Dahua Firmware Mod Kit + Modded Dahua Firmware

ah darn it, just got rid of mine.. wha'd u do to it? can u hack IVS on in the WebUI heh
 
ah darn it, just got rid of mine.. wha'd u do to it? can u hack IVS on in the WebUI heh
Nah just tried to get rid of the region check ^^ - force it to "ABROAD"
 
wonder what that does, my 5216-4KS2 I just applied both files from here: USA/NVR/Pro/DHI NVR52A16 16P 4KS2 - Dahua Wiki and it gave me english/spanish/french, the second one was just the custom partition w/the translations

mebe abroad will enable IVS menu? i keep seeing screenshots of it being there on ones sold from other vendors.
 
wonder what that does, my 5216-4KS2 I just applied both files from here: USA/NVR/Pro/DHI NVR52A16 16P 4KS2 - Dahua Wiki and it gave me english/spanish/french

mebe abroad will enable IVS menu? i keep seeing screenshots of it being there on ones sold from other vendors.
Nah, if it's "INLAND" then it will only do chinese language.
Your model is ABROAD, but I think @thanhdiepts has a chinese one.
 
  • Like
Reactions: nayr
thanks
upgraded :(
Can you telnet and run "killall Challenge" and "Challenge", it should print a lot of info at the start, paste it.
 
(none) login: admin
Password:
~ # killall Challenge
~ # Challenge
-sh: Challenge: not found
~ # challenge
-sh: challenge: not found
~ # ls
bin etc linuxrc proc share tmp
boot home mnt root slave usr
dev lib nfs sbin sys var
~ # cd proc
/proc # ls
1 25709 81 kmsg
10 25774 86 loadavg
11 259 9 locks
12 260 alarm_debug meminfo
13 262 asound misc
130 26399 avss modules
14 264 buddyinfo mounts
15 26510 bus mtd
152 26555 cgroups mv-stmmac-1:01
16 26564 clocks net
17 26647 cmdline pagetypeinfo
170 276 cmos_debug partitions
18 287 config.gz rtc_debug
190 3 consoles scsi
2 302 cpu self
20 303 cpuinfo slabinfo
201 35 crypto softirqs
202 36 csb_debug st231
203 37 dahua stat
208 38 devices staudio
21 39 diskstats stdecoder
211 41 dma-mappings stencoder
212 43 driver stvideo
213 44 execdomains swaps
214 49 fb sys
22 50 filesystems sysrq-trigger
23 51 fs sysvipc
232 52 fvdp timer_list
233 53 gpio_debug tty
234 54 gpio_i2c uptime
237 55 ics version
238 56 infrastructure vmallocinfo
24 6 interrupts vmstat
243 7 iomem zoneinfo
25 70 ioports
25131 71 irq
25360 73 kallsyms
/proc # cd
~ # cd bin
/bin # ls
3gpp chmod dmesg fsync ipaddr ls mt printenv setarch tr
addgroup chown dnsdomainname getopt ipcalc lsattr mv ps sh true
adduser cp dumpkmap grep iplink lzop netinit pwd sleep umount
ash cpio dvrhelper gunzip iproute makemime netstat reformime stat uname
awk cttyhack echo gzip iprule mkdir nice rev stty upgraded
base64 date ed hostname iptunnel mknod p7zip rm su usleep
busybox dd egrep hush kill mktemp pidof rmdir sync vi
cat delgroup expr id linux32 more ping rpm tar watch
catv deluser false ionice linux64 mount ping6 run-parts telnetd which
chattr df fdflush iostat ln mountpoint pipe_progress scriptreplay top zcat
chgrp dirname fgrep ip login mpstat powertop sed touch
/bin # cd
~ # cd proc
 
