Hi,
so, I have a 744A with some problems; while I'm at it I thought I'd do some reverse engineering. There's a lot of knowledge spread out in forums (here, the Tek forums), some Yahoo groups, and who knows where else.
I'm thinking of adding some info to the
w140 wiki but I'm not sure where it would fit in on there.
My main interest is the internal service console port (see
https://forum.tek.com/viewtopic.php?f=568&t=137307 ).
From that console port, the "lkup" command outputs a list of over 5000 (!) symbols, many of which are callable functions :
http://pastebin.com/yEnTKHwGlook at, for example, the familiar "libManagerWordAtPut" entries and related entries.
These are also intriguing:
_enableBackdoor 0x011c70d6 text 18641110
_checkBackDoor 0x011c7166 text 18641254
I could dump the firmware through the console port but that would be extremely slow (9600bps serial link; ASCII hex dump so 3 chars per byte; firmware image at least 2.5MB ). Does anyone have a firmware dump for one of these TDS scopes ?