Products > Test Equipment
New bench scope - Fnirsi 1014D, 7", 1GSa/s
pcprogrammer:
Since the PCB also has pads for a SWD connection with the GD32E230 I though lets give it a try and read the FLASH.
Did not work with the openocd version I had installed (0.10.0) but with the latest build from here: https://github.com/xpack-dev-tools/openocd-xpack/releases I was able to read the flash. Have not looked at it with Ghidra but with a hex editor it looks like vectors followed by code and then 0xFF till the end. It is a bit over 7KB of code.
So no protection by the looks of it.
Attached is the binary and a picture of the connector with pinout
tv84:
--- Quote from: pcprogrammer on May 11, 2022, 04:25:31 pm ---Have not looked at it with Ghidra but with a hex editor it looks like vectors followed by code and then 0xFF till the end. It is a bit over 7KB of code.
--- End quote ---
AFAIK doesn't seem to have any visible ARM code...
pcprogrammer:
--- Quote from: tv84 on May 11, 2022, 08:32:40 pm ---AFAIK doesn't seem to have any visible ARM code...
--- End quote ---
Well I have looked at it and it is ARM code. I used ARM Cortex little and set the starting point on 0x08000000. This way it looses the awareness of the vectors but they are there. The first four bytes are the stack start address. The next four bytes hold the reset address. Formatting the data into a hex file where the actual code starts in the 0x08000000 region and the vectors in the 0x00000000 region can solve this.
Also found addresses of GPIO and USART0 in the code. A first glance makes me think it is not that complex a code.
Might be easier to reverse this to get to the inter MCU communication then plowing through the F1C100s code.
It is just playing around a bit. Satisfying my natural curiosity. Not planing on fully reversing the 1014D nor making new firmware for it.
pcprogrammer:
I looked through the 1014D second program loader to see if I could find how they setup the FPGA clock synthesizer, but it turns out they don't. Instead they write 0x78 to the FPGA for the brightness command 0x38.
So I tried that in the 1014D firmware backup program I wrote and lo and behold it did the trick. The display no longer flickers. Also modified the boot with FEL code and uploaded both to the renamed hack repository: https://github.com/pecostm32/FNIRSI-1013D-1014D-Hack
The initialization of the FPGA clock synthesizer is done in the main firmware but I have not looked for it. Did notice a difference in the FPGA_Init where it sets the according GPIO pins to outputs.
Curiosity satisfied for now :)
pcprogrammer:
Go figure :-//
I did some searching on the web to find something about a newer AD1013D II scope in response to a question asked on the 1013D firmware repository. Did not find anything about it but I did find that the Aiteme ADS1014D is the top number 1 scope around :-DD
https://www.findthisbest.com/best-lab-oscilloscopes/metric
Makes you wonder where they based there conclusions on :o
Had not yet heard of the Aiteme brand but the scope looks just like the FNIRSI one.
Navigation
[0] Message Index
[#] Next page
[*] Previous page
Go to full version