Author Topic: Hantek - Tekway - DSO hack - get 200MHz bw for free  (Read 2187478 times)

0 Members and 3 Guests are viewing this topic.

Offline DC1MC

  • Super Contributor
  • ***
  • Posts: 1880
  • Country: de
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3125 on: November 02, 2021, 04:40:30 pm »
My little request/bitte is if someone has a compatible firmware for this old model and how can be that firmware installed, either from the u-Boot menu or from Linux console.

Your best bet is for someone to do a dump from UBoot and handed it over to you to do a flash.

That will be very nice indeed, btw if I connect the back USB connector to my Ubuntu laptop the device says:
Quote
USB host is connected. Waiting a download.
[/tt]

and the laptop says:
dmesg:
usb 3-3.1: new full-speed USB device number 49 using xhci_hcd
 usb 3-3.1: New USB device found, idVendor=5345, idProduct=1234, bcdDevice= 1.00
usb 3-3.1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
usb 3-3.1: Product: SEC S3C2410X Test B/D
usb 3-3.1: Manufacturer: System MCU
l


lsusb:
Bus 003 Device 049: ID 5345:1234 Owon PDS6062T Oscilloscope


What program is used to write data to the scope, because is not recognized as any standard device (storage, serial port and such) ?

 

Offline DC1MC

  • Super Contributor
  • ***
  • Posts: 1880
  • Country: de
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3126 on: November 02, 2021, 05:41:43 pm »
Oh well, the U-Boot menu when one selects "[6] Download YAFFS image to Nand Flash" that most likely tries to load the rootfs and interrupt it with Ctrl-C then it jumps immediately to format the NAND  :scared: :scared: :scared:, and now I have a more bricked brick  :palm:, the U-Boot and kernel are still there, but I appreciate if someone has a full FW dump and want to share, in the updated are mostly the scope programs (it was anyway missing a lot of scripts and stuff plus some utilities, but at least it got some shell that is gone now  |O).

 

Offline tv84

  • Super Contributor
  • ***
  • Posts: 3211
  • Country: pt
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3127 on: November 02, 2021, 05:49:53 pm »
What are the commands available at the UBoot level? Please share the list or screen log.

 

Offline DC1MC

  • Super Contributor
  • ***
  • Posts: 1880
  • Country: de
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3128 on: November 02, 2021, 05:57:41 pm »
If one press space at start-up it gets the following menu:

Code: [Select]
#####    Boot for Nand Flash Main Menu  #####
[1] Download u-boot or STEPLDR.nb1 or other bootloader to Nand Flash
[2] Download Eboot to Nand Flash
[3] Download Linux Kernel to Nand Flash
[5] Download CRAMFS image to Nand Flash
[6] Download YAFFS image to Nand Flash
[7] Download Program (uCOS-II or TQ2440_Test) to SDRAM and Run it
[8] Boot the system
[9] Format the Nand Flash
[0] Set the boot parameters
[a] Download User Program (eg: uCOS-II or TQ2440_Test)
[b] Download LOGO Picture (.bin) to Nand  Flash
[l] Set LCD Parameters
[r] Reboot u-boot
[t] Test Linux Image (zImage)
[q] quit from menu
Enter your selection:

WARNING: At least menu [6] is DESTRUCTIVE, interrupting with Ctrl-C makes the script format the NAND partition anyways and load the RAM buffer into it !!!

q abandons the menu and goes into classical prehistoric 1.1.6 U-Boot menu:

