[Solved] Help please, bricked router after installing...

Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware
Goto page Previous  1, 2, 3  Next
Author Message
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 14125
Location: Texas, USA

PostPosted: Thu Sep 09, 2021 6:56    Post subject: Reply with quote
UPDATE

I am fairly certain that if yours is truly a EU version, then you probably need to do an initial flash with 33525 (or whatever version you initially flashed it to?) after you de-brick it again.

https://download1.dd-wrt.com/dd-wrtv2/downloads/betas/2017/10-17-2017-r33525/tplink_archer-c9v4/

And webflash/cli flash/tftp flash from there to upgrade (carefully - see wiki notes for builds after 33772). You should probably have a serial console attached to see if there is anything that would tell us what bricks it.

The key difference between the EU and US-only version is that the firmware image for the EU version is about half the size of the US-only version. And the US-only version does NOT use u-boot to load a compressed image to boot from that image's cfe bootloader. Another instance where TP-Link pooched us, apparently. I'm collaborating with BrainSlayer on this and will be working on dumping the flash and serial log on my US-only version.

Follow this topic for progress:

https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=329569

_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
DD-WRT Releases 2023 (PolitePol)
DD-WRT Releases 2023 (RSS Everything)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
Sponsor
mccurly
DD-WRT Novice


Joined: 25 Jul 2018
Posts: 44

PostPosted: Fri Sep 10, 2021 18:42    Post subject: Reply with quote
kernel-panic69 wrote:
UPDATE

I am fairly certain that if yours is truly a EU version, then you probably need to do an initial flash with 33525 (or whatever version you initially flashed it to?) after you de-brick it again.

https://download1.dd-wrt.com/dd-wrtv2/downloads/betas/2017/10-17-2017-r33525/tplink_archer-c9v4/

And webflash/cli flash/tftp flash from there to upgrade (carefully - see wiki notes for builds after 33772). You should probably have a serial console attached to see if there is anything that would tell us what bricks it.

The key difference between the EU and US-only version is that the firmware image for the EU version is about half the size of the US-only version. And the US-only version does NOT use u-boot to load a compressed image to boot from that image's cfe bootloader. Another instance where TP-Link pooched us, apparently. I'm collaborating with BrainSlayer on this and will be working on dumping the flash and serial log on my US-only version.

Follow this topic for progress:

https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=329569



Hello again. I apologize for this late reply. I think I got beat by this beast... it put me off yesterday. I only noticed your answer too late and too tired to answer. So, kernel-panic69 sorry if this took too long.

Well I really appreciate your support! I haven't reported yet, but, yesterday, I bricked the "beast" even further... (I think). (before I saw your help post)

This, let's call it "deep brick", was "achieved" by (if I recall it well) the risky command:

Code:
flash -offset=262144 -noheader 192.168.x.x:[b]<ROM name>.bin[/b] flash0


Sad Hooray for "dumb me"!

And even more because I did the above command when the router was in a recovery state, with a serial interface attached, "go figure..." (against the recommendations...), with the first firmware that Site Admin @BrainSlayer made available in this link here https://forum.dd-wrt.com/phpBB2/download.php?id=39638 in this post: https://forum.dd-wrt.com/phpBB2/viewtopic.php?p=1098041#1098041

Later to know that some measly posts down was the first ever "stable" image for the router, again by our Site Admin BrainSlayer in this post: https://forum.dd-wrt.com/phpBB2/viewtopic.php?p=1098135#1098135

Now, I have serial console with a "sleezy" CFE (I think) that won't let me flash any stuff that I've tried since this dumb act of mine. So, do you @kernel-panic69 think that I stand any chance here?

I must say as well that, I haven't yet found the time to follow all your useful suggestions from your last post : https://forum.dd-wrt.com/phpBB2/viewtopic.php?p=1245446#1245446

But even if this thread that I myself have initiated is still useful, because I do believe it is, I have doubts If it shouldn't be wiser to start a new thread about this "hard brick"... situation.

So @kernel-panic69, can you advise on this latter doubt of mine?

Lastly (for now, at least) I am going to put this project aside for some time now and see if I can catch it up later and with another mindset be able to progress a little more.

Meanwhile, my deepest thankyou to @kernel-panic69 and @jerryjyrer for all your care and support. I promise that I'll try and do better next time around!


Cheers and will be back soon!

