Author Topic: Hantek LCR 1832C unlock (Read 59764 times)

ZhuraYuk · « **on:** August 16, 2020, 10:27:38 am »

I recently purchased Hantek 1832C nice looking LCR meter which promised good specs. There is older model 1833C which can go 100kHz and change test levels voltage. I hoped to unlock it with modifying firmware in same way as with similar portable oscilloscope Hantek 2C42 > 2C72. But after making changes the only thing that changed is system description, higher frequency setting remained locked. Obviously there is mode differences in firmware as well.
Does anyone have 1833C model to share their firmware? I would be good to have dump of main program flash and boot loader as well. You can easily dump it via ST Link adapter and SWD interface

Attached my original and edited firmware files.

coromonadalix · « **Reply #1 on:** August 16, 2020, 12:27:59 pm »

Would be nice to share the original fw you dumped before making any modifications, someone could have poked in it ??

coromonadalix · « **Reply #2 on:** August 16, 2020, 12:33:11 pm »

Also known as Hantek TO11 and TO22, they are ODM versions of the 1832c 1833c at cheaper price on Aliexpress

teardown video :

ZhuraYuk · « **Reply #3 on:** August 17, 2020, 09:14:24 am »

Quote from: coromonadalix on August 16, 2020, 12:27:59 pm

Would be nice to share the original fw you dumped before making any modifications, someone could have poked in it ??

Edited first post with files included

Ries · « **Reply #4 on:** October 24, 2020, 02:53:37 pm »

I buy 1833c and run calibrating with connected type-c external power, now a can`t use device on battery power - only with external power. I think this is firmware bug, a iam ready to help you for dumping stm, but my device are corrupted

diogoc · « **Reply #5 on:** February 20, 2021, 03:02:01 pm »

There are any update to this unlock?

Microcheap · « **Reply #6 on:** February 21, 2021, 04:46:17 am »

I am not sure if I got a different device with a wrong label, but I just downloaded the latest firmware from Hantek's website and installed it using Dfuse and now my 1832C works as a 1833C.

Can anyone confirm that?

coromonadalix · « **Reply #7 on:** February 21, 2021, 02:14:23 pm »

as i wrote on reply #2 they are sold under an oem / odm numbers, from Hantek you have 2 models and 2 others oem models are known, unless other obscur branding occurs ??

well if you have a scope

Try to sniff out the 100khz test with a ceramic disk capacitor, or something you can test at 100khz

Maybe the 2 models are firmware locked, but have the same hardware, and you managed to unlock it to a 1833C

Or Hantek made an huge mistake and pushed the 1833C fw only

loll i don't know if the pcb has a short or an identifier part (resistor/short, a pin put to ground) the tell the fw the model you use ?

Microcheap · « **Reply #8 on:** February 21, 2021, 11:08:30 pm »

Quote from: coromonadalix on February 21, 2021, 02:14:23 pm

Try to sniff out the 100khz test with a ceramic disk capacitor, or something you can test at 100khz

That was the first thing I did, the test signal is a perfect 100kHz sine wave. All other frequency ranges are correct as well. The measurements are also on par with a DER-5000

Quote

Or Hantek made an huge mistake and pushed the 1833C fw only loll i don't know if the pcb has a short or an identifier part (resistor/short, a pin put to ground) the tell the fw the model you use ?

I just downloaded the fw available in the product's page: http://hantek.com/products/detail/16180 and installed it.
But I didn't pay attention to the model number that was originally. I turned the device on, did a quick check and rushed to update the fw, only then I noticed it was working as a 1833C.
So, I don't know if I was lucky with my device or Hantek made a mistake with the fw update. We just need someone else with a HT1832C to update the fw and confirm it.

coromonadalix · « **Reply #9 on:** February 22, 2021, 01:28:14 am »

Opening the dfu file i see some descriptors, maybe an stm32 guru could help

The texts must be in Chinese ?

diogoc · « **Reply #10 on:** February 22, 2021, 10:30:19 am »

Can you take some photos of the pcb to see if there is something different?

Microcheap · « **Reply #11 on:** February 23, 2021, 02:33:08 am »

Sorry, I did open it to check inside but I didn't take any picture. I did compare the PCB with the pictures in this blog though:

https://www.voltlog.com/hantek-to11-1832c-lcr-meter-review-teardown-voltlog-303/

and everything looks exactly the same. I am confident that the only difference between the 1832C and 1833C models is in the FW only.

diogoc · « **Reply #12 on:** March 09, 2021, 06:35:57 pm »

I confirmed that updating the firmware with dfuse the device change to the 1833C

All new functions seems to work.
The downside is the version from the hantek page is a bit older than the factory version.

teixeluis · « **Reply #13 on:** March 22, 2021, 09:32:59 pm »

Possibly calibration data could be an issue. They probably save in labor by not performing 100KHz calibration on the cheaper 1832C devices. Ultimately this is the only difference (albeit not physical). Just a guess though.

teixeluis · « **Reply #14 on:** March 22, 2021, 10:35:13 pm »

Btw, my Hantek 1832C still has the factory shipped firmware, which has version 20201120PM.

Cheers

Luis Teixeira

teixeluis · « **Reply #15 on:** March 22, 2021, 11:11:21 pm »

Another interesting observation, while still staying in the stock 1832C firmware: I have connected the device to the PC via USB, opened the Keysight Connection Expert application, and in the Interaction IO utility, sent the command "FREQuency 100000". The frequency changes to 100 KHz, and in the oscilloscope I can confirm that this is the frequency it is outputting.

It is worth noting that when the device is connected via USB, the output has a significant DC offset, besides being somewhat noisy (see attached screenshot).

After removing the USB cable, the 100 KHz setting remains active until the power is cycled. The sine wave in this case is clean and has no DC offset.

Cheers

Hydron · « **Reply #16 on:** March 23, 2021, 08:25:43 am »

Interesting - doesn't seem like much effort has been put into protecting the differences between models!

Is it possible that the offset is due to some form of ground loop? Maybe try with an isolated USB connection (e.g. from a laptop running on battery), or even measuring the output with a DMM in DCV mode, with no (grounded) scope connected?

Kinda regretting buying a DE-5000 now - I looked at the Hantek but it was before anyone had confirmed being able to change the version.

coromonadalix · « **Reply #17 on:** March 23, 2021, 02:21:06 pm »

If you power it down, and try a test requiring manually settled 100hz up to 100khz does it goes to 100khz ?

usagi · « **Reply #18 on:** March 23, 2021, 09:03:58 pm »

Quote from: Hydron on March 23, 2021, 08:25:43 am

Interesting - doesn't seem like much effort has been put into protecting the differences between models!

Is it possible that the offset is due to some form of ground loop? Maybe try with an isolated USB connection (e.g. from a laptop running on battery), or even measuring the output with a DMM in DCV mode, with no (grounded) scope connected?

Kinda regretting buying a DE-5000 now - I looked at the Hantek but it was before anyone had confirmed being able to change the version.

This Hantek is better than the "gold standard" DE-5000?

teixeluis · « **Reply #19 on:** March 23, 2021, 09:24:16 pm »

Quote from: Hydron on March 23, 2021, 08:25:43 am

Is it possible that the offset is due to some form of ground loop? Maybe try with an isolated USB connection (e.g. from a laptop running on battery), or even measuring the output with a DMM in DCV mode, with no (grounded) scope connected?

Correct, I connected it to a power bank, and checked again with the oscilloscope, and the signal is clean and with no DC offset.

Connecting it again to the PC and checking with a DMM, I get nearly 0 DC Volts, and about 0.64 Volts AC wich is close to the 600 mV setting in the LCR.

teixeluis · « **Reply #20 on:** March 23, 2021, 09:28:55 pm »

Quote from: coromonadalix on March 23, 2021, 02:21:06 pm

If you power it down, and try a test requiring manually settled 100hz up to 100khz does it goes to 100khz ?

No, actually (and correcting my previous comment) if I power it down and then power it up, the 100 KHz setting will still be available until I change to a different frequency. After that you can only go to up to 40 KHz.

Also the LCR doesn't seem to accept setting it to 70 KHz (one of the frequencies available in the 1833), beeping when I give the command "FREQuency 70000".

Cheers

Hydron · « **Reply #21 on:** March 23, 2021, 11:32:20 pm »

Quote from: usagi on March 23, 2021, 09:03:58 pm

This Hantek is better than the "gold standard" DE-5000?

Some of the specs are a bit better, there are some extra options and frequencies, and it looks like it can be controlled via SCPI (DE-5000 is output only, and needs a special adapter for comms, though one can be DIY'd).

On the negative side, it's still a little more expensive, I don't think it comes with probes, and it's less proven than the DE-5000.

RE the offset thing - good news that it goes away, in real use you shouldn't end up with a ground loop if the DUT is a single component or isolated.

teixeluis · « **Reply #22 on:** March 24, 2021, 09:12:28 am »

Quote from: Hydron on March 23, 2021, 11:32:20 pm

On the negative side, it's still a little more expensive, I don't think it comes with probes, and it's less proven than the DE-5000.

Depending on the seller, the prices of both kind of overlap currently. The 1832C only comes with alligator clips for two-wire measurements.

teixeluis · « **Reply #23 on:** March 24, 2021, 09:34:55 pm »

A few more details after playing a bit more with the SCPI commands:

- regarding the intermediate frequency that I tested (70 KHz), it is legitimate that the LCR refused it because the valid frequency that is in the spec of the 1833 model is 75 KHz and not 70. Tried FREQ 75000 and it works. Output frequency is 75 KHz spot on;
- the output level can also be changed to 0.3 Volts, by using the FUNCtion:LEVel 300 command. In my DMM it measures 0.327 V AC after this change, which is reasonably close. According to the manufacturer the 1832C is 600mV only. After disconnecting the USB cable I could switch to 600 mV but not back to 300 mV;

The ultimate candy would be to uncap these features by means of some undocumented SCPI command..better than flashing a potentially less recent firmware.

teixeluis · « **Reply #24 on:** March 24, 2021, 11:42:07 pm »

Looking up for strings in the firmware dump, and with a bit of trial and error, there seem to be interesting SCPI commands beyond those documented in the manual.

This one in particular seems suggestive:

-> fact:model ?
<- model = Hantek1832C

I may do some experimenting with the write command, but I will first take a firmware dump with the ST tool just in case...


EEVblog Main Site	EEVblog on Youtube	EEVblog on Twitter	EEVblog on Facebook	EEVblog on Odysee

Author Topic: Hantek LCR 1832C unlock (Read 59764 times)

Share me