I've been following the thread, I've got a really early DSO1102B handheld scope with firmware 2.01.1
None of the hacked firmware I can find will work with it! It all saysx for 2.5-2.6 etc.
I got it from China when they were first released. Can anybody run me through how to hack my device to 200mhz or point me to a link?
Even Hantek doesn't have firmware on their page so I can't update the device.
i should probably start separate thread about the new Hantek handhelds (DSO1xxxB/BV/S)EDIT: i updated now the first post in this thread, so ppl who have such handhelds will find immediately
some informatios before they spend like you a day or two to recognize that handheld and bench are
in principle similar but different enought to make the hacks more complex (from model point of view)
Anyway, they based on the bench models sp let's
short introduce them :
Available models :
DSO1062B / BV / S
DSO1102B / BV / S
DSO1202B / BV / S
B - are standard models, BV have SD card and video player, S are with isolated channels.
What i got until now (and of course hacked, disassembled, documented, even draw part of schematics ...) are
the B and BV models.
The hardware is very similar to bench models, however they have of course some additions like DMM (FS9922-DMM4 chip),
power management (MSP430F2011), different i/o header, additional unpopulated header for BT2UART modules
(CSR Bluetooth Chip Solution , ebay for Bluetooth UART - they can be used as third uart over BT, i do have
these modules but didn't found time to test it ...)
They do have already LAN - but it seems to be option and not everbody is selling them with LAN,
in case you bought without LAN it is easy to populate the missing parts - all you need
is DM9000EP chip + magnetics and RJ45 jack - and small change in EEPROM licensing (see below).
You don't need 25MHz quarz for DM9000EP as on handheld LAN chip is clocked by FPGA
(on bench hw1007 seems to be not that case)
Display (AT056TN53 V. 1) have 640x480 resolution, 15 x 8.5DIV, menu popus on the bottom, this is te only resolution
(not like on bench model where 20 or 16div possible).
FPGA is the same as in bench DSO, but the FPGA design is different and already much better - these handhelds
have less jitter than the bench models, i like them already.
All current available models have max 1Mpoint memory, however the firmware support
already TODAY 2Mpoint,
all you need is new SRAM chip (IS61LP51236A-200TQLI works in my handheld just perfect) and of course a small hack
which is changing EEPROM content (all licensing informations are stored there, even on newest bench models
even if not yet fully used to identify - but don't worry - easy to change/hack).
Of course 2Mpoint will only work when the CPLD (which is address counter for SRAM) supports this too
- luckily this is already implemented
So in principle when you buy/replace SRAM and hack the licensing
(i can tell you via PM how to do this) you will get an BMV handheld - which even didn't exist today
officialy (but it does in the Hantek catalog from HK Fair, so they will come later 2012 on market)
The SRAM is not cheap and you need to be careful during unsoldering the old SRAM (don't use hot air,
FPGA is ot far enough, you might blow away some FPGA balls ... i used ChipQuick successfuly to remove old SRAM)
The linux is 2.6.30.4 kernel based, like on the (still not yet officially) released BM/BMV bench models.
The dso.exe, so the actuall application is NOT YET universal, i can see common things in bench and handheld model firmwares,
but up to now (and this will stay like that probably forever or at least long time) handheld firmware and bench firmware
are DIFFERENT !!!
So don't even try to run bench firmwares on handheld (or vice versa) - the resolution is different, the keyboard mapping
is different and of course kernel / root fs is different today (handheld 2.6.30.4, bench 2.6.13)
Luckily you can't destroy by downloading/updating with official firmware because the gpg password has been changed,
it is not anymore 0571tekway, not on handheld it is 111111
There is firmware available (2.01.1_20111213) on the website,
http://www.hantek.com/Product/DSO1000B/Firmware.rarhowever befor you update tell me what version is on your handheld ? (sw version field in about).
The backup tool posted in this thread will not work on handheld because of different password,
you might create your own or wait until i or someone else did it
(i can do it when you promise to make a backup of your handheld and share this backup with me)
For now, as you probably wish to use the 200MHz bw i can tell you that the hack itsel remains the same,
you have to open the unit, connect over uart (see attached picture for pinout) and do the hack manually
rename dst1102b file (
mv /dst1102b /dst1202b )
edit logotype file (with
vi /logotype ) and change
dst1102b to
dst1202bedit logotype.dis file (with
vi /logotype.dis ) and change
Hantek_DSO1102B to
Hantek_DSO1202Bedit tmpdst file (with
vi /tmpdst ) and change
/dst1102b to
/dst1202bThe logo itself, hehe, it is now not anymore a bitmap file loaded via device driver (and based on model name in logotype.dis),
now it is hard compiled in the /disp file, so even when you hack the device to 200MHz during boot the logo
will be still telling DSO1102B (which seems to be a protection again chinese shops who still selling hacked 60MHz bench models
as 200MHz models - of course with new front sticker). It is not a real protection, but yeah, for sure it sucks to see different
model name but if you don't like it you can edit the /disp file with hexeditor and repalce the DST1102B picture by DST1202B.
Well, or wait - maybe some day someone will buy such handheld and sahre with us the /dsip executable, but
that's only logo - it have NO influence on any bw/settings, so who cares.
What else, yeah, the official export models have proper fuses (KTK-1, KTK-10) and better input protection
for DMM, models available via chinese sellers have cheap fuses only. If you don't care about CATIII you can
work with the cheap fuses too (in case you got such model).
What else .. hmm, a yeah, these BV model have the audio codec populated (UDA1341TS), small mono amplifier (TPA4861)
and ugly headspeaker - if you don't need audio in video player you don't need them to be soldered.
However to enable the video function you need to hack video licensing (again in EEPROM). The SD card
is somehow part of the BV models too, all you need is micro SD holder, SD card and again licesning enabled in EEPROM.
SD will ge mounted into /mnt/sd, usb flash drive into /mnt/udisk (not just in /mnt like on bench models, which is again
a small tap whey you try to use e.g. backup tool from this thread)
Anything else , hmm, right - the UART port can be connected to unused LAN jack pins over optocouplers -they need
of course to be populated. Haven't tested how good this works, but from the PCB routing seems to be everything ok.
So i hope that was a nice short introduction about what already possible/known about these handhelds
I'm sure this time Hantek will start hunting me, but hey, it's not my fault that these scopes/handhelds are so
user/hack friendly (and well, very good gears too).
Edit: attached picture of licensing features enabled on my DSO - 2Mpoint, LAN, SD, Video - you can find
this menu point in utility, 5/5 page, more... button, sys features button.