Abstract — The FNIRSI DSO-TC2 is a low-cost, dual-channel digital storage oscilloscope combined with a semiconductor component tester. While the hardware specifications are well-documented by the manufacturer, the embedded firmware—responsible for signal processing, UI rendering, measurement algorithms, and component characterization—remains proprietary. This paper analyzes the firmware structure, boot process, and update mechanism of the DSO-TC2. Through static binary analysis and hardware debugging interfaces, we identify key software modules, memory mappings, and potential security limitations. The findings provide a reference for hobbyist modifications, bug fixes, and feature enhancements, while discussing legal and technical challenges of reverse engineering consumer test equipment.
Keywords — FNIRSI DSO-TC2, firmware analysis, oscilloscope, component tester, reverse engineering, embedded systems, ARM Cortex.
Navigate to the official FNIRSI support portal: www.fnirsi.com/pages/download-center fnirsi dsotc2 firmware
Hardware debug ports (SWDIO, SWCLK) are present on the PCB but not locked in production units. Using an ST-Link v2, we read the external flash via OpenOCD:
openocd -f interface/stlink-v2.cfg -f target/stm32f1x.cfg -c "init; dump_image fw_dump.bin 0x08000000 0x40000"
The dump matched the official update binary (excluding header). Abstract — The FNIRSI DSO-TC2 is a low-cost,
Currently, the DSOTC2 firmware landscape is a split path:
Note: This voids your warranty and may brick your device. Some users have hex-edited the firmware to change the boot splash screen. Do not attempt unless you have a JTAG recovery setup. Hardware debug ports (SWDIO, SWCLK) are present on
Do not flash firmware meant for the "DSO152" or "DSO TC1" onto the DSOTC2.
A: The adage "if it ain't broke, don't fix it" applies. However, if you need improved transistor testing (e.g., rare FETs) or UI speed, update.