Flashing Hikvision firmware on Anpviz PTZIP204WX4IR

huawatuam

n3wb
Joined
Apr 11, 2017
Messages
7
Reaction score
0
I got an Anpviz PTZIP204WX4IR camera which is the same as the Hikvision DS-2DE2A404IW-DE3.
Is it possible to flash it with the Hikvision firmware?

So far i tried flashing Hikvision firmware "V5.7.11_220905_S3000452187" but the cam refuses it.
Also tried flashing through the Hikvision SDK "ClientDemoEn.exe" tool.
However i get an error message saying "Upgrade PAck Type Mismatch"
 

R3N3

n3wb
Joined
Nov 18, 2023
Messages
1
Reaction score
0
Location
Germany
Hi

you need usb to rs232 and connect to DSP JP9 connector on board GND , RX , TX

Pin out

Yellow GND white TX brown RX
20240831_113020.jpg20240831_113014.jpg

your need a tool TFTP32
and putty baudrate 115200

1: start putty with correct baud and com port
2: before (same time) put the 12v connector to camera Hit Ctrl+u to stop autoboot


you see in putty : HKVS #
type update -> Enter

lets go


your TFTP32 server ip for network connection must be 192.168.1.128

volla.png

here is the firmware file



Code:
here is the my serial output.



System startup


Uncompress Ok!


U-Boot 2016.11-svn1296100 (Jun 08 2021 - 14:27:11 +0800), Build: jenkins-Frontend.BSP.CCI.devCloud-3798


Relocation Offset is: 07751000

Relocating to 47f51000, new gd at 46f30ef0, sp at 46f30ed0

hisi-sdhci: 0

SPI Nand ID Table Version 2.7

SPI Nand(cs 0) ID: 0xc2 0x26 0x3 Name:"MX35LF2GE4AD"

Block:128KB Page:2KB OOB:128B ECC:24bit/1K

Chipsize:256 MiB

In:    serial

Out:   serial

Err:   serial

Net:   eth0

DDR: 512MB

CHIP_1.

[Uboot] In release mode!

Hit Ctrl+u to stop autoboot:  0

HKVS # update

Load kernel to 0x43000000 ...

<sbal_wb_aes_update>...decrypt

<sbal_wb_aes_update>...decrypt

<sbal_seboot>body_total_len=6123872

<sbal_seboot>verify success ##successful to load enc_uImage##

boot of image at addr 0x43000000 ...

## Booting kernel from Legacy Image at 43000000 ...

   Image Name:   Linux-4.9.37

   Image Type:   ARM Linux Kernel Image (uncompressed)

   Data Size:    6123785 Bytes = 5.8 MiB

   Load Address: 40008000

   Entry Point:  40008000

   Loading Kernel Image ... OK


Starting kernel ...


Uncompressing Linux... done, booting the kernel.

Starting udev:      [ OK ]

create static device nodes under /dev dir

SYS_NOBACKUP:0

Set output direction of gpio[43],value:1

done

SYS_NOBACKUP0

SYS_NOBACKUP_test

prepare_partition.sh SYS_NOBACKUP:0!

================================================

= !!  the  minisys  is  used  for  [ ipd ]  !! =

================================================

[ INFO][MIN]TFTP: TFTP from server 192.168.1.128

[ INFO][MIN]TFTP: Filename: 'digicap.dav'

[ INFO][MIN]TFTP: ################################################################################

[ INFO][MIN]TFTP: #####################################

[ INFO][MIN]TFTP: Download File [OK]

[ INFO][MIN]BURN: ### chip_map = 1, chip_id = 1 ###

[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][260]:###### unpack source[0] bPackVerFlg=0x00,bPackDevFlg=1370050031141140011,iFirmMapFlg=0x00000001,iFirmKeyFlg=0x0c890000

[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][262]:###### unpack source[0] iFirmOffset=0x0000006c,iFileLength=0x02e0869c,iCheckSumU8=0x6ed9126b

[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][290]:###pack[0] iFirmFlg=0x0c890000,iPlatform=137,iDevMajor=114,iDevMinor=114,iLanguage=1

ikeyFlg=0xc890000,tFirmAesKey.ikeyFlg=0xc890000

[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[0] szFileName=_cfgUpgClass,iFirmOffset=0x00002200,iFileLength=0x00000318,iCheckSumU8=0xa1754dd6

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[1] szFileName=uImage,iFirmOffset=0x00002518,iFileLength=0x00440e00,iCheckSumU8=0x18314fee

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

......................................................................[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[2] szFileName=cfgExtendClass,iFirmOffset=0x00443318,iFileLength=0x00000160,iCheckSumU8=0x8e4c0e74

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[3] szFileName=initrun.sh,iFirmOffset=0x00443478,iFileLength=0x00003931,iCheckSumU8=0xb3d2d3dd

