is free software, get the source code at https://flashrom.org

Calibrating delay loop... OK.
Found Macronix flash chip "MX25L12835F/MX25L12845E/MX25L12865E" (16384 kB, SPI) on ch341a_spi.
Erasing and writing flash chip... FAILED at 0x00000001! Expected=0xff, Found=0x00, failed byte count from 0x00000000-0x00000fff: 0xfb6
ERASE FAILED!
Looking for another erase function.
FAILED at 0x00000001! Expected=0xff, Found=0x00, failed byte count from 0x00000000-0x00007fff: 0x7eb7
ERASE FAILED!
Looking for another erase function.
FAILED at 0x00000001! Expected=0xff, Found=0x00, failed byte count from 0x00000000-0x0000ffff: 0xc6f1
ERASE FAILED!
Looking for another erase function.
FAILED at 0x00000001! Expected=0xff, Found=0x00, failed byte count from 0x00000000-0x00ffffff: 0x470fcc
ERASE FAILED!
Looking for another erase function.
FAILED at 0x00000001! Expected=0xff, Found=0x00, failed byte count from 0x00000000-0x00ffffff: 0x470fcc
ERASE FAILED!
Looking for another erase function.
No usable erase functions left.
FAILED!
Your flash chip is in an unknown state.
Please report this on IRC at chat.freenode.net (channel #flashrom) or
mail flashrom@flashrom.org, thanks!

(Last edited by lowmaster on 19 Apr 2018, 13:09)

okay, pin #2 had no contact. now it looks better:

flashrom -f -w C:\bootloader.bin -c MX25L12835F/MX25L12845E/MX25L12865E
flashrom v0.9.9-97-g29333a0 on Windows 6.2 (x86)
flashrom is free software, get the source code at https://flashrom.org

Calibrating delay loop... OK.
Found Macronix flash chip "MX25L12835F/MX25L12845E/MX25L12865E" (16384 kB, SPI) on ch341a_spi.
Reading old flash chip contents... done in 2 min and 9 sec.
Erasing and writing flash chip... Erase/write done in 6 min and 16 sec.
Verifying flash... VERIFIED in 2 min and 11 sec.
Process completed in 10 min and 36 sec.

Written file and file extracted from chip are now exactly the same.. trying to resolder it to the router now

(Last edited by lowmaster on 19 Apr 2018, 14:04)

Great. I hope that device will boot after resoldering.