Hey Steve,
I didn't read the code in detail, but it looks to me that the firmware
dump and write is done with what looks like binary reads and writes. From
what I understand or remember, the scope has to be in "unprotected" mode,
and then you use this binary protocol to read and write from the scope's
memory. See
(-friends)-firmware-reverse-engineering/msg1170142/#msg1170142
.
There is however another way this could be done, I think, though it's sure
to be painfully slow. If you look at this thread,
,
it mentions the WORDCONSTANT:ATPUT command. I seem to remember there's a
complementary :ATGET or the like - I remember playing with this back when I
messed with the options on my TDS784D.
Knowing the address space layout on the scope, it should be possible to
read back the firmware byte by byte or word by word through this command.
Going to be dog slow, though.
Have fun,
Siggi
On Fri, Nov 27, 2020 at 11:31 AM Steve Hendrix <SteveHx@...>
wrote:
Thank you for trying to help, but none of those
links work for me to actually find the commands
needed over GPIB to dump the ROMs. Any other hints?
Steve Hendrix
At 2020-11-24 01:30 PM, you wrote:
Hey again,
maybe this helps:
?
Siggi
On Tue, Nov 24, 2020 at 1:28 PM Sigur?¡ãur ?�sgeirsson <
siggi@...> wrote:
Hey Steve,
there's a thread about this on EEVBlog:
(-friends)-firmware-reverse-engineering/50/
.
Sadly it looks like the github repository linked is no more, though
searching for "tekfwtool" does turn up some results. I didn't look any
closer at those results.
Good luck,
Siggi
On Tue, Nov 24, 2020 at 12:32 PM Steve Hendrix <
SteveHx@...>
wrote:
I'm still looking for instructions on the "hidden" commands to save
the ROM contents for my TDS784C, TDS220, and even my HP4263A,
HP8595E, and HP8714ET. Google hasn't turned up anything.
Steve Hendrix
At 2020-11-05 12:10 PM, Monty Montgomery via groups.io wrote:
The instructions in various places found by google searches work; any
working GPIB interface (I use a Prologix USB) works fine. No need
for
a vintage model. Password 'rambo' and off to the races...
Let me search through my bookmarks for verbatim command lines in the
event Google doesn't help you, but I warn you, I'm on Unix...
Monty
On Thu, Nov 5, 2020 at 10:24 AM Steve Hendrix
<SteveHx@...> wrote:
I've been lurking here for quite a while, and have seen lots of
discussions about saving the contents of the firmware ROMs in case
they degrade. I have programmers that go back to the early 80's,
so
can probably burn a new set if I need to. Finding an old PC that
can
run them might be problematic, but I still have an original IBM PC
with a full complement of interfaces, and it still works.
However, I
can't find any instructions in the SCPI command set for this
instrument that will dump the images. Such a command is usually a
hidden function, not advertised to the world. Can anyone here
tell me
how to dump the ROM images via GPIB?
Steve Hendrix
