Rigol HDO1000 and HDO4000 12bit oscilloscopes launched in China

[Kurt_!]

I did a experimental version. As for now, only as a apk file. Later I will do a .GEL file.

Changes:

• Hacked license system (full bandwidth, all options available).
• UPA (power analysis) is available.
• Auto depth max limit increased to 25 Mpts.
• Optimizations.
• TestModel hardcoded to be always enabled (gives advanced XY and other things).
• Removed Rigol logo from the top bar (more space for shortcuts).
• AFE filters:
  
  • FULL
  • 70 MHz
  • 100 MHz
  • 200 MHz
  • 250 MHz

I tested it on DHO924S without changed framebuffer resolution and I didn't change font settings back to original, so some text can be bigger only in shortcuts.

Please test those filters and let me know if all of them are working as expected or not.

Doesn't that belong to the Dho800-900.....
Or is there something else coming for DHO1000.....

[norbert.kiszka]

This is a hacked apk for DHO1000 and DHO4000 as I said already. Why You think it's something else?

[Kurt_!]

"I tested it on DHO924S without changed framebuffer resolution and I didn't change font settings back to original, so some text can be bigger only in shortcuts."

Maybe misunderstood....

[norbert.kiszka]

"I tested it on DHO924S without changed framebuffer resolution and I didn't change font settings back to original, so some text can be bigger only in shortcuts."

Maybe misunderstood....

I can run DHO1000/4000 firmware on my DHO924S after some magic tricks, but it works without waveform (I didn't investigated the cause of this yet).

People working in IT likes to say: "99% of problems has a cause by something between the screen and keyboard".

[Kurt_!]

"I tested it on DHO924S without changed framebuffer resolution and I didn't change font settings back to original, so some text can be bigger only in shortcuts."

Maybe misunderstood....

I can run DHO1000/4000 firmware on my DHO924S after some magic tricks, but it works without waveform (I didn't investigated the cause of this yet).

People working in IT likes to say: "99% of problems has a cause by something between the screen and keyboard".

You certainly don't make friends with answers like that!
I only saw something for DHO 800-900 on your site?

[norbert.kiszka]

I only saw something for DHO 800-900 on your site?

I already posted a link, when I announced this.

I did a experimental version. As for now, only as a apk file. Later I will do a .GEL file.

[Kurt_!]

OK, I didn't read everything!
I'll keep an eye on it.
I'm not so keen on experimenting with the firmware!
I've reached my threshold for the price of my devices!

[norbert.kiszka]

While investigating, did you by any chance find an option for 50 Ohm input that could be applied to DHO1000?

Theoretically it can be added if You add the relay and You connect it to who knows which one pin of the AFE.

Personally I added four (two in series times two) 50 ohm resistors in my DHO924S into one channel - into soldering pads of the BNC socket.

It does self-cal without any problems. Same thing when I put external BNC terminator to any other channel.

[mawyatt]

If one looks at the typical input capacitance of a DSO 1MΩ Channel, it's 15~20pF. Placing an ideal 50Ω shunt across this input produces a limiting effect right at the DSO BNC input and 15pF || 50Ω yields an effective bandwidth of just 212MHz at the BNC connector!!

Quality DSOs employ a separate dedicated channel right after the input BNC for the 50Ω use, these bypass much of the high Z input circuitry to allow the high bandwidth capability within the DSO without the limiting effect of the high Z input circuitry. This is why the built-in 50Ω capability is relegated to higher end instrument and not available at the entry level.

Best

[norbert.kiszka]

Small SMD resistors (4x 0.25 W 0.1%) does great job for me. Only one disadventage: it's almost permanent. Usually Im using one or two inputs at the same time, so this is not a problem for me.

[mawyatt]

In this video, Dave tears down a DHO1000 and his finding is that apart from a missing ADC and the part that supports active probes, the PCBs are very much the same. Hence my hope that it would only take a software modification to enable it...

