...snip....
3000T series:
firmware 7.20
----------------
1) options patch: 0x486f3c --> "04 00 A0 E1" --> "00 00 A0 E3"
2) nag patch: 0x4f22c8 --> "A8 F1 93 E5" --> "01 00 A0 E3"
To understand how to apply these patches, best way is to follow safar's post, details here... they seem to have taken the same approach with all of the firmware's now, the DLL is NO longer on disk, it has to be modified directly in the Windows CE image (nk.bin)
https://www.eevblog.com/forum/testgear/dsox2000-and-3000-series-licence-have-anyone-tried-to-hack-that-scope/msg1453285/#msg1453285
@PhillyFlyers, @Safar - Thank you.
7.20 on 3KT now has the nag gone.. I patched "options" and "nag".
Using Safar's instructions, it took me a bit to realize that I needed to use the offsets provided by Philly in infiiniivision.dll to get a signature to match in the uncompressed.bin, plus the viewbin's data dump to get the "Record" (Record[173 for 7.2/3KT), use the hex in that data dump to get the offset in nk.bin to find the beginning/end of the dll in the bin, patch up the 2 locations, update checksum, compress, copy to usb, flash via telnet... (hopefully this very quick chain of thought helps someone else later...).
What is unexpected is on boot I'm now seeing "System concerns detected: - Secure Storage is uninitialized. Please set instrument serial and licensing model numbers." as a per-boot popup. Once I close that, about shows the proper serial#/model/bandwidth and all options.
I'm using the simple loader that jeffrey helped with along with the patched offsets.
I don't see any direct reference to that string/message in the (printed) thread, although there are some similar messages.... I didn't get this before patching nk.bin -- did I hose the patch or just needed to expect "secure storage is uninitialized"?
Thanks,
-j