Amazon Commercial 90DM600 multimeter hacks - Page 1
Forum section: electronics / testgear

author: sequoia
author_rank: Unknown
timestamp: May 01, 2020, 04:16:36 am
content: Amazon Commercial 90DM600 DMM appears to be a rebadged CEM DT-9560/9561 meter. This is a rugged (IP67 certified) 6,000 count meter that has Intertek/ETL safety certification and currently sells for about $30 (US):https://www.amazon.com/AmazonCommercial-Count-Compact-Digital-Multimeter/dp/B07W3BXNMP/Chipset is DM1106EN (found on many meters from UNI-T, Victor, etc...) that stores its configuration/calibration data in a 24LC02B (2Kbit) I2C EEPROM.Searching information about this chipset brought up multiple threads here on this forum about hacking UNI-T, etc. meters based on this same chipset.So it would appear it is possible customize settings on this meter and possibly enable 10,000 count mode (as chipset appears to support it).I was able to dump the EEPROM using a CH341A programmer using a SOIC8 test clip and temporarily holding CPU in reset mode by grounding R25 (end that connects to IC1 pin 55) to the PIN 1 on the Program header. Meter needs to be powered on (I used the V~ setting). No soldering needed if you have steady handsEDIT: To be extra careful, I may be best to use "pull down" resistor (1k to 10k range) to hold CPU in reset.NOTE! Most (if not all?) CH341A programmers have flaw that Vcc is 3.3V but the signals are 5V, so using a unit that is not fixed, might damage your DMM... (This post shows one possible fix:https://www.eevblog.com/forum/repair/ch341a-serial-memory-programmer-power-supply-fix/msg1347050/#msg1347050)Backup of factory settings of the meter:Code:0000000 ff ff ff ff ff ff ff ff ff 52 00 0e 01 e8 d4 030000010 10 27 38 18 4e 02 66 66 3d 3d ff 3b 0a ff 40 ff0000020 bb 99 1b 81 fa 00 32 00 00 80 2d 8d ad 8d 95 f70000030 4e 02 09 04 12 09 6b f8 0a d0 1b 0a 1a 01 0a 000000040 00 01 00 01 00 07 98 00 64 00 64 00 64 00 c0 000000050 00 80 00 80 00 80 00 80 00 80 00 80 00 80 00 800000060 c4 7f bd 84 01 00 0c 2b 00 00 00 00 00 00 00 000000070 28 80 00 80 a4 83 e8 7d 0a 27 00 00 00 00 00 000000080 00 00 00 00 00 00 11 0f 00 13 0d 12 02 07 04 030000090 00 00 00 00 00 00 10 0e 00 15 0c 00 01 0a 00 0000000a0 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 0000000b0 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 00 0000000c0 0d 00 02 20 0d 00 03 20 20 00 03 20 20 00 03 1000000d0 41 00 03 08 41 00 03 05 41 00 03 05 0d 00 02 2000000e0 e2 f1 0b 80 00 80 db 7f cc 7f a6 7f 9d 7f 00 8000000f0 00 80 00 80 00 80 00 80 5a c6 ec 0f 05 00 00 00Comparing this to examples found in threadhttps://www.eevblog.com/forum/testgear/a-look-at-the-uni-t-ut210e/seems to point that it should be possible to "hack" this meter by by reprogramming the EEPROM.Lot of information about modifying EEPROM for DM1106EN/DTM0660L chipsets can be found at:https://github.com/bdlow/UT210EIt would seem like it may be possible to modify this meter to 10,000 one and possibly even enable the temperature measurements mode (to make this functionally same as the more expensive 90DM610 model...)

author: Muttley Snickers
author_rank: Unknown
timestamp: May 01, 2020, 06:41:29 am
content: Quote from: sequoia on May 01, 2020, 04:16:36 amNice work but what about the LCD ?The LCD layout in the image above appears to be for a 6000 count or less meter as the DC icon is in a position where it would conflict with any additional digits. I suspect their higher count models probably have a completely different layout in the display when compared to the lower count models.

author: sequoia
author_rank: Unknown
timestamp: May 01, 2020, 07:09:38 am
content: Quote from: Muttley Snickers on May 01, 2020, 06:41:29 amLCD is 4 digits only, so cant get 10,000 count but should be able to get to "9,999 count"...Looking the factory EEPROM settings it would seem full range value is set from factory to 10,000 counts (0x2710).And and upper limit (for automatic range switch) is set to 6,200 (0x1838), so presumably changing that to 9,999 (0x270f) might work?

