News:

Registered a URL and setup a forum as the IPCam stuff really needed its own site vs my irregular blog posts about IPCam hacking at http://www.computersolutions.cn/blog

Author Topic: A noob needs help with his db-Power Cam  (Read 8694 times)

March 22, 2012, 11:48:14 am

DB Power IP030B indoor use P/T Wireless IP Camera

Hello I need your help my cam is dead.
I've tryed some Foscam Firmware but it doesn't work.
So I have read a lot but as more as I read I understand less.

Thats what I found in my cam.

Code: [Select]
W90P745 Boot Loader [ Version 1.1 $Revision: 1 $ ] Rebuilt on May 11 2010
Memory Size is 0x1000000 Bytes, Flash Size is 0x200000 Bytes
Board designed by Winbond
Hardware support provided at Winbond
Copyright (c) Winbond Limited 2001 - 2006. All rights reserved.
Boot Loader Configuration:

        MAC Address         : 00:A1:10:11:90:45
        IP Address          : 0.0.0.0
        DHCP Client         : Enabled
        CACHE               : Enabled
        BL buffer base      : 0x00300000
        BL buffer size      : 0x00100000
        Baud Rate           : -1
        USB Interface       : Disabled
        Serial Number       : 0xFFFFFFFF


For help on the available commands type 'h'

Press ESC to enter debug mode ......
Cache enabled!
Processing image 1 ...
Processing image 2 ...
Processing image 3 ...
Processing image 4 ...
Processing image 5 ...
Processing image 6 ...
Processing image 7 ...

I dont found a Firmware that works.
Or...I dont know what I should type in the terminal to put the files at the adress where they should be.

I hope someone read this and could help me.


Thx for reading this post.
« Last Edit: March 22, 2012, 11:57:37 am by HansPansen »

  • No avatar
  • *****
March 23, 2012, 06:19:24 am
you have a 2mb device. you have to look for firmware where kernel+rootfs+webui fit in 2mb.
You may try the WansCam / Ali2 packages.

March 23, 2012, 10:56:24 am
OK i have downloaded the 2MB_ali2-(wanscam_AJ-C2WA-D118) pack there are 2 files in it.
But not a linux and romfs like in some other packages.
The tutorials describe the way with this files but they are not in this pack.

I extracted the linux.bin of one of this files but not a romfs.
What should I do now?

  • No avatar
  • *****
March 23, 2012, 05:47:41 pm
a) there is a tool to extract linux and romfs image from update file.

b) care to read this thread?

March 23, 2012, 06:23:35 pm
I don't get it.
Where is that tool to extract the files?
Is it the jEdit with the macro?
I've tried that but it makes nothing or I do something wrong.
« Last Edit: March 23, 2012, 06:33:07 pm by HansPansen »

March 24, 2012, 09:15:36 am
a) there is a tool to extract linux and romfs image from update file.

b) care to read this thread?

a) Where can  get this tool?

b) I'm actaully reading it again and again...and I understand a little more now.

March 24, 2012, 05:06:41 pm
If found foscam_pkmgr and tried to unpack the files but...

Code: [Select]
root@user1337-VirtualBox:~/Arbeitsfläche# ./foscam --firm fw.bin
Unpacking firmware fw.bin
awk: line 2: function strtonum never defined
awk: line 2: function strtonum never defined
>Extracting linux.bin ()
>Extracting rootfs.img ()
./foscam: Zeile 180: 20+: Syntax Fehler: Operator erwartet. (Fehlerverursachendes Zeichen ist \"+\").

  • No avatar
  • *****
March 25, 2012, 05:22:07 am
look at this thread

March 25, 2012, 01:37:18 pm
Thank you very much.
Now I have to find the right image because i get "open video device error"

  • No avatar
  • *****
March 25, 2012, 03:15:14 pm
there are only a few 2MB firmwares: the Ali2 aka Heden aka WanScam  or the one from the "541cpu Foscam clone recovery.zip"

the only other DB-Power mantioned in the forum was a newer WansView OEM with 4MB, deducing from the fw/webui versions given.

Do you remember what fw/webui versions you had? Or what the webui looked like?
(see chinese IP-cam clones topics at gadgetvictims)
« Last Edit: March 25, 2012, 03:20:27 pm by schufti »

March 26, 2012, 03:21:59 pm
I've tried the Ali2 firmware but thats where i got the "open video device error" message.
And the "541cpu Foscam clone recovery.zip" doesn't work for me too.


I think the UI looks like


But I don't remember any version number.

  • No avatar
  • *****
March 26, 2012, 03:28:21 pm
hmmm, this definitely looks like wanScam.
It is more like a shot in the dark but you could try to use the kernel of the newer wanScam fw together with the rootfs and webui of the old wanScam fw...


April 07, 2012, 05:51:22 pm
Today I've tried just for fun the "Version2 (voir détails mise à jour avant)" firmware.
And now I got this...

Code: [Select]
W90P745 Boot Loader [ Version 1.1 $Revision: 1 $ ] Rebuilt on May 11 2010
Memory Size is 0x1000000 Bytes, Flash Size is 0x200000 Bytes
Board designed by Winbond
Hardware support provided at Winbond
Copyright (c) Winbond Limited 2001 - 2006. All rights reserved.
Boot Loader Configuration:

        MAC Address         : 00:A1:10:11:90:45
        IP Address          : 0.0.0.0
        DHCP Client         : Enabled
        CACHE               : Enabled
        BL buffer base      : 0x00300000
        BL buffer size      : 0x00100000
        Baud Rate           : -1
        USB Interface       : Disabled
        Serial Number       : 0xFFFFFFFF


For help on the available commands type 'h'

Press ESC to enter debug mode ......
Cache enabled!
Processing image 1 ...
Processing image 2 ...
Processing image 3 ...
Processing image 4 ...
Processing image 5 ...
Processing image 6 ...
Processing image 7 ...
Unzip image 7 ...
Executing image 7 ...
Linux version 2.4.20-uc0 (root@maverick-linux) (gcc version 3.0) #1217 ¶þ 12ÔÂ 1
5 05:05:30 CST 2009
Processor: Winbond W90N745 revision 1
Architecture: W90N745
On node 0 totalpages: 4096
zone(0): 0 pages.
zone(1): 4096 pages.
zone(2): 0 pages.
Kernel command line: root=/dev/rom0 rw
Calibrating delay loop... 39.83 BogoMIPS
Memory: 16MB = 16MB total
Memory: 14344KB available (1470K code, 287K data, 40K init)
Dentry cache hash table entries: 2048 (order: 2, 16384 bytes)
Inode cache hash table entries: 1024 (order: 1, 8192 bytes)
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 4096 (order: 2, 16384 bytes)
POSIX conformance testing by UNIFIX
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket
Starting kswapd
PTZ Driver has been installed successfully.
Winbond W90N745 Serial driver version 1.0 (2005-08-15) with no serial options en
abled
ttyS00 at 0xfff80000 (irq = 9) is a W90N745
Winbond W90N7451 Serial driver version 1.0 (2005-08-15) with no serial options e
nabled
ttyS00 at 0xfff80100 (irq = 10) is a W90N7451
I2C Bus Driver has been installed successfully.
Blkmem copyright 1998,1999 D. Jeff Dionne
Blkmem copyright 1998 Kenneth Albanowski
Blkmem 1 disk images:
0: 7F0E0000-7F16FFFF [VIRTUAL 7F0E0000-7F16FFFF] (RO)
EN29LV160B Flash Detected
01 eth0 initial ok!
which:0
PPP generic driver version 2.4.2
Linux video capture interface: v1.00
Winbond Audio Driver v1.0 Initialization successfully.
usb.c: registered new driver hub
add a static ohci host controller device
: USB OHCI at membase 0xfff05000, IRQ 15
hc_alloc_ohci
usb-ohci.c: AMD756 erratum 4 workaround
hc_reset
usb.c: new USB bus registered, assigned bus number 1
hub.c: USB hub found
hub.c: 2 ports detected
usb.c: registered new driver audio
audio.c: v1.0.0:USB Audio Class driver
usb.c: registered new driver serial
usbserial.c: USB Serial Driver core v1.4

 _____     ____    _    ____
|__  /   _|  _ \  / \  / ___|
  / / | | | | | |/ _ \ \___ \
 / /| |_| | |_| / ___ \ ___) |
/____\__, |____/_/   \_\____/
     |___/
ZD1211B - version 2.24.0.0
usb.c: registered new driver zd1211b
main_usb.c: VIA Networking Wireless LAN USB Driver 1.20.04
usb.c: registered new driver vntwusb
usb.c: registered new driver rt73
dvm usb cam driver 0.0.0.0 by Maverick Gao in 2006-8-12
usb.c: registered new driver dvm
dvm usb cam driver 0.1 for sonix288 by Maverick Gao in 2009-4-20
usb.c: registered new driver dvm usb cam driver for sonix288
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 1024 bind 2048)
VFS: Mounted root (romfs filesystem) readonly.
Freeing init memory: 40K
BINFMT_FLAT: bad magic/rev (0x74202d74, need 0x4)
BINFMT_FLAT: bad magic/rev (0x74202d74, need 0x4)
Shell invoked to run file: /bin/init
Command: mount -t proc none /proc
Command: mount -t ramfs none /usr
Command: mount -t ramfs none /swap
Command: mount -t ramfs none /var/run
Command: mount -t ramfs none /etc
Command: mount -t ramfs none /flash
Command: mount -t ramfs none /home
Command: mount -t ramfs none /tmp
Command: mkdir /tmp/run
Command: camera&
[8]
Command: sh
no support

Sash command shell (version 1.1.1)
/> aw version is 0.22.2.18
Unhandled fault: alignment exception (13) at 0x00000001
fault-common.c(97): start_code=0x1f5040, start_stack=0x367f98)
Internal error: Oops: 0
CPU: 0
pc : [<00160eb8>]    lr : [<00068304>]    Not tainted
sp : 00fc9f80  ip : 00000000  fp : 00fc9fac
r10: 00232524  r9 : 000000e1  r8 : 00012980
r7 : 00fc8000  r6 : 00000000  r5 : 00187bfc  r4 : 00000004
r3 : 00187c0c  r2 : 00000000  r1 : 7f200000  r0 : 00367f0c
Flags: nZCv  IRQs on  FIQs on  Mode SVC_32  Segment kernel
Control: 0
Process camera (pid: 8, stackpage=00fc9000)
Stack:
00fc9f60:                                      00068304 00160eb8 60000013 ffffff
ff
00fc9f80: 00000004 00000004 00187bfc 00000000  00fc8000 00068304 7f200000 003018
84
00fc9fa0: 00000000 00fc9fb0 000127e0 000682ac  7f200000 00017e80 7f200000 000000
04
00fc9fc0: 00367f0c 00367f0c 7f200000 00301884  00000000 00fb3100 00000000 000000
00
00fc9fe0: 00232524 00367ef0 00000004 00367ee0  001fbbf4 001f7ff4 20000010 7f2000
00
Backtrace:
Function entered at [<0006829c>] from [<000127e0>]
 r5 = 00301884  r4 = 7F200000
Code: 4282c004 4a00001b (e4913004) e4a03004 e1a0ca00

  • No avatar
  • *****
April 08, 2012, 07:03:54 pm
this looks like a 4MB devices firmware (or kernel?) had been flashed on a 2MB device. It now tries to access the webui at a wrong / not existing address (0x7F200000). Had it been a 2MB firmware it would look at 0x7F180000 for the webui.


May 04, 2012, 11:47:48 am
After a few mails I thought I got a firmware from DB Power.
But all I got was the WebUI.
And no further answer from DB Power.

May be someone is interested in the WebUI so i attached it.