Dahua Firmware Mod Kit + Modded Dahua Firmware

Good luck…

Even if I do manage to pull the Chinese (English) Aliexpress firmware from my working IPC-HDW4631C-A, I doubt if it's useful to flash on another same version camera. According to this topic, the firmware looks into both MAC and Serial Number and require modding before use. I will give it a try once my bios reader arrives and let you guys know and even might post a link to the .bin file. Fingers crossed!

P.S. What does the Ambarella chip do?
 

Attachments

  • 2022-02-11 12.52.04.jpg
    2022-02-11 12.52.04.jpg
    1.5 MB · Views: 74
  • 2022-02-11 12.52.11.jpg
    2022-02-11 12.52.11.jpg
    2.5 MB · Views: 68
  • 2022-02-11 12.52.18.jpg
    2022-02-11 12.52.18.jpg
    3.5 MB · Views: 61
  • 2022-02-11 12.52.26.jpg
    2022-02-11 12.52.26.jpg
    1.4 MB · Views: 63
  • 2022-02-11 12.52.28.jpg
    2022-02-11 12.52.28.jpg
    1.4 MB · Views: 60
  • 2022-02-11 13.41.18.jpg
    2022-02-11 13.41.18.jpg
    881.4 KB · Views: 63
  • 2022-02-13 14.22.20.jpg
    2022-02-13 14.22.20.jpg
    1.8 MB · Views: 60
  • 2022-02-13 14.22.33.jpg
    2022-02-13 14.22.33.jpg
    1,023.6 KB · Views: 56
  • 2022-02-13 14.22.45.jpg
    2022-02-13 14.22.45.jpg
    1.3 MB · Views: 56
  • 2022-02-13 14.23.27.jpg
    2022-02-13 14.23.27.jpg
    1.1 MB · Views: 54
  • 2022-02-13 14.23.36.jpg
    2022-02-13 14.23.36.jpg
    984.4 KB · Views: 51
  • 2022-02-13 14.23.54.jpg
    2022-02-13 14.23.54.jpg
    1.2 MB · Views: 50
  • 2022-02-13 14.24.11.jpg
    2022-02-13 14.24.11.jpg
    1.3 MB · Views: 51
  • 2022-02-13 14.24.19.jpg
    2022-02-13 14.24.19.jpg
    1.2 MB · Views: 58
  • 2022-02-13 14.24.49.jpg
    2022-02-13 14.24.49.jpg
    977.1 KB · Views: 53
  • 2022-02-13 14.29.51.jpg
    2022-02-13 14.29.51.jpg
    1.5 MB · Views: 48
  • 2022-02-13 14.29.59.jpg
    2022-02-13 14.29.59.jpg
    1.5 MB · Views: 46
  • 2022-02-13 14.31.25.jpg
    2022-02-13 14.31.25.jpg
    1.4 MB · Views: 42
Last edited:
I do not really believe, that the FW will verify the MAC address.
However, I have checked a *.bin of a VTH. There is the MAC address in clear text. Probably, it is possible to edit it directly with a hex-editor.
Anyway, happy if you can share the *.bin.
 
  • Like
Reactions: JeroenV
I do not really believe, that the FW will verify the MAC address.
However, I have checked a *.bin of a VTH. There is the MAC address in clear text. Probably, it is possible to edit it directly with a hex-editor.
Anyway, happy if you can share the *.bin.

Ofcourse, no problem! You have any clue what the Ambrella chip is used for?
 
Not quite sure, but I think this chip is responsible for the network connection.
have checked the "uboot printenv" and there is
.....
"dw": "tftp 0x02000000 web-x.squashfs.img; flwrite",
"ethact": "ambarella mac",
"ethaddr": "BC:32:5A:1A:86:38",
"fileaddr": "2000000",
....
 
@JeroenV : were you able to read the firmware of the „good“ IPC ?
Have opened a 6431, but not sure which Chip has the Bios/FW .
Today I received my CH341A reader. I'm having a hard time finding a 2nd IPC-HDW4631C-A. My 2nd and 3rd unit are very hard to reach and the LAN cable is partially plastered. I can try to pull my firmware (bricked) from the broken unit first so I know how to operate the CH341A reader.
 
  • Like
Reactions: kuzco
There are many other programmer available. If necessary I can send you some programmer I have used for my VTH.
 
To bad, it doesn't seem to read the chip.
Are you doing an 'in-situ' read attempt?
This can work - but not always.
A potential problem is when more than one signal source tries to drive the same pin, such as CS (chip select).
If the CH341A can't overcome what the camera board is driving, the read will not work.

And doing it while the camera is powered on or off?
This can sometimes help when the camera circuitry loads down the 3.3v from the CH341A too much.

And have you jumpered the CH341A for 5v or 3.3v operation?
 
Hello all!

Can you help me please with a problem?
I bought from a private person an ip camera version IPC-HFW4438M-L1 but i didn't know that is a chinese version. Oviously is not working with my NVR (EU version).
Can you help me with an english firmware, or with a solution to make that camera to work?

The present version of firmware is:

2.622.0000000.39.R, Build Date: 2018-08-14

Thank you guys!
 
Last edited:
Does the Firmwar Modkit work with VTH and VTO devices? Dont want to brick it but like to put new sound files inside
 
I have one question
SO .. I got a chineses IPC totaly in Chinese Lang... Translation via Browser.. But I cannot add it to my XVR.
Do you have a way to add it to my XRV. cause ONVIF also not working

Its a: IPC-HDW2433DT-A. but that model dont exist ..so was wondering if there is an Equiv Firmware to it that might work to add in NVR/XVR
 
After trying to upgrade an IPC-HFW4431R-Z, I ended up with a brick. So, TFTP and all that jazz and I could recover it.
I've used a regular international build and I've patched it with the files from @cor35vet (BotoX).
In the end, I've made a build without telnet, removed Russian and added Portuguese.
For those who need it, here it is.
 

Attachments

  • Like
Reactions: Oleglevsha
Could someone post a decrypted Firmware image including an extracted squasfs somewhere? I was able to the img files, but was not able to mount or extract the squasfs files.

Would lovely check what is inside.

Thank you
 
Can't change the Chinese to English language.
But can change P2P server.
After changing the server, can from play store or app store to download "Imou lift" to use.
For those don’t have a China mobile phone number, it’s easy to add a new cam.
This involves commercial interests, I not provide teaching.
View attachment 84037

View attachment 84038
please share how to make this mod to add easy4ip in my chinese dahua cam. i really need this feature.