Well, I've turned this FON into an expensive green nightlight. I got through the login, renamed dropbear and transferred openwrt-ar531x-2.4-vmlinux-CAMICA.lmz and out.hex. WinSCP stopped at 90-something percent during the transfer, but the file showed in the tmp directory. I sent the command
mtd -e vmlinux.bin.l7 write openwrt-ar531x-2.4-vmlinux-CAMICIA.lzma vmlinux.bin.l7
reboot
Fon winked and flickered, but didn't seem to reboot. It was 2:30AM, so I called it a night. I recycled power this morning and connected using WinSCP. The two files were missing from the tmp directory. I guess they never wrote from ram to flash. I transferred them again. this morning. This time I got a little further. I was successful in getting the "writing from openwrt-ar531x-2.4=-vmlinux-CAMICIA.lzma .... [w] " I proceeded to the step to write redboot config. That's when the unit bricked.
I can ping the ethernet side at 192.168.1.2. The Wifi side doesn't try to connect.
I have a serial adapter on order. What are the steps to restore/install via the serial connection? Is there anything I can try through the ethernet port while I'm waiting for the usb to ttl converter to arrive?