Lorex E891AB (aka IPC-HFW1841EN-PV)

right. clearly this was branched off from the 1831E code line, but may have other code (for the white LED's and two-way audio for example) the base unit doesn't support. IE, this does NOT mean we now have Dahua-branded/featured FW for these Lorex units, just that we can recover the stock Lorex fw if needed as we carefully explore other options... :-)
 
Ya, I was able to get the stock loaded back onto it just fine. Honestly the biggest thing I was hoping for was a modern frigging web interface. I may play with this a bit more as I get time, but it's obviously doing a hardware check and bombing out when it doesn't find what it wants.


Anyone else heading down this path, just so you don't have to go searching in other forums, these are the commands you need to issue for the firmware update with lorex:

run dr
run dk
run du
run dw
run dp
run dc
run pd



Output from a failed boot with 1831 firmware:

19:03:45|[pdc] BASE_LINE: 240
19:03:45|[pdc] OSA_kProcCreate OK
19:03:45|[OSA-DRV] Char device create OK !
19:03:45|[pdc] PDC_PartionInit ok!!
19:03:45|[pdc] nPrdModelId = 0
19:03:45|[OSA-DRV] Char device create OK !
19:03:45|[pdc] ERROR (PDC_vinCfgPlatInit|197): Unknown Product Type
19:03:45|[pdc] ERROR (HWID_vinCfgInit|7347): Ioctl execute error
19:03:45|[pdc] videoOut Channel is 0
19:03:45|[pdc] ERROR (PDC_cfgFindInitOps|343): Not probed, please check it !
19:03:45|[pdc] ERROR (PDC_cfgInit|390): Device not found !
19:03:45|[pdc] ERROR (PDC_drvInit|194): PDC_cfgInit()
19:03:45|[OSA-DRV] Char device create OK !
19:03:45|[OSA-DRV] Char device create OK !
19:03:45|[pdc] SramFile init ok !
19:03:45|[pdc] Both of Chief and Backup File CRC check OK!
19:03:45|[OSA-DRV] recordTsk Task pid=518 tid=518
19:03:45|[OSA-DRV] Char device create OK !
19:03:45|[OSA-DRV] Char device create OK !
19:03:45|[pdc] ERROR (PDC_drvInit|209): PDC Driver Initial Failed !
/usr/etc/imod: line 74: can't create /proc/osa_root/pdc/pdcWdt: nonexistent directory
mmz_size=256M
<6>Media Memory Zone Manager
INFO (SYS_ModInit|812): cal_sys create proc success
INFO (SYS_CAL_Probe|683): enter the SYS_CAL_Probe
INFO (SYS_CAL_Probe|690): RST_MGR res->start=0x11000000
buffer_num=8
/usr/lib/modules
mbx addr reg 0x11003000:0x96f9c000,phy addr 0xd6f9c000,MAX_MBX_CNT=32
PhyID Found..
SynopGMAC:Autonegotiation Complete data = 7869
SynopGMAC:Link UP
SynopGMAC:Link is with 100M Speed
GMAC use 3000 static skb pool for receive data
IPC Device


[OSA-APP] OSA Build on Jan 9 2019 at 14:38:14.
[OSA-APP] SVN NUM: 14828.

[libpdi] libpdi.so Build on Jan 9 2019 at 14:28:56.
[libpdi] SVN NUM: 50854.
[libpdi] PDI product has 1 configs!!!
19:03:50|[pdc] Get sensorExt cfg failed, so get sensor cfg!
19:03:50|[pdc] WARN (HWID_sensorGetSensorCfg|8025): Get sensor cfg failed!
19:03:50|[pdc] ERROR (HWID_ioctl|350): Copy error !
[libpdi] ERROR (PDI_getSensorDrvInfo|415): Ioctl execute error
[libpdi] PDI product Init OK!
[libpdi] PDI hwid Get OK!
[libpdi] PDI run in syshelper
[libpdi] WARN : RTC Dev not exists,status = -1
19:03:50|[pdc] Both of Chief and Backup File CRC check OK!
19:03:50|[pdc] phyaddr = df5fe000, memLen = 2000
19:03:50|[pdc] DDRdata crc incorrect, Load from sramFile
[libpdi] WARN : TwoEyesCom Dev not exists,status = -1
[libpdi] partionNum=24
[libpdi] Get fpga upgrade cfg failed, use default
19:03:50|[pdc] The cmd 3221510146 is invalid
[libpdi] Get flash total size failed.
19:03:50|[pdc] The cmd 3221510149 is invalid
[libpdi] Get bootsupportswitchpart failed.
[libpdi] Support backup partition !!!
[libpdi] Flashtype = 0x4,patSize = 0x100000,rwSize = 0x800,ersSize = 0x20000
[libpdi] CreatePartionTab:updateflag fd=10
[libpdi] Read: blkIndex: 1,pageIndex: 1,byteIndex: 0 ,fLag: ff
[libpdi] boot dont support switch part
[libpdi] gFlashCtrlObj.isSupportSwitchPart:0
[libpdi] gFlashCtrlObj.bootFromBack:0
[libpdi] gFlashCtrlObj.bootVersion:255
[libpdi] ERROR (PDI_comGetMapInfo|1759): Fail to Get ComMapInfo
[libpdi] ERROR (PDI_preInit|169): PDI_comInit execute Error and return OSA_EFAIL
[libpdi] WARN : Heat Dev not exists,status = -1
19:03:50|[pdc] WARN (MISC_ioctl|1098): Get crypt cfg failed!
[libpdi] The device has no crypt cfg!
[libpdi] rebootSystem: i will reboot
[libpdi] REBOOT PID = 601, TID = 601
[libpdi] Read: blkIndex: 1,pageIndex: 0,byteIndex: 0 ,fLag: ff
[libpdi] Write: blkIndex: 1,pageIndex: 0,byteIndex: 0 ,fLag: 0
[libpdi] pdi:system will reboot!!
[libpdi] WARN (PDI_rebootLocal|454): Fail to reboot, try system reboot
 
Heads up: this firmware is not appropriate to properly recover LNB9232s (HFW1831EN) units.
My unit no longer supports 30FPS, maxing out at 15FPS until 3MP resolution is selected.

The "08" version of the firmware is apparently varporware.
 
This is customized firmware.
Unable to change to Dahua firmware.
IPC-HFW1841EN-PV-0280B-CAYENNE:01:02:02:72:2C:00:01:0F:01:01:00:3A5:00:00:00:00:00:01:00:02: 200
Use Dahua DH7200 processor + OS08A20