Yes I have the boot_info:
kernel[0]: sum:0xc8cf, size:2157572, fail:0
[1]: sum:0xcb43, size:2157572, fail:0
rootfs[0]: sum:0x62c6, size:8552452, fail:0
[1]: sum:0x742c, size:10108932, fail:0
I do not know how to restore these infos.
If you did not touch the firmware in flash, use the following commands in the cli of the bootloader.
The New checksum: 0x78 0x59
eb 0xa0a00000 7c 91 00 00 78 59 00 00 00 00 00 20 ec 04 c8 cf
eb 0xa0a00010 00 00 20 ec 04 cb 43 00 00 82 80 04 62 c6 00 00
eb 0xa0a00020 9a 40 04 74 2c 00 00 00 01 31 2e 30 2e 32 2e 30
eb 0xa0a00030 30 35 00 00 00 00 00
NANDW 0xa0000 0xa0a00000 55
This boot_info will use slot 0 to boot up.
And I guess the version of firmware in slot 1 is 1.4.7.x
Thank you @tsunglung but it still not boot.
It seems that kernel checking is failing and then it still goes into the bootloader CLI.
But now the boot_info seems to be restored as previously.
any idea?
uart ok
strap pin:0x412b8ae2
enable spi-nand
ROM ver:v1.1, sig:455cc27, time:2016.01.04-18:42+0800, CPU(400 MHz), DDR2(533 MHz)
load efuse ok
init IP ok
rom_progress: 0x0600006d
load_data_from_storage(260): 0xbfe01540, 0x00000000, 0xbfd16f44
load_data_from_spi_nand_flash(70): 0xbfe01540, 0x00000000, 0xbfe03e18
check_image_header(72): h(69,72,61,6d), s(69,72,61,6d)
img sig ok
rom_progress: 0x0c00006d
load_data_from_spi_nand_flash(81) 0x00000004 0x000024ba
load_data_from_spi_nand_flash(86): 0xbfe01d40, 0x00000001, 0xbfe03e18
load_data_from_spi_nand_flash(86): 0xbfe02540, 0x00000002, 0xbfe03e18
load_data_from_spi_nand_flash(86): 0xbfe02d40, 0x00000003, 0xbfe03e18
load_data_from_spi_nand_flash(86): 0xbfe03540, 0x00000004, 0xbfe03e18
load_data_from_spi_nand_flash(90) read done (size:9402)
chksum ok
rom_progress: 0x0e00006d
load img ok
rom_progress: 0x1000006d
jump 0xbfe01550
Booting...
SPI NAND clock not enable
SPI Nand ID=00efaa21
SPI Nand die chipsize=0x08000000 byte
SPI Nand dienum=1,
SPI Nand blocksize=0x00020000 byte,
SPI Nand pagesize=0x00000800 byte,
SPI Nand oobsize=0x00000040 byte,
[rtkn_scan_bbt, line 1812], RBA=51, this->RBA_PERCENT = 5,block_v2r_num=1024
[rtkn_scan_bbt, line 1822] block_v2r_num 00000400
[rtk_scan_v2r_bbt]:678,RBA=00000033,2=00000400,
[rtk_scan_v2r_bbt]:684,block_v2r_num=000003cd
INFO: Stored BBT in Die 0: block=8 , block_status_p1=0x000000bb
load bbt v2r table:0 page:512
[rtk_scan_v2r_bbt] have created v2r bbt table:0 on block 8, just loads it !!
check v2r bbt table:0 OK
[rtk_nand_scan_bbt, line 393] mem_page_num=1 bbt_page 704
INFO: Stored BBT in Die 0: block=11 , block_status_p1=0x000000bb
load bbt table:0 page:704
[rtk_nand_scan_bbt] have created bbt table:0 on block 11, just loads it !!
check bbt table:0 OK
[dump_BBT] Nand BBT Content
[0] (00000000, 00000005, 00000000, 000003ff)
[1] (00000000, 000000f5, 00000000, 000003fe)
[2] (00000000, 000000ff, 00000000, 000003fd)
=>CPU Wake-up interrupt happen! GISR=89000084
Realtek RTL8197F boot code at 2019.11.25-17:17+0800 v3.4T-pre2.1 (993MHz)
-- version: 1.0.2.005 --
Info: Load boot_info success!