_________________
Villager of the Globe we all live in.

Used dd-wrt on:

ARCHER C9 - V.4 (EU)

(In a lingering "resurrection" state, will it revive? Stay tuned folks... Wink )

And

NETGEAR R7000



Cheers to fellow villagers!
d33b0_n4p41m
DD-WRT User


Joined: 10 Sep 2021
Posts: 133

PostPosted: Fri Sep 10, 2021 19:43    Post subject: Reply with quote
Quick interjection: I am curious to know if the U-boot bootloader comes up via serial or if this device goes straight to CFE. The EU version of these has a U-boot bootloader that loads an image into userspace and then boots up via CFE. These are interesting little buggers, for sure. I think that anything should be recoverable, but it might take a chip programmer and a known good fullflash dump. I think both the EU and the US-only version both have a secondary 2MB flash chip, I just do not think that the latter uses u-boot at all, as it has a ~28MB flash image for stock firmware.
mccurly
DD-WRT Novice


Joined: 25 Jul 2018
Posts: 44

PostPosted: Wed Sep 15, 2021 19:49    Post subject: Reply with quote
d33b0_n4p41m wrote:
Quick interjection: I am curious to know if the U-boot bootloader comes up via serial or if this device goes straight to CFE. The EU version of these has a U-boot bootloader that loads an image into userspace and then boots up via CFE. These are interesting little buggers, for sure. I think that anything should be recoverable, but it might take a chip programmer and a known good fullflash dump. I think both the EU and the US-only version both have a secondary 2MB flash chip, I just do not think that the latter uses u-boot at all, as it has a ~28MB flash image for stock firmware.


Hello and thank you for your intervention.

I am almost positive that I have done a backup of the cfe.

How would I go about to reprogram the chip (as I think you were mentioning above)?

Can you post your references in this subject please?

(Hardware, guides, etc?)

Thank you, in advance!

_________________
Villager of the Globe we all live in.

Used dd-wrt on:

ARCHER C9 - V.4 (EU)

(In a lingering "resurrection" state, will it revive? Stay tuned folks... Wink )

And

NETGEAR R7000



Cheers to fellow villagers!
d33b0_n4p41m
DD-WRT User


Joined: 10 Sep 2021
Posts: 133

PostPosted: Wed Sep 15, 2021 19:58    Post subject: Reply with quote
A hexeditor examination of your cfe backup would reveal if the backup is valid. If you're expecting step-by-step information, I am not that guy.

clip on flash programmer - Yahoo! Search

_________________
An old man said, “Erasers are made for those who make mistakes.” A youth replied, “Erasers are made for those who are willing to correct their mistakes!” Attitude matters! ~ Anonymous
----------
“You are always a student, never a master. You have to keep moving forward.” ~ Conrad Hall
----------
“Life is about moving on, accepting changes and looking forward to what makes you stronger and more complete.” ~ Anonymous
mccurly
DD-WRT Novice


Joined: 25 Jul 2018
Posts: 44

PostPosted: Thu Sep 16, 2021 6:16    Post subject: Reply with quote
d33b0_n4p41m wrote:
A hexeditor examination of your cfe backup would reveal if the backup is valid. If you're expecting step-by-step information, I am not that guy.

clip on flash programmer - Yahoo! Search


Hi you've been most helpful already, don't worry.

About that guide I'm going to search for references myself as well. I'll post then here when I get them.

Nevertheless, thank you!

_________________
Villager of the Globe we all live in.

Used dd-wrt on:

ARCHER C9 - V.4 (EU)

(In a lingering "resurrection" state, will it revive? Stay tuned folks... Wink )

And

NETGEAR R7000



Cheers to fellow villagers!
mccurly
DD-WRT Novice


Joined: 25 Jul 2018
Posts: 44

PostPosted: Fri Sep 17, 2021 12:49    Post subject: Reply with quote
@kernel-panic69

and

@d33b0_n4p41m


Hi, I've spotted (up until now) several chips (from several brands and sizes). Notably:

1- WINBOND 25Q128FVFG 1710

2- APM4500A CSC3W


Which one should be flashed?



Would a tool like this one :
https://www.amazon.es/Coomatec-adaptador-programador-software-controlador/dp/B08YN8MLKY/ ... ; do the trick?,

(I ask this because my aim is to purchase a suitable clip and not have to de-solder the chip).

