I re-read this long thread but unfortunately all links to hik_repack (from @leecher) have been removed.
As this is a @montecrypto thread - I assumed it was the MCR unpacker that you were looking for.
I desoldered flash chip, put it on programmer and download firmware. Cam connected to the serial port and to the network.
Just for fun, here is a simple unpacker script for the flash dump you posted.
#!/bin/sh
# This script holds the steps to unpack the flash dump that @kk_2 posted on ipcamtalk.
# The offsets will very likely be specific to that version of firmware. There is no attempt to
# use logic to make it universal - it's as much a memory-jogger as anything.
#
#
dd if=25q128c.bin of=boot.part bs=1 count=$((0x70000))
dd if=25q128c.bin of=uImage.part bs=1 count=$((0x380000 - 0x70000)) skip=$((0x70000))
dd ibs=1 skip=64 if=uImage.part of=uncompressor count=16407
dd ibs=1 obs=512 if=uImage.part of=mainbody.gz skip=16407
gunzip -k mainbody.gz
dd ibs=1 obs=512 if=mainbody of=romfs.cpio.xz skip=$((0x40b1d4))
xz --format=xz --decompress -k -f --single-stream romfs.cpio.xz
[ ! -d romfs_contents ] && mkdir romfs_contents
cd romfs_contents
sudo cpio -idvm < ../romfs.cpio 2>../transcript1.txt
cd ..
dd if=25q128c.bin of=appfs.part bs=1 skip=$((0x380000))
sudo unsquashfs -d appfs appfs.part
#
#
#
#
#i binwalked it cause i have no style lol
haha!
No, I haven't looked.
In which case the @montecrypto unpacker would most likely have worked on the firmware.
In theory, probably yes, as there is a lot of commonality in how Hikvision firmware has been packaged.