author: sequoia
author_rank: Unknown
timestamp: May 01, 2020, 07:34:11 am
content: Success! I was able to enable temperature measurement by adding those modes to the "Hz %" selector setting (now pressing mode button toggles between "Hz", "C", "F" modes).I also changed successfully uA, mA, A, and mV ranges to default "DC" mode instead of factory default "AC"...To update meter save copy of the original settings and then edit following locations:

author: sequoia
author_rank: Unknown
timestamp: May 01, 2020, 08:19:20 am
content: I guess this could be called "9999 Counts" ?I changed factory limits for the autoranginng: upper limit changed from 6200 to 9999, and lower limit changed from 590 to 990:

author: Caliaxy
author_rank: Frequent Contributor
timestamp: May 01, 2020, 04:35:15 pm
content: Great Job!

author: Electro Detective
author_rank: Super Contributor
timestamp: May 01, 2020, 09:12:30 pm
content: interesting to see if any performance compromises of this 'unlocked'? meter versus the standard meter..and there goes another $40

author: sequoia
author_rank: Unknown
timestamp: May 01, 2020, 09:42:52 pm
content: Quote from: Electro Detective on May 01, 2020, 09:12:30 pmAs range is set to 10000 counts from the factory (and chipset supposedly is designed to support that as well), presumably it won't be too bad.I haven't done any extensive testing, but quick comparison when meter showed 5.999 VDC (unmodified) it was 6mV "up" from what my GDM-8251A displayed (this is a 120,000 count DMM).After modifying the meter and meter showing 9.999 VDC, reading was still "up" same 6mV from the reading on the GDM-8251A.

author: karamba
author_rank: Contributor
timestamp: May 04, 2020, 05:00:09 am
content: Should unsubscribe from these forums. Minus $40 for me.

author: sequoia
author_rank: Unknown
timestamp: May 13, 2020, 08:24:16 am
content: It would appear that DM1106EN behaves slightly differently from the DTM0660L when it comes to EEPROM location/settings:- EEPROM location 0xFC (backlight timeout) seems to be in minutes (vs on DTM0660L its in seconds).- EEPROM location 0xFA Bit 1 (enable Serial UART output via long press of "REL") doesn't seem to enable UARTI sniffed the I2C bus for the EEPROM activity to get better understanding what EEPROM locations meter appears to be using (reading).Following shows the changes (highlighted in red) that I've made to factory settings (so you'll see the data from "90dm600-hack.bin" being read by the meter on the captures):Meter power up (to "V~" mode):Code:54556-55231 24xx EEPROM: Operations: Sequential random read (addr=F8, 6 bytes): 5A C6 EC 1E 0A 0055250-56527 24xx EEPROM: Operations: Sequential random read (addr=10, 15 bytes): 10 27 0F 27 DE 03 66 66 3D 3D FF 3B 0A FF 4056546-57621 24xx EEPROM: Operations: Sequential random read (addr=33, 12 bytes): 04 12 09 6B F8 0A D0 1B 0A 1A 01 0A57642-58250 24xx EEPROM: Operations: Sequential random read (addr=0B, 5 bytes): 0E 01 E8 D4 0358269-58812 24xx EEPROM: Operations: Sequential random read (addr=20, 4 bytes): BB 99 1B 8158831-60041 24xx EEPROM: Operations: Sequential random read (addr=40, 14 bytes): 00 01 00 01 00 07 98 00 64 00 64 00 64 0060060-60468 24xx EEPROM: Operations: Sequential random read (addr=4E, 2 bytes): C0 0060492-61167 24xx EEPROM: Operations: Sequential random read (addr=2A, 6 bytes): 2D 8D AD 8D 95 F7357725-358066 24xx EEPROM: Operations: Random access read (addr=8E, 1 byte): 04358086-358427 24xx EEPROM: Operations: Random access read (addr=9E, 1 byte): 00358447-358788 24xx EEPROM: Operations: Random access read (addr=AE, 1 byte): 00358808-359148 24xx EEPROM: Operations: Random access read (addr=BE, 1 byte): 00359208-360417 24xx EEPROM: Operations: Sequential random read (addr=40, 14 bytes): 00 01 00 01 00 07 98 00 64 00 64 00 64 00360436-360844 24xx EEPROM: Operations: Sequential random read (addr=4E, 2 bytes): C0 00360866-361275 24xx EEPROM: Operations: Sequential random read (addr=28, 2 bytes): 00 80361305-361720 24xx EEPROM: Operations: Sequential random read (addr=E6, 2 bytes): DB 7FSwitching to range "V~":Code:11-353 24xx EEPROM: Operations: Random access read (addr=8E, 1 byte): 04373-714 24xx EEPROM: Operations: Random access read (addr=9E, 1 byte): 00734-1075 24xx EEPROM: Operations: Random access read (addr=AE, 1 byte): 001094-1435 24xx EEPROM: Operations: Random access read (addr=BE, 1 byte): 001494-2704 24xx EEPROM: Operations: Sequential random read (addr=40, 14 bytes): 00 01 00 01 00 07 98 00 64 00 64 00 64 002723-3131 24xx EEPROM: Operations: Sequential random read (addr=4E, 2 bytes): C0 003153-3561 24xx EEPROM: Operations: Sequential random read (addr=28, 2 bytes): 00 803592-4007 24xx EEPROM: Operations: Sequential random read (addr=E6, 2 bytes): DB 7FSwitching to range "V":Code:12-353 24xx EEPROM: Operations: Random access read (addr=8F, 1 byte): 03373-713 24xx EEPROM: Operations: Random access read (addr=9F, 1 byte): 00733-1074 24xx EEPROM: Operations: Random access read (addr=AF, 1 byte): 001094-1434 24xx EEPROM: Operations: Random access read (addr=BF, 1 byte): 001492-2702 24xx EEPROM: Operations: Sequential random read (addr=40, 14 bytes): 00 01 00 01 00 07 98 00 64 00 64 00 64 002721-3129 24xx EEPROM: Operations: Sequential random read (addr=4E, 2 bytes): C0 003152-3827 24xx EEPROM: Operations: Sequential random read (addr=2A, 6 bytes): 2D 8D AD 8D 95 F78483-8891 24xx EEPROM: Operations: Sequential random read (addr=E6, 2 bytes): DB 7FSwitching to range "mV":Code:11-353 24xx EEPROM: Operations: Random access read (addr=8C, 1 byte): 01373-714 24xx EEPROM: Operations: Random access read (addr=9C, 1 byte): 02734-1075 24xx EEPROM: Operations: Random access read (addr=AC, 1 byte): 001095-1436 24xx EEPROM: Operations: Random access read (addr=BC, 1 byte): 001493-2703 24xx EEPROM: Operations: Sequential random read (addr=40, 14 bytes): 00 01 00 01 00 07 98 00 64 00 64 00 64 002722-3130 24xx EEPROM: Operations: Sequential random read (addr=4E, 2 bytes): C0 003153-3829 24xx EEPROM: Operations: Sequential random read (addr=2A, 6 bytes): 2D 8D AD 8D 95 F7Switching to "Ohm":Code:12-353 24xx EEPROM: Operations: Random access read (addr=8D, 1 byte): 07373-714 24xx EEPROM: Operations: Random access read (addr=9D, 1 byte): 0A734-1075 24xx EEPROM: Operations: Random access read (addr=AD, 1 byte): 091094-1435 24xx EEPROM: Operations: Random access read (addr=BD, 1 byte): 0B1482-2291 24xx EEPROM: Operations: Sequential random read (addr=60, 8 bytes): C4 7F BD 84 01 00 0C 2B2311-3387 24xx EEPROM: Operations: Sequential random read (addr=70, 12 bytes): 28 80 00 80 A4 83 E8 7D 0A 27 00 00Switching to mode "Hz":Code:12-353 24xx EEPROM: Operations: Random access read (addr=8B, 1 byte): 12373-714 24xx EEPROM: Operations: Random access read (addr=9B, 1 byte): 13734-1075 24xx EEPROM: Operations: Random access read (addr=AB, 1 byte): 151095-1436 24xx EEPROM: Operations: Random access read (addr=BB, 1 byte): 00Switching to mode "10A":Code:12-353 24xx EEPROM: Operations: Random access read (addr=86, 1 byte): 10373-714 24xx EEPROM: Operations: Random access read (addr=96, 1 byte): 11734-1076 24xx EEPROM: Operations: Random access read (addr=A6, 1 byte): 001095-1443 24xx EEPROM: Operations: Random access read (addr=B6, 1 byte): 001500-2710 24xx EEPROM: Operations: Sequential random read (addr=40, 14 bytes): 00 01 00 01 00 07 98 00 64 00 64 00 64 002728-3136 24xx EEPROM: Operations: Sequential random read (addr=4E, 2 bytes): C0 003160-3835 24xx EEPROM: Operations: Sequential random read (addr=2A, 6 bytes): 2D 8D AD 8D 95 F7Switching to mode "mA":Code:12-353 24xx EEPROM: Operations: Random access read (addr=87, 1 byte): 0E373-714 24xx EEPROM: Operations: Random access read (addr=97, 1 byte): 0F734-1075 24xx EEPROM: Operations: Random access read (addr=A7, 1 byte): 001094-1435 24xx EEPROM: Operations: Random access read (addr=B7, 1 byte): 001492-2702 24xx EEPROM: Operations: Sequential random read (addr=40, 14 bytes): 00 01 00 01 00 07 98 00 64 00 64 00 64 002721-3129 24xx EEPROM: Operations: Sequential random read (addr=4E, 2 bytes): C0 003152-3827 24xx EEPROM: Operations: Sequential random read (addr=2A, 6 bytes): 2D 8D AD 8D 95 F7Switching to mode "uA":Code:12-354 24xx EEPROM: Operations: Random access read (addr=8A, 1 byte): 0C374-715 24xx EEPROM: Operations: Random access read (addr=9A, 1 byte): 0D735-1076 24xx EEPROM: Operations: Random access read (addr=AA, 1 byte): 001096-1443 24xx EEPROM: Operations: Random access read (addr=BA, 1 byte): 001500-2710 24xx EEPROM: Operations: Sequential random read (addr=40, 14 bytes): 00 01 00 01 00 07 98 00 64 00 64 00 64 002729-3137 24xx EEPROM: Operations: Sequential random read (addr=4E, 2 bytes): C0 003160-3835 24xx EEPROM: Operations: Sequential random read (addr=2A, 6 bytes): 2D 8D AD 8D 95 F7

author: sequoia
author_rank: Unknown
timestamp: May 13, 2020, 09:37:05 pm
content: Initial analysis of EEPROM access seems to reveal what memory locations in the EEPROM are actually used by the meter.And as expected these locations mostly match to what is documented in DTM0660 datasheet (http://www.kerrywong.com/blog/wp-content/uploads/2016/04/DTM0660DataSheet.pdf)Boot sequence for the meter is as follows (followed by the reads associated with the mode switch):Chipset "main" configuration:Code:24xx EEPROM: Operations: Sequential random read (addr=F8, 6 bytes): 5A C6 EC 1E 0A 00Locations:0xF8 (5A): ???0xF9 (C6): configuration data (bitmap)0xFA (EC): configuration data (bitmap)0xFB (1E): auto power-off timeout (minutes)0xFC (0A): backlight timeout (minutes)0xFD (00): configuration data (bitmap)Chipset full range and range switch configuration:Code:24xx EEPROM: Operations: Sequential random read (addr=10, 15 bytes): 10 27 0F 27 DE 03 66 66 3D 3D FF 3B 0A FF 40Locations:0x10-11 (2710): Default full range (10,000)0x12-13 (270F): Range switch upper limit (9,999)0x14-15 (03de): Range switch lower limit (990)0x16 (66): DC Voltage OL value (102 = 1020V)0x17 (66): AC Voltage OL value (102 = 1020V)0x18 (3D): DC Voltage warning threshold (610V)0x19 (3D): AC Voltage warning threshold (610V)0x1A (FF): uA Current warning threshold (2550uA or disabled?)0x1B (3B): mA Current warning threshold (590mA)0x1C (0A): A Current warning threshold (10A)0x1D (FF): ???0x1E (40): NCV display symbolUnknown data:Code:24xx EEPROM: Operations: Sequential random read (addr=33, 12 bytes): 04 12 09 6B F8 0A D0 1B 0A 1A 01 0ALocations:0x33-3E: ???Temperature measurement calibration data:Code:24xx EEPROM: Operations: Sequential random read (addr=0B, 5 bytes): 0E 01 E8 D4 03Locations:0x0B-0C (010E): Environment temperature (25 C)0x0D-0F (03D4E8): Environment temperature default ADC valueAmplifier parameter and mV calibration adjustment ratios:Code:24xx EEPROM: Operations: Sequential random read (addr=20, 4 bytes): BB 99 1B 81Locations:0x20-21 (99BB): Amplifier parameter0x22-23 (811B): 500mV calibration adjustment ratioAC mV / V range calibration data:Code:24xx EEPROM: Operations: Sequential random read (addr=40, 14 bytes): 00 01 00 01 00 07 98 00 64 00 64 00 64 00Locations:0x40-41 (0100): AC60mV range noise to be subtracted (input signal is internally amplified)0x42-43 (0100): AC600mV range noise to be subtracted (input signal is not amplified)0x44-45 (0700): AC600mV range noise to be subtracted (10M/1.111M resistor divider, amplified)0x46-47 (0098): AC6V range noise to be subtracted (10M/1.111M resistor divider)0x48-49 (0064): AC60V range noise to be subtracted (10M/101K resistor divider)0x4A-4B (0064): AC600V range noise to be subtracted (10M/10K resistor divider)0x4C-4D (0064): AC1000V range noise to be subtracted (10M/1K resistor divider)Unknown (calibration?) data:Code:24xx EEPROM: Operations: Sequential random read (addr=4E, 2 bytes): C0 00Locations:0x4E-4F: ???Current calibration data:Code:24xx EEPROM: Operations: Sequential random read (addr=2A, 6 bytes): 2D 8D AD 8D 95 F7Locations:0x2A-2B (8D2D): uA calibration adjustment ratio0x2C-2D (8DAD): mA calibration adjustment ratio0x2E-2F (F795): A calibration adjustment ratioWithout datasheet for this chipset, it's hard to determine what the "unknown" memory locations do. But comparing EEPROM dumps from different meter using same chipset might reveal something.Especially interesting would be to find out if there is any DMM out there using this same chipset (DM1106EN) that has data logging capability?EEPROM dump from such meter might reveal how to enable it on this meter as well...

author: sequoia
author_rank: Unknown
timestamp: May 14, 2020, 07:23:24 pm
content: Looks like serial output may not be easily enabled on this meter or its on different pin than 20....Flipping bit 1 on EEPROM location 0xFA doesn't seem to enable serial output on this pin:No activity seen on this pin before or after the change (and long press of "REL" button doesn't seem to do anything).Pressing "REL" button however triggers pulses on this pin:I guess having Serial capability easily enabled would have been too good to be true.... Still, great meter for the price (about $30 currently)...

author: Kaluluka
author_rank: Contributor
timestamp: November 23, 2022, 02:45:44 am
content: Hello to everyone!Great work I have to say, but on my brand new 90DM600 hack like above messed upACandDCVoltage readings!So, for now, I just added only°Ctemperature to my meter and it works great.Regards to all!Below is ORIGINAL EEPROM from my 90DM600, if someone needs it:

author: coromonadalix
author_rank: Super Contributor
timestamp: November 23, 2022, 12:04:11 pm
content: shhhhhhhhhh loll Amazon will rise their prices

author: Mango02560
author_rank: Newbie
timestamp: April 04, 2025, 12:41:20 pm
content: I was able to dump the EEPROM using a CH341A programmer using a SOIC8 test clip and temporarily holding CPU in reset mode by connect PIN1 (ground) and PIN 6 (IC1 pin 55) on the Program header with a resistor (1k Ohm).I wanted to thank SEQUOIA for sharing his information.

author: puxe
author_rank: Contributor
timestamp: April 04, 2025, 02:28:37 pm
content: Quote from: Mango02560 on April 04, 2025, 12:41:20 pmHave you modified the ch341a from 5v to 3.3v?What ( windows 10) software did you use to read/ write to the EEPROM?I have this multimeter and a CH341a, but it is still on my to-do list to change the count to 9999.TIA

author: Mango02560
author_rank: Newbie
timestamp: April 04, 2025, 06:38:10 pm
content: I removed the battery from the multimeter, set the selector to V~, connected the clamp aligning the red wire with the dot (pin1) of the chip, put a 1kΩ resistor between pin 1 and 6 of the PROGRAM header and used the program "CH341A Programmer" version 1.13 by SkyGz. As a programmer I used HALJIA multifunction CH341 A 24 25 Series EEPROM.Remember to install the drivers.To avoid going OT, if you want in private I can give you more information.

author: mwb1100
author_rank: Frequent Contributor
timestamp: April 04, 2025, 08:54:06 pm
content: Quote from: Mango02560 on April 04, 2025, 06:38:10 pmFWIW, I wouldn't consider this OT and would like to read about any issues/tips/whatever that might arise.However, I'll admit that I'm very, very unlikely to directly use any of that information (I just find it generally interesting) so if others consider it off topic I'll withdraw my request and delete this post.

author: Mango02560
author_rank: Newbie
timestamp: April 05, 2025, 08:22:37 am
content: As for the CH341A programmers and the related software, there are many threads also on EEVBlog, so I was afraid of being OT.Anyway I tried to write a small guide and take some photos that could be useful.In particular I successfully tried with two different programmers WITHOUT having modified the ch341a from 5v to 3.3v.I successfully tried on two Amazon 90DM610 multimeters, you try at your own risk.

author: puxe
author_rank: Contributor
timestamp: April 05, 2025, 08:08:31 pm
content: Excellent, thank you Mango02560

author: al3mat
author_rank: Newbie
timestamp: July 06, 2025, 11:42:02 am
content: Hi folks!First of all i would like to thanksequoiafor detailed topic andMango02560for Amazon review and some additional information.I want to leave here the original dump of90DM610multimeter, maybe it will be useful to someone.CheersCode:00000000 FF FF FF FF FF FF FF FF FF 52 00 FA 00 EC CC 03 .........R......00000010 10 27 38 18 4E 02 66 66 3D 3D FF 3B 0A FF 40 FF .'8.N.ff==.;..@.00000020 D0 99 27 83 FA 00 32 00 00 80 C3 8C D3 8C 25 FD ..'...2.......%.00000030 4E 02 09 4D 18 09 03 FF 0A C9 17 0A 9E 00 0A 00 N..M............00000040 00 01 00 01 00 07 98 00 64 00 64 00 64 00 C0 00 ........d.d.d...00000050 00 80 00 80 00 80 00 80 00 80 00 80 00 80 00 80 ................00000060 57 7F A8 80 01 00 06 2B 00 00 00 00 00 00 00 00 W......+........00000070 42 80 00 80 CD 84 BB 7E 46 03 00 00 00 00 00 00 B......~F.......00000080 00 00 00 00 00 00 11 0F 00 13 0D 12 02 07 04 03 ................00000090 00 00 00 00 00 00 10 0E 00 15 0C 00 01 0A 00 00 ................000000A0 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................000000B0 00 00 00 00 00 00 00 00 00 00 00 00 00 0B 00 00 ................000000C0 0D 00 02 20 0D 00 03 20 20 00 03 20 20 00 03 10 ... ... .. ...000000D0 41 00 03 08 41 00 03 05 41 00 03 05 0D 00 02 20 A...A...A......000000E0 E2 F1 0B 80 00 80 E7 7F DF 7F D7 7F 00 80 00 80 ................000000F0 00 80 00 80 00 80 00 80 5A C6 EC 0F 05 00 00 00 ........Z.......

author: multiJ
author_rank: Contributor
timestamp: August 30, 2025, 03:22:03 pm
content: I tried it and it works (well, obviously) . Used the changes made by @sequioa and the 1KΩ resistor hack and instructions by @Mango02560.Pressed the resistor with the hand a bit when reading and writing, just to be sure. No soldering.It shows 9999 counts now.Temp is there but way off, it shows 39C (+9C). I only have a cheap Uni-T temp probe but the probe works fine everywhere else.Also, does anybody know if there is a EEPROM change possible to stop the beep when turning the selector switch?Note if you open the case: Make sure to adjust the battery connection cable before you screw down the case, as if it is too long there is no room for the battery to sit properly afterwards.Note 2 irrelevant to the hack: The meter has began to drift the past 12 months. Used to be spot on with a couple of Flukes (179 & 117) when I bought it new from Amazon in Oct 2022. Worst is at ~10V DC (shows 9,80V). At 13V DC it's 12,96V.Thanks everyone for the info here!