Agilent E4432b unlevel issue again

[mankan]

I've previously unlocked my E4436B to 4GHz and done level calibration by writing file 165 and 207. However one thing annoyed me and that is that the power offset for 4GHz is not applied. To work around this I thought, what about setting the max frequency to 3999999999.999999 Hz instead.
That rendered me an signal generator that boots up, shows boot screen and nothing more.

No GPIB access, is it worth trying RS232?

So now I've picked out the U106 and U107 EEPROMs an trying to decipher them so I can restore unit again. No luck so far.
So in short anyone knows where 165,2 is stored in the actual EEPROMs?

I can try the EEPROM reset procedure but that would require several inserts and ejects of the EEPROMs and probably more EEPROM deciphering.

[mankan]

Solved it 
I had to do the SRAM reset procedure but since my EEPROM had a state that still caused the SW to crash at startup I had to first make the U106 EEPROM invalid by manipulating some bytes in the file 165 area in order to make the SW checksum checks fail.

Now the generator booted, but with no serial number, no options, no model info. It also was responding to GPIB so after some analyzing the binary storage and GPIB commands used I finally got back all model info and options by rewriting the entire file 165 in the U106 EEPROM via GPIB.
EEPROM U107 mainly containing license info was not modified at all during this process.

Now I just have to live with the issue I tried to solve in the first place 

[Louis_C]

Would you have any idea on how I can communicate with the E4437B using an old version of Fluke MetCal? My lab is using Fluke MetCal/MetTrack 8.3.2 with USB GPIB-HS adapters on WIndows 10. We can't get the HP E4437B to communicate with this software. Well, we can't run  Any help would be greatly appreciated.

[ua4yhz]

Speaking about hacking, as any one ever tried to hack the software options to add them to the instrument?

What options would you like to enable?