Code: [Select]
EmbedSky> help
?       - alias for 'help'
autoscr - run script from memory
base    - print or set address offset
bdinfo  - print Board Info structure
boot    - boot default, i.e., run 'bootcmd'
boot_noos - boot User Program
boot_zImage - boot Linux 's zImage
bootd   - boot default, i.e., run 'bootcmd'
bootelf - Boot from an ELF image in memory
bootm   - boot application image from memory
bootp   - boot image via network using BootP/TFTP protocol
bootvx  - Boot vxWorks from an ELF image
chpart  - change active partition
cmp     - memory compare
coninfo - print console devices and information
cp      - memory copy
crc32   - checksum calculation
date    - get/set/reset date & time
dcache  - enable or disable data cache
eboot  - Run Wince Ethernet Bootloader(eboot)
echo    - echo args to console
erase   - erase FLASH memory
flinfo  - print FLASH memory information
fsinfo  - print information about filesystems
fsload  - load binary file from a filesystem image
go      - start application at address 'addr'
help    - print online help
icache  - enable or disable instruction cache
iminfo  - print header information for application image
itest   - return true/false on integer compare
loadb   - load binary file over serial line (kermit mode)
loads   - load S-Record file over serial line
loadx   - load binary file over serial line (xmodem mode)
loady   - load binary file over serial line (ymodem mode)
loop    - infinite loop on address range
ls      - list files in a directory (default /)
md      - memory display
menu - display a menu, to select the items to do something
mm      - memory modify (auto-incrementing)
mtdparts- define flash/nand partitions
mtest   - simple RAM test
mw      - memory write (fill)
nand    - NAND sub-system
nboot   - boot from NAND device
nm      - memory modify (constant address)
ping    - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
protect - enable or disable FLASH write protection
rarpboot- boot image via network using RARP/TFTP protocol
reset   - Perform RESET of the CPU
run     - run commands in an environment variable
saveenv - save environment variables to persistent storage
setenv  - set environment variables
sleep   - delay execution for some time
test_zImage - test Linux 's zImage
tftpboot- boot image via network using TFTP protocol
usbslave - get file from host(PC)
version - print monitor version
wince [ram] - Run Wince from flash or ram
 

Offline DC1MC

  • Super Contributor
  • ***
  • Posts: 1880
  • Country: de
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3129 on: November 02, 2021, 06:14:44 pm »
I downloaded the Hantek Open source software, maybe they disclosed the stupid menu and the implementation of the download protocol over USB, so I can wipe quickly an utility to load over that U-Boot menu, if someone has mercy and share a NAND dump. This will be my humble contribution to the thread.

Also I see that the case has a blind for a RJ45 Ethernet socket and the PCB has a place for it, but nothing is mounted, the LA board obscures some parts, but maybe the PHY is mounted and only the socket is missing, does anybody know that model of socket is that ?

EDIT: NO U-BOOT in the archive, if someone has another place to download this stuff as well it will be appreciated.
« Last Edit: November 02, 2021, 06:29:01 pm by DC1MC »
 

Offline DC1MC

  • Super Contributor
  • ***
  • Posts: 1880
  • Country: de
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3130 on: November 02, 2021, 06:51:03 pm »
Boot log for this one time when it booted before menu option [6]  screwed the rootfs (observe the gorilla caused disaster when atempted to start the scope program):