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[4] szFileName=dev_capability.tar.lzma,iFirmOffset=0x00446da9,iFileLength=0x0000b4ae,iCheckSumU8=0xf5baf2c1

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[5] szFileName=app.tar.gz,iFirmOffset=0x00452257,iFileLength=0x00c818d8,iCheckSumU8=0xd9266b16

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[6] szFileName=applib.tar.gz,iFirmOffset=0x010d3b2f,iFileLength=0x005d9043,iCheckSumU8=0x6e7b8d19

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

Set output direction of gpio[43],value:0

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[7] szFileName=WebComponents.exe,iFirmOffset=0x016acb72,iFileLength=0x00460d60,iCheckSumU8=0x9a883c58

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[8] szFileName=cap.json,iFirmOffset=0x01b0d8d2,iFileLength=0x000041b8,iCheckSumU8=0x0bc6e0f0

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[9] szFileName=skf_app.bin,iFirmOffset=0x01b11a8a,iFileLength=0x00039a48,iCheckSumU8=0x7a3b48c6

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[10] szFileName=skf_app_wi32.bin,iFirmOffset=0x01b4b4d2,iFileLength=0x00010448,iCheckSumU8=0x2c164597

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[11] szFileName=hw_resources,iFirmOffset=0x01b5b91a,iFileLength=0x000121ae,iCheckSumU8=0xa9bb4572

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[12] szFileName=icr_resources,iFirmOffset=0x01b6dac8,iFileLength=0x00000201,iCheckSumU8=0xbc333166

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[13] szFileName=dsp_extres.tgz,iFirmOffset=0x01b6dcc9,iFileLength=0x002096e5,iCheckSumU8=0x5ea08621

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[14] szFileName=dsp_exres_uncompress.sh,iFirmOffset=0x01d773ae,iFileLength=0x0000037b,iCheckSumU8=0x4d84f418

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[15] szFileName=IEfile.tar.gz,iFirmOffset=0x01d77729,iFileLength=0x009155e3,iCheckSumU8=0xa77c45f8

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[16] szFileName=help.tar.gz,iFirmOffset=0x0268cd0c,iFileLength=0x00046f60,iCheckSumU8=0xb3bd0441

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[17] szFileName=SoftwareLicense.txt,iFirmOffset=0x026d3c6c,iFileLength=0x0001ad61,iCheckSumU8=0x01b923ce

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[18] szFileName=audio_254.wav,iFirmOffset=0x026ee9cd,iFileLength=0x00070b90,iCheckSumU8=0x60f34115

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[19] szFileName=double.bmp,iFirmOffset=0x0275f55d,iFileLength=0x000a6c70,iCheckSumU8=0x33db09b2

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[20] szFileName=pic_road_info.bmp,iFirmOffset=0x028061cd,iFileLength=0x00029caa,iCheckSumU8=0x5d0f349b

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[21] szFileName=half.bmp,iFirmOffset=0x0282fe77,iFileLength=0x0000a8f8,iCheckSumU8=0xb23b5078

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[22] szFileName=e7_modules.tgz,iFirmOffset=0x0283a76f,iFileLength=0x00352471,iCheckSumU8=0x02cde28c

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[23] szFileName=solib.tar.gz,iFirmOffset=0x02b8cbe0,iFileLength=0x000011d9,iCheckSumU8=0xdb289caf

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[24] szFileName=MOTOR_APP,iFirmOffset=0x02b8ddb9,iFileLength=0x00024820,iCheckSumU8=0x445642e6

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[25] szFileName=MOTOR_APP1,iFirmOffset=0x02bb25d9,iFileLength=0x00021a74,iCheckSumU8=0x7eb4c141

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[26] szFileName=MOTOR_APP_PACKAGE.tar.gz,iFirmOffset=0x02bd404d,iFileLength=0x00233ae1,iCheckSumU8=0xcb0ed8fe

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[27] szFileName=qr_jx_config.json,iFirmOffset=0x02e07b2e,iFileLength=0x00000395,iCheckSumU8=0xa8280f3b

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[28] szFileName=qr_jx_source.json,iFirmOffset=0x02e07ec3,iFileLength=0x000000fa,iCheckSumU8=0x190b3ea3

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_ERRO][src/firm_unpack_lib.c][firm_pack_decode][400]:###file[29] szFileName=light_cfg_xml.tar.gz,iFirmOffset=0x02e07fbd,iFileLength=0x000006df,iCheckSumU8=0xcef9fa16

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890000

ikeyFlg=0xc890001,tFirmAesKey.ikeyFlg=0xc890001

..[PACK][DBG_HINT][src/firm_unpack_lib.c][firm_pack_decode][339]:###pack num=1,decode succ=1,permit denied=0

once beat...

Set output direction of gpio[43],value:1


[ INFO][MIN]BURN: Write Flash [OK]

* UPDATE COMPLETE *


The system is going down NOW!
 
Last edited:
Top