Watchdata EMV chips in R6, G0 and other cameras

I've not used a smart card reader with these devices. Much of what is stored is available via the prtHardInfo command in psh.
And attempts to write could trigger the self-erase protection.

I figured all the easy approaches would have been taken already.

*sigh*

-very irritated at this product for being mis-advertised.
 
Ah, but see, I'm still looking for that little lever way in.

The NAND flash reader is on order.

OK so I have desoldered the RAM chip and dumped it. I have purchased a programmer (i need to get a swapped one) and a solderable 'socket' to put said ram chip in. Going to grab a few more of the same spec chips and burn the same FW to them.
 
After fixing checksum:
prtHardInfo
Start at 1970-04-17 20:29:07
Serial NO :DS-2CD3345F-I20161204AACH686158XXX
V5.4.20 build 160726
NetProcess Version: 1.7.1.204140 [16:40:42-Jul 11 2016]
Db Encrypt Version: 65537
Db Major Version: 1176
Db svn info:
Path: /Camera/Platform/Branches/branches_frontend_software_platform/db_process_for_5.4.20
Last Changed Rev: 201703
Last Changed Date: 2016-06-17 09:43:40 +0800 (Fri, 17 Jun 2016)
hardwareVersion = 0x0
hardWareExtVersion = 0x0
encodeChans = 1
decodeChans = 1
alarmInNums = 0
alarmOutNums = 0
ataCtrlNums = 0
flashChipNums = 0
ramSize = 0x100
networksNums = 1
language = 1
devType = 0x22536
net reboot count = 0
vi_type = 32
Path: /Camera/Platform/Branches/branches_frontend_software_platform/IPC_develop_branch/ipc_e0_g0_r3_5.4.20
Last Changed Rev: 210205
Last Changed Date: 2016-07-25 21:49:11 +0800 (Mon, 25 Jul 2016)

Almost there....web page gives:firmware language mismatch: /dav/webLib
Something is missing but what...?
Hi, can you please tell more details about how to modify the hex bytes from the EMV chip? I can read and modify the hex data from 0xC061682C using the command "mb.w". I tried to add this command to bootargs, but nothing changed after camera booted up

Thanks