Code: [Select]
##### EmbedSky BIOS for SKY2440/TQ2440 #####
Press Space key to Download Mode !
Booting Linux ...
Copy linux kernel from 0x00200000 to 0x30008000, size = 0x00200000 ... Copy Kernel to SDRAM done,NOW, Booting Linux......
Uncompressing Linux... done, booting the kernel.
Linux version 2.6.30.4 (root@localhost.localdomain) (gcc version 4.3.3 (Sourcery G++ Lite 2009q1-176) ) #17 Sun Oct 9 14:24:29 CST 2011
CPU: ARM920T [41129200] revision 0 (ARMv4T), cr=c0007177
CPU: VIVT data cache, VIVT instruction cache
Machine: TQ2440
ATAG_INITRD is deprecated; please update your bootloader.
Memory policy: ECC disabled, Data cache writeback
CPU S3C2440A (id 0x32440001)
S3C24XX Clocks, (c) 2004 Simtec Electronics
S3C244X: core 400.000 MHz, memory 100.000 MHz, peripheral 50.000 MHz
CLOCK: Slow mode (1.500 MHz), fast, MPLL on, UPLL on
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
Kernel command line: noinitrd root=/dev/mtdblock2 init=/linuxrc console=ttySAC0
NR_IRQS:85
irq: clearing pending ext status 00000200
irq: clearing subpending status 00000002
PID hash table entries: 256 (order: 8, 1024 bytes)
Console: colour dummy device 80x30
console [ttySAC0] enabled
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 64MB = 64MB total
Memory: 61316KB available (3116K code, 333K data, 100K init, 0K highmem)
SLUB: Genslabs=11, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
Calibrating delay loop... 199.47 BogoMIPS (lpj=498688)
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
net_namespace: 296 bytes
NET: Registered protocol family 16
S3C2440: Initialising architecture
S3C2440: IRQ Support
S3C24XX DMA Driver, (c) 2003-2004,2006 Simtec Electronics
DMA channel 0 at c4808000, irq 33
DMA channel 1 at c4808040, irq 34
DMA channel 2 at c4808080, irq 35
DMA channel 3 at c48080c0, irq 36
S3C244X: Clock Support, DVS off
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
cfg80211: Calling CRDA to update world regulatory domain
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
NET: Registered protocol family 1
yaffs Sep 30 2011 10:36:32 Installing.
msgmni has been set to 119
alg: No test for stdrng (krng)
io scheduler noop registered (default)
s3c2440-uart.0: tq2440_serial0 at MMIO 0x50000000 (irq = 70) is a S3C2440
s3c2440-uart.1: tq2440_serial1 at MMIO 0x50004000 (irq = 73) is a S3C2440
s3c2440-uart.2: tq2440_serial2 at MMIO 0x50008000 (irq = 76) is a S3C2440
loop: module loaded
Driver 'sd' needs updating - please use bus_type methods
Driver 'sr' needs updating - please use bus_type methods
S3C24XX NAND Driver, (c) 2004 Simtec Electronics
s3c2440-nand s3c2440-nand: Tacls=2, 20ns Twrph0=3 30ns, Twrph1=2 20ns
NAND device: Manufacturer ID: 0xec, Chip ID: 0x76 (Samsung NAND 64MiB 3,3V 8-bit)
Scanning device for bad blocks
Creating 3 MTD partitions on "NAND 64MiB 3,3V 8-bit":
0x000000000000-0x000000040000 : "EmbedSky_Board_uboot"
0x000000200000-0x000000400000 : "EmbedSky_Board_kernel"
0x000000400000-0x000003ff8000 : "EmbedSky_Board_yaffs2"
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
s3c2410-ohci s3c2410-ohci: S3C24XX OHCI
s3c2410-ohci s3c2410-ohci: new USB bus registered, assigned bus number 1
s3c2410-ohci s3c2410-ohci: irq 42, io mem 0x49000000
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
mice: PS/2 mouse device common for all mice
S3C24XX RTC, (c) 2004,2006 Simtec Electronics
s3c2410-rtc s3c2410-rtc: rtc disabled, re-enabling
s3c2410-rtc s3c2410-rtc: rtc core: registered s3c as rtc0
Linux video capture interface: v2.00
S3C2410 Watchdog Timer, (c) 2004 Simtec Electronics
s3c2410-wdt s3c2410-wdt: starting watchdog timer
s3c2410-wdt s3c2410-wdt: watchdog active, reset abled, irq enabled
mapped channel 0 to 0
s3c2440-sdi s3c2440-sdi: powered down.
s3c2440-sdi s3c2440-sdi: initialisation done.
Advanced Linux Sound Architecture Driver Version 1.0.18a.
No device for DAI UDA134X
No device for DAI s3c24xx-i2s
S3C24XX_UDA134X SoC Audio driver
UDA134X SoC Audio Codec
asoc: UDA134X <-> s3c24xx-i2s mapping ok
s3c2440-sdi s3c2440-sdi: powered down.
ALSA device list:
  #0: S3C24XX_UDA134X (UDA134X)
TCP cubic registered
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
lib80211: common routines for IEEE802.11 drivers
s3c2410-rtc s3c2410-rtc: hctosys: invalid date/time
yaffs: dev is 32505858 name is "mtdblock2"
yaffs: passed flags ""
yaffs: Attempting MTD mount on 31.2, "mtdblock2"
yaffs_read_super: isCheckpointed 0
VFS: Mounted root (yaffs filesystem) on device 31:2.
Freeing init memory: 100K
/etc/init.d/rcS: line 8: /usr/local/bin/wdg: not found
/etc/init.d/rcS: line 9: /dso/app/show_pic: not found
hwclock: settimeofday: Invalid argument
insmod: can't insert '/dso/drivers/s3c2416-io_bank.ko': No such file or directory
insmod: can't insert '/dso/drivers/s3c2416_adc.ko': No such file or directory
/etc/init.d/rcS: line 20: /dso/app/io_bank: not found
/etc/init.d/rcS: line 21: /dso/app/io_bank: not found
/etc/init.d/rcS: line 22: /dso/app/io_bank: not found
/etc/init.d/rcS: line 23: /dso/app/io_bank: not found
insmod: can't insert '/dso/drivers/fpga_cfg.ko': No such file or directory
insmod: can't insert '/dso/drivers/fpga_ctl.ko': No such file or directory
insmod: can't insert '/dso/drivers/fpga_ctl_la.ko': No such file or directory
insmod: can't insert '/dso/drivers/dm9000.ko': No such file or directory
insmod: can't insert '/dso/drivers/tq2416_backlight.ko': No such file or directory
insmod: can't insert '/dso/drivers/tq2416_beep.ko': No such file or directory
ifconfig: SIOCSIFADDR: No such device
/etc/init.d/rcS: line 35: /dso/app/dsod: not found
/etc/init.d/rcS: line 36: /etc/init.d/nfs.sh: not found
--------------------------------------------------------------------------------
start
--------------------------------------------------------------------------------
/etc/init.d/rcS: line 43: /dso/run.sh: not found

