Hi,
Got the Xiaomi Mi Router 4A (MIR4AC) 100M international version. The version was 3.0.10 of the stock firmware. Was trying to downgrade to be able to use OpenWRTInvasion hack to install Openwrt. But for some reason the downgrade did not work and the router got bricked. So im trying to get back to stock firmware, but I'm having no luck. I tried using the MIWIFIRepairTool and Hoddys debricking method. I get them to work. And I get the router light to fast flash blue after the flashing. But when i restart the router the light slow flashes yellow and nothing happens. Anyone got some advice to what i can do next?
What version of firmware have you used in RepairTool?
I've used the 3.0.10 version and the 3.0.5 version. Same result. The router starts to fast blink blue after 3-5 min. But when I restart it the router slow blinks yellow.
I am not sure, but you should use version with bootloader ('all' in name). See https://4pda.to/forum/index.php?showtopic=975951&st=580#entry95883585
1 Like
Thanks! I will try and flash with that one. I have also connested to the serial port during the last flash. And i got the following:
TIMEOUT_COUNT=10,Load address: 0x80100000
Loading: Got ARP REPLY, set server/gtwy eth addr (68:05:ca:08:d1:57)
Got it
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
####################################Got ARP REQUEST, return our IP
#############################
######
done
Bytes transferred = 11011000 (a803b8 hex)
CRC verify success!
RSA signature verify success!
Erasing SPI Flash...
raspi_erase: offs:20000 len:10000
.
Writing to SPI Flash...
.
done
Offset[0]: Invalid flash address, skip upgrade...
Upgrade firmware.bin...
raspi_erase_write: offs:260000, count:a80004
raspi_erase: offs:260000 len:a80000
................................................................................ ................................................................................ ........
................................................................................ ........................................................................................
raspi_erase: offs:ce0000 len:10000
.
.
Done!
Erasing SPI Flash...
raspi_erase: offs:20000 len:10000
.
Writing to SPI Flash...
.
done
========Upgrade success!========
Erasing SPI Flash...
raspi_erase: offs:20000 len:10000
.
Writing to SPI Flash...
.
doneTIMEOUT_COUNT=10,Load address: 0x80100000
Loading: Got ARP REPLY, set server/gtwy eth addr (68:05:ca:08:d1:57)
Got it
#################################################################
######
done
Bytes transferred = 11011000 (a803b8 hex)
CRC verify success!
RSA signature verify success!
Erasing SPI Flash...
raspi_erase: offs:20000 len:10000
.
Writing to SPI Flash...
.
done
Offset[0]: Invalid flash address, skip upgrade...
Upgrade firmware.bin...
raspi_erase_write: offs:260000, count:a80004
raspi_erase: offs:260000 len:a80000
................................................................................ ................................................................................ ........
................................................................................ ........................................................................................
raspi_erase: offs:ce0000 len:10000
.
.
Done!
Erasing SPI Flash...
raspi_erase: offs:20000 len:10000
.
Writing to SPI Flash...
.
done
========Upgrade success!========
Erasing SPI Flash...
raspi_erase: offs:20000 len:10000
.
Writing to SPI Flash...
.
done
When I then rebooted the router I got the following:
U-Boot 1.1.3 (Oct 23 2018 - 13:31:19)
Board: Ralink APSoC DRAM: 64 MB
Power on memory test. Memory size= 64 MB...OK!
relocate_code Pointer at: 83fb0000
RT2880_RSTSTAT_REG 0xc0030204
******************************
Software System Reset Occurred
******************************
flash manufacture id: ef, device id 40 18
find flash: W25Q128BV
env is right!
============================================
Ralink UBoot Version: 4.3.0.0
--------------------------------------------
ASIC 7628_MP (Port5<->None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Oct 23 2018 Time:13:31:19
============================================
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768
##### The CPU freq = 575 MHZ ####
estimate memory size =64 Mbytes
RESET MT7628 PHY!!!!!!
Please choose the operation:
1: Load system code to SDRAM via TFTP.
2: Load system code then write to Flash via TFTP.
3: Boot system code via Flash (default).
4: Entr boot command line interface.
9: Load Boot Loader code then write to Flash via TFTP.
n3: System Boot system code via Flash.
Booting System 1
Erasing SPI Flash...
raspi_erase: offs:20000 len:10000
.
Writing to SPI Flash...
.
done
## Booting image at bc160000 ...
Bad Magic Number,85190320, try to reboot
Erasing SPI Flash...
raspi_erase: offs:20000 len:10000
.
Writing to SPI Flash...
.
done
[04010D08][04010D08][88880000][24244747][00242447]
DU Setting Cal Done
It looks like it complaining about a Magic Number. What is that?
Yes! Success! That did the trick. Thank you so mutch!
1 Like
You are welcome!
This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.