oh it's in /var
dvrhelper /var/Challenge
 
onur@onur-HP-Compaq-8510p:~$ telnet 192.168.2.108
Trying 192.168.2.108...
Connected to 192.168.2.108.
Escape character is '^]'.
(none) login: admin
Password:
~ # cd var
/var # ls
Challenge staudio.ko
avss.ko stavmem_core.ko
displaylink.ko stdecoder.ko
drvbox.ko stencoder.ko
h264enchw.ko stm-blitter.ko
hdmi.ko stm_event.ko
ics.ko stm_registry.ko
mme.ko stm_wrapper.ko
mvumi.ko stmcore-display-stiH416.ko
pem stmcore-fvdp-stiH416.ko
platform.ko stmfb.ko
rt5370sta.ko stos_core.ko
shm stvideo.ko
sm750.ko tmp
ssl usbserial.ko
st231_host_driver.ko vibe_os.ko
/var # killall Challenge
/var # Challenge
-sh: Challenge: not found
/var # cd Challenge
-sh: cd: can't cd to Challenge
/var #

[LIBDVR] LIBDVR_TOOL: waitpid error
[LIBDVR] LIBDVR_TOOL: waitpid error
[LIBDVR] LIBDVR_TOOL: waitpid error
[LIBDVR] LIBDVR_TOOL: waitpid error
[LIBDVR] LIBDVR_TOOL: waitpid error
[LIBDVR] LIBDVR_TOOL: waitpid error
[LIBDVR] LIBDVR_TOOL: waitpid error
[LIBDVR] LIBDVR_TOOL: waitpid error^C
~ # dvrhelper /var/Challenge
[LIBDVR] LIBDVR_TOOL: dvrhelper version: 5952(May 6 2014 12:00:10)
[LIBDVR] MSG: bootenv malloc size(0x10000), addr(0x422010)
[LIBDVR] MSG: reading MTD block...
[LIBDVR] LIBDVR_TOOL: Auto to start program
LIBHD_MSG: Support ESATA function.
LIBHD_MSG: Support ESATA function.
[LIBDVR] MSG: Run: /var/Challenge
08:53:52|trace configInit:878 open(/mnt/custom/CustomConfig)error!
08:53:52|trace CCustom::getData Cat't find(MAX_PASSWD_LEN)=0
08:53:52|trace CCustom::getData Cat't find(MIN_PASSWD_LEN)=0
08:53:52|trace CCustom::getData Cat't find(MAX_USERNAME_LEN)=0
08:53:52|trace CCustom::getData Cat't find(MAX_GROUPNAME_LEN)=0
+++++++++++++++++++++++++++++++++
Name:storage
Version:1.03.0
Build date:Jan 7 2016 15:25:07
Desc:DriverManager release
+++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++
Name:manager
Version:1.03.1
Build date:Jan 7 2016 15:25:07
Desc:
+++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++
Name:manager
Version:1.03.1
Build date:Jan 7 2016 15:25:07
Desc:
+++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++
Name:guictrls
Version:1.05.5
Build date:Jan 7 2016 15:25:07
Desc:GUI ctrls Relese
+++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++
Name:OS_FDMA
Version:1.00.1
Build date:Jan 7 2016 15:25:07
Desc:OS Relese
+++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++
Name:OS_FDMA
Version:1.00.1
Build date:Jan 7 2016 15:25:07
Desc:OS Relese
+++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++
Name:OS_FDMA
Version:1.00.1
Build date:Jan 7 2016 15:25:07
Desc:OS Relese
+++++++++++++++++++++++++++++++++
send_verify_msg nl_sd 5, id 64, mypid 828
 
# /var/Challenge
09:07:54|trace configInit:878 open(/mnt/custom/CustomConfig)error!
09:07:54|trace CCustom::getData Cat't find(MAX_PASSWD_LEN)=0
09:07:54|trace CCustom::getData Cat't find(MIN_PASSWD_LEN)=0
09:07:54|trace CCustom::getData Cat't find(MAX_USERNAME_LEN)=0
09:07:54|trace CCustom::getData Cat't find(MAX_GROUPNAME_LEN)=0
+++++++++++++++++++++++++++++++++
Name:storage
Version:1.03.0
Build date:Jan 7 2016 15:25:07
Desc:DriverManager release
+++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++
Name:manager
Version:1.03.1
Build date:Jan 7 2016 15:25:07
Desc:
+++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++
Name:manager
Version:1.03.1
Build date:Jan 7 2016 15:25:07
Desc:
+++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++
Name:guictrls
Version:1.05.5
Build date:Jan 7 2016 15:25:07
Desc:GUI ctrls Relese
+++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++
Name:OS_FDMA
Version:1.00.1
Build date:Jan 7 2016 15:25:07
Desc:OS Relese
+++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++
Name:OS_FDMA
Version:1.00.1
Build date:Jan 7 2016 15:25:07
Desc:OS Relese
+++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++
Name:OS_FDMA
Version:1.00.1
Build date:Jan 7 2016 15:25:07
Desc:OS Relese
+++++++++++++++++++++++++++++++++
send_verify_msg nl_sd 3, id 64, mypid 916
Run Challenge!
09:07:54|trace getSelfCheckedMode error
09:07:54|trace g_LessTime:0
There is another Challenge program running, abort it now!!!!!
Segmentation fault