Please press Enter to activate this console.


 

Offline tv84

  • Super Contributor
  • ***
  • Posts: 3211
  • Country: pt
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3131 on: November 02, 2021, 07:02:43 pm »
You can investigate how to recreate something from the FW package but a NAND dump from another device would be the easiest way (or not).

Anybody can do a dump for you using the "classical prehistoric 1.1.6 U-Boot menu". Will take some hours but is perfectly doable.

So you still have 3 partitions:

0x00000000-0x00040000 : "EmbedSky_Board_uboot"  OK
0x00200000-0x00400000 : "EmbedSky_Board_kernel"  OK
0x00400000-0x03ff8000 : "EmbedSky_Board_yaffs2"
ruined

Where is the FW package?

« Last Edit: November 02, 2021, 11:53:46 pm by tv84 »
 

Offline DC1MC

  • Super Contributor
  • ***
  • Posts: 1880
  • Country: de
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3132 on: November 02, 2021, 07:22:12 pm »
You can put OK on the kernel partition as well, it boots completely but segfaults when no init is found, I don't have any usable firmware image unfortunately, this is what I'm searching for.
The update images that I could found are just some archives with the scope related apps, no OS that I cold find  :'(.

EDIT: If after so much pain this shite MUST have some device specific and irreplaceable calibration file stored in the rootfs instead of EEPROM and without them it won't work I will go Office Space on it !!!
« Last Edit: November 02, 2021, 07:27:00 pm by DC1MC »
 

Offline DC1MC

  • Super Contributor
  • ***
  • Posts: 1880
  • Country: de
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3133 on: November 02, 2021, 07:56:05 pm »
It seems that there are more partitions that it meets the eye or so so says the U-Boot:

Code: [Select]
EmbedSky> mtdparts

device nand0 <nandflash0>, # parts = 7
 #: name                        size            offset          mask_flags
 0: bios                0x00040000      0x00000000      0
 1: params              0x00020000      0x00040000      0
 2: toc                 0x00020000      0x00060000      0
 3: eboot               0x00080000      0x00080000      0
 4: logo                0x00100000      0x00100000      0
 5: kernel              0x00200000      0x00200000      0
 6: root                0x03c00000      0x00400000      0

active partition: nand0,0 - (bios) 0x00040000 @ 0x00000000

defaults:
mtdids  : nand0=nandflash0
mtdparts: mtdparts=nandflash0:256k@0(bios),128k(params),128k(toc),512k(eboot),1024k(logo),2m(kernel),-(root)

 

Offline tv84

  • Super Contributor
  • ***
  • Posts: 3211
  • Country: pt
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3134 on: November 03, 2021, 12:09:22 am »
It seems that there are more partitions that it meets the eye or so so says the U-Boot:

Nice. It's all compatible with what I had displayed and fills the gaps that we had.

I would suggest you dump all the NAND up to 0x00400000.  (4 MBytes)

Use "nand dump" or "nand read" and log all the displayed values in the terminal.

That way you have a reference base to verify if all is correct with those parts. Then the only thing missing will be the root FS.

BTW, a long shot would also be: if you are replacing the full root partition, maybe you can use one from a S/N greater than 15000. I mean the limitation for 15000 is for FW updates using only part of the files. Maybe you can get away with a full partition replacement.
 

Offline DC1MC

  • Super Contributor
  • ***
  • Posts: 1880
  • Country: de
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3135 on: November 03, 2021, 06:00:15 am »
It seems that there are more partitions that it meets the eye or so so says the U-Boot:

Nice. It's all compatible with what I had displayed and fills the gaps that we had.

I would suggest you dump all the NAND up to 0x00400000.  (4 MBytes)

Use "nand dump" or "nand read" and log all the displayed values in the terminal.

That way you have a reference base to verify if all is correct with those parts. Then the only thing missing will be the root FS.

BTW, a long shot would also be: if you are replacing the full root partition, maybe you can use one from a S/N greater than 15000. I mean the limitation for 15000 is for FW updates using only part of the files. Maybe you can get away with a full partition replacement.

Right now I'm willing to try with anything that comes up, if ever...
 

Offline DC1MC

  • Super Contributor
  • ***
  • Posts: 1880
  • Country: de
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3136 on: November 03, 2021, 08:00:45 am »
Hi @PeDre, mine is a Voltcraft MSO-5062, but at that moment in time I'm willing to try everything once before packing it up and recommended to my friend to throw it in the garbage not before plundering some still usable bits.
Have you used the Linux infrastructure for doing the update, or that strange windozian DWE program that only runs on 32bit windows because of drivers for that miserable usbslave protocol they are using for usb file transfer,  that I seem to not find any source for it  |O ?

Many thanks,
DC1MC
 

Offline DC1MC

  • Super Contributor
  • ***
  • Posts: 1880
  • Country: de
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3137 on: November 03, 2021, 08:20:25 am »
I do, I will use it as last resort since there are like 5 yrs I don't have a 32bit windows, an installation kit or any compatible HW, I'll go in the attic, I think I stored there an abandoned core2duo laptop if I can make it run. I was hoping that someone of the tens of people taking part in this thread and proudly announced that they backed up their flash will share a backup for my model, but I guess not many takers. In any case, thank you for the help.

DC1MC
 

Offline morris6

  • Regular Contributor
  • *
  • Posts: 81
  • Country: nl
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3138 on: November 03, 2021, 11:51:54 am »
Hello DC1MC,

Ii looks like I found a dump, made with Tinheads special dump software, of an original, not converted, Voltcraft MSO 5062 in my old confuserbox. Is that what you're looking for? It contains three files: boot.bin, kernel.bin and root.bin. Too big to attach it here, about 16MB zipped. Can I upload it somewhere?

regards, Maurits
 
The following users thanked this post: DC1MC

Offline DC1MC

  • Super Contributor
  • ***
  • Posts: 1880
  • Country: de
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3139 on: November 03, 2021, 01:44:50 pm »
Hello DC1MC,

Ii looks like I found a dump, made with Tinheads special dump software, of an original, not converted, Voltcraft MSO 5062 in my old confuserbox. Is that what you're looking for? It contains three files: boot.bin, kernel.bin and root.bin. Too big to attach it here, about 16MB zipped. Can I upload it somewhere?

regards, Maurits

God bless your kind soul  ;D, put them on https://wetransfer.com/ (I'll PM my email address or, the best somewhere on a GitHub).

Thanks a lot,
DC1MC
 

Offline DC1MC

  • Super Contributor
  • ***
  • Posts: 1880
  • Country: de
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3140 on: November 03, 2021, 03:49:11 pm »
Hello DC1MC,

Ii looks like I found a dump, made with Tinheads special dump software, of an original, not converted, Voltcraft MSO 5062 in my old confuserbox. Is that what you're looking for? It contains three files: boot.bin, kernel.bin and root.bin. Too big to attach it here, about 16MB zipped. Can I upload it somewhere?

regards, Maurits

Files received OK, one more time thanks, and I'll check on how to update via u-boot.

