Just another data point. The model of my camera is IP9144-28. It is a dahua clone. It uses firmware General_IPC-HX4X2X-Themis_Eng_N_Stream3_V2.802.0000006Z.0.R.210907.bin from here. Attached is my command.txt. Note that I need to change the memory from 0x82000000 to 0x0200000 or else it won't work.