R6700v3 bricked and can't flash firmware because the boardid is corrupted

So I can gain access by serial cable and tftp a firmware file to the router but my board id has become corrupted and looks like ≡i. I have backups of my boot and board_data partitions if that will help, I just can't figure out how to flash the board_data from cfe. If I knew the offset for the partition i could flash it easy enough. I have been unable to find the mtd structure anywhere but I know board_data was mtd4. The only other option I can see is if someone had a dump of the full flash I could use to get the router revived, I know how to flash my board_data from telnet using dd but that isn't an option in the cfe