Recent content by runekyndal

  1. runekyndal

    Dahua DH-IPC-HFW1435SP-W dead flash chip

    Hi guys I have a very bricked DH-IPC-HFW1435SP-W camera. the 25Q256 flash chip is toast. No uboot etc. any chance I can get a complete chip rom dump ? or working uboot files ? I have tried several dhboot-min.bin.img's at 0x00000000 dhboot-min.bin.img's at 0x00080000 and...
  2. runekyndal

    UART/RS232 on NBD8008R - 3536DV100 V1.01

    hm. that could be whats causing my issue.. i have flashed a handful of different firmware's over TFTP. and a good few of them boot up to GUI, functional. (no channels) and as soon as i start clicking around it freeze and it does pop up and complain about default MAC address by chance i have...
  3. runekyndal

    UART/RS232 on NBD8008R - 3536DV100 V1.01

    finally. haha i managed to cram a u-boot back on the spi flash chip and am now once again able to update via U-boot over TFTP. I'm attaching my flashable binary here for the next guy my board says NBD8008R-U V1.03 but it was bought as, and my firmware seems to be called NBD8025R-PL i used...
  4. runekyndal

    UART/RS232 on NBD8008R - 3536DV100 V1.01

    :facepalm: :banghead: i found the idea for my approach to dd padding over here: https://unix.stackexchange.com/questions/196715/how-to-pad-a-file-to-a-desired-size? but ofcourse.. did not actually check the results before programming.... thanks for catching that. i need a faster SPI...
  5. runekyndal

    UART/RS232 on NBD8008R - 3536DV100 V1.01

    starting the cooking over.. haha General_General_NBD8008R-PL_V4.02.R11.7601.Nat.OnvifC.20180928.bin root@odroidxu4:~# dd if=u-boot.bin.img bs=1 skip=64 count=4717676 of=u-boot.bin (strip uimage header 64 byte) root@odroidxu4:~# dd if=u-boot.bin of=flash-u-boot.bin bs=1 count=1...
  6. runekyndal

    UART/RS232 on NBD8008R - 3536DV100 V1.01

    hm. so it took a couple of hours for flashrom to read in, write and verify u-boot.bin.img.stripped (u-boot.bin)? through my buspirate. (successfully) but no luck on boot up. my uboot is only 139.373 byte ? root@odroidxu4:~# binwalk u-boot.bin.img (before stripping uimage header)...
  7. runekyndal

    UART/RS232 on NBD8008R - 3536DV100 V1.01

    i'm trying to find where i got the 0x1000000 from... in my various screen logs.. oh well. i will give 0x0 a go first.. i have converted my board to DIP8 now.. :winktongue: R
  8. runekyndal

    UART/RS232 on NBD8008R - 3536DV100 V1.01

    ok, i got a stripped u-boot file now, just cobbling together a programmer (just ordered a dedicated one online) but i got a few options here. i think my buspirate is the go-to for this u-boot should be programmed, star starting 0x1000000 i believe? R
  9. runekyndal

    UART/RS232 on NBD8008R - 3536DV100 V1.01

    okay. thanks for trying.. im 100% now that i need to replace the flash chip. so i need to program the whole thing, uboot and all. so stripping the uImage header off one of my user-x.cramfs.img files as per above should produce a flashable file ? R
  10. runekyndal

    UART/RS232 on NBD8008R - 3536DV100 V1.01

    i think something along these lines should dump the whole 128kbit flash chip to RAM, and then push to TFTP ? # sf probe 0;sf read 0x82000000 0x0 0x1600000 # tftp 0x82000000 flash.bin 0x1600000 but i'm not entirely sure? also not sure if that's usable to program direct onto the 25q128 with...
  11. runekyndal

    UART/RS232 on NBD8008R - 3536DV100 V1.01

    hm.. well if that's the case, then im in a bit of a pinch. i have tried several firmwares. unpack into my TFTP folder and flashed with "run da" , du,dr,dw,dl,dc my most current boot up U-Boot 2010.06-svn1009 (Apr 23 2018 - 15:33:45) Check Flash Memory Controller v100 ... Found SPI Nor(cs...
  12. runekyndal

    UART/RS232 on NBD8008R - 3536DV100 V1.01

    bit of pinout i found / fixed
  13. runekyndal

    UART/RS232 on NBD8008R - 3536DV100 V1.01

    i have the same board. and i have unfortunately bricked it. (working U-boot) but corroupted kernel i have not been able to find the kernel in any update files yet. any chance you have a complete dump file, individual files to help me recover via TFTP? u-boot.bin.img user-x.cramfs.img...
  14. runekyndal

    Chineese NVR board (8025r-pl) no longer saves settings

    i have ordered a replacement flash chip. will see if that can fix the problem
  15. runekyndal

    Chineese NVR board (8025r-pl) no longer saves settings

    so.. i have tried changing some environmental stuff over Serial port / UBOOT bootdelay 3 dh_keyboard 0 saved to flash hisilicon # setenv dh_keyboard 0 hisilicon # setenv bootdelay 3 hisilicon # saveenv Saving Environment to SPI Flash... at sf_saveenv() start unlock spi flash. unlock all...
Top