# dvrhelper /var/Challenge
[LIBDVR] LIBDVR_TOOL: dvrhelper version: 5952(May 6 2014 12:00:10)
[LIBDVR] MSG: bootenv malloc size(0x10000), addr(0x162e010)
[LIBDVR] MSG: reading MTD block...
[LIBDVR] LIBDVR_TOOL: Auto to start program
LIBHD_MSG: Support ESATA function.
LIBHD_MSG: Support ESATA function.
[LIBDVR] MSG: Run: /var/Challenge
09:10:51|trace configInit:878 open(/mnt/custom/CustomConfig)error!
09:10:51|trace CCustom::getData Cat't find(MAX_PASSWD_LEN)=0
09:10:51|trace CCustom::getData Cat't find(MIN_PASSWD_LEN)=0
09:10:51|trace CCustom::getData Cat't find(MAX_USERNAME_LEN)=0
09:10:51|trace CCustom::getData Cat't find(MAX_GROUPNAME_LEN)=0
+++++++++++++++++++++++++++++++++
Name:storage
Version:1.03.0
Build date:Jan 7 2016 15:25:07
Desc:DriverManager release
+++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++
Name:manager
Version:1.03.1
Build date:Jan 7 2016 15:25:07
Desc:
+++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++
Name:manager
Version:1.03.1
Build date:Jan 7 2016 15:25:07
Desc:
+++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++
Name:guictrls
Version:1.05.5
Build date:Jan 7 2016 15:25:07
Desc:GUI ctrls Relese
+++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++
Name:OS_FDMA
Version:1.00.1
Build date:Jan 7 2016 15:25:07
Desc:OS Relese
+++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++
Name:OS_FDMA
Version:1.00.1
Build date:Jan 7 2016 15:25:07
Desc:OS Relese
+++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++
Name:OS_FDMA
Version:1.00.1
Build date:Jan 7 2016 15:25:07
Desc:OS Relese
+++++++++++++++++++++++++++++++++
send_verify_msg nl_sd 5, id 64, mypid 1157
 
>There is another Challenge program running, abort it now!!!!!
Nope.
killall dvrhelper
killall Challenge
and try again?

It should print information about the hardware, should have a line that says ABROAD or INLAND.
 
