Products > Test Equipment
GW INSTEK GDS-1022 Hardware Hack: 25 MHz -> 100 MHz?
gabiz_ro:
Indeed but they look very close to each other.
ptluis:
--- Quote from: gabiz_ro on September 29, 2023, 06:02:42 am ---Indeed but they look very close to each other.
--- End quote ---
we just have to find a dump and try. but i have an idea that the firmware is different. i also have a gds-1022 and never got success in unlocking it. but also never try the dump approach because i could never access a superior scope model.
How did you dump your scope firmware?
nctnico:
Make a picture of the analog front-end. Preferably from different bandwidth versions. My bet is that the difference is in the hardware and the software doesn't care (except for the possible time/div selection).
gabiz_ro:
Using programmer I read content of flash chip 29l160 and using USB Blaster I read pof file from MAX II
I found only one dump of 29L160 from GDS-71042.
Tried that dump but at first sight didn't get any better.
Didn't do more testing, just measuring output 50Mhz from TCXO from some device and get same result as with original firmware, frequency measured OK sinusoid seems ok but little jagged in both cases.
Since I have dumps and can recovery I tried upgrade to A models by renaming update files,but no go. Next with U models files and that was working.
After that no more sdcard but message on screen Fail to init USB.
CH1 seems to work but CH2 acting weird, have a dashed trace and abnormal,and seems to trigger outside signal area.
Self calibration give some errors on CH2 also.
Write back original dump and is back.
Spotted differences on photo from U model
AD9288 to another vendor maybe not clear WMD9288
HX8802C to HX881? lcd controller
One coil near SDMMC -USB connector,they may use some USB converter off board.
And some traces.
ptluis:
--- Quote from: gabiz_ro on September 30, 2023, 06:27:27 am ---Using programmer I read content of flash chip 29l160 and using USB Blaster I read pof file from MAX II
I found only one dump of 29L160 from GDS-71042.
Tried that dump but at first sight didn't get any better.
Didn't do more testing, just measuring output 50Mhz from TCXO from some device and get same result as with original firmware, frequency measured OK sinusoid seems ok but little jagged in both cases.
Since I have dumps and can recovery I tried upgrade to A models by renaming update files,but no go. Next with U models files and that was working.
After that no more sdcard but message on screen Fail to init USB.
CH1 seems to work but CH2 acting weird, have a dashed trace and abnormal,and seems to trigger outside signal area.
Self calibration give some errors on CH2 also.
Write back original dump and is back.
Spotted differences on photo from U model
AD9288 to another vendor maybe not clear WMD9288
HX8802C to HX881? lcd controller
One coil near SDMMC -USB connector,they may use some USB converter off board.
And some traces.
--- End quote ---
Thank you, there should be another simple way to unlock this scope. I search many times but nobody did it.
Navigation
[0] Message Index
[#] Next page
[*] Previous page
Go to full version