=== bootloader for mijia_gw ===
boot_info: ver:0
kernel: newest:0, curr:0
rootfs: newest:0, curr:0
kernel[0]: sum:0xc8cf, size:2157572, fail:0
[1]: sum:0xcb43, size:2157572, fail:0
rootfs[0]: sum:0x62c6, size:8552452, fail:0
[1]: sum:0x742c, size:10108932, fail:0
root_sum_check: off
watchdog_time: 0
boot_version: 1.0.2.005
priv mode
Info: loading kernel 0 ... Done
Info: checking kernel 0 ... Fail
Info: loading kernel 1 ... Done
Info: checking kernel 1 ... Fail
Warn: all kernels are invalid !
Info: save boot_info
---Ethernet init Okay!
<RealTek>boot_info
=== bootloader for mijia_gw ===
boot_info: ver:0
kernel: newest:0, curr:0
rootfs: newest:0, curr:0
kernel[0]: sum:0xc8cf, size:2157572, fail:1
[1]: sum:0xcb43, size:2157572, fail:1
rootfs[0]: sum:0x62c6, size:8552452, fail:0
[1]: sum:0x742c, size:10108932, fail:0
root_sum_check: off
watchdog_time: 0
boot_version: 1.0.2.005
priv mode
status:Sync
you can try
NANDR 0x0020000 0x80a00000 0x20ec80
j 0x80a00000
NANDR 0x01e0000 0x80a00000 0x20ec80
j 0x80a00000
if it can boot up, try to get Linux firmware, then use fw_update to re-program
Hi, I have the same problem as luc1 - corrupted bootloader trying to interrupt boot.
kernel[0]: sum:0x0000, size:0, fail:0
[1]: sum:0x0000, size:0, fail:0
rootfs[0]: sum:0x0000, size:0, fail:0
[1]: sum:0x0000, size:0, fail:0
root_sum_check: off
watchdog_time: 0
boot_version: 1.0.2.005
priv mode
Info: kernel 0 is invalid
Info: kernel 1 is invalid
Warn: all kernels are invalid !
I hope you can help !
The original values were
kernel[0]: sum:0xcb43, size:2157572, fail:0
[1]: sum:0xc8cf, size:2157572, fail:0
rootfs[0]: sum:0x742c, size:10108932, fail:0
[1]: sum:0x62c6, size:8552452, fail:0
What would be the sequence to re-enter these values ?
eb 0xa0a00000 7c 91 00 00 94 39 01 01 01 01 00 20 ec 04 cb 43
eb 0xa0a00010 00 00 20 ec 04 c8 cf 00 00 9a 40 04 74 2c 00 00
eb 0xa0a00020 82 80 04 62 c6 00 00 00 01 31 2e 30 2e 32 2e 30
eb 0xa0a00030 30 35 00 00 00 00 00
NANDW 0xa0000 0xa0a00000 55
@tsunglung thanks for giving ideas.
BTW, do you have any URL to some technical doc, tuto, … on how to program this chip?
It seems that what you suggested did not work:
<RealTek>NANDR 0x0020000 0x80a00000 0x20ec80
Read NAND Flash from 0x0020000 to 0x80A00000 with 0x20ec80 bytes ?
(Y)es , (N)o ? --> Y
Read NAND Flash Successed!
<RealTek>j 0x80a00000
Invalid Address(HEX) value.
<RealTek>NANDR 0x01e0000 0x80a00000 0x20ec80
Read NAND Flash from 0x001E0000 to 0x80A00000 with 0x0020EC80 bytes ?
(Y)es , (N)o ? --> Y
Read NAND Flash Successed!
<RealTek>j 0x80a00000
Invalid Address(HEX) value.
<RealTek>
and reboot log:
uart ok
strap pin:0x412b8ae2
enable spi-nand
ROM ver:v1.1, sig:455cc27, time:2016.01.04-18:42+0800, CPU(400 MHz), DDR2(533 MHz)
load efuse ok
init IP ok
rom_progress: 0x0600006d
load_data_from_storage(260): 0xbfe01540, 0x00000000, 0xbfd16f44
load_data_from_spi_nand_flash(70): 0xbfe01540, 0x00000000, 0xbfe03e18
check_image_header(72): h(69,72,61,6d), s(69,72,61,6d)
img sig ok
rom_progress: 0x0c00006d
load_data_from_spi_nand_flash(81) 0x00000004 0x000024ba
load_data_from_spi_nand_flash(86): 0xbfe01d40, 0x00000001, 0xbfe03e18
load_data_from_spi_nand_flash(86): 0xbfe02540, 0x00000002, 0xbfe03e18
load_data_from_spi_nand_flash(86): 0xbfe02d40, 0x00000003, 0xbfe03e18
load_data_from_spi_nand_flash(86): 0xbfe03540, 0x00000004, 0xbfe03e18
load_data_from_spi_nand_flash(90) read done (size:9402)
chksum ok
rom_progress: 0x0e00006d
load img ok
rom_progress: 0x1000006d
jump 0xbfe01550
Booting...
SPI NAND clock not enable
SPI Nand ID=00efaa21
SPI Nand die chipsize=0x08000000 byte
SPI Nand dienum=1,
SPI Nand blocksize=0x00020000 byte,
SPI Nand pagesize=0x00000800 byte,
SPI Nand oobsize=0x00000040 byte,
[rtkn_scan_bbt, line 1812], RBA=51, this->RBA_PERCENT = 5,block_v2r_num=1024
[rtkn_scan_bbt, line 1822] block_v2r_num 00000400
[rtk_scan_v2r_bbt]:678,RBA=00000033,2=00000400,
[rtk_scan_v2r_bbt]:684,block_v2r_num=000003cd
INFO: Stored BBT in Die 0: block=8 , block_status_p1=0x000000bb
load bbt v2r table:0 page:512
[rtk_scan_v2r_bbt] have created v2r bbt table:0 on block 8, just loads it !!
check v2r bbt table:0 OK
[rtk_nand_scan_bbt, line 393] mem_page_num=1 bbt_page 704
WARNING: Die 0: block=11 is bad, block_status_p1=0x00000000
bbt table:0 block:11 page:704 is bad
INFO: Stored BBT in Die 0: block=12 , block_status_p1=0x000000bb
load bbt table:1 page:768
[rtk_nand_scan_bbt] have created bbt table:1 on block 12, just loads it !!
check bbt table:1 OK
[dump_BBT] Nand BBT Content
[0] (00000000, 00000005, 00000000, 000003ff)
[1] (00000000, 000000f5, 00000000, 000003fe)
[2] (00000000, 000000ff, 00000000, 000003fd)
[3] (00000000, 0000000b, 00000000, 000003fc)
=>CPU Wake-up interrupt happen! GISR=89000084
Realtek RTL8197F boot code at 2019.11.25-17:17+0800 v3.4T-pre2.1 (993MHz)
-- version: 1.0.2.005 --
Info: Load boot_info success!
=== bootloader for mijia_gw ===
boot_info: ver:0
kernel: newest:0, curr:0
rootfs: newest:0, curr:0
kernel[0]: sum:0xc8cf, size:2157572, fail:3
[1]: sum:0xcb43, size:2157572, fail:3
rootfs[0]: sum:0x62c6, size:8552452, fail:0
[1]: sum:0x742c, size:10108932, fail:0
root_sum_check: off
watchdog_time: 0
boot_version: 1.0.2.005
priv mode
Info: kernel 0 is invalid
Info: kernel 1 is invalid
Warn: all kernels are invalid !
---Ethernet init Okay!
<RealTek>
Thanks!
it should also boot now using old firmware 1.4.6_0012 if it was your intention 
@guardianbs
If you want boot with slot 0 (1.4.7)
eb 0xa0a00000 7c 91 00 00 96 3b 00 00 00 00 00 20 ec 04 cb 43
eb 0xa0a00010 00 00 20 ec 04 c8 cf 00 00 9a 40 04 74 2c 00 00
eb 0xa0a00020 82 80 04 62 c6 00 00 00 01 31 2e 30 2e 32 2e 30
eb 0xa0a00030 30 35 00 00 00 00 00
NANDW 0xa0000 0xa0a00000 55
If you want boot up with slot 1,
eb 0xa0a00000 7c 91 00 00 95 3a 00 00 01 01 00 20 ec 04 cb 43
eb 0xa0a00010 00 00 20 ec 04 c8 cf 00 00 9a 40 04 74 2c 00 00
eb 0xa0a00020 82 80 04 62 c6 00 00 00 01 31 2e 30 2e 32 2e 30
eb 0xa0a00030 30 35 00 00 00 00 00
NANDW 0xa0000 0xa0a00000 55
And since you had upgraded to 1.4.7 before, this way only switch linux and rootfs to old version.
The bluetooth may not work well with slot1.
You need downlgrade the firmware of bluetooth as well if you want to downgrade to old version.
@tsunglung thank you for the reply. @rezmus came back with a reply first which I implemented and the hub now boots into 1.4.6_0012 from slot 1. The code from @rezmus had ‘01 01’ in bytes 7 and 8 as opposed to ‘00 00’ in your version and obviously a different checksum. What is the significance of these 2 bytes ?
Also do you know of any problems that there might be with Bluetooth and if so how a downgrade might be achieved. After downgrading the kernel and rootfs the 'Bluetooth worked to pair a device with hub via the app.
first 2 bytes of slot setup are current kernel/rootfs, next 2 bytes are newest. during startup device always try to boot using newest. it’s not important for you, because even if you set them 00 00 01 01 they will change to 01 01 01 01 after reboot.
firmware 1.4.7 comes with update of ble app from version 123 to 125, but i don’t think you will run into any problems using new version with old kernel/rootfs. if you do, you can always downgrade it via telnet.
Hi
when I jump to 08a0 0000. I’ve got that
---Ethernet init Okay!
<RealTek>eb 0xa0a00000 7c 91 00 00 96 3b 00 00 00 00 00 20 ec 04 cb 43
<RealTek>eb 0xa0a00010 00 00 20 ec 04 c8 cf 00 00 9a 40 04 74 2c 00 00
<RealTek>eb 0xa0a00020 82 80 04 62 c6 00 00 00 01 31 2e 30 2e 32 2e 30
<RealTek>eb 0xa0a00030 30 35 00 00 00 00 00
<RealTek>NANDW 0xa0000 0xa0a00000 55
Program NAND flash addr 000A0000 from A0A00000 with 00000055 bytes ?
(Y)es, (N)o->y
Write NAND Write Successed!
<RealTek>j 80a00000
---Jump to address=80A00000
reboot.......
Undefined Exception happen.
Is it normal ?
So, my gateway can’t start anymore.
show your bootlog.
This my boot log
uart ok
strap pin:0x412b8ae2
enable spi-nand
ROM ver:v1.1, sig:455cc27, time:2016.01.04-18:42+0800, CPU(400 MHz), DDR2(533 MHz)
load efuse ok
init IP ok
rom_progress: 0x0600006d
load_data_from_storage(260): 0xbfe01540, 0x00000000, 0xbfd16f44
load_data_from_spi_nand_flash(70): 0xbfe01540, 0x00000000, 0xbfe03e18
check_image_header(72): h(69,72,61,6d), s(69,72,61,6d)
img sig ok
rom_progress: 0x0c00006d
load_data_from_spi_nand_flash(81) 0x00000004 0x000024ba
load_data_from_spi_nand_flash(86): 0xbfe01d40, 0x00000001, 0xbfe03e18
load_data_from_spi_nand_flash(86): 0xbfe02540, 0x00000002, 0xbfe03e18
load_data_from_spi_nand_flash(86): 0xbfe02d40, 0x00000003, 0xbfe03e18
load_data_from_spi_nand_flash(86): 0xbfe03540, 0x00000004, 0xbfe03e18
load_data_from_spi_nand_flash(90) read done (size:9402)
chksum ok
rom_progress: 0x0e00006d
load img ok
rom_progress: 0x1000006d
jump 0xbfe01550
Booting...
SPI NAND clock not enable
SPI Nand ID=00efaa21
SPI Nand die chipsize=0x08000000 byte
SPI Nand dienum=1,
SPI Nand blocksize=0x00020000 byte,
SPI Nand pagesize=0x00000800 byte,
SPI Nand oobsize=0x00000040 byte,
[rtkn_scan_bbt, line 1812], RBA=51, this->RBA_PERCENT = 5,block_v2r_num=1024
[rtkn_scan_bbt, line 1822] block_v2r_num 00000400
[rtk_scan_v2r_bbt]:678,RBA=00000033,2=00000400,
[rtk_scan_v2r_bbt]:684,block_v2r_num=000003cd
INFO: Stored BBT in Die 0: block=8 , block_status_p1=0x000000bb
load bbt v2r table:0 page:512
[rtk_scan_v2r_bbt] have created v2r bbt table:0 on block 8, just loads it !!
check v2r bbt table:0 OK
[rtk_nand_scan_bbt, line 393] mem_page_num=1 bbt_page 704
INFO: Stored BBT in Die 0: block=11 , block_status_p1=0x000000bb
load bbt table:0 page:704
[rtk_nand_scan_bbt] have created bbt table:0 on block 11, just loads it !!
check bbt table:0 OK
[dump_BBT] Nand BBT Content
[0] (00000000, 00000014, 00000000, 000003ff)
[1] (00000000, 000000f7, 00000000, 000003fe)
[2] (00000000, 000000fd, 00000000, 000003fd)
[3] (00000000, 00000019, 00000000, 000003fc)
[4] (00000000, 0000001b, 00000000, 000003fb)
[5] (00000000, 00004050, 00000000, 000003fa)
[6] (00000000, 00004051, 00000000, 000003f9)
[7] (00000000, 00004052, 00000000, 000003f8)
[8] (00000000, 00004053, 00000000, 000003f7)
[9] (00000000, 00004054, 00000000, 000003f6)
[10] (00000000, 00004055, 00000000, 000003f5)
[11] (00000000, 00004056, 00000000, 000003f4)
[12] (00000000, 00004057, 00000000, 000003f3)
=>CPU Wake-up interrupt happen! GISR=09000084
Realtek RTL8197F boot code at 2019.11.25-17:17+0800 v3.4T-pre2.1 (993MHz)
-- version: 1.0.2.005 --
Info: Load boot_info success!
=== bootloader for mijia_gw ===
boot_info: ver:0
kernel: newest:1, curr:1
rootfs: newest:1, curr:1
kernel[0]: sum:0xcb43, size:2157572, fail:1
[1]: sum:0xc8cf, size:2157572, fail:1
rootfs[0]: sum:0x742c, size:10108932, fail:0
[1]: sum:0x62c6, size:8552452, fail:0
root_sum_check: off
watchdog_time: 0
boot_version: 1.0.2.005
priv mode
Info: loading kernel 1 ... Done
Info: checking kernel 1 ... Fail
Info: loading kernel 0 ... Done
Info: checking kernel 0 ... Fail
Warn: all kernels are invalid !
