I second that, if you can grab the 197 firmware that would be nice. I'd like to take a look at it.
I actually have the 197A, and I'd like to get the firmware off that. It uses the 68HC711E9, which has 12K OTP ROM embedded on the chip, and it's hard to get at the firmware due to the protections. I can wire some pins low to enable a special bootstrap mode on the chip, this causes it to jump to a factory coded boot ROM, which will configure the serial port and start downloading serial data into the RAM, and then execute it. This sounds great for loading a small program into RAM that can dump the firmware, right? Except if Keithley programmed the security bit too, then the bootstrap code will first wipe the RAM
and EEPROM data, then clear the security bit, and finally configure the serial port , download serial data into RAM and execute it. I think I would still have the firmware, just the EEPROM data is wiped.
So I can get at the 197A firmware (I think) but I might potentially sacrifice the EEPROM cal data and brick the meter. I'm not sure I'm ready to do that yet