I desoldered flash chip, put it on programmer and download firmware. Cam connected to the serial port and to the network.
I have an access to the u-boot and tftp. If you need some extra information ask.
I briked this cam more than 20 times.
Resurrection take 45 minutes (desolder, program and...