SYSTEM INFORMATION

[00m[0;32;32m[CSB] MSG: | DVR ID: --

[00m[0;32;32m[CSB] MSG: | main board: 40_021

[00m[0;32;32m[CSB] MSG: | cpld version: 1.04

[00m[0;32;32m[CSB] MSG: | product type: NVR

[00m[0;32;32m[CSB] MSG: | CPU chip: ST416

[00m[0;32;32m[CSB] MSG: | DSP chip: NONE

[00m[0;32;32m[CSB] MSG: | video chip: No chip

[00m[0;32;32m[CSB] MSG: | video HdSd mode: HD

[00m[0;32;32m[CSB] MSG: | analog audio mode: STxx control

[00m[0;32;32m[CSB] MSG: | audio interface: Self_audio

[00m[0;32;32m[CSB] MSG: | frontboard type: 1.5U-2

[00m[0;32;32m[CSB] MSG: | abroad info: Inland

[00m[0;32;32m[CSB] MSG: | rtc vendor: RX8010SJ

[00m[0;32;32m[CSB] MSG: | video channel: 0

[00m[0;32;32m[CSB] MSG: | audio channel: 0

[00m[0;32;32m[CSB] MSG: | digital video: 64

[00m[0;32;32m[CSB] MSG: | alarm in: 16

[00m[0;32;32m[CSB] MSG: | alarm out: 6

[00m[0;32;32m[CSB] MSG: | disk num: 4

[00m[0;32;32m[CSB] MSG: | pm flag: MUL USE

[00m[0;32;32m[CSB] MSG: | net card: 1

[00m[0;32;32m[CSB] MSG: | dsp num: 0

[00m[0;32;32m[CSB] MSG: | audio surpport: YES

[00m[0;32;32m[CSB] MSG: | matrix surpport: NO

[00m[0;32;32m[CSB] MSG: | esata surpport: YES

[00m[0;32;32m[CSB] MSG: | frontboard digit: NO

[00m[0;32;32m[CSB] MSG: | frontboard shift: YES

[00m[0;32;32m[CSB] MSG: | RS232 surpport: YES

[00m[0;32;32m[CSB] MSG: | RS485 surpport: YES

[00m[0;32;32m[CSB] MSG: | app version: 2.6XX

[00m[0;32;32m[CSB] MSG: | encode type: D1 RT

INLAND


(none) login: admin
Password:
User or Password Invalid, Remain 1 Retry Times
(none) login: admin
Password:
~ # killall dvrhelper
~ # killall Challenge
~ # killall dvrhelper
killall: dvrhelper: no process killed
~ # killall Challenge
killall: Challenge: no process killed
~ # /var/Challenge
10:00:59|trace configInit:878 open(/mnt/custom/CustomConfig)error!
10:00:59|trace CCustom::getData Cat't find(MAX_PASSWD_LEN)=0
10:00:59|trace CCustom::getData Cat't find(MIN_PASSWD_LEN)=0
10:00:59|trace CCustom::getData Cat't find(MAX_USERNAME_LEN)=0
10:00:59|trace CCustom::getData Cat't find(MAX_GROUPNAME_LEN)=0
+++++++++++++++++++++++++++++++++
Name:storage
Version:1.03.0
Build date:Jan 7 2016 15:25:07
Desc:DriverManager release
+++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++
Name:manager
Version:1.03.1
Build date:Jan 7 2016 15:25:07
Desc:
+++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++
Name:manager
Version:1.03.1
Build date:Jan 7 2016 15:25:07
Desc:
+++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++
Name:guictrls
Version:1.05.5
Build date:Jan 7 2016 15:25:07
Desc:GUI ctrls Relese
+++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++
Name:OS_FDMA
Version:1.00.1
Build date:Jan 7 2016 15:25:07
Desc:OS Relese
+++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++
Name:OS_FDMA
Version:1.00.1
Build date:Jan 7 2016 15:25:07
Desc:OS Relese
+++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++
Name:OS_FDMA
Version:1.00.1
Build date:Jan 7 2016 15:25:07
Desc:OS Relese
+++++++++++++++++++++++++++++++++
send_verify_msg nl_sd 3, id 64, mypid 607
Run Challenge!
10:00:59|trace getSelfCheckedMode error
10:00:59|trace g_LessTime:0
There is another Challenge program running, abort it now!!!!!
Segmentation fault
 
well fuck it didn't work, I'll look into it later
 
That sounds really great. Actually I'm in contact with the chinese seller who'll find me the actual chinese firmware. Hopefully he'll send me one.
I wondered about the size of the BUILD.bin, but this explains it at all. My version was already english, but yours is definitely better. Now I have to times english for selection, but the first is the customized simplified chinese i think. For example in the Playback tab i got still some chinese characters, also in error messages.
I would really appreciate if you'll do an extra Image for me if I get the actual, original one. I could imagine other people might also like an update for the 4431R-ZS.
Big thanks in advance :)
If you can find a matching firmware for this camera then sure.
I couldn't find it anywhere, this camera has different size flash and partition layout.
I made the BUILD.bin using a modified firmware dump from another persons camera.

4431R-ZS.
 

Attachments