Author Topic: Help to HACK the Uni-T UTD2042C firmware!!!!  (Read 8817 times)

0 Members and 1 Guest are viewing this topic.

Offline vandersonpc

  • Contributor
  • Posts: 10
  • Country: us
Help to HACK the Uni-T UTD2042C firmware!!!!
« on: January 31, 2014, 08:36:24 pm »
Guys,

I'd like your help in order to find out how to hack the firmware uts files attached.

The UTD2042C (40Mhz) uses the same board than UTD(2102). I think the only difference between them is the firmware!

I already tried to change just the model name (bytes 0x04-0x0F), but the unit shows a file error! I'm sure there is some kind of CRC check!  ???

I could identify some part of header. As the DSO model and the bytes from 0x12 to 0x14 which is the firmware version. But, It's just the start! I'd like to identify the checksum and decode all file header.  |O

Any help from you guys will be very appreciated!

Many Thanks!

Cheers, Vanderson

 
 
The following users thanked this post: ramast



Offline RS-979

  • Newbie
  • Posts: 1
Re: Help to HACK the Uni-T UTD2042C firmware!!!!
« Reply #3 on: February 10, 2015, 02:44:21 pm »
Hi,
I think it’s done.

How to mod?
For you it is simple, put “my” firmware file on the USB memory stick. Than follow the regular upgrading procedure and the scope has 100 MHz. There is no visually indication for the mod, the outside case shows 2042 :-) and the system info menu shows 2042 as well, “only” the performance should be better.
You can take my file, or if you don’t trust me, make your own.

How did I the file?
Take a firmware file of the UT2042 and one of the UT2102.
Copy the first 86 Bytes (0x00 – 0x55) from 2042 to the 2102 file, that’s the part for the initial boot loader check. The next 4 Bytes are the data size (a.k.a. the firmware itself). Do not change these data size bytes. (But Menu texts/help screens inside the firmware are hackable!)
You have almost it. But after the second check of the file the boot loader will reject it.
But now, my little CRC program comes in handy. The header and data section is CRC16-CCITT secured. Run my program on the merged file and you get the last 2 bytes for the CRC. Swap the 2 last bytes with the 2 bytes of my program (it shows e.g. AB CD but you have to enter CD AB in the HEX Editor). Let’s run my program again to double check the CRC16.
The boot loader will accept the “new” firmware and that’s it.

Greetings
‘RS-979’

P.S.
My setup: The best I have to test 100 MHz is my ICOM 2m ham radio handheld. In low power mode it serves 50mW into a 50Ohm load.  On paper, 50mW @ 50Ohm ~ 1.58V (Urms).
 
The following users thanked this post: MiataMuc

Offline MiataMuc

  • Regular Contributor
  • *
  • Posts: 52
  • Country: de
Re: Help to HACK the Uni-T UTD2042C firmware!!!!
« Reply #4 on: March 20, 2015, 10:17:09 pm »
Thanks a lot for the work!
Have to check the old UTD 2042C, but I hope this will work!

Miata
 

Offline funkyant

  • Supporter
  • ****
  • Posts: 125
  • Country: au
    • YouTube Channel
Re: Help to HACK the Uni-T UTD2042C firmware!!!!
« Reply #5 on: March 22, 2015, 09:28:58 pm »
I wonder who Doc Brown could be?  ;)
 

Offline Fungus

  • Super Contributor
  • ***
  • Posts: 9980
  • Country: 00
Re: Help to HACK the Uni-T UTD2042C firmware!!!!
« Reply #6 on: March 23, 2015, 08:01:10 am »
Guys,

I'd like your help in order to find out how to hack the firmware uts files attached.


How is this "blog specific"?
 

Offline Banan

  • Newbie
  • Posts: 1
  • Country: pl
Re: Help to HACK the Uni-T UTD2042C firmware!!!!
« Reply #7 on: November 30, 2015, 07:59:28 pm »
Sorry for unearthing of this old topic and my bad English.
But i have a question. How to force bootloader to start? When i put my stick into usb port and turn on the power -> nothing happen. Oscilloscope UT2042C detects well usb..
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf