-
Guys,
I'd like your help in order to find out how to hack the firmware uts files attached.
The UTD2042C (40Mhz) uses the same board than UTD(2102). I think the only difference between them is the firmware!
I already tried to change just the model name (bytes 0x04-0x0F), but the unit shows a file error! I'm sure there is some kind of CRC check!
I could identify some part of header. As the DSO model and the bytes from 0x12 to 0x14 which is the firmware version. But, It's just the start! I'd like to identify the checksum and decode all file header.
Any help from you guys will be very appreciated!
Many Thanks!
Cheers, Vanderson
-
Hello I think you are confusing the UTD2042 and the UT2102C firmware (with D and without D).... I found other version of the firmware on the waybackmachine
http://web.archive.org/web/20111010165254/http://www.reichelt.de/index.html?;ACTION=7;LA=3;OPEN=0;INDEX=0;FILENAME=D100%252FFIRMWARE_UPDATE_INKL_ANLEITUNG_UTD2042C.zip
http://web.archive.org/web/20140309201424/http://www.reichelt.de/index.html?;ACTION=7;LA=3;OPEN=0;INDEX=0;FILENAME=D100%252FFIRMWARE_UPDATE_INKL_ANLEITUNG_UT2102C_2.zip -
Hi,
I think it’s done.
How to mod?
For you it is simple, put “my” firmware file on the USB memory stick. Than follow the regular upgrading procedure and the scope has 100 MHz. There is no visually indication for the mod, the outside case shows 2042 :-) and the system info menu shows 2042 as well, “only” the performance should be better.
You can take my file, or if you don’t trust me, make your own.
How did I the file?
Take a firmware file of the UT2042 and one of the UT2102.
Copy the first 86 Bytes (0x00 – 0x55) from 2042 to the 2102 file, that’s the part for the initial boot loader check. The next 4 Bytes are the data size (a.k.a. the firmware itself). Do not change these data size bytes. (But Menu texts/help screens inside the firmware are hackable!)
You have almost it. But after the second check of the file the boot loader will reject it.
But now, my little CRC program comes in handy. The header and data section is CRC16-CCITT secured. Run my program on the merged file and you get the last 2 bytes for the CRC. Swap the 2 last bytes with the 2 bytes of my program (it shows e.g. AB CD but you have to enter CD AB in the HEX Editor). Let’s run my program again to double check the CRC16.
The boot loader will accept the “new” firmware and that’s it.
Greetings
‘RS-979’
P.S.
My setup: The best I have to test 100 MHz is my ICOM 2m ham radio handheld. In low power mode it serves 50mW into a 50Ohm load. On paper, 50mW @ 50Ohm ~ 1.58V (Urms).
-
Thanks a lot for the work!
Have to check the old UTD 2042C, but I hope this will work!
Miata -
I wonder who Doc Brown could be?
-
Guys,
I'd like your help in order to find out how to hack the firmware uts files attached.
How is this "blog specific"?
-
Sorry for unearthing of this old topic and my bad English.
But i have a question. How to force bootloader to start? When i put my stick into usb port and turn on the power -> nothing happen. Oscilloscope UT2042C detects well usb.. -
I did not find an answer to what's the difference between UT2042C and UTD2042C. The latter one I purchased ~2010 at German shop reichelt. The housing clearly marks "UTD2042C" and the colors differ from other UT2042C pics on web, that's all. Screen, knobs - all same.
The board is from UT2102, but that does not mean that components are fit for 100 MHz. Latest known firmware is 1.02, I was not able to check which RS-979's hack is based on.
Anyone else here who tried the hack on a UTD2042C with success?
-
I know is an old topic , but can anyone tell us how to proced to have the unit recognize on boot, the uts firmware file inside the usb stick? it does nothing at all, just tells that the usb has been recognized as store location....no firmware bar progess is shown
UNIT= Uni-t ut2042c
THANKS!!!!