Install/Adding support OpenWRT for HikVision/HiLook Router WR-AX18

Hello everyone. I bought a cheap router to use as an access point, but out of curiosity, I decided to take it apart and see what was inside.
HiLook router (HikVision subbrand)
Model WR-AX18
AX1800
Price: PLN 89 (USD 24.49)
There is an official website with links to firmware files. https://www.hilooksecurity.com/europe/products/HiLook-Transmission/wireless-router/wifi6-router/wr-ax18/

CPU: MT9781BA
Switch: MT7531AE
Wifi: MT7976CN
RAM: 256 MB ESMT M15T2G16128A–DEB
ROM: 128 MB ESMT F50L1G41LB-104

I found almost suitable firmware (only I have 2 LEDs and 4 LAN ports)

The only problem is that this router is locked by the manufacturer. When the system is fully booted, Protect shell is launched and requires a password. If you try pressing CTLR+U during boot, HIK# appears and also requires a password. When attempting to flash via TFTP, this router only wants its proprietary digicap.dav file.
Does anyone have any suggestions on how to flash OpenWRT onto it?

I suggest the normal boot logs and flash logs with reset
HiLookLogNormalBoot

HiLookLogResetButtonAndFlashDigicapDav

Photos









BP: 2400 0041 [0000] suggests you should be able to use mtk_uartboot.

Hi, I tried it just now, but it's not working.

root@raspberrypi:/home/aspirchik/mtk_uartboot-v0.1.1# ./mtk_uartboot-arm -s /dev/ttyS0 -p initramfs-kernel.bin --aarch64
mtk_uartboot - 0.1.1
Using serial port: /dev/ttyS0
Handshake...
hw code: 0x7981
hw sub code: 0x8a00
hw ver: 0xca00
sw ver: 0x1
thread 'main' panicked at src/main.rs:56:9:
Secure boot enabled.
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

Then you're kind of f-ed.

I got the dump out of the memory chip, but now the chip stop working xdd. I'm waiting for new chips to come in (within a month), and then I'll keep going.