OK - so I swapped out one of my live DS-2CD3332-I Hikvisions for a Dahua HDW4431C-A-V2 that I'd bought as spares&repairs on eBay and fixed up.
I'd been planning on swapping it out anyway - once I'd received and changed the 2.8mm lens for a 6mm one, which I did today.
So I've now got a Hikvision camera to test out some recovery scenarios on.
As you do seem quite adventurous - maybe you'd like to try this:
Unzip the mImage file attached and drop it in the same folder as the
tftp updater (or tftp server if you are using that).
With the PC IP address set to 192.0.0.128, power on the camera and interrupt the bootloader with Control-U
Press Return a couple of times and use the command
upm
Hopefully it will download and write a new copy of the 'min-system' recovery partition.
Then if you are running the Hikvision tftp updater, shut it down.
Use the command
reset
and with some luck it should boot into the 'min-system' mode, from where the /dav/fixup.sh script can be run.
Good luck! I have my fingers crossed.