Thank you again for your time

_________________
Villager of the Globe we all live in.

Used dd-wrt on:

ARCHER C9 - V.4 (EU)

(In a lingering "resurrection" state, will it revive? Stay tuned folks... Wink )

And

NETGEAR R7000



Cheers to fellow villagers!
d33b0_n4p41m
DD-WRT User


Joined: 10 Sep 2021
Posts: 133

PostPosted: Fri Sep 17, 2021 13:43    Post subject: Reply with quote
If only there were

1) information for the archer c9 v3

2) correct information here


https://wikidevi.wi-cat.ru/TP-LINK_Archer_C9_v4.x

https://wikidevi.wi-cat.ru/TP-LINK_Archer_C9_v5.x

The "newer" C9 v4 and v5 firmware image sizes are nearly ~30MB and the flash chip is not 16MB. It seems we cannot rely on wikidevi for information here. Not sure why you were looking up other chips; you should be looking at what is on your router's SoC board...

_________________
An old man said, “Erasers are made for those who make mistakes.” A youth replied, “Erasers are made for those who are willing to correct their mistakes!” Attitude matters! ~ Anonymous
----------
“You are always a student, never a master. You have to keep moving forward.” ~ Conrad Hall
----------
“Life is about moving on, accepting changes and looking forward to what makes you stronger and more complete.” ~ Anonymous
mccurly
DD-WRT Novice


Joined: 25 Jul 2018
Posts: 44

PostPosted: Fri Sep 17, 2021 17:10    Post subject: Reply with quote
d33b0_n4p41m wrote:
A hexeditor examination of your cfe backup would reveal if the backup is valid. If you're expecting step-by-step information, I am not that guy.

clip on flash programmer - Yahoo! Search



Hi,

Here some pics from this board.

https://imgur.com/a/P1EEJvR

Thank you

_________________
Villager of the Globe we all live in.

Used dd-wrt on:

ARCHER C9 - V.4 (EU)

(In a lingering "resurrection" state, will it revive? Stay tuned folks... Wink )

And

NETGEAR R7000



Cheers to fellow villagers!
d33b0_n4p41m
DD-WRT User


Joined: 10 Sep 2021
Posts: 133

PostPosted: Fri Sep 17, 2021 17:49    Post subject: Reply with quote
128MB SPI (NOR?) flash:

https://www.datasheetq.com/datasheet-download/691593/1/Winbond/25Q128FVFG

https://www.winbond.com/hq/product/code-storage-flash-memory/serial-nor-flash/index.html?__locale=en&partNo=W25Q128FV

I can't seem to find a datasheet on the ESMT F59L1G81MA-25T (it's RAM not FLASH?), but the W25Q16FW is 16MB SPI NOR flash:

https://www.winbond.com/hq/product/code-storage-flash-memory/serial-nor-flash/?__locale=en&partNo=W25Q16FW

There is a lot of confusing information here, and I really wish I had a v3 and v5 in my possession to disassemble and sort this out with.

_________________
An old man said, “Erasers are made for those who make mistakes.” A youth replied, “Erasers are made for those who are willing to correct their mistakes!” Attitude matters! ~ Anonymous
----------
“You are always a student, never a master. You have to keep moving forward.” ~ Conrad Hall
----------
“Life is about moving on, accepting changes and looking forward to what makes you stronger and more complete.” ~ Anonymous
mccurly
DD-WRT Novice


Joined: 25 Jul 2018
Posts: 44

PostPosted: Fri Sep 17, 2021 18:59    Post subject: Reply with quote
d33b0_n4p41m wrote:
128MB SPI (NOR?) flash:

https://www.datasheetq.com/datasheet-download/691593/1/Winbond/25Q128FVFG

https://www.winbond.com/hq/product/code-storage-flash-memory/serial-nor-flash/index.html?__locale=en&partNo=W25Q128FV

I can't seem to find a datasheet on the ESMT F59L1G81MA-25T (it's RAM not FLASH?), but the W25Q16FW is 16MB SPI NOR flash:

https://www.winbond.com/hq/product/code-storage-flash-memory/serial-nor-flash/?__locale=en&partNo=W25Q16FW

There is a lot of confusing information here, and I really wish I had a v3 and v5 in my possession to disassemble and sort this out with.


Hi.

Do you want a full blown video on the board?

What information would be best for me to provide?

I understand that maybe it's too little information yet. So it's not useful yet. I can assure you it's the V4 EU Archer C9.

Tell me what do you want to access and I'll see if can sort that out.


Meanwhile I'll skim through your latest documentation.


Thank you!


P.s.: I suspect that when you've advised me that I should be looking for information on the SoC of the router, I must say, as the imgur shared pictures demonstrate, I still haven't dismantled the plates that were holding the heatsink of the board. I'm a bit "jumpy" on that because they seem too firm to just be plainly pulled apart from the board. And I haven't figured out how to do it yet, but I'm almost positive that they (those plates, I mean), should come off (how? A puzzle still...)