Info: save boot_info
---Ethernet init Okay!
<RealTek>
<RealTek>NANDR 0x0020000 0x80a00000 0x20ec80
Read NAND Flash from 0x00020000 to 0x80A00000 with 0x0020EC80 bytes ?
(Y)es , (N)o ? --> y
Read NAND Flash Successed!
<RealTek>j 80a00000
---Jump to address=80A00000
reboot.......
Undefined Exception happen.
any specific reason you overwrite your boot_info partition with one of above? do you have bootlog before you did something to your hub? what you try to do before it crashed? send something like this and paste output
NANDR 0x500000 0xa0a00000 96
db 0xa0a00000 96
NANDR 0x2100000 0xa0a00000 96
db 0xa0a00000 96
My first log was :
uart ok
strap pin:0x412b8ae2
enable spi-nand
ROM ver:v1.1, sig:455cc27, time:2016.01.04-18:42+0800, CPU(400 MHz), DDR2(533 MH z)
load efuse ok
init IP ok
rom_progress: 0x0600006d
load_data_from_storage(260): 0xbfe01540, 0x00000000, 0xbfd16f44
load_data_from_spi_nand_flash(70): 0xbfe01540, 0x00000000, 0xbfe03e18
check_image_header(72): h(69,72,61,6d), s(69,72,61,6d)
img sig ok
rom_progress: 0x0c00006d
load_data_from_spi_nand_flash(81) 0x00000004 0x000024ba
load_data_from_spi_nand_flash(86): 0xbfe01d40, 0x00000001, 0xbfe03e18
load_data_from_spi_nand_flash(86): 0xbfe02540, 0x00000002, 0xbfe03e18
load_data_from_spi_nand_flash(86): 0xbfe02d40, 0x00000003, 0xbfe03e18
load_data_from_spi_nand_flash(86): 0xbfe03540, 0x00000004, 0xbfe03e18
load_data_from_spi_nand_flash(90) read done (size:9402)
chksum ok
rom_progress: 0x0e00006d
load img ok
rom_progress: 0x1000006d
jump 0xbfe01550
Booting...
SPI NAND clock not enable
SPI Nand ID=00efaa21
SPI Nand die chipsize=0x08000000 byte
SPI Nand dienum=1,
SPI Nand blocksize=0x00020000 byte,
SPI Nand pagesize=0x00000800 byte,
SPI Nand oobsize=0x00000040 byte,
[rtkn_scan_bbt, line 1812], RBA=51, this->RBA_PERCENT = 5,block_v2r_num=1024
[rtkn_scan_bbt, line 1822] block_v2r_num 00000400
[rtk_scan_v2r_bbt]:678,RBA=00000033,2=00000400,
[rtk_scan_v2r_bbt]:684,block_v2r_num=000003cd
INFO: Stored BBT in Die 0: block=8 , block_status_p1=0x000000bb
load bbt v2r table:0 page:512
[rtk_scan_v2r_bbt] have created v2r bbt table:0 on block 8, just loads it !!
check v2r bbt table:0 OK
[rtk_nand_scan_bbt, line 393] mem_page_num=1 bbt_page 704
INFO: Stored BBT in Die 0: block=11 , block_status_p1=0x000000bb
load bbt table:0 page:704
[rtk_nand_scan_bbt] have created bbt table:0 on block 11, just loads it !!
check bbt table:0 OK
[dump_BBT] Nand BBT Content
[0] (00000000, 00000014, 00000000, 000003ff)
[1] (00000000, 000000f7, 00000000, 000003fe)
[2] (00000000, 000000fd, 00000000, 000003fd)
[3] (00000000, 00000019, 00000000, 000003fc)
[4] (00000000, 0000001b, 00000000, 000003fb)
=>CPU Wake-up interrupt happen! GISR=89000084
Realtek RTL8197F boot code at 2019.11.25-17:17+0800 v3.4T-pre2.1 (993MHz)
-- version: 1.0.2.005 --
Info: Load boot_info success!
=== bootloader for mijia_gw ===
boot_info: ver:0
kernel: newest:1, curr:1
rootfs: newest:1, curr:1
kernel[0]: sum:0xc8cf, size:2157572, fail:3
[1]: sum:0xcb43, size:2157572, fail:3
rootfs[0]: sum:0x62c6, size:8552452, fail:0
[1]: sum:0x742c, size:10108932, fail:0
root_sum_check: off
watchdog_time: 0
boot_version: 1.0.2.005
priv mode
Info: kernel 1 is invalid
Info: kernel 0 is invalid
Warn: all kernels are invalid !
<RealTek>NANDR 0x500000 0xa0a00000 96
Read NAND Flash from 0x00500000 to 0xA0A00000 with 0x00000096 bytes ?
(Y)es , (N)o ? --> y
Read NAND Flash Successed!
<RealTek>db 0xa0a00000 96
[Addr] .0 .1 .2 .3 .4 .5 .6 .7 .8 .9 .A .B .C .D .E .F
A0A00000: 68 73 71 73 37 0a 00 00 00 82 7d 82 00 00 02 00 hsqs7.....}.....
A0A00010: 35 00 00 00 04 00 11 00 e0 00 01 00 04 00 00 00 5...............
A0A00020: b8 04 f6 51 00 00 00 00 9a 7e 82 00 00 00 00 00 ...Q.....~......
A0A00030: 92 7e 82 00 00 00 00 00 ff ff ff ff ff ff ff ff .~..............
A0A00040: 30 b4 81 00 00 00 00 00 04 08 82 00 00 00 00 00 0...............
A0A00050: ea 68 82 00 00 00 00 00 74 7e 82 00 00 00 00 00 .h......t~......
<RealTek>NANDR 0x2100000 0xa0a00000 96
Unknown command !
<RealTek>NANDR 0x2100000 0xa0a00000 96
Read NAND Flash from 0x02100000 to 0xA0A00000 with 0x00000096 bytes ?
(Y)es , (N)o ? --> y
Read NAND Flash Successed!
<RealTek>db 0xa0a00000 96
[Addr] .0 .1 .2 .3 .4 .5 .6 .7 .8 .9 .A .B .C .D .E .F
A0A00000: 68 73 71 73 42 0a 00 00 00 9a 3d 82 00 00 02 00 hsqsB.....=.....
A0A00010: 37 00 00 00 04 00 11 00 e0 00 01 00 04 00 00 00 7...............
A0A00020: 79 07 8e 52 00 00 00 00 3e 35 9a 00 00 00 00 00 y..R....>5......
A0A00030: 36 35 9a 00 00 00 00 00 ff ff ff ff ff ff ff ff 65..............
A0A00040: 5c 69 99 00 00 00 00 00 6c be 99 00 00 00 00 00 \i......l.......
A0A00050: 56 1f 9a 00 00 00 00 00 18 35 9a 00 00 00 00 00 V........5......
<RealTek>
this will fix boot_info
eb 0xa0a00000 7c 91 00 00 78 59 00 00 00 00 00 20 ec 04 c8 cf
eb 0xa0a00010 00 00 20 ec 04 cb 43 00 00 82 80 04 62 c6 00 00
eb 0xa0a00020 9a 40 04 74 2c 00 00 00 01 31 2e 30 2e 32 2e 30
eb 0xa0a00030 30 35 00 00 00 00 00
NANDW 0xa0000 0xa0a00000 55
however if both kernels got corrupted it won’t boot anyway. wait a few days, there will be some manual how to flash custom firmware using uart.