Cheers,
DC1MC
 

Offline morris6

  • Regular Contributor
  • *
  • Posts: 81
  • Country: nl
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3141 on: November 03, 2021, 09:04:22 pm »
Hello again DC1MC,

I really hope you can use these files. I am quit certain that they come from an original Voltcraft MSO-5062B. After all the trouble I had with my modified / converted DSO / MSO this thing was ordered from Conrad. That was a bit of a disappointment. The thing had the same problems as my modified one; so Conrad took it back and refunded me. But I did make a backup of it, you know, for just in case..!.

The MSO firmware has a strange bug, the digital and analog traces on the screen are not always from the same trigger event, that was my main issue to send it back.
Also it doesn't do any protocol decoding so.. my remaining modified Voltcraft ended in a box in storage when a better MSO came on my bench (HAMEG HMO3054).

About restoring the firmware from the dump files:

I found in my old computer a pdf that describes "how to" proceed with a restore. It looks you are aware of this info as well since you mentioned the special dnw.exe program that is needed earlier in this thread. But just for fun I will attach it here.
 

Offline DC1MC

  • Super Contributor
  • ***
  • Posts: 1880
  • Country: de
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3142 on: November 04, 2021, 07:36:14 am »
Hello again DC1MC,

I really hope you can use these files. I am quit certain that they come from an original Voltcraft MSO-5062B. After all the trouble I had with my modified / converted DSO / MSO this thing was ordered from Conrad. That was a bit of a disappointment. The thing had the same problems as my modified one; so Conrad took it back and refunded me. But I did make a backup of it, you know, for just in case..!.

The MSO firmware has a strange bug, the digital and analog traces on the screen are not always from the same trigger event, that was my main issue to send it back.
Also it doesn't do any protocol decoding so.. my remaining modified Voltcraft ended in a box in storage when a better MSO came on my bench (HAMEG HMO3054).

About restoring the firmware from the dump files:

I found in my old computer a pdf that describes "how to" proceed with a restore. It looks you are aware of this info as well since you mentioned the special dnw.exe program that is needed earlier in this thread. But just for fun I will attach it here.

This is nice PDF from the site, it's good to have it here as well, because the sites are volatile and the post there was from 2013 or something. Thanks God that I don't have to deal daily with this POS, from what I've seen and read so far, is distilled highly concentrated Chinese crapo, as opposed to the more diluted crapo of Rigol and friends, for some strange masochistic reason it's very loved in Germany, it even has a name "Das Oszi" and is for a friend (hopefully will stay friends afterwards)  :-DD.

In any case, thanks once more,
DC1MC
 

Offline DC1MC

  • Super Contributor
  • ***
  • Posts: 1880
  • Country: de
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3143 on: November 04, 2021, 03:12:18 pm »
Just a quick and sad (or maybe happy  >:D ) update, after restore the scope is totally dead, no u-Boot, no USB reaction, no serial output  :palm:. So most likely will need a JTAG connector and a working image to be restored, but most probably the insides will host some other project that can use the case and screen.
Or if someone needs some specific parts or the whole cadaver, please PM me (it's not free unfortunately. but also not expensive).

 DC1MMC
 

Offline tv84

  • Super Contributor
  • ***
  • Posts: 3211
  • Country: pt
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3144 on: November 04, 2021, 04:44:50 pm »
 :palm:  If there is no uboot output, you can forget all the rest.

How did you do that?
 

Offline DC1MC

  • Super Contributor
  • ***
  • Posts: 1880
  • Country: de
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3145 on: November 04, 2021, 05:43:21 pm »
:palm:  If there is no uboot output, you can forget all the rest.

How did you do that?

Relatively simple :'(, the u-boot there seem to not have been the original or at least the one that the documents were referring, now I can either forget all the rest and either see if one of my J-Link clones see the NAND or it will house there a RPi or something else, because the other options seem to be parallel port LPT JTAG programmers that no one will ever make or have a machine with LPT. I barely found some Windows32 bit cadaver.
And if indeed these calibration files must be there for the device to actually operate, than anyways it would have been useless I think, (maybe it recreates them automatically or I could get them from somewhere) but until I manage to see the NAND somehow, it will collect dust like the rest of them.

