AR9331损坏求助刷机！

yan***

手上有块AR9331的板子，8MFlash，64M内存。启动不了。。。

TTL打印信息如下：
-------------------------------------------------------------------------

U-Boot 1.1.4 (Nov 17 2012 - 15:55:01)
DRAM:  64 MB
Top of RAM usable for U-Boot at: 84000000
Reserving 24k for U-Boot at: 83ff8000
Reserving 192k for malloc() at: 83fc8000
Reserving 44 Bytes for Board Info at: 83fc7fd4
Reserving 36 Bytes for Global Data at: 83fc7fb0
Reserving 128k for boot params() at: 83fa7fb0
Stack Pointer at: 83fa7f98
relocating to address 83ff8000
Compressed Image at 9f005fc4
Disabling all the interrupts
   Uncompressing UBoot Image ...
U-Boot uncompress address 80010000
Uncompression completed successfully with destLen 112036
U-Boot Load address 80010000

U-Boot 1.1.4 (Nov 17 2012 - 15:54:57)
AP121 (ar9331) U-boot
DRAM:  64 MB
Top of RAM usable for U-Boot at: 84000000
Reserving 139k for U-Boot at: 83fdc000
Reserving 192k for malloc() at: 83fac000
Reserving 44 Bytes for Board Info at: 83fabfd4
Reserving 36 Bytes for Global Data at: 83fabfb0
Reserving 128k for boot params() at: 83f8bfb0
Stack Pointer at: 83f8bf98
Now running in RAM - U-Boot at: 83fdc000
Flash Manuf Id 0xef, DeviceId0 0x40, DeviceId1 0x17
flash size 8388608, sector count = 128
Flash:  8 MB
Using default environment
In:    serial
Out:   serial
Err:   serial
Net:   ag7240_enet_initialize...
No valid address in Flash. Using fixed address
No valid address in Flash. Using fixed address
: cfg1 0x5 cfg2 0x7114
eth0: 00:03:7f:09:0b:ad
eth0 up
: cfg1 0xf cfg2 0x7214
eth1: 00:03:7f:09:0b:ad
athrs26_reg_init_lan
ATHRS26: resetting s26
ATHRS26: s26 reset done
eth1 up
eth0, eth1
Hit any key to stop autoboot:  0
## Booting image at 9f650000 ...
Bad Magic Number
ar7240>
-----------------------以上是打印信息----------------------------------------------------

有没有办法TTL进行刷机？如能，同时有那个固件可刷？先谢了！
使用help命令得到几个命令提示
ar7240> help
reset   - Perform RESET of the CPU
?       - alias for 'help'
boot    - boot default, i.e., run 'bootcmd'
bootd   - boot default, i.e., run 'bootcmd'
bootm   - boot application image from memory
cp      - memory copy
erase   - erase FLASH memory
help    - print online help
md      - memory display
mm      - memory modify (auto-incrementing)
mtest   - simple RAM test
mw      - memory write (fill)
nm      - memory modify (constant address)
ping    - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
progmac - Set ethernet MAC addresses
run     - run commands in an environment variable
setenv  - set environment variables
tftpboot- boot image via network using TFTP protocol
version - print monitor version
ar7240>

www.he***

神马都是浮云，淡定

yan***

没人。。。

yan***

都这么忙的人呀。。。。

hr1***

这个还没有见过，不太清楚

hackp***

## Booting image at 9f650000 ...
Bad Magic Number

以上两行说明固件损坏会地址不对
你的固件刷在 0x9f650000 处吗，不是的话就用 bootm 0x固件地址 试一下

微风***

太人也很热的