That would be great if possible. However there must be some "means" to connect the input over to the 50Ω circuitry, maybe a relay, which hopefully is already on the PCB.

Best

[norbert.kiszka]

If one of these two relays are 50 ohm as in the DHO4000 and it's connected to the exactly same AFE pin, likely I will be able to do this.

And likely not today, since right now I have painful sinusitis.

In the meantime, original files from /rigol/data from DHO1000 can be useful.

I wish I had whole MMC chip image to compare. I guess it's the same as in DHO800/900 series, beside of what is in /rigol, framebuffer resolution and data in DT to handle different LCD panel.

For some reason I almost forgot to mention. In the compiled binary, function which changes AFE filters, there is a different condition for DHO1000 and different for DHO4000 - it's not clear for me why they did this and what this does. I don't have any scope from those two series to check it by myself.

[mawyatt]

They are different, look at the upper center of the 1000 missing two small SMDs and the upper right layout is different from the 4000. Can't seem to locate the 50Ω input termination in the 4000 or 1000 either?

Best

[norbert.kiszka]

Maybe on the other side.

Anyway, tomorrow I will take a look and I will enable this impedance switch, because it's just hidden (exact same thing in DHO800/900). In the worst case scenario, impedance will stay the same, beside of useless software switch.

[skander36]

While investigating, did you by any chance find an option for 50 Ohm input that could be applied to DHO1000?

Theoretically it can be added if You add the relay and You connect it to who knows which one pin of the AFE.

Personally I added four (two in series times two) 50 ohm resistors in my DHO924S into one channel - into soldering pads of the BNC socket.

It does self-cal without any problems. Same thing when I put external BNC terminator to any other channel.

DHO1000 HD already has the circuit for 50 ohm (with relay). It can be activated using moded version.bin that transform DHO1k to DHO4k. You can hear the relay clicking when you activate 50 ohm path in channel settings. Anyway this mod is quite useless because the lack of the second ADC. I think there is a reason that on the case of the DHO1K HD they write about 50 ohm, maybe they want to activate it in the future as a bumping selling point. Keysight has done the same after years with their DSOX2K enabling waveforms update from 50K to over 200K wfm/s.

[norbert.kiszka]

Maybe some people missed my previous posts

I can prepare .GEL instead of apk (I already did a .GEL with hack for the DHO800/900), but to make it properly (without the risk of bricking somebody scope) I need some dump(s), preferably from the DHO1000.

Most useful for me will be full dump of the MMC memory.

If not from the inside (warranty sticker I guess), then from the outside with the help of adb.

One of this two should work - if not the first one, then second one will do the job:

Code: [Select]

adb pull /dev/block/mmcblk1

Code: [Select]

adb pull /dev/block/mmcblk0
On the side note: Android kernel is nothing else than modified Linux kernel (modified mostly DRM subsystem which creates image on the screen) and in Linux (almost) everything is a file. So You can dump raw disk data any time or if somebody wish to do such thing: edit binary disk data by opening disk device file in a text or hex editor.

Eventually, if not the full dump, still very useful will be these two folders:

Code: [Select]

adb pull /system/framework
and:

Code: [Select]

adb pull /rigol/data

[norbert.kiszka]

Impedance switch for DHO1000 is now hacked.

Im still waiting for the dumped files to make a .GEL instead of apk.

[skander36]

...

Im still waiting for the dumped files to make a .GEL instead of apk.

There is no mmcblk 0 or 1. Only as in pic attached. Mmcblk 2 is available.

[norbert.kiszka]

...

Im still waiting for the dumped files to make a .GEL instead of apk.

There is no mmcblk 0 or 1. Only as in pic attached. Mmcblk 2 is available.

For some reason this is strange (RK3399 can handle only two MMC), but it doesn't matter.

In this case, You can just pull this mmcblk2. After that compress it with any method to reduce file size - LZMA is good enough and usually it's the fastest one.

[skander36]

I'm using Windows context where I don't know how to transfer SU right in order to get access to dump. I get error: "adb: error: failed to copy '/dev/block/mmcblk2' to '.\mmcblk2':remote open failed: Permission denied"
I was able to pull /rigol/data and system/framework , the last having over 80MB compressed.

[norbert.kiszka]

Permission denied

To have god (root) permissions, You need to do this before:

Code: [Select]

adb root

I was able to pull /rigol/data and system/framework , the last having over 80MB compressed.

I will setup FTP on my server, unless You have some quicker way to share it.

[skander36]

Permission denied

To have god (root) permissions, You need to do this before:

Code: [Select]

adb root

I was able to pull /rigol/data and system/framework , the last having over 80MB compressed.

I will setup FTP on my server, unless You have some quicker way to share it.

check PM

[thm_w]

I did a experimental version. As for now, only as a apk file. Later I will do a .GEL file.

Thank you for that. Could you help with the install process?
I did the stuff mentioned here: https://github.com/mriscoc/RIGOL_DHO800_DHO900_GUI/discussions/4
but stuck at this point:

Code: [Select]

C:\Downloads>adb install -g -r "Auklet.apk"
Performing Streamed Install
adb: failed to install Auklet.apk: Failure [INSTALL_FAILED_SHARED_USER_INCOMPATIBLE: Package couldn't be installed in /data/app/com.rigol.scope-1: Package com.rigol.scope has no signatures that match those in shared user android.uid.system; ignoring!]
Or is there a way to run it without installing it.

[norbert.kiszka]

adb: failed to install Auklet.apk: Failure [INSTALL_FAILED_SHARED_USER_INCOMPATIBLE: Package couldn't be installed in /data/app/com.rigol.scope-1: Package com.rigol.scope has no signatures that match those in shared user android.uid.system; ignoring!

That's exactly why I needed some dumps from the DHO1000/4000 to make a .GEL file which has Android hacks included. Which I did the same with DHO800/900.

Originally code in Android Package Manager checks if it's a app declared as a system app and checks if this has same encryption signature (key) as the whole system was signed.

There are two possibilities - either hack this PM or remove this:

Code: [Select]

android:sharedUserId="android.uid.system"
from the file AndroidManifest.xml in apk.

This second one not always works and if it will be installed, it will not have "system" privileges, which in this case means no screenshots from the app directly.


I was expecting DHO1000 and DHO4000 to use same exact system compilation, only with different framebuffer resolution, but I wasn't 100% sure.

DHO800 and DHO900 advantage is with everything being on a SD card - in case of worst case scenario, it can be fixed externally after removing it.

From what I know DHO1000 and DHO4000 uses MMC chip soldered directly on PCB and I didn't have any real contents from it, until recently - literally I was waiting 24h for anybody who will dump at least contents from /system/framework just to compare it with DHO800/900 and eventually make a new hack for it - if it's the same, I can use same prepared file, but if it's not, I have to make a new one.

[thm_w]

Ah, sorry about this, stuck at rigol logo. If you get time to dig me out of this hole I appreciate it, but can wait until you finish your other work, no rush. Not sure if I should delete the -2 folders or remove them some other way.

Code: [Select]

rk3399_rigol:/ # pm uninstall com.rigol.scope
Success
rk3399_rigol:/data/app # pm uninstall --user 0 com.rigol.scope
Success
rk3399_rigol:/data/app # ls
com.rigol.en.floatbrowser-2 com.rigol.floatbrowser-2 com.rigol.launcher-2 com.rigol.webcontrol-2

F:\dho1000_backup\rigol\app>adb install -g -r "Auklet.apk"
Performing Streamed Install
Success

rk3399_rigol:/rigol # cd /data/app/
com.rigol.en.floatbrowser-2/            com.rigol.scope-1/
com.rigol.floatbrowser-2/               com.rigol.webcontrol-2/
com.rigol.launcher-2/

I attached the rigol data folder, I'll send a PM with the mmcblk2 link.