Cheers,
DC1MC
 

Offline tv84

  • Super Contributor
  • ***
  • Posts: 3211
  • Country: pt
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3146 on: November 04, 2021, 08:59:45 pm »
Relatively simple :'(, the u-boot there seem to not have been the original or at least the one that the documents were referring, now I can either forget all the rest and either see if one of my J-Link clones see the NAND

I disagree. What you showed about the uboot seemed solid and valid. But I don't have experience with Hantek stuff.

Nonetheless, in hindsight, you should have done the restore using the (primitive) uboot NAND commands and forget all those fancy tools that the PDF talked about. With that you can be totally sure of what you are doing and where you're messing around.

Also, if you had taken the dump as I advised, a comparison between your uboot and kernel could have been done before crushing them all over, with the NAND dump that was provided to you.

Well, live and learn.

Now, you just have to find the way to mount the NAND in your JLink (that is a matter of config files regarding the specific NAND datasheet). With that done, I think it becomes easy to restore the NAND. I have no experience in adjusting config files for NAND support in JLink.
« Last Edit: November 04, 2021, 09:05:26 pm by tv84 »
 

Offline morris6

  • Regular Contributor
  • *
  • Posts: 81
  • Country: nl
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3147 on: November 04, 2021, 09:54:30 pm »
@DC1MMC:

In case you do want to try to restore:

Found my old notes on restoring after I bricked the thing with a faulty update. Memory came back: I did restore it once with a Chinese software called H-JTAG. I found the manual on my old computer HDD. Also I found the LPT port Jtag adapter cable in the old project parts box. Now this software is still downloadable on H-JTAG's website. And it runs on Windows 7, it says. It supports the S3C2440 chip. Also the manual is available. The manual has a schematic for the LPT adapter. Only one HC244 and an npn transistor. My old Win7 box has an LPT connector, so, I could try to dump this MSO I have in storage.

Furthermore, I found complete NAND dump from two Voltcraft DSO on the old HDD. Maybe you can bring some live back with that?
 
The following users thanked this post: DC1MC

Offline DC1MC

  • Super Contributor
  • ***
  • Posts: 1880
  • Country: de
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3148 on: November 05, 2021, 12:15:10 am »
@morris6 Unfortunately I throw away the last computer with an LPT port long ago :(, but I'm very interested in the memory dumps if you could dump them somewhere  ;D, maybe I'll not cannibalize yet the parts and give it another try.

 I did a bit of analyzing of what went wrong on my side, it seems that there are TWO very different, but valid NAND dumps, one that contains the checksum control OOB data and one that doesn't, and they're fully incompatible  :'(, this why I've always hated raw NAND  :rant:.

If I'll ever put a new U-Boot on this think it will have to also boot from tftp and NFS. BTW, is it worth to get an solder the network socket (the Voltcraft box has a covered cutout and the PCB has the footprint of the RJ45 socket), but I don't know what animal is, with or without magnetics, if I'll disassemble it fully to solder the JTAG connector I could as well solder the network connector.

DC1MC
 

Offline morris6

  • Regular Contributor
  • *
  • Posts: 81
  • Country: nl
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3149 on: November 05, 2021, 09:38:17 pm »
OK, @DC1MC: Once more from my old notes: The Linux kernel for the MSO-5062B is 2.6.30.4. The complete NAND dumps I mentioned yesterday are from DSO version, Voltcraft DSO-3062 or something and Linux on that was 2.6.13, so not proper for your patient. However, the dumps I send you earlier are from MSO-5062B as mentioned.

About adding the network connection: You would need the special firmware for that. Also some hardware, the DM9000 chip and magnetics that go on the daughter board and the socket on the main board. Also the FPGA firmware for the daughter board is different. It needs to provide a 25 MHZ clock for the DM9000. That was all part of the conversion project. IMHO the thing is not worthy for all this trouble.

Some more notes about NAND Flash: the 64Mb NAND has 4096 blocks of 32 pages of 528 bytes (512 data and 16 OOB bytes). Exactly where, in which blocks the backups have to be flashed I can't find in my notes. I have info for the DSO but that is different because the sizes of the dumped files don't match. I would have to get the MSO out of storage to check what the boot log gives. Would that help you further?
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf