Hacking the DSO2X1X

[Algoma]

Making Progress, Custom Boot Logos at least...

" alt="" class="bbc_img" />

Using the platform tools you can upload custom logo.bin to the logo partition.
Boot Scope into FEL mode by holding the button underneath at power on.
Connect to PC with zadig-2.5 WINUSB driver loaded to support connections to the Allwinner in FEL mode.
sunxi-fel.exe uboot images/uboot_fb.bin      Boot the Scope into a basic Fastboot mode, the screen backlight should come on, some random color lines may appear on the screen.
fastboot flash logo images/logo3.bin            This line flashes the Logo into the LOGO partition
fastboot reboot                                           Reboot the scope and load the operating system.

You can copy the existing logo3.bin found in the Platform-tools\images folder, rename it to logoTEST.raw

This raw image file can be loaded into a photo editing program that supports opening raw images. In this case I used Corel Paint Shop Pro to open the RAW image.
Import settings were 1600 Width x 480 Height, Single Channel Greyscale, Interleaved, RGB Order
If you call the TESTLOGO.DATA then GIMP (GNU Image Manipulation Program) will basically do the same thing.


Once you edit the LogoTEST.raw and save the file, rename it back to a logoTEST.bin file of your choosing, then upload it to to logo partition on the scope.
FEL Mode -> Load Fastboot as above ->  fastboot.exe flash logo images\logoTEST.bin

Results are still Work in progress, trying to figure out REAL size and data format. Likely may need to custom written a converter to properly support full color images. Works alright if you stick to Generally high contrast Black and White images till we figure out the exact format of that logo .bin file.

That images\logo.bin file is a curious one, at a RAW resolution of 320x800 Greyscale Interleaved RGB, and Rotated upside down... Anyone heard of FOX? I don't recognize the logo in that file.

[Algoma]

Okay, Looks like GIMP is the program to edit view the logos

logo3.bin format: Andriod RGB565 Little Endian  800x480

Now to find a program to save in that RGB565 format..

[Algoma]

Used Paint.NET
https://www.dotpdn.com/downloads/pdn.html
With Plugin from here:
https://forums.getpaint.net/topic/16747-rgb565-android-splash-screen-format/

Converted the image into .RAW 565 format (Renamed to .BIN) and uploaded to the scope's LOGO partition.

Colors are a bit off (Missing red color), but its progress, You can upload up to a 2MB image in the LOGO partition, provided you can get it converted to RAW RGB565 format in 800x480 size. Adobe Photoshop has the required feature built right in (but I don't have photoshop).

resulted in:

[Mark5]

Nice work Algoma !

I was planning to do the same but I was using https://rawpixels.net/ to determine the image format.
Images found in the file system are slightly different. There's a 8 bytes header (2 * 4) which contains width and height.
Knowing that, we could change every icon used in the GUI os the scope.

[Piton]

Came the memory and programming. I asked again, everything worked out Thank you Vitroks and Mark5 for the help provided.

[Boyeen]

Well, I have sourced the 3 missing parts for the AWG...( DAC, OP-AMP & RELAY)... the relay has to come from China but I got the others in a few days from Arrow/Digi-Key. When I get everything I think I’ll have a go at installing them. Has anyone tried this yet?  One question I need to resolve concerns the strap options on the board next to the (unpopulated) Relay. Not sure if I need to cut a trace or whatever. I’ll have to figure that out by buzzing the board I guess.

Anyone come across a service manual or schematic?

Anyone with ideas or feedback to share let me know.  When I get the Relay from China I’ll be sure to take some photos and share my experience.

[upsss]

What strap are you talking about?

[Algoma]

This image of the front end posted by @microcheap : https://www.eevblog.com/forum/testgear/new-hantek-dso2x1x-models/msg3515614/#msg3515614

Looks like L9 isn't populated while the relay is present, so likely L11 isn't used either.

So it's likely enough to simply install the missing relay. Thankfully it seems the passive array around the Wave Gen OpAmp is usually already populated.

[Piton]

vistorik, this relay is closed, I already wrote about it here. Jumpers L11 and L9 are connected in parallel to the relay contacts, and can be soldered in the absence of a relay. If the relay is present, there are no jumpers.

[upsss]

Again, this is a DSO2C10 board, NO relay.  I DON'T see any jumpers on L9 or L11!

[Piton]

Check with a tester L11. Check external sync. Does she work for you?

[Boyeen]

Dang it's hard to post pictures here...

I promised an update when I upgraded my DSO2C15 to a DSO2D15 by installing 3 missing components on the motherboard.
It was a hairy install as I have soldering skills but not of surface mount and the DAC is horrendously small pitch.
However, it works...

The missing parts were easy to find:

DAC : DAC902E           (Arrow)
OpAmp : LMH6702      (Arrow)
Relay : FD4/4.5-S |428||282| XA0920A  (EBay)

Total incl. shipping was under $27

[Mark5]

Well done !

I may try to do the same in the following month.

[Boyeen]

Thanks Mark,
The relays I ordered from China came in a pair... you are welcome to the other one if you want it. Are you in the US?

[Mark5]

Alas, I'm definitely not in the US. Right on the other side of the pond, living in the country where people eat frogs 
Anyway, thank you very much for your offer. It's too bad as shipping would have cost you 10x the price of the relay.

[Algoma]

So it's nearly the same cost as getting the DSO2D10, with the Wave Gen parts already installed, and then upgrading it to a DSO2D15 through software.

Though your DAC902E you've installed is now proven genuine TI part, while the chip in the scope could still possibly be a lower cost clone part... Yeah, there are definitely some sketchy looking obvious clone parts available on Aliexpress.

Though this also resolves the known part number is correct, and make the function gen fully repairable if we accidentally blow the output.  That's what I like about this scope's Design, basic, simple and easy to follow, and so many of the parts appear possibly to be genuine TI. That large ADC they put is here is quite an awesome part if you dig into its datasheet, I look forward to Hantek making better use of it with firmware updates.

[Boyeen]

I agree, the scope is basic and simple but easy to work on. It hangs occasionally on me (before my upgrade :-) when I do something advanced (FFT?) but a quick on/off restores it. Maybe it will get better with firmware upgrades.  Meanwhile I have no complaints. My ESP32 projects certainly don’t require any more. Probably they don’t justify even this scope but I have always wanted one. I have a couple of the MINI-DSO units which are so fiddly to work with and not much cheaper...

The other evening I had a blast generating Lissajous figures with my iPhone as function gen... great fun.

[lmantuano]

G'day all! and thank you heaps for all the good work you've been doing..

My 2C10 came with the AWG components installed, lucky me!
I would like to enable the AWG in the simplest way as possible.
I have read the "Hacking the DSO2X1X" thread and got a bit scared, especially by the need to write in the correct format and load the "do_other_update" script.
I use a Mac and I'm not sure whether Apple's TextEdit will do the trick. I'm NOT a script writer!
I will update to the latest F/W, but is the Model name change script necessary to make the AWG work?

Thanx & regards,

lm

[Mark5]

Yes, the script is required. It's the script that changes the model from 2C10 to 2D15, hence enabling the AWG.
On a Mac, I'd suggest you install and use bbedit (freeware version) to create the do_other_update script.
FWIW, the risk of bricking your scope is close to zero (unless you add a "rm -R /" in the script).
And even bricked, there's a way to recover to a fully working state using the platform tools.

[lmantuano]

Much appreciated Mark5,
I will try and report..
also very impressed by your opening post on how you developed the hack and the step-by-step dissection of the F/W..!!
lm

[Boyeen]

As one Mac user to another, the problem you might have is those pesky "hidden files" that OSX adds to removable media. Like   .Trashes    or   .Spotlight-V100.
You MUST get rid of those before putting the drive in your Scope.  I used Terminal as follows... sorry if this is too remedial, but you said you are not a script guy.
My USB drive was called "THK"

cd /Volumes
ls
Macintosh HD                            THK
cd THK
ls -la
total 3840
drwxrwxrwx@  1 tim   staff    16384 Apr 15 17:48 .
drwxr-xr-x  20 root  wheel      640 Apr 15 17:43 ..
drwxrwxrwx   1 tim   staff    16384 Apr 15 17:48 .Spotlight-V100
drwxrwxrwx   1 tim   staff    16384 Apr 15 17:48 .Trashes
-rwxrwxrwx   1 tim   staff      137 Apr 15 17:47 do_other_update
-rwxrwxrwx   1 tim   staff  1896592 Mar 11 16:00 dso3kb_20210311.upk
rm -r .Spotlight-V100 .Trashes
ls -la
total 3776
drwxrwxrwx@  1 tim   staff    16384 Apr 15 17:49 .
drwxr-xr-x  20 root  wheel      640 Apr 15 17:43 ..
-rwxrwxrwx   1 tim   staff      137 Apr 15 17:47 do_other_update
-rwxrwxrwx   1 tim   staff  1896592 Mar 11 16:00 dso3kb_20210311.upk
cd

The last "cd" command is important or OSX won't let you cleanly eject the drive because Terminal is still "in it"...

Hope this helps

[lmantuano]

Hi Boyeen,
that's absolutely invaluable, I'll get on with it tomorrow.
Many thanx
lm

[lmantuano]

Boyeen, Mark5 and all..

reporting all good and well.
Model # hack and F/W upgrade done with minimal effort... I mean, given up on the Mac trying deleting the hidden files, too confusing for me, went instead to an old Ubuntu laptop and simply created  "do_other_update" with the default Text Editor.
Reformatted the stick (FAT), copied  "do_other_update" and F/W file on it, went to the scope and did the Update thing and voila, tout est bon.

Thanx again,
lm

P.S.  oh forgot,  AWG enabled and working.

[Mark5]

FWIW, the hack still works with the lastest firmware (dso3kb_20210416.upk).

[jemarro12]

Hello everyone. I've hack my DSO2c10 just for checking it has no awg hardware, and obviously, it doesn't.
Now I want to come back to my factory firmware but when I install it through usb it install automatically dso2d15 firmware.
How can I come back to my original dso2c10 firmware?? I'm thinking between buying 3 parts needed for get awg working or wait for itg962 or something like that.
Thank you and I hope you can help me.
Kisses.