[HELP] Can't recover from brick Xiaomi R3

i try recover my xiaomi R3 from softbrick
i follow this tutorial but can't input anything
output record so faster like this video

Unfortunately, due to Xiaomi's restrictive bootloader which locks you out from the serial console (!) after first boot, if you totally brick every OS and Kernel partition on this device without enabling the serial console, and the bootloader doesn't pick up the recovery image off a thumb drive, there's no easy way to get the device back up and running again.

However, it is possible to install an easily-programmable SPI flash module to bring your router back to life, by way of the SOIC-8 sized pad in the middle of the PCB, and a few configuration jumpers. The location of the pads should be fairly obvious (marked FN1 FN2), and there is a silkscreened white dot on the PCB to indicate the proper direction to install the SPI chip.

thanks i've succes using soic8 -> breed (miwifi) -> openwrt (miwifi).
but how to use nand memory? i've try flash to x-wrt factory but log showing BAD NAND like this

[    0.801257] nand_block_checkbad: offs:0 tag: BAD 
.........
[    0.878157] nand_block_checkbad: offs:3c000 tag: BAD 

if i move R135 and R124 error like first post came again.

i try too flashing pandorabox bootloader from breed but brick again.
what should i do for using nand memory? bcs 16 too small for running server :frowning:

Generally speaking, I haven't used NAND flash. But how did you try to flash x-wrt? Honestly speaking, I didn't understand logic of my copy-paste above. You've flashed your chip with uboot? I have one principal question, what is output of cat /proc/mtd? Does it include BOTH chips?

i using breed hackpascal, then i flashing to x-wrt xiaomi version. if i flash to R3 version, i'll getting error log cos R3 must using NAND memory.

this my output cat /proc/mtd

dev:    size   erasesize  name
mtd0: 00030000 00001000 "u-boot"
mtd1: 00010000 00001000 "u-boot-env"
mtd2: 00010000 00001000 "factory"
mtd3: 00f80000 00001000 "firmware"
mtd4: 0017deaf 00001000 "kernel"
mtd5: 00e02151 00001000 "rootfs"
mtd6: 003b3000 00001000 "rootfs_data"
mtd7: 00010000 00001000 "crash"
mtd8: 00010000 00001000 "reserved"
mtd9: 00010000 00001000 "Bdata"

sadly partition only detect 16mb eprom memory with miwifi mini partition table

See also: https://4pda.ru/forum/index.php?showtopic=837667&st=3640#entry71453185