Hikvision 5.2.5 & 5.2.8 Full English (INC DAYS OF WEEK) mtd Hack

[alastairstevenson]

Did anyone notice that mtd6 is mirrored at 0x40000 (on 5.3.0)? So we have 3 blocks with language byte.

Yes indeed.
4 in total if you include mtdblock5. On all the cameras where I changed the region byte, I modified all 4 locations. I have a vague recollection of trying to determine which one was active, but not much point when all can be changed.

 

[Mario Schiano Lo Moriello]

Guys, quick question. Is there a way to "download" the firmware from my camera?

 

[alastairstevenson]

Long answer:
I have done this on an NVR, where the firmware resides entirely in mtdblock2, and successfully re-flashed after adding the required header with hiktools.
And for the camera, I have downloaded all 17 mtdblocks, which in theory should provide an image of what the firmware install did, but I have not tried to re-assemble into a usable firmware image.

Short answer: Not that I'm aware of, but others may know differently.

 

[gpower07]

I have a Chinese 2CD-394sF-I fish eye camera with firmware 5.2.1. can I still use this tool to change to English?

 

[HoLeeShiet]

Is it possible to share the required mtd files? That makes the hacking process more efficient and without errors. Or am I thinking too simple?

 

[whoslooking]

No the mtd 5/6 have the serial numbers and Mac address of the camera installed, they would not work on the same system.

 

[klasipca]

Don't know if it was asked before, but I didn't find I have 5.2.5 (shipped originally with 5.1.0) hacked with mtd trick, would upgrade to English 5.3.3 cause any issues?

 

[whoslooking]

Don't know if it was asked before, but I didn't find I have 5.2.5 (shipped originally with 5.1.0) hacked with mtd trick, would upgrade to English 5.3.3 cause any issues?

It will upgrade to 5.3.0
5.3.3 may work, but not meant for that model.

 

[klasipca]

It will upgrade to 5.3.0
5.3.3 may work, but not meant for that model.

Would that overwrite the hack though?

 

[whoslooking]

No, I have tested this myself and if you don't like the firmware you can tftp back down to 5.1.6 too.

 

[klasipca]

Cool, thanks for info!

 

[jordanb]

whoslooking, I have a 3mp cube camera that I got around a year ago with 5.2.0 on the label, can this get tftp'd with 5.1.6 in your sig to become wr, or would I still have to do the mtd hack?

 

[whoslooking]

whoslooking, I have a 3mp cube camera that I got around a year ago with 5.2.0 on the label, can this get tftp'd with 5.1.6 in your sig to become wr, or would I still have to do the mtd hack?

Yes, I got one myself it works nice

 

[jordanb]

Yes, I got one myself it works nice

Nice, will give it a try when I have some time free, is 5.2.0 the highest that can be done in this way? I have a 3332 thats on 5.2.1 and a couple if other cams on 5.2.3.

 

[jordanb]

is the serial number supposed to change to ccwr when doing this? as mine has stayed at ccch.

 

[whoslooking]

No you are not changing the serial number, just the regional flag

 

[whoslooking]

Nice, will give it a try when I have some time free, is 5.2.0 the highest that can be done in this way? I have a 3332 thats on 5.2.1 and a couple if other cams on 5.2.3.

No the last version that can be done, is the first batch of 01/2015 all 5.2.3 and below will work.

 

[jordanb]

Cheers @whoslooking

 

[homejones]

Thought I would pass along this information to the community.

I have a 2CD2532F-IS with firmware 5.30_150513 dated 07/2015. My Aliexpress seller unfortunately did not update the firmware/MTD prior to sending it to me so I had a Chinese unit on my hands. I downgraded to 5.2.5 and the cam was still in Chinese. The Hiktools fimrware mod did not work, so I knew I had to do the MTD hack. The MTD changes were a little beyond my comfort zone and I reached out to the seller for help. Surprisingly, the seller and I were able to get on a remote connection together and they changed my MTD settings remotely. After all was said and done, I had an English language camera running 5.2.5.

Here are the values that they changed:

mtd5
00000650, Column 04, 02 > 01
00000670, Column 0B, 90 > 91

mtd6
00000010, Column 00, 02 > 01
00000030, Column 07, 90 > 91

Hope this helps!

 

[wesverg]

Hi,
This is my first post so please bear with me.
I would like to know where to get the file that need to edit and how to save the config/file back to my IP Cam.
I downloaded the Hxd software to be used for editing the config.
My IP is in Chinese Lang version 5.2.5 build 141201

Thank you