_________________
Villager of the Globe we all live in.

Used dd-wrt on:

ARCHER C9 - V.4 (EU)

(In a lingering "resurrection" state, will it revive? Stay tuned folks... Wink )

And

NETGEAR R7000



Cheers to fellow villagers!
d33b0_n4p41m
DD-WRT User


Joined: 10 Sep 2021
Posts: 133

PostPosted: Fri Sep 17, 2021 19:21    Post subject: Reply with quote
If it has a 128MB flash chip, I do not think it's an EU version (what does the label on the back say? EU or US?). The EU version had a much smaller firmware image size than the US version. Provide whatever photographic proof that you choose, for the benefit of the community. This is why I truly wish I had all the different hardware variations in hand.
_________________
An old man said, “Erasers are made for those who make mistakes.” A youth replied, “Erasers are made for those who are willing to correct their mistakes!” Attitude matters! ~ Anonymous
----------
“You are always a student, never a master. You have to keep moving forward.” ~ Conrad Hall
----------
“Life is about moving on, accepting changes and looking forward to what makes you stronger and more complete.” ~ Anonymous
mccurly
DD-WRT Novice


Joined: 25 Jul 2018
Posts: 44

PostPosted: Sun Sep 19, 2021 16:34    Post subject: Reply with quote
d33b0_n4p41m wrote:
If it has a 128MB flash chip, I do not think it's an EU version (what does the label on the back say? EU or US?). The EU version had a much smaller firmware image size than the US version. Provide whatever photographic proof that you choose, for the benefit of the community. This is why I truly wish I had all the different hardware variations in hand.



Hello.

I know I am late. Sorry but couldn't post this earlier.

https://imgur.com/a/DEA5s4R

Note: I've blurred its serial number. I hope you don't mind.

Can you please advise on which type of clamp/clip I should use on any of those aforementioned chips?

[edit]https://www.amazon.com/Nitrip-Programmer-Testing-SOP16-SOIC16/dp/B07VFHV6GT?&language=pt_BR&currencyCode=EUR[/edit]

(I think something like the above would work)

Also, I appreciate all your cooperation! And sincerely hope this is not too late a post for you.

All the best!

_________________
Villager of the Globe we all live in.

Used dd-wrt on:

ARCHER C9 - V.4 (EU)

(In a lingering "resurrection" state, will it revive? Stay tuned folks... Wink )

And

NETGEAR R7000



Cheers to fellow villagers!
mccurly
DD-WRT Novice


Joined: 25 Jul 2018
Posts: 44

PostPosted: Fri Jun 09, 2023 12:48    Post subject: Closing this issue (see post) Reply with quote
Hello everyone!

This serves to clarify:

The solution of this issue is present at this same thread here. This is the "exact" post where the solution lies:

A post from me (above)

But, since the solution arrived, other problems (even more difficult to resolve and that I haven't figured out yet) have occurred. (I had mistakenly talked about them on this same thread here, above, before this post of mine).

The mistake is obvious. It leads people to think that the first problem was never fixed at all, which is not the case. To clarify, the issue that brought me here to this post is indeed solved.

But, having inadvertently continued to post in the thread with other/new issues with the router I made a grave error. For me and for the community. Not only does it make the remaining problem(s) very very obscure/confuse, but make it almost impossible to gather help/and to document that same help in an efficient manner here at dd-wrt forum. (And this is absolutely not my intention).

So, if I may do this, I am going to post here a sort of "follow up" of my saga with this TP-Link Archer C9 V4 router.

I apologize if this is not the most adequate way of addressing my inflicted confusion.

Thank you!

_________________
Villager of the Globe we all live in.

Used dd-wrt on:

ARCHER C9 - V.4 (EU)

(In a lingering "resurrection" state, will it revive? Stay tuned folks... Wink )

And

NETGEAR R7000



Cheers to fellow villagers!
dale_gribble39
DD-WRT Guru


Joined: 11 Jun 2022
Posts: 1899

PostPosted: Fri Jun 09, 2023 17:00    Post subject: Reply with quote
Just now seeing the imgur link, confirmed that it is an Archer C9 V4 (EU). That, along with your other picture link confirming the FCC ID, is a huge help in discernment. Now the only problem is those thinking that they have a V2 instead of a V4(EU) ... <eek>

Again, thanks for the follow-up(s) on your threads, very helpful for proper device ID information.
Goto page Previous  1, 2, 3  Next Display posts from previous:    Page 2 of 3
Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum