Lecroy options -=recovery=- - Page 1
Forum section: electronics / testgear

author: abyrvalg
author_rank: Frequent Contributor
timestamp: September 29, 2017, 01:10:10 pm
content: Combing pastebin.com reveals interesting things sometimes. Like these sources useful in lost Lecroy scope option keys recovery process:https://pastebin.com/tALEEWDZEdit: Too shy thread name. This is Lecroy hacking thread actually. The sources are tested to work for fw versions prior to 8.xxx.Python 2.7.x, PyCrypto

author: eliocor
author_rank: Unknown
timestamp: October 01, 2017, 01:49:46 am
content: Any more details on usage?

author: darkstar49
author_rank: Frequent Contributor
timestamp: October 01, 2017, 09:27:19 pm
content: indeed... relatively cryptic... probably the typical "it was hard to write, it should be hard to read" syndrome... ;-)No, more seriously, seems quite well-written, if you download all pieces, it's pretty self-explanatory...I'm pretty sure this will make some people in the forum veeeeeerrryyyy happy, and others (including some outside the forum...) veeeeerrrryyyyyy angry !!!

author: abyrvalg
author_rank: Frequent Contributor
timestamp: October 01, 2017, 11:34:07 pm
content: Remembering Tek’s reaction against similar things I didn’t wanted to make too much noise this time.Short instructions:- install Python 2.7.x from python.org- install VC for Python from herehttps://www.microsoft.com/en-us/download/details.aspx?id=44266- install PyCrypto ("pip install pycrypto" in console. Or use any available installer)- copy all pieces from pastebin to files naming them according to paste names and putting to respective folders- use gen/validate/list scripts. The optional cfg file some scripts asking for is X-STREAM options.cfg. Either get it from scope or from firmware package. This file contains option bits to names mapping.

author: eliocor
author_rank: Unknown
timestamp: October 02, 2017, 04:11:32 am
content: stupid me: I was saving the files with the 'raw' name, instead of using the 'download' option!

author: MilkmanCDN
author_rank: Contributor
timestamp: December 16, 2017, 07:50:15 pm
content: OK. So I managed to get everything installed, and downloaded the files. I have the following:- gen.py.py- lec_crypto.py.py- lec_db.py.py- lec_key.py.py- list.py.py- validate.py.pyI do have C:\Python27 in my path and I've copied all these files to a single directory.Upon running "python list.py.py" at the command prompt, I'm returned with the following error "ImportError: No module named lec.db"I did use the "Download" option, however I suspect many of these files should be placed in various different locations. Any clues on these locations?

author: alm
author_rank: Super Contributor
timestamp: December 16, 2017, 10:20:38 pm
content: Read the filenames on Pastebin more closely. For example, the file you called lec_db.py.py is called lec/db.py according to Pastebin. Try creating a directory 'lec' and moving the file there with the correct name. Same for the other files. If it still does not work, try creating an empty file called '__init__.py' inside the lec directory.

author: MilkmanCDN
author_rank: Contributor
timestamp: December 17, 2017, 05:32:50 pm
content: That did it! I renamed files accordingly, and no dice. Adding the __init__.py blank file into the lec directory made it work.More so, I had upgraded my firmware to v8.1.0.1 some time ago and the list.py does not work with the new options file. However, I did a search on the scope for an older rev options.cfg file and found it. Use that instead and generation worked like a champ.THANK YOU!!!

author: bson
author_rank: Unknown
timestamp: December 17, 2017, 08:10:11 pm
content: How did you get options.cfg off the scope?

author: MilkmanCDN
author_rank: Contributor
timestamp: December 17, 2017, 08:20:57 pm
content: I have a WaveRunner 104Mxi-A, which is a Windows XP scope. The file is actually called "X-STREAM options.cfg", so I looked for "options.cfg" using the windows xp search tool.I found "X-STREAM options.cfg" in two places. One dated from 2010 (the original one) and one dated from 2016 (the regenerated one when I updated the Firmware file).Once you find the file, copy it to a USB stick with windows file explorer.

author: bson
author_rank: Unknown
timestamp: December 18, 2017, 01:13:08 pm
content: My WaveSurfer 3000 is also a Windows scope but does't seem to have a windows desktop accessible. (It runs WinCE, so no, no desktop.)The firmware updates come in a flash container (.FLA) that is executed by Adobe Flash Lite, which I'm not familiar enough with to know how it's used to package firmware and hence how to unpack it...Edit: on close inspection it's not FLA, they just use that extension. It's a custom container that starts with two 16-byte 0 padded text strings identifying LeCroy and the release, and then what I assume to be compressed data. Not sure why they call it FLA but I assume maybe they have some SWF associated with that extension. I'll take a look and see if anything in it looks like gzip/lz/zip/stuffit...

author: MilkmanCDN
author_rank: Contributor
timestamp: December 19, 2017, 10:01:09 pm
content: hmmm. Can't say I'm familiar with the Windows CE scopes; however, I do notice that there's a menu bar on the top. With the Windows XP scopes, you can select File->Exit and that will close the Lecroy scope application revealing the windows desktop. If that works for you, then you may be able to poke around a little further. My options.cfg file was found in C:\Program Files\Lecroy.

author: darkstar49
author_rank: Frequent Contributor
timestamp: December 21, 2017, 08:49:42 pm
content: this works with options DB from software version up to 7.9.x.x, anything after that won't work...options generation scheme remained unchanged, but the encryption of the database with all possible options has changed from version 8 onwards... thus all options that appeared after the release of the very first 8.x.x.x version are unknown...

author: darkstar49
author_rank: Frequent Contributor
timestamp: December 21, 2017, 08:52:47 pm
content: and about the DB, get a decent package manager / unpacker and find the file directly in the installer package if you can't manage to get it from your scope... but be careful not to use options that are unknown to your current software version...The options DB file is the same, whatever the platform... get a Windows (x86 or x64) installer for simplicity, even if you're using a WS3000 (for example)

author: xemax
author_rank: Contributor
timestamp: December 22, 2017, 04:59:32 pm
content: For WaveRunner LTxxx / WavePro 9xxhttps://pastebin.com/GijjVqbQ

author: bson
author_rank: Unknown
timestamp: December 22, 2017, 10:48:35 pm
content: I can't seem to manage to locate any pre-8 installer. All I could find is a 7.2 installer, but that predates my scope and doesn't have those options in it. If anyone should happen to have one for say 7.9...

author: Mr Nutts
author_rank: Regular Contributor
timestamp: May 03, 2018, 06:32:13 am
content: Quote from: xemax on December 22, 2017, 04:59:32 pmHas anyone successfully used this? Because I can't get it to work. I got the python files setup under Linux. Gen.py tells me it expects some arguments, <ScopeID> (self-explanatory), <flags> (this one isn't), and <mask> (is this the option code, ie WP02?). And what are list.py and validate.py for?Of course it's great that these files exist but whoever wrote it could have put a bit more information as to how to use them into the files.Would be great if anyone could give me a hand here...

author: abyrvalg
author_rank: Frequent Contributor
timestamp: May 03, 2018, 10:25:35 pm
content: Example:From xemax’s pastebin:00-00000008 DDM Disk Drive Measurements00 is "flags", 00000008 is "mask"It is possible to combine multiple options with the same flag value to a single key: just OR their masks. So entire xemax’s list can be packed into two keys:flags 00, mask ffffffffflags 01, mask 7fList is for generating the flags-mask list from options.cfg. Validate is for decoding an existing key back to InstrumentID, flags, mask.Edit: a bonus of using numbers instead of option names: you can generate something even if you don’t have the options mapping. I.e. flags 00 mask ffffffff seems to be a valid combination on all models.

author: aj4ks
author_rank: Newbie
timestamp: May 04, 2018, 10:56:16 am
content: The people who have figured this out before you have kept this private. As such, the mechanism did not change. Now it surely will for new machines. Thanks for ruining it for all.

author: Mr Nutts
author_rank: Regular Contributor
timestamp: May 04, 2018, 12:58:01 pm
content: Quote from: abyrvalg on May 03, 2018, 10:25:35 pmOk, that makes sense. Thanks a lot!Quote from: aj4ks on May 04, 2018, 10:56:16 amStop whining, it's not ruined for anyone. They can hardly change the key system retroactively for those old non-Windows scopes, and I doubt they care about scopes that had their last software update 15 years ago.Besides, if you really think they don't know about this then you're deluding yourself. This discussion is one of the first results when googling for "lecroy hacking", so much for your effort of keeping this to yourself.Of course they will change the key system for new scopes at some point, and once these scopes get older and fall into the hands of hobby user they will get hacked, too. It's inevitable.

author: abyrvalg
author_rank: Frequent Contributor
timestamp: May 04, 2018, 11:08:01 pm
content: Quote from: aj4ks on May 04, 2018, 10:56:16 amWhat a pity

author: darkstar49
author_rank: Frequent Contributor
timestamp: May 05, 2018, 03:23:12 am
content: Quote from: aj4ks on May 04, 2018, 10:56:16 amThis is the most selfish and ridiculous comment I’ve read since quite a while here...numerous hacks were published on this forum, and many hobbyists took avantage of that... much more people can now enjoy getting more out of their h/w... but indeed, there’s a risk that YOU might loose the « exclusivity » and that the manufacturer will react (for some models, this btw occurred already BEFORE this was published !!)Furthermore, some people had this knowledge indeed before this thread popped up, but in the very most cases, not because they worked hard to get to that info, but simply because they took advantage of some insider info that leaked quite a while ago... so, yes, indeed, we blew their little secret...

author: Warranty
author_rank: Newbie
timestamp: May 11, 2018, 02:14:33 pm
content: Seems to work fine.Is there a way to undo this?RegardsWarranty

author: Mr Nutts
author_rank: Regular Contributor
timestamp: May 11, 2018, 02:23:49 pm
content: At least on the non-Windows scopes there doesn't appear to be a way to remove options - or if there is then I haven't found it.

author: eb4eqa
author_rank: Regular Contributor
timestamp: May 11, 2018, 10:22:35 pm
content: Well, on the non-windows scopes (at least on the LT series) you can actually delete option keys easily via the maintenance menu:MAINTENANCE MENU- Exit any menu.- Press and hold 3rd menu key AUTO SETUP being key 1)- Press and hold 4th menu key, 3rd still held.- Press and hold 5th menu key, 3rd and 4th still held.- Release only 3rd menu key, leave 4th and 5th still held.- Release all keys- Press 6th menu key- * Sometimes if you get the wrong sequence the scope willnot react to the right one for some time, trybringing-up any menu then exiting. (i.e: "Timebase setup"key -> "Return" key and retry above 3,4,5 sequence.)That menus has A LOT of functionality, be careful not to upset something badly...Roberto EB4EQA

author: Mr Nutts
author_rank: Regular Contributor
timestamp: May 15, 2018, 08:15:28 am
content: Thanks, that did it!

author: darkstar49
author_rank: Frequent Contributor
timestamp: May 17, 2018, 02:55:52 pm
content: btw, for Windows scopes, you can access the Service menu with code 9472... (and delete options from there...)As said... be careful, you can screw up quite a few things from there...

author: Jwalling
author_rank: Unknown
timestamp: May 17, 2018, 03:51:53 pm
content: Quote from: darkstar49 on May 17, 2018, 02:55:52 pmCan you add them from the service manual as well?

author: darkstar49
author_rank: Frequent Contributor
timestamp: May 17, 2018, 04:27:13 pm
content: obviously not...

author: Jwalling
author_rank: Unknown
timestamp: May 17, 2018, 04:57:50 pm
content: Quote from: darkstar49 on May 17, 2018, 04:27:13 pmPity...

author: darkstar49
author_rank: Frequent Contributor
timestamp: May 17, 2018, 06:17:05 pm
content: Quote from: Jwalling on May 17, 2018, 04:57:50 pmindeed... ;-but well... this is why this tool exists...

author: Mr Nutts
author_rank: Regular Contributor
timestamp: June 11, 2018, 09:17:44 am
content: Does anyone know the option code for the Waverunner 2 sample memory configuration? I want to enable the full 8MB memory.

author: darkstar49
author_rank: Frequent Contributor
timestamp: June 20, 2018, 02:36:50 pm
content: WR2 had M and L memory options as far as I know... (VL was for WavePro's)L option is 01-00000002

author: darkstar49
author_rank: Frequent Contributor
timestamp: June 20, 2018, 02:44:59 pm
content: Plus, the higher-end 374 and 584 had a 4MPts/ch option, whereas the other models could only get 2MPts/ch.My guess is that the 4MPts option is the same as -VL, i.e. 01-00000004, but is likely not to work or even to cause trouble on non 374+ models.

author: Mr Nutts
author_rank: Regular Contributor
timestamp: June 20, 2018, 07:03:25 pm
content: Got a LT374M today, which has 1MB per channel. Made sure first that there was no option with sample memory definition, and then tried 01-00000002 for L and 01-00000004 for VL. No change in the reported memory size (still 1MB). VL gave me WPVL in the option list but that's it.The sample memory codes for Waverunner must be completely different from the ones for the Wavepro. My LT374M had one option (MC01) and validate shows the option code is for MC01 only. That means with no option code which sets sample config the scope has M. Strange.

author: darkstar49
author_rank: Frequent Contributor
timestamp: June 20, 2018, 10:11:11 pm
content: until now, sampling memory options have always been using the 0x01 flags... I don't believe WR2's are different... but maybe the WR2 had to be ordered with the required memory, I'm not 100% sure it was 'software' upgradeable back then... I think it was for the WP9xx, but that doesn't mean it was the same for the WR2...

author: Mr Nutts
author_rank: Regular Contributor
timestamp: June 21, 2018, 06:32:26 am
content: As far as I know the Waverunner 2 comes with full sample memory,same as Wavepro. I looked into the service manual and did a search here (there is a member with a strange user name who seems to really know these scopes inside out and who seems to have provided most of the information about them, but it appears he has been banned?), and everything I found confirms that the sample memory size is software configurable as on the Wavepro.I probably should try higher option code numbers, i.e 01-00000010, but to test them out like that will take forever.

author: tautech
author_rank: Super Contributor
timestamp: June 21, 2018, 08:10:57 am
content: Quote from: Mr Nutts on June 21, 2018, 06:32:26 amYeah it sucks that Wuerstchenhund was banned as he had a hell of a lot of knowledge to offer this forum about high end scopes and LeCroy in particular. Last I heard he'd asked to beta test SDG6000X so hopefully he's had the opportunity to add his expertise into Siglent products.Shame others here wouldn't just listen to what he had to say instead of taking it personally.

author: darkstar49
author_rank: Frequent Contributor
timestamp: June 21, 2018, 02:21:48 pm
content: Quoteon the other hand, he probably wouldn't have been too happy with this thread... from what I saw, he was not too keen giving out any information around this 'touchy' subject...

author: Mr Nutts
author_rank: Regular Contributor
timestamp: June 22, 2018, 08:23:19 am
content: Yes, Wurstunhund was that guy's name. I guess there's probably a good reason why he's been banned, couldn't find anything wrong with the messages he posted, though, and I like how he explained things in a way which even I understand (some topics I found are still way above my level). I did learn a lot about lecroy scopes.Anyways, I'll probably try some higher numbered codes in 01-. Or can this damage my scope? I don't wanna brick it!

author: darkstar49
author_rank: Frequent Contributor
timestamp: June 22, 2018, 07:43:23 pm
content: I don't think there's any logic to prevent tampering (with option keys) in the PowerPC firmware (but I might be wrong...). Situation is different for Windows, although no one could ever say under what conditions something bad would happen...To me, the only other option you can try is 01-00000008 (XL), but I just saw an LT584L popping up on Ebay (it has a 'LT584L' label above the display)... and I've never seen Lecroy giving specific model names for 'options' that could be field-enabled (i.e. by key), unless otherwise proven, I'm still not convinced that all memory upgrades are possible via key on the WR2...

author: Mr Nutts
author_rank: Regular Contributor
timestamp: June 24, 2018, 03:33:17 am
content: Don't think memory upgrades were ever sold as field upgradeable for any of those scopes, including the Wavepro. I believe they had to go back to lecroy where the front sticker was changed to reflect the new config.

author: EEVblog
author_rank: Unknown
timestamp: June 26, 2018, 12:00:07 am
content: FYILecroy has requested that this thread be removed.I have told them no, as no Copyrighted material has been stored on this server.Not a good look for Lecroy.

author: Mr Nutts
author_rank: Regular Contributor
timestamp: June 26, 2018, 11:28:22 am
content: And it only took them 9 months to find this thread

author: digsys
author_rank: Unknown
timestamp: June 26, 2018, 12:11:46 pm
content: Quote from: Mr NuttsHe was a fantastic guy, helped me a lot with my LeCroys. Then a couple fanboys of other brands started intense arguments over nit-picking specsthat never ended ... Unfortunately, Mr Wurst wouldn't ignore them, and seems he paid the price. He's still out there somewhere :-)

author: 2N3055
author_rank: Super Contributor
timestamp: June 26, 2018, 12:20:52 pm
content: Quote from: EEVblog on June 26, 2018, 12:00:07 amNot to mention people here are discussing ancient 10 years+ old scopes. Long out of active support.If they wanted brand promotion, they should give for free unlock codes for old out of support scopes...I don't see that making a dent in to their sales to their customer base...

author: digsys
author_rank: Unknown
timestamp: June 26, 2018, 01:06:02 pm
content: Quote from: 2N3055They did !? There is a LeCroy owners / users group in Yahoo groups. There are many posts on how to max out all the old LeCroys.I've bought several kits (memory / PALs etc) from members there, often very cheap ie $15 for a complete maths set.If you search "Wuerstchenhund Lecroy" there are still all the original helpful posts.No idea why they're hassling EEVBlog now? It's all old news.

author: Mr Nutts
author_rank: Regular Contributor
timestamp: June 26, 2018, 02:09:11 pm
content: Quote from: digsys on June 26, 2018, 12:11:46 pmI've seen a few of those threads, didn't look like anything more than (ok slighly heated) discussions on technical grounds. And this can get you banned?Anyways, there seems to be a guy with a similar name on another forum, I'll see if it's him and if he is then he'll even might help me getting more memory out of my old scopes

author: tautech
author_rank: Super Contributor
timestamp: June 26, 2018, 08:19:39 pm
content: Quote from: Mr Nutts on June 26, 2018, 02:09:11 pmWould you mind popping a link to it up so those that need big W's advise can find him ?

author: abraxa
author_rank: Frequent Contributor
timestamp: June 26, 2018, 08:45:26 pm
content: Quote from: 2N3055 on June 26, 2018, 12:20:52 pmThey do still very much sell the options for those who want/need it, though. Allowing customers to get options for "free" certainly does make some think twice whether they will ask Teledyne LeCroy for a quote or not.

author: darkstar49
author_rank: Frequent Contributor
timestamp: June 26, 2018, 09:46:55 pm
content: Quote from: 2N3055 on June 26, 2018, 12:20:52 pmUp to some early 8.x version (and from PowerPC models...), the stuff this thread is about allows generating keys for almost ANY past and current models... so no wonder they’re somewhat pissed off... although people thinking of using rogue keys would typically not consider buying those a single second, so the ‘real’ loss should be fairly limited...But Lecroy perfectly knew their license stuff was ‘getting old’, and they seriously changed it in newer software versions, so that should also make all this somewhat less critical...Advanced hobbyists have always wanted to use real men’s gear, with all the options, and not a single brand (unless maybe the more ‘exotic’ ones, like R&S, exotic for scopes...) has been left unhacked, at least for the models that become ‘affordable’ for these ‘advanced’ hobbyists on the 2nd hand market... and that trend is not gonna stop anytime soon...

author: Mr Nutts
author_rank: Regular Contributor
timestamp: June 27, 2018, 10:48:06 am
content: Quote from: tautech on June 26, 2018, 08:19:39 pmhttps://forum.allaboutcircuits.com/blog/a-new-beginning.1137/Hope this doesn't get me banned now

author: digsys
author_rank: Unknown
timestamp: June 27, 2018, 11:44:18 am
content: oooooo nice site ... just got a new member :-) thanks

author: slbender
author_rank: Regular Contributor
timestamp: July 03, 2018, 06:38:36 am
content: Hi, my Lecroy 9450A which I believe is about 30 years old ( maybe more ) and I read that there is a gal options upgrade which supports, and allows FFT, something which I would like to do. But it seems I cannot locate the file to program a gal at this point.Supposedly this code and file it was given out by Lecroy years or decades ago, and the gal ends in the #02 for the FFT WP02 function. Anyone know where it is at? I believe my 866 programmer can make the proper gal part, if I can find both the gal part number and that old program file. Can anyone locate that upgrade?-thanks,Steven

author: ollopa
author_rank: Regular Contributor
timestamp: July 03, 2018, 06:53:20 am
content: They're over athttps://groups.yahoo.com/neo/groups/LeCroy_Owners_Group/files/9410-20-30-50%20Series%20GAL%20Files/But I'll attach them in case you don't have access.

author: MilkmanCDN
author_rank: Contributor
timestamp: July 31, 2018, 08:37:10 pm
content: Hello,I'm looking for a x64 bit Xstream software package v8.1.2.0. Please PM me if you can share.Many thanks in advance.

author: Marchello
author_rank: Contributor
timestamp: August 01, 2018, 09:50:10 am
content: Quote from: MilkmanCDN on July 31, 2018, 08:37:10 pmHello!And me too, please!I have v8.1.0.1 and v8.3.0.7 and i need all versions betweenBRMark

author: bartver
author_rank: Contributor
timestamp: August 15, 2018, 05:52:51 am
content: Hello,Just a few days ago i bought a Wavepro 725Zi. Great !But, when i couldn't get the thing to run 40GS/s I started searching for the problem, and discovered that the software actually shows it is an 715Zi.The max samplerate of a 715Zi is 20GS/s....Is there anyway to check that the hardware is in fact a 715Zi , or that i have a 725Zi and someone used a 715Zi diskimage after a HD crash ?I already cloned the disk en did a recovery, but that does noet help. the recovery is essentially a Windows Vista Image, and the software is reinstalled from the D: drive which remains intact during recovery, so it still shows as a 715Zi.Maybe some HW ID via service menu or so ?Any thoughts ?Tnx, Bart

author: Mr Nutts
author_rank: Regular Contributor
timestamp: August 15, 2018, 09:58:43 am
content: Could anyone have a look if we can get the bits to set memory sizes in the waverunner 2LT?Here's an uncompressed firmware file of a lt574:https://mega.nz/#!TbZFkKSL!3prVX1vsuCPJ80U3Dp4QtMq7FAM4GCCBwORdf-QBGBk

author: darkstar49
author_rank: Frequent Contributor
timestamp: August 16, 2018, 07:28:49 am
content: The 715Zi has 10GS/s FEs by default, while all other models have 20 GS/s FEs, so the first thing would be to check whether your 715Zi has the 4x20GS/s option or not (in the acquisition menus, you'll see what sample rates are effectively available).In any case, I'm not too sure Lecroy really ever offered BW upgrade options for the 7Zi (it's mentioned in the data sheet, but I've never seen any BW-upgraded 7zi..., nor are any option codes mentioned for those upgrades, although there are some option IDs in the database for that...), and for the 715, this would have required the replacement of the FEs... as said, check in the acq menu what you have... If you don't have 4 x 20GS/s, you got a 'disguised' 715... :-(The model-ID, serial, options & Co are stored on an EEPROM on the interface card, and none of the system menus allow to perform modifications at that level (although some have managed to read & write from the chip, but it was a whole bunch more complicated than it sounds...)One thing that can eventually confuse the software (but not about BW...this is rather 'cosmetic') is when the computer name (in Windows) doesn't match the scope's serial.Would be nice to have a few pics of the scope's 'About' and 'Options' screens...

author: Mr Nutts
author_rank: Regular Contributor
timestamp: August 16, 2018, 09:56:08 am
content: Quote from: darkstar49 on August 16, 2018, 07:28:49 amShouldn't this be discussed in a separate thread? This one is about 'recovering' software options which clearly is not the issue with this 715ziI don't know what the rules here are but in most other forums throwing your offtopic problem in an existing thread is considered rudeOr are we now discussing every lecroy related issue here?

author: darkstar49
author_rank: Frequent Contributor
timestamp: August 16, 2018, 07:42:04 pm
content: QuoteNope... unless the problem is indeed linked to an 'evaporated' BW upgrade option... ;-)

author: bartver
author_rank: Contributor
timestamp: August 19, 2018, 12:00:04 pm
content: Ok,if this is the wrong thread i apologize, but i think i'm ok here.The 725Zi show itself in the 'about' section as 715Zi, the serialnumber shown in 'about' is just copying the systemname from windows, so if you name it 'blablabla' that will show in the scope-software.Strangely 'about' shows no hardware and only 'HDTV' as a software option, but the licenses section does not show any keys.On one of the screws in the back is still the 'Lecroy calibration void if removed' sticker and intact, at least i cannot detect any tampering so i think the casing is the original one. Or are these stickers available outside Lecroy ?It starts to look like the hardware is correct, but there are no licenses active, maybe that's the reason it shows itself as the lowest version.Does a 725Zi have a 'base'-license ?Another thread describes all the 'btd' calibration files, i cannot find any on the D: drive, so i'm beginning to suspect a botched hd-recovery.Is there any way to recover original licenses/original serialnumber from eeprom ? i searched the net for it but did not find it.regards,

author: ollopa
author_rank: Regular Contributor
timestamp: August 19, 2018, 08:12:44 pm
content: The 7Zi series have the HDTV option enabled automatically, no key required. The base model with no hw options is the 715Zi, the 725Zi has the LBW (low bandwidth) hardware option, the 735Zi has the MBW option, etc.LeCroy uses LC filters to set the front end bandwidth so adding bandwidth options won't get you anything you don't already have on your acquisition board. If you don't have a bandwidth option, however, you are limited to 10GS/s and 20GS/s rates in the horizontal setup -- so that's not a reliable way to tell what your actual hardware is. You need the option and then to measure the actual cutoff frequency of your scope.I've only seen the serial number revert to the hostname if there's a missing driver or it's unable to talk to the acquisition board. Is your scope working with real signals / are you sure it's not in simulation mode?P.S. in simulation mode it will not read your licenses from hardware so your symptoms would be consistent: Hostname in place of serial number, no licenses visible, no LBW option so your scope reverts to the base 715Zi model. Check the device manager and make sure all drivers are installed, particularly the the driver for the acquisition board.

author: darkstar49
author_rank: Frequent Contributor
timestamp: August 20, 2018, 11:01:50 am
content: Quote from: ollopa on August 19, 2018, 08:12:44 pm@bartver: be aware however, that you won't typically see these 'bandwidth' options in the scope's about screen(s)... only in 'service' mode...

author: ollopa
author_rank: Regular Contributor
timestamp: August 20, 2018, 03:38:10 pm
content: The BW options are still visible in the list, they just have a blank description unless viewed after logging into the service menu.

author: rhb
author_rank: Super Contributor
timestamp: September 07, 2018, 02:17:07 pm
content: I don't seem to be able to find anything at pastebin except a list of file names. Are the files gone? I'm not familiar with the site.If they are gone can someone who has the files PM me?

author: MilkmanCDN
author_rank: Contributor
timestamp: October 04, 2018, 05:10:37 pm
content: Has anyone tried to remove codes through the service menu? When selecting some of the codes (I2C/SPI serial decode and others) with Flags = "01", the "Remove Key" button is grayed out.

author: ollopa
author_rank: Regular Contributor
timestamp: October 05, 2018, 11:25:40 am
content: That's right, some options flag the license as non-removable in the service menu.

author: dxl
author_rank: Regular Contributor
timestamp: October 06, 2018, 08:57:11 pm
content: I think you need the DEV License to be able to remove all kind of licenses.

author: ollopa
author_rank: Regular Contributor
timestamp: October 06, 2018, 09:12:52 pm
content: Quote from: dxl on October 06, 2018, 08:57:11 pmYou're right. I didn't know you got that power with DEV!

author: MilkmanCDN
author_rank: Contributor
timestamp: October 18, 2018, 11:31:12 pm
content: Can you remove the DEV key after installing?

author: darkstar49
author_rank: Frequent Contributor
timestamp: January 30, 2019, 07:05:08 am
content: Quote from: MilkmanCDN on October 18, 2018, 11:31:12 pmYES !Luckily... as this seems the only way to 'cleanup' demo keys and other things that appear (at the first sight) to be there for good.

author: imett
author_rank: Contributor
timestamp: April 27, 2019, 06:43:04 pm
content: I did, i bricked my scope with ffffffff option.. I restore it with a 1-wire eeprom programmer for Dallas eeprom.

author: imett
author_rank: Contributor
timestamp: April 29, 2019, 12:39:51 pm
content: Once again,the options code are stored in a 1-wire eeprom, with the same code xxxx-xxxx-xxxx-xxxx give by well descripted above procedure...now the question is:if i store manually the code into the 1-wire eeprom, the software 8.x.x.x could accept the options?Could be true for this reason, if i've an instrument with the 7.2.0.5 software version (for example...) i buy an option, that software store this option into the 1-wire eeprom and everythings runNow i upgrade the software with a 8.x.x.x version, my option must work again maybe with the same code

author: Mechatrommer
author_rank: Super Contributor
timestamp: April 29, 2019, 03:54:49 pm
content: Quote from: imett on April 29, 2019, 12:39:51 pmwhich eeprom? on the pci card? or on the acquisition board below?

author: imett
author_rank: Contributor
timestamp: April 29, 2019, 06:43:59 pm
content: in my instrument (44xs) there is a small card connected to the pc main board (mini atx) with a spartan 6 and that eeprom from maxim(i don't want reveal the chip name....)

author: imett
author_rank: Contributor
timestamp: April 30, 2019, 06:43:35 am
content: News, i found the schematics of wavesurfer 424 and with surprise also that model has this eeprom

author: imett
author_rank: Contributor
timestamp: May 01, 2019, 01:14:28 pm
content: Fresh news about 8.x.x.x and options...Online i've found an WS24MXs with 4 option keys , LBW (is WS24..) ATP,HDTV,MSURF and software version8.1.2.0.i run for each keys the command "validate", it return the correct scope id and option name!!for example the key "67f2-9132-b9fd-247g" is MSURF option and it works on 8.1.2.0 !!now the question is: maybe, with 8.x.x.x they change how the options are accepted and stored but the options keys are the same. Is true??

author: darkstar49
author_rank: Frequent Contributor
timestamp: June 02, 2019, 09:47:07 am
content: The point is that 'old' options are not 're-encoded' by default when upgrading (as far as I know)... it's not even known whether old options are affected at all by the new encoding scheme(s)...It's not 100% clear neither from what exact version things changed... ever tried the latest one (8.6) ?But it would be interesting to see if you could wipe one of these 'old' options, and re-install it with the same key ?If you have 8.x, could you try installing some (recent) decoding option (like CAN-FD) generated with the pre-8.x keygen ?And for sure all post-8.x options are unusable, as the options file (i.e. the database with all possible options) is encrypted with a new scheme.

author: darkstar49
author_rank: Frequent Contributor
timestamp: June 02, 2019, 09:54:33 am
content: Quote from: imett on April 29, 2019, 06:43:59 pmLecroy uses a DS2433 EEPROM on their interface boards, that's known for years...

author: F4409
author_rank: Newbie
timestamp: June 09, 2019, 09:03:22 pm
content: Hey,can anyone confirm that the DEV key can be deleted?I have to delete an grayed out key!What function does the DEV key/option provide furthermore?Thanks in advance!F4490

author: Aleks
author_rank: Contributor
timestamp: August 18, 2019, 03:19:04 pm
content: Has someone found an update to list.py that can decrypt/list the options from FW 8.x.x.x onward?

author: Ivan_Vetrov
author_rank: Contributor
timestamp: September 25, 2019, 08:53:06 pm
content: Ok

author: Mechatrommer
author_rank: Super Contributor
timestamp: October 30, 2019, 01:52:38 pm
content: someone said hello, so i just drop by..

author: analogRF
author_rank: Super Contributor
timestamp: October 30, 2019, 06:18:41 pm
content: Quote from: Mechatrommer on October 30, 2019, 01:52:38 pmsuperthanks !

author: Mechatrommer
author_rank: Super Contributor
timestamp: October 30, 2019, 11:02:49 pm
content: what is covered in this thread... some i think already mentioned, some tried by others are WavePro 7000 series, WaveMaster 8000 series... and i believe, anything that uses XStream SW. maybe people can share whats supported by what model? its being ask and i have no real answer for that, i only know what i tried and its been a while a go so i need to gather up unfortunately i'm in the middle of something that need me to be away frequently.

author: Kosmic
author_rank: Super Contributor
timestamp: October 31, 2019, 01:38:13 am
content: For the record, I was able to unlock most features on my DDA-110, firmware v 9.3.

author: macona
author_rank: Regular Contributor
timestamp: December 09, 2019, 09:36:29 pm
content: I used it this weekend for a Waverunner 64Xi with 8.1.2, I couldnt decode the options.cfg so I had to dig through online documentation to find out which ones I could install. Basic list for Xi series so far:STATXMAPXWAVXVAPXDEVXWEBJTA1DFP2DDM2PMA2SDMAORMEMCI2CSPIUARTUSARTSPECTRUMCAN01CAN02QPHY-ENET*USB2bus DFlexRaybus TDPFlexRaybus TDPROTObus MAG1553Audiobus TDGAudiobus TDDPHYbus DDigRF3Gbus DDigRFv4bus DENETbus DFCbus DProtoSyncHSICbus DSASbus DSATAbus D10-100M-ENET-BUS8B210B-BUSARINC429CAN01iCAN02iCAN_FD_TDMDDM2DECODE_MEASURE64B67B-BUSCONFIG-BUSDIGRF_V4_EMMC-BUSETFLXFLX_PHYHDTV12S_TD12S_TDGIRTESTLALINMANCHESTER-BUSMPHY-DECODENRZ-BUSPCIE_DQPHY-MIPI-MPHYQPHY-USBSENTSRIO-BUSTDRUSB2USB2_TDVBAVBAiVRPOBEVSAWIMAXWSCANGenerally it seems that most of the options for Xi-A work with Xi.

author: sixtimesseven
author_rank: Frequent Contributor
timestamp: December 11, 2019, 08:16:44 am
content: It works with 8.1.2.0 on the Wavemaster 8000 non A series. The available options and cfg keys are:Options Mapping for Wavemaster SeriesXMAP -- 00000008XWEB -- 08000000DFP2 -- 00000040PMA2 -- 00001000JTA2 -- 00000010ENET -- 00004000USB2 -- 00002000DDM2 -- 00000002AORM -- 04000000Not officially supported but seem at least not to cause problems:02-10000000 SPECTRUM (seems fully working)00000004 XWAV00000400 SDM00010000 TDR80000000 USB3_TD10000000 DMOD00400000 CAN02 (seems fully working)00008000 SPI (seems fully working)00004000 I2C (seems fully working)DO NOT INSTALL:42-00000008 AFG (Will throw startup exception)

author: sixtimesseven
author_rank: Frequent Contributor
timestamp: December 11, 2019, 08:31:47 pm
content: I get the Error:"Cannot install possibly due to the lack of storage space"... which I'm guessing concerns the EEPROM. Did they save a few pennys on the DDA variants perhaps since they have so few offical options? I mean I haven't yet installed twenty options yetCould I ask where that memory chip is located?

author: Mechatrommer
author_rank: Super Contributor
timestamp: December 12, 2019, 04:09:35 am
content: Quote from: sixtimesseven on December 11, 2019, 08:31:47 pmi experienced this. the trick is to combine 2 or more licenses (same mask) into one key using OR... study this post...https://www.eevblog.com/forum/testgear/lecroy-options-recovery/msg1515814/#msg1515814and use verify tool to make sure you ORed/generate the correct key...(remove the previous keys in service menu first to free up eeprom space for the new combined key)

author: Wuerstchenhund
author_rank: Super Contributor
timestamp: December 12, 2019, 01:35:24 pm
content: Quote from: macona on December 09, 2019, 09:36:29 pmThis option (Power Measurement Analysis 1) is not for XStream scopes like the WRXi, it's for older 9300/LC/WRLT/WR2LT/WP900 (and the DDA counterparts).QuoteWas never offered for the WRXi, I think this was introduced with the WRXi-A. Still works on the WRXi and older XStream scopes.QuoteThese are mostly redundant pairs. This is how it works:<Serial Protocol>_TDGPT = TriggerD = DecodeG = GraphingP = PhysicalWhich means audio-bus_tdg already contains audio-bus td. The different variants exist to segregate models, i.e. the WaveSurfer might only have "T" or "TD" while WaveRunner and higher also have "G".QuoteThis was never for the WRXi, it was introduced later with the HDO Series. And this isn't the only one in your list.QuoteThis one only became available with the WR6zi, as the previous WRs lacked the BW.QuoteNot an official option sold to the open market. EFAbus is the bus used in the Eurofighter Typhoon combat aircraft. Unless you work with Typhoon avionics it's no use as the bus isn't used anywhere else. This option was/is only available to eligible customers in Europe.

author: sixtimesseven
author_rank: Frequent Contributor
timestamp: December 26, 2019, 03:49:11 pm
content: Has anyone tested to upgrade the sample memory on a Wavepro 7k series?

author: macona
author_rank: Regular Contributor
timestamp: December 28, 2019, 06:33:16 am
content: Yep, it shoould have been PMA2, not PMA1This data sheet here shows SPECTRUM available for WRXihttps://www.globaltestsupply.com/pdfs/cache/www.globaltestsupply.com/ws10-spectrum/datasheet/ws10-spectrum-datasheet.pdfI removed the other ones.Thanks!I pulled these off of images of other WRxi showing options installed. I am guessing someone was installing stuff not compatible.

author: 174929851
author_rank: Newbie
timestamp: February 25, 2020, 02:36:02 pm
content: Does anyone have method for 8.x.x software version？

author: analogRF
author_rank: Super Contributor
timestamp: March 23, 2020, 03:35:10 am
content: I got a dead Wavepro 7200A which I brought back to life (I will post the repair on the other thread). It still has the stock Intel board, hard drive, 2.8GHz Pentium, and 512MB DDR2The scope has XSTREAM 7.2 and it only came with option -M (medium memory: 8MB 2Ch and 4MB/ch) such option does not even exist in the 7200A datasheet!I simply upgraded to option -XL (48MB 2CH, 24MB/ch) and it seems to be working and I can set the memory up to that amount and there is no complain from the scope. I didnt dare to use -XXL option, maybe I should?However,my questionis, the -M option key is still there. Should I remove it? I assume it is overridden by the -XL option anyways, right?I also enabled other useful options like SPECTRUM ANALYZER, DMOD, DFP2, PMA2, I2C, UART, SPI, XMAP, and DEV.With the DEV option, the service section is always open right in there!!? no need for passwordMysecond questionis: has anybody tried VSA (Vector Spectrum analyzer) and POWER_ANA (New power analysis package)? Do they work on 7200A?I tried the TDR option and it enabled some stuff in the Math menu but it didnt work, it didnt complain but scope kept "Processing..." and eventually hanged. I removed that keybut the menus that it created are still in there!! what gives?EDIT:by the way I didnt even bother to find the options.cfg from my scope. I simply used the cfg file that was posted by Mechatrommer a few post above.

author: analogRF
author_rank: Super Contributor
timestamp: March 23, 2020, 03:46:55 am
content: I really cannot see why the generated codes should not work on 8.x software. If I upgrade my software right now from 7.2 to 8.x, no doubt it will have the options available (they are written to that EEPROM). Maybe the Python script cannot use the new .cfg file that comes with 8.x but if you use the old .cfg file you can still unlock the options you want on V8.x . Like I said I just used a generic .cfg file that was posted by Mechatrommer and I dont remember what his scope model was but I am sure it was not wavepro 7000aIt is up to you (not the .cfg file) to know which options will work on your scope model. That .cfg file lists a zillion options that cover all lecroy scopes of several generations. On a wavepro 7000a maybe 15-20-25 of them work perhaps

author: profanum429
author_rank: Regular Contributor
timestamp: March 24, 2020, 04:43:08 am
content: Quote from: analogRF on March 23, 2020, 03:46:55 amI just added a couple options to my Waverunner 6030A running the latest 32 bit 8.whatever using my old options.cfg and it worked like a champ. My first real scope, I love it so far.

author: analogRF
author_rank: Super Contributor
timestamp: March 24, 2020, 10:54:24 am
content: Should I remove -M (medium memory) option after I enabled the -XL option? because it still remains there but I suppose it must be overridden by the -XL option, right?Has anybody tried VSA (Vector Spectrum analyzer) and POWER_ANA (New power analysis package)? Do they work on 7200A?I tried the TDR option and it enabled some stuff in the Math menu but it didnt work, the scope didnt complain but it kept "Processing..." and eventually hanged. I removed that key but the menus that it created are still in there! what gives?

author: snipor
author_rank: Newbie
timestamp: March 27, 2020, 06:56:28 pm
content: I tried to add a couple of options to my HDO running 8.x.x software. The keys are shown as Legacy OptionKey. Apparently keys for version 8.x.x using a different format. xxxxxx-xxxxxx-xxxxxx-xxxxxx-xx instead of xxxx-xxxx-xxxx-xxxx.Are there any archives where I can find older software versions for my HDO? Maybe the first release of version 8.x.x can convert the keys?

author: analogRF
author_rank: Super Contributor
timestamp: March 27, 2020, 07:17:53 pm
content: anybody knows where the options keys are stored in WavePro 960 (A.K.A DDA-260)??I am in deep troubleAfter I enabled some useful options on my Wavepro 7200A and they worked, I felt brave (stupid!) and enabled3 options on my trusty Wavepro 960 (DDA-260) (DMOD, DFP, and PMT) and the scope was working afterwards.However, when I found that the DMOD optionhad added a Vector demodulation (I and Q demod) package I tried it and as soon as the scope added a math trace with EVM measurement,the scope hangedNow when I turn the scope on, it shows 4 channels traces plus that D math trace which is the EVM measurement from that packageand then it hangs. I had set the scope to boot into the last stateis there any way to boot the scope into a default state? I think if that math trace is turned off, it will work normally but I cannot boot it into adefault stateI tried talking to it by GPIB but although it is recognized in the Agilent I/O, but I cannot send any command to the scope.any help is greatly appreciated

author: analogRF
author_rank: Super Contributor
timestamp: March 27, 2020, 08:15:35 pm
content: Quote from: Mechatrommer on March 27, 2020, 07:34:36 pmthis is an old wavepro 960 (VxWorks not winXP)

author: w2hx
author_rank: Contributor
timestamp: April 06, 2020, 08:58:30 pm
content: @snipor, your PM inbox is full. Trying to reach you. thanks

author: Kosmic
author_rank: Super Contributor
timestamp: April 09, 2020, 01:08:57 am
content: Quote from: analogRF on March 27, 2020, 07:17:53 pmDid you try stopping acquisition as soon as the scope start ? If I recall correctly that's how I got out of the same problem with my DDA-110. I was just spamming the button "Stop" while the scope was booting.

author: ollopa
author_rank: Regular Contributor
timestamp: April 09, 2020, 02:59:08 am
content: I don't have that scope model but you could try:Quotewhich was mentioned in the manual.

author: dufflespank
author_rank: Newbie
timestamp: April 29, 2020, 01:59:13 am
content: HELP I stupidly tried flags = 00 mask = ffffffff and now I can't start XStream, I get a crash with a window saying something like "Fatal software inconsistency found". I would really like to avoid having to re-program the EEPROM so any help would be appreciated!BTW this is a WavePro 7300A

author: darkstar49
author_rank: Frequent Contributor
timestamp: April 29, 2020, 01:49:02 pm
content: You're definitely in deep sh...While what you're looking for is basically possible (I mean 'technically'), as some of the Lecroy drivers have functions to access that EEPROM, but no documentation whatsoever exists (maybe at Lecroy ??) on the data structure within that chip (nor on the driver function(s) to do so, nor which driver, etc...).I don't know where it physically resides in a WP7K, but that's something a few people here could probably answer... My guess is that your best chance is to get that chip (i.e. desolder it), make a dump, and find the right DWORD to wipe (or rather 'reset', as some 'basic' options are required in page '00', maybe you've got the original value/mask ??), if you know what option keys it had, you can decode these to have the corresponding mask(s) to look for in the data... if you had several option keys installed, it will be definitely easier to find those in the dump, and derive the position of the page '00' mask...Fingers crossed...PS: you can translate 'page' by 'flags' in the message above... ;

author: sixtimesseven
author_rank: Frequent Contributor
timestamp: May 04, 2020, 09:01:25 am
content: Quote from: dufflespank on April 29, 2020, 01:59:13 amSorry, don't think that is possible. I had the same problem... I desoldered it and used an arduino with the 1-Wire eeprom library which hooks up via ringle resistor. The eeprom shares power and data on one pin (weird setup, package has more pins so why would one do this?).You might be able to only solder the resistor to the pad and clip on a ground lead if you want to avoid desoldering the hole chip.Edit: Attached is the stuff I used and a dump from my WP72k. I think I simply downloaded the eeprom and edited out the faulty key and overwrote the eeprom with the new bin file. The arduino program is in there as well.

author: Momchilo
author_rank: Regular Contributor
timestamp: June 07, 2020, 04:42:44 pm
content: Hi,the following options work with my Wavesurfer 454:DFP2JTA2XMAP (XDEV and XMATH are also included)PMA2EMCMSURFATPETCAN01CAN02DECODE_MEASUREUARTI2CSPIUSARTUSB2_TDDON'T INSTALL:SPECTRUMSDMThese aren't working for the WS400 series and for SDM you have to re-program the eeprom on the PCI card, because X-Stream will give you an error and won't start at all. If you enter the key for the "ffffffff" mask you have the same problem. But it's not a big deal with sixtimessevens description and software. Thank you very muchDoes anyone know other working options for the Wavesurfer 400 series? I don't want to test all the options that might work but don't work in the end.

author: rhb
author_rank: Super Contributor
timestamp: June 07, 2020, 08:24:19 pm
content: Can anyone point me to a summary of what can be enabled on a DDA-120 and DDA-125?I'm particularly interested in the digital filtering and jitter analysis options. But I'm quite confused by all the versions with different names.Thanks,Reg

author: Kosmic
author_rank: Super Contributor
timestamp: June 08, 2020, 03:35:41 am
content: Quote from: rhb on June 07, 2020, 08:24:19 pmOn my DDA-110 (little brother of the DDA-120) I tried:WAVA: Wave AnalyzerJPRO: JitterProDMOD: Demodulation ToolsPMSK: PolyMaskPMT: Power Measurement ToolsJTA: Jitter and Timing Analysis (included in JPRO)DFP: Digital Filter PackageEMM: Extended Math and MeasureATP: Advanced Trigger PackageSMAP: Surface MapMC01: Memory Card Software (Tried different compaqflash cards but none were working)Make sure you have firmware v 9.3 installed before trying to enable those features.

author: rhb
author_rank: Super Contributor
timestamp: June 08, 2020, 03:33:16 pm
content: What are the codes for those? Several are not in the options.cfg example that mechatrommer posted earlier in the thread.

author: Kosmic
author_rank: Super Contributor
timestamp: June 08, 2020, 03:56:57 pm
content: Quote from: rhb on June 08, 2020, 03:33:16 pmDepending on the firmware, options are different. All older VxWorks firmwares share the same options.I listed the options and descriptions I find useful. The complete list of options for VxWorks firmware v 9.3 is on post #14:https://www.eevblog.com/forum/testgear/lecroy-options-recovery/msg1381551/#msg1381551

author: rhb
author_rank: Super Contributor
timestamp: June 09, 2020, 04:46:12 pm
content: That list of option codes worked properly on my DDA-120 without any issues.Now I need to get the floppy working and update from 9.2 to 9.3 on my DDA-125 and repeat the process.And find documentation for all the options.Have Fun!Reg

author: bugr
author_rank: Newbie
timestamp: July 21, 2020, 06:47:32 pm
content: I got greedy and appear to have bricked my waveRunner 6200 - anyone have an eeprom dump on hand that I can reflash to?Cheers,bugr

author: ksilabs
author_rank: Regular Contributor
timestamp: October 20, 2020, 11:03:50 pm
content: Quote from: eb4eqa on May 11, 2018, 10:22:35 pmMight be a bit late but the sequence is a bit different for LC series (just found it on my LC684DXL):- Press 3rd menu key from the top and hold it- Press 4th menu key and hold it while still holding 3rd one- Press 5th menu key while holding other two- Release all 3 keysI don't know if the DEVP option is absolutely necessary to invoke maintenance menu -- didn't try it without it -- but it works with DEVP installed and it allows to delete any option key.As of options LC684DXL accepts almost everything but I can't see any changes from enabling ATP. Do not enable JTA -- no harm and it works but it is much better to enable JPRO instead that has more functionality. Invokes by "Custom" button (DMOD and PMT are also invoked by that button).And BTW, if you left out with some leftover trace from DMOD or whatever just reset the scope to default config -- it is "Autoset" button first, hold it, press the top menu button , hold those two and then press the bottom menu key and release all three. The scope will reset and come up with default configuration (just channels 1 and 2 on, no other crap).Don't know what is EATN, didn't try it.And it would've been very nice to find any documentation on those options. Some information can be found in other scopes' manuals but it is fragmented and incomplete

author: RedCali
author_rank: Contributor
timestamp: November 03, 2020, 08:24:29 pm
content: Quote from: Momchilo on June 07, 2020, 04:42:44 pmi just can add this one:WRSTD WS Standard optionsAny other tested feat?Can anyone see the Decoding in his WS400 scope? or do i miss something else? (WS424)BR RedCali

author: darkstar49
author_rank: Frequent Contributor
timestamp: November 03, 2020, 08:35:36 pm
content: Quote from: RedCali on November 03, 2020, 08:24:29 pmDon’t play with the bandwidth option, without h/w mods, this will at best do nothing, but could potentially leave you with a bricked scope... you’ll always be able to reset the eeprom, but not everyone is prepared to do this with the soldering iron... (nor will one know what exactly to reset/change in the eeprom)

author: RedCali
author_rank: Contributor
timestamp: November 03, 2020, 10:14:24 pm
content: LBW was just installed from preowned guy/ factory - that's why i'm add it to the list - if its worse i can delete it anyway.There is no where a real list what is supported in this WS400 scopes.....

author: analogRF
author_rank: Super Contributor
timestamp: November 04, 2020, 01:38:45 am
content: Quote from: RedCali on November 03, 2020, 10:14:24 pmwhy dont you check the datasheet or user manual. It's all in there, at least officially supported options are therejust match their names to the abbreviated list

author: darkstar49
author_rank: Frequent Contributor
timestamp: November 04, 2020, 05:53:53 am
content: Quote from: RedCali on November 03, 2020, 10:14:24 pmNot true... you assume the software will start, which it might not do if the configured options are deemed NOK... and in that case, you either have discovered how to use undocumented driver functions to access the eeprom without the XStream software, or you’ll need a soldering iron...Regarding the list of « allowed » options, there is none. The datasheet gives some hints but later options might perfectly work on older models (ex: spectrum), so it’s impossible to say.The risk of misconfiguring the options and bricking the scope is very low (but not zero, as already proven by some in this thread), but playing around with bandwidth options has not shown any benefits (so far).

author: RedCali
author_rank: Contributor
timestamp: November 04, 2020, 10:08:06 pm
content: Quote from: analogRF on November 04, 2020, 01:38:45 amTHX, i did that of course, but found more or less nothing, just math and triggersI just wee surprised that the other made `monchilo` had more activated - but it seems as already stated that you can activate it without any effect :-)Quote from: darkstar49 on November 04, 2020, 05:53:53 ami guess there is a misunderstanding - the LBW was active as the scope arrives at my desk - so i guessed its a factory setting ;-)

author: darkstar49
author_rank: Frequent Contributor
timestamp: November 04, 2020, 10:45:35 pm
content: Quote from: RedCali on November 04, 2020, 10:08:06 pmIt is, indeed... the point is not to give anyone here the impression that these are ‘standard’ options just like any other... they’re not, and tampering with those may have adverse consequences.Don’t get me wrong, if someone’s willing to perform some tests with bw options and report results, I’d be more than happy ! Just don’t tell no one told you it may end up badly... ;-

author: Mechatrommer
author_rank: Super Contributor
timestamp: November 05, 2020, 03:35:23 am
content: i'm poking around with my python (*.bat) files in my newly installed Win7. python gives me bad result, keep saying "Usage..." thing (attached) this has been working in WinXP, now its not workinganyone have idea?

author: YetAnotherTechie
author_rank: Regular Contributor
timestamp: November 05, 2020, 05:38:32 am
content: Quote from: Mechatrommer on November 05, 2020, 03:35:23 amIs options.cfg in the current directory?add a dot in front of the name, or use the full path

author: Mechatrommer
author_rank: Super Contributor
timestamp: November 05, 2020, 06:14:20 am
content: Quote from: YetAnotherTechie on November 05, 2020, 05:38:32 amyupQuote from: YetAnotherTechie on November 05, 2020, 05:38:32 amyup, tried that. dont worry i can consider myself a command line expert. i also did check if list.py is actually got into python interpreter, which it did (python was running it). important fact is, it was working in WinXP, now its not working in Win7, exactly the same command line... i did try to run as admin, in fact my UAC is disabled.

author: darkstar49
author_rank: Frequent Contributor
timestamp: November 05, 2020, 08:06:19 am
content: Quote from: Mechatrommer on November 05, 2020, 06:14:20 amMS & Apple don't want us to use those scripts anymore !!!Since a while, after some Mac OS upgrade, my setup didn't work anymore (although the problem was different, it was related to PyCrypto), spent hours on this, without success... then moved the scripts over to a Linux VM, and everything worked flawlessly from the start... kind of frustrating, but I've got other priorities than debugging my Mac OS Python setup.

author: Mechatrommer
author_rank: Super Contributor
timestamp: November 05, 2020, 11:48:47 am
content: Quote from: darkstar49 on November 05, 2020, 08:06:19 amor maybe the later version of python? what stumbled me is python does not consider the extra "argument" as an "argument"i tried other combinations and tools, the Win7 cmd.exe works as on earlier WinXP. it seems the problem is with python, not sure why and how.Quote from: darkstar49 on November 05, 2020, 08:06:19 ammaybe i need to dig the python version in my old WinXP setup to see the difference. i hate upgrades.

author: darkstar49
author_rank: Frequent Contributor
timestamp: November 05, 2020, 12:38:22 pm
content: Quote from: Mechatrommer on November 05, 2020, 11:48:47 amme too !!!!!I didn't do it for the Python stuff (and I was wrong !) which I installed on Mac OS directly, but ALL the 'specific setups' I have (Ghydra, IDA, old 32bit usb programmer softwares, and many more...) are running in dedicated VM's that I NEVER update anymore once they run as expected... given the pace of updates and the lack of care for total backward compatibility, I guess there's no other way.

author: Mechatrommer
author_rank: Super Contributor
timestamp: November 05, 2020, 01:13:48 pm
content: short story what i just did few minutes ago.. i boot and digged WinXP files... i just tried few combinations, the extreme is.. copy the Python27 (that is working) from WinXP into Win7, copy and run WinXP's cmd.exe in Win7, the result is the same bad.. so yeah, Win7 is screwing it up, something "lower level" in Win7 is screwing it up. this "password recovery" method only can be done in WinXP. if you dont have WinXP PC, then you need to run from your DSO's WinXP (and maybe Win2000)so if you guys still have WinXP installation/cd (and old PC that can run it), put it in vaccum chamber for archival purpose, it will definitely have a use one day.

author: Momchilo
author_rank: Regular Contributor
timestamp: December 02, 2020, 03:38:09 pm
content: Quote from: RedCali on November 03, 2020, 08:24:29 pmHere are some pictures. I hope they help you.Every installed option works just fine. I'm really happy with the outcome, but I had to reprogram the EEPROM two times. The second time it took maybe 30 minutes. The programming isn't too bad. You have to desolder the 8pin EEPROM on the PCI card, but there aren't any other parts close to the IC. I would say it's doable by everyone who soldered few times.If someone has a broken scope (XStream) because of this, feel free to write me a PM. I will try to help you.

author: ollopa
author_rank: Regular Contributor
timestamp: December 03, 2020, 06:03:44 am
content: Quote from: RedCali on November 03, 2020, 08:24:29 pmWS400, being the bottom-end cheap scope, appears to have been designed to hide the serial decode menu even if you install the licenses. There is a loophole, though: If you install CAN01 or CAN02 then the serial decode UI is restored and all installed decoders become available.

author: RedCali
author_rank: Contributor
timestamp: December 03, 2020, 06:40:26 am
content: got itthe "DECODE_MEASURE" option isnt available / i didnt see it witht he 'options.cfg' file.....

author: smaultre
author_rank: Regular Contributor
timestamp: December 03, 2020, 10:57:01 pm
content: Hello where can i download the Lecroy Matlab pack, that used for some options???I try to install it separately it doesn't works..

author: RedCali
author_rank: Contributor
timestamp: December 06, 2020, 01:23:42 pm
content: Quote from: RedCali on December 03, 2020, 06:40:26 amHi Folks,i've solved it - seems to me as there are two possible issues why it doesn't showed up the menu..I did the following steps:deleted all keysreplacedLBWwithHBWand inserted-Linstall all keys again, but the DECODE_MAESURE in front of the Protocols....This solved the issue on the WS424 where the Decoder menu wasn't shown.....Thanks to @Momchilo for his support

author: Swirve
author_rank: Newbie
timestamp: January 11, 2021, 09:29:18 am
content: I have a wavepro 7300a and tries to activate serial decode (spi, uart etc) options, but the serial decode menu does not show up. I have added decode_measure option first and then added spi option but nothing shows up. From default the scope has fe2 and hbw option.Other options (can01, can02) works fine!Can anyone list options known to be working on the wp7k?

author: Swirve
author_rank: Newbie
timestamp: January 12, 2021, 10:16:57 am
content: Solved problem by updating scopes fw to latest.

author: Amateur
author_rank: Newbie
timestamp: February 07, 2021, 03:54:19 am
content: How to recover/go from WP950 Memory Option M to L? And then to WPVL?To my standard WavePro 950 I added the key for Memory Option M and that worked well, the specified 4M sample memory is available for use. Very pleased with that result.But then adding the key for the L Option does not result in the expected additional sample memory. In fact it reverts to the Standard max of 1MS, even though the option "WPL" is in the scope's System list (and "WPM"" is still there, too) and the even though the Horizontal Setup menu allows 16M to be specified as a maximum value to use for "Record up to...", but no more than 1MB of sample memory ever displays as available at the top of that menu.Also tried going straight to WPVL so that it became the only memory option in the System list (had removed WPM prior), but with same result as WPL above (limited to 1MS).What is the magic formula/sequence of adding keys to go from WPM to WPL and then to WPVL on this scope? Would to hear from someone who knows, thanks.

author: Schenkenstein
author_rank: Contributor
timestamp: February 13, 2021, 08:36:31 pm
content: Just upgraded my WS424 without any options to a WS454 with (all?) options! Thanks to Momchilo for the hint with the HBW option to make it a WS454!One has to remove the LBW otpion first - it was installed by default on my scope and showed up as a key without showing what option it is. Anyways, the HBW option makes it think it is a WS454, but the frontend has to be modified, too, to get the actual bandwidth of 500MHz. Luckily, there is a version of the service manual which tells you what resistors to change and what capacitors to addHowever it fails to tell you how tedious it is to get to the frontend and solder the stuff...

author: Momchilo
author_rank: Regular Contributor
timestamp: February 14, 2021, 04:16:52 pm
content: SchenkensteinNow you only have to swap the CPU, RAM and hard disk. It will be a huge different but one more complete disassemblyCPU:https://www.cpu-world.com/CPUs/Pentium-III/TYPE-Pentium%20III%20(Tualatin).htmlRAM: 2x 1GB DDR1 333MHzhard disk:https://www.amazon.de/Geh%C3%A4use-Adapter-m-2-NGFF-Festplatte-Klassische/dp/B0196PRXY0+https://www.amazon.de/Green-interne-Festplatte-Lesegeschwindigkeit-Solid/dp/B078WYRR9S+https://www.amazon.de/EasyULT-Adapter-Erforderlich-Unterst%C3%BCtzt-Kompatibel/dp/B07T5D6J81(to restore backup)

author: Schenkenstein
author_rank: Contributor
timestamp: February 15, 2021, 11:39:50 am
content: Oh Momchilo you are leading me into temptation! I think it has to wait a bit since my wife noticed an increase in incoming packages from Amazon etc lately...One of those packages was a PATA to SATA adapter for the scope which I used to switch to an old SSD I had sitting in the shelves. However, it gives me occasional boot issues and data corruption problems - I guess it has to do with the UDMA / not enough connectors / shielding issues others reported in another thread. Did you encounter any problems with the linked adapter and disk from Amazon?And the Tualatin processors work, too? I read somewhere that they don't work on all socket 370 boards and the 30W TDH vs. the 24W of the standard Celeron makes me a bit anxious.I also whacked an additional 512MB RAM in though I don't know if more will help significantly. The CPU seems to be the main bottleneck (sin(x)/x interpolation on 2M points? processing... ... ...). Anyways, still lots to play around with

author: darkstar49
author_rank: Frequent Contributor
timestamp: February 15, 2021, 08:40:11 pm
content: Quote from: Schenkenstein on February 13, 2021, 08:36:31 pmLucky you... that must be the only (available) service manual that mentions such information... I'm pretty sure later models could also be BW-upgraded (only some models, and only to some extent...), but I never saw any usable information around that topic...

author: Hodany Engineering
author_rank: Newbie
timestamp: February 16, 2021, 09:07:13 am
content: Quote from: snipor on March 27, 2020, 06:56:28 pmDoes anyone have option keys for HDO? EMB woud be nice to have.

author: Momchilo
author_rank: Regular Contributor
timestamp: February 16, 2021, 02:54:29 pm
content: Quote from: Schenkenstein on February 15, 2021, 11:39:50 amIt could be also the missing TRIM command. Win XP doesn't have this. Just install ADATA SSD Toolbox to add the TRIM command for the SSD. That could at least be a solution. I use the tool and the linked adapter without any problems so far.Quote from: Schenkenstein on February 15, 2021, 11:39:50 am1GB RAM should be fine. 2GB won't make much difference. But the CPU is a huge upgrade. I installed the Pentium III-S 1133 (SL5PU) Tualatin with 27.9W TDP. It's the same power dissipation as the used Celeron has. The Pentium III-S 1266 should be fine too with 30W TDP, but the 1400 could be problematic. I have never tried it.

author: SpencerSGP
author_rank: Newbie
timestamp: July 03, 2021, 09:09:42 am
content: Hi, I am new to this group and after carefully study and follow instructions here, I am able to install more options on my DDA-120. I generate three codes and key in one by one to activate in the scope.I also replaced the picture tube display of DDA-120A with a 8 inches monitor with VGA input which only cost US$35.Thank you for all sharing!Also under "Maintenance" manual, can remove and add software options and all working!!!Details of of repair and upgrade are in below link:http://www.fetaudio.com/archives/2541

author: darkstar49
author_rank: Frequent Contributor
timestamp: July 03, 2021, 03:27:14 pm
content: Quote from: tv84 on April 03, 2021, 11:00:40 amsame...

author: mophong
author_rank: Newbie
timestamp: July 12, 2021, 12:59:36 pm
content: Anyone has list of working options on WaveSurfer 24Xs? Don't dare to desolder eeprom.Thanks,

author: darkstar49
author_rank: Frequent Contributor
timestamp: July 12, 2021, 08:27:44 pm
content: Quote from: mophong on July 12, 2021, 12:59:36 pmMake sure you read the thread from the start. Bricking your scope is extremely unlikely, unless you go for the 0xffffffff approach...Certain options were available on some models only, which was in most cases due to commercial limitations. But anyway, my first advice would be to stick to what you (really) need... and if you find out that some of the installed options do not behave as expected, you'll still be able to remove those.I'e never heard of a bricked scope (i.e. requiring to desolder the eeprom) when using 'normal' option masks.

author: mophong
author_rank: Newbie
timestamp: July 13, 2021, 03:01:06 am
content: Thanks, darkstar49.Since I have read all comments here I have seen someone needed to reprogram eeprom several times.Anyway, it will be great if someone can confirm -VL and HBW options work for WS 24Xs?

author: darkstar49
author_rank: Frequent Contributor
timestamp: July 13, 2021, 12:46:32 pm
content: Quote from: mophong on July 13, 2021, 03:01:06 amregarding the acquisition memory, the name of the option is model-dependent... but I don't think that anything above -L will work on an Xs.You could also try MMODEL, I think it enables 'maxmem' and -MSURF (and possibly -ATP), not clear to me... but you can proceed one option at a time.Regarding the bandwidth, I've NEVER seen anybody being successful at modding a LeCroy's bandwidth, excepted for the WS400 series, where the service manual apparently mentions the h/w mod to get to 500MHz (mentioned somewhere in this thread). Bandwidth is limited by the FE, and those are different for each model, so you're unlikely to be successful with the ?BW options. No service manual ever leaked for the Xs/Xi series.

author: mophong
author_rank: Newbie
timestamp: July 13, 2021, 02:08:28 pm
content: I was asking for -VL option because in the scope's manual they mentioned only 2 memory options, standard (2.5 Mpts) and VL (10 Mpts). But, I will try MMODEL, it is "M model for WR Xi and WS Xs scope" and as I know MXs scope has standard memory of 10 Mpts.As for HBW option, I actually don't wish to increase the scope bandwidth, just read the comments about DECODE_MEASURE, HBW option may be required to enable DECODE_MEASURE. However I now realize that issue may not the case of WSXs.Thanks again.

author: darchons
author_rank: Newbie
timestamp: July 14, 2021, 02:46:27 am
content: Quote from: mophong on July 12, 2021, 12:59:36 pmI was able to read the EEPROM while it's still on the PCB, using aUART reader described here, so you might not need to desolder it.

author: PaulAm
author_rank: Frequent Contributor
timestamp: July 27, 2021, 06:47:00 pm
content: Just a note that the python scripts work fine under Linux, no need to deal with Windows

author: darkstar49
author_rank: Frequent Contributor
timestamp: July 30, 2021, 04:11:19 pm
content: Quote from: PaulAm on July 27, 2021, 06:47:00 pmWe had the same discussion last November... Mac OS seemed screwed as well, but I didn't spend 15' on it, jumped into some Linux VM and voilà, it worked...

author: tv84
author_rank: Super Contributor
timestamp: September 07, 2021, 08:41:13 pm
content: Let's update the reference to thelatest MAUI version.This is a work in progress, but I think it already provides a good view of all options.

author: PaulAm
author_rank: Frequent Contributor
timestamp: September 07, 2021, 11:53:07 pm
content: I pulled together some information on the options for the DDA-120/LC584 scopes which included links to documentation if I could find it. Should help to determine what options would be useful in a given situation. This is a zipped html file.

author: Kosmic
author_rank: Super Contributor
timestamp: September 09, 2021, 01:48:01 pm
content: Quote from: PaulAm on September 07, 2021, 11:53:07 pmNice document. Thank youbtw, there's some documents on groups.io Lecroy group.https://groups.io/g/LeCroyOwnersGroup/. Ex: the 140pages Jitter & TimingAnalysis manual.

author: PaulAm
author_rank: Frequent Contributor
timestamp: September 18, 2021, 07:13:27 pm
content: Yes, that's a much better document. Thanks for the pointer!

author: RedCali
author_rank: Contributor
timestamp: October 15, 2021, 05:47:57 pm
content: I got a WS MXi-A and want to upgradeAs i have to dismantle the scope i want to Upgrade the fans and the CPU as wellGuess a Intel Celeron M 450 2.0GHz 533MHz SL9KX should work? (I know its not a big step, but a least 11%) :-)Any recommendation for replacing the fans?Are there Manuals around like for the old 4xx series? :-)Thanks for all hintsBastian

author: darkstar49
author_rank: Frequent Contributor
timestamp: October 21, 2021, 07:52:46 pm
content: Quote from: RedCali on October 15, 2021, 05:47:57 pmwrong thread somehow...and do you mean WR MXi-A or WS MXs-A ?As for the fans, those from LeCroy are pretty OK (at least in the Xi-A/Xs-A/B series), most fans with the same size won't be any better. Just make sure the feet are deployed while using (air is sucked from below), and have a cool workplace... ;-For the CPU, I'm not with you... any Xs-A/B or Xi-A should support a Core 2 Duo T7600, which is light-years ahead of a Celeron M 450 !!For the manuals, wrong place, check the LeCroy Owner's group... I think the 4xx SM is available (to be checked , I never had any WS 4xx)Have fun ! (and open a new thread if you have further questions / topics to discuss around modding your scope)

author: perdrix
author_rank: Frequent Contributor
timestamp: November 09, 2021, 07:13:48 pm
content: Fixed **** __init__.py needed in both the unlock and lec directories *****Trying to run this and getting:Code:C:\Documents and Settings\LeCroyUser\My Documents\Unlock>python list.pyTraceback (most recent call last):File "list.py", line 3, in <module>import lec.dbImportError: No module named lec.dbWhat have I got wrong?Code:C:\Documents and Settings\LeCroyUser\My Documents\Unlock>dir lecVolume in drive C is SYSTEMVolume Serial Number is C0B0-1E33Directory of C:\Documents and Settings\LeCroyUser\My Documents\Unlock\lec11/10/2021 07:03 PM <DIR> .11/10/2021 07:03 PM <DIR> ..07/28/2021 08:26 AM 544 crypto.py07/28/2021 08:25 AM 8,616 db.py07/28/2021 08:24 AM 761 key.py3 File(s) 9,921 bytes2 Dir(s) 67,520,266,240 bytes freeThanks, D

author: perdrix
author_rank: Frequent Contributor
timestamp: November 10, 2021, 12:30:51 pm
content: Oh dear this isn't quite as expected:Code:C:\Documents and Settings\LeCroyUser\My Documents\Unlock>python list.py options.cfgTraceback (most recent call last):File "list.py", line 8, in <module>db = lec.db.fromfile(argv)File "C:\Documents and Settings\LeCroyUser\My Documents\Unlock\lec\db.py", line 301, in fromfilereturn LicDBv2(LicReader(fname))File "C:\Documents and Settings\LeCroyUser\My Documents\Unlock\lec\db.py", line 275, in __init__self.categories = LoadGroup(reader, LicCategory)File "C:\Documents and Settings\LeCroyUser\My Documents\Unlock\lec\db.py", line 232, in LoadGroupnum = reader.GetInt()File "C:\Documents and Settings\LeCroyUser\My Documents\Unlock\lec\db.py", line 77, in GetIntt, v = self.get()File "C:\Documents and Settings\LeCroyUser\My Documents\Unlock\lec\db.py", line 66, in getraise LicError("Unsupported type %02X" % (t))lec.db.LicError: Unsupported type 8936This is with XStream 8.1.2.0 installed.Does anyone have a slightly earlier version of the options.cfg file that the python scripts can decode?Or an updated version of db.py that supports the newer format?ThanksDavid

author: RedCali
author_rank: Contributor
timestamp: November 10, 2021, 04:14:12 pm
content: Quote from: perdrix on November 10, 2021, 12:30:51 pmThere is already file with mostly all options listed to download, just read the tread carefully - may choose "all" and search for ".zip" will guide you to: (its a link to an early reply in thsi tread)Quote from: tv84 on April 03, 2021, 11:00:40 amThere are the most common options listed, so no need to gen the list by your own - and the scripts do not work for options files > 8.x.x.x

author: dannich
author_rank: Newbie
timestamp: November 11, 2021, 01:45:21 pm
content: Accidently used 03-00000020 RSR Reduced Sample Rate. How can I remove it,Now my sample rate is limited to 1GS. This is the only key in the list that I can't remove.

author: RedCali
author_rank: Contributor
timestamp: November 14, 2021, 02:33:33 pm
content: Quote from: darkstar49 on July 03, 2021, 03:27:14 pmhas anyone tried to use the options within flag #08? Seems as they are wrongly generated - maybe to "new"....Example:Code:08-00002000 I2C_TDME08-00004000 SPI_TDME08-00008000 UART_TDMEresult after validation - the flag add the option is "0":Code:Flags:08Mask:0000E000Options:00-00002000 USB00-00004000 SPI_TDME00-00008000 UART_TDMEin the scope, the key leads in totally different options...Any ideas / guessing?

author: PaulAm
author_rank: Frequent Contributor
timestamp: November 16, 2021, 05:12:47 pm
content: Does anyone have any info on options for a LeCroy/Catalyst Conquest SBAE30B USB protocol analyzer?

author: perdrix
author_rank: Frequent Contributor
timestamp: December 14, 2021, 09:44:01 am
content: If you look athttps://www.eevblog.com/forum/testgear/lecroy-ws-434-runs-in-demo-mode-as-a-wavestation/You'll see that I have a WS434 that starts in Demo mode. I suspect that this may be because the options key that tells the 'scope it is a WaveSurfer has become corrupt. This key is held in the DS2433 EEPROM on the PCI card:Section 6.4.1 PCI Board Exchange Procedure says:The WaveSurfer uses option keys to identify the correct model number, memory size and software options.These option keys must be re-installed if the PCI board is exchanged..So how can I re-rewrite the option keys in the EEPROM without using XStream to do so? I'm sure there is a command line way to do it!Wo ist der Würstchenhund wenn man ihn braucht!David

author: Momchilo
author_rank: Regular Contributor
timestamp: December 14, 2021, 01:13:14 pm
content: Hi,I don`t know the demo versions. Can you enter the service menu? Then you could delete all the option keys. But I guess this is not possible.With more effort involved is the variant of the user sixtimesseven. He explained this on page 3 of this thread. He also attached the necessary code for Arduino and a dump of his eeprom. It's quite simple to change the options keys in the EEPROM. But you have to desolder the IC on the PCI board.There is no other known option.Bes regardsMomchilo

author: perdrix
author_rank: Frequent Contributor
timestamp: December 14, 2021, 01:32:07 pm
content: When XStream switches to Demo mode the keys etc. that are presented are AFAIK nothing to do with the real ones.In any case (as it turns out) the EEPROM wasn't corrupt - see other thread.ThanksDavid

author: tv84
author_rank: Super Contributor
timestamp: December 14, 2021, 02:39:34 pm
content: AFAIK, isn't it possible to install the option "00-00000020 DEV" which should allow the removal of other licenses?

author: perdrix
author_rank: Frequent Contributor
timestamp: December 14, 2021, 02:43:16 pm
content: AFAIK, that's not relevant in Demo mode. The Scope Id and Serial no are unrelated to the real deviceDavid

author: tv84
author_rank: Super Contributor
timestamp: December 14, 2021, 02:53:08 pm
content: Isn't DEMO mode just activated by?01-00002000 DEMOSCOPE

author: Momchilo
author_rank: Regular Contributor
timestamp: December 14, 2021, 03:23:52 pm
content: But if you look in the other thread, there are only 2 keys stored in the eeprom.This was posted by perdrix:Code:00000000 F0 00 00 01 02 00 00 02 00 00 FF FF 00 00 42 38 ð.............B800000010 34 33 39 36 41 38 36 38 43 31 34 43 42 34 00 01 4396A868C14CB4..00000020 37 41 34 32 41 34 46 39 30 35 46 42 35 35 33 33 7A42A4F905FB553300000030 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00000050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00000060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00000070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00000080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00000090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................000000A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................000000B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................000000C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................000000D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................000000E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................000000F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00000100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00000110 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00000120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00000130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00000140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00000150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00000160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00000170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00000180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00000190 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................000001A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................000001B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................000001C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................000001D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................000001E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................000001F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................Those keys are for the medium bandwidth (03-00000008 MBW) and long memory option (01-00000002 -L). Other keys aren't installed.

author: tv84
author_rank: Super Contributor
timestamp: December 14, 2021, 05:52:50 pm
content: Quote from: Momchilo on December 14, 2021, 03:23:52 pmI saw that but are you sure that's the only place where config info is stored?In that case where is the "demo flag" stored?

author: ollopa
author_rank: Regular Contributor
timestamp: December 14, 2021, 07:57:31 pm
content: It's simulation, not demo. DEMOSCOPE enables the option mask feature and has nothing to do with simulated outputs.Simulation mode is used for development so that the programmers can develop and debug features on their PCs without having to track down real hardware and remote-debug on it. It's not meant to be entered normally and it allows for X-Stream software to simulate any of the scope families through a registry setting.When X-Stream boots up the first thing it does is attempt to open the Windows kernel driver and query the scope id. If this fails you get the "No hardware detected. Not authorized to run on this system" message box. If this succeeds, however, then X-Stream makes another call to the driver to scan hardware and determine what family of scope it is talking to. If the acquisition board is completely disconnected from the interface card then you may still receive the "No hardware detected" error. If, on the other hand, hardware is detected on the other end but it fails to be identified properly, then X-Stream may fall back to simulation mode.I can only speculate why this happens. It's possible that LeCroy software developers install a custom PCI interface card to their workstations for firmware development and a broken scope looks just enough like the dev card to fool X-Stream into booting up in SIM mode. It's also possible it's just an accident: a default case in a logic branch that was thought not to even be reachable. Or maybe there is some other purpose for this behavior that I haven't though of and I'm completely full of crap.My point is that the model number is not stored in the options, and neither is the SIM mode. There is a SIMoptionbut it is more semantic than functional and it is not related to booting up in simulation mode. Whether an instrument is simulated or not is determined before licenses are enumerated and in fact simulated instruments store licenses in a text file rather than in hardware. So there is a chicken and egg problem and please believe me that the determination of simulation mode is made very early in the boot process before most hardware has been talked to. My yet unconfirmed hypothesis is that it is a JTAG scan of the front end which determines which family the instrument is. The only time the options come into play for determining the model is when accounting for the bandwidth or certain model suffixes such as -M, -A, -B, etc. But it's the hardware that will determine, for example, that your instrument is a WP7KA or a WR6KA. If the card can't talk to the hardware then X-Stream defaults to the WaveMaster family.

author: perdrix
author_rank: Frequent Contributor
timestamp: December 15, 2021, 09:43:23 am
content: And I eat humble pie for misleading folks by saying it was in Demo mode (as distinct from Simulation mode) and also for saying the option keys display didn't reflect the PCI card EEPROM - it does.Hmm Ollopa's post and offline messages don't fill me with hope for recovering this 'scope.> X-Stream defaults to the WaveMaster familyStrangely in this case the simulation is of a WaveStation.David

author: tv84
author_rank: Super Contributor
timestamp: December 15, 2021, 09:58:21 am
content: Quote from: perdrix on December 15, 2021, 09:43:23 amOK, at least that is consistent info.Regarding recovery: a dump from another could help?

author: perdrix
author_rank: Frequent Contributor
timestamp: December 15, 2021, 10:37:46 am
content: Sadly not - the 1-Wire EEPROM is good.Thanks, David

author: perdrix
author_rank: Frequent Contributor
timestamp: December 15, 2021, 05:26:08 pm
content: Which ROM is that?

author: killingtime
author_rank: Regular Contributor
timestamp: March 17, 2022, 06:01:28 pm
content: Hi,Does anyone know if the Waverunner 2 scopes (LT354) can be SW option hacked?I looked on groups.io and didn't find anything, other than a few threads suggesting the options could be purchased from Lecroy.There's a pastebin link ealier in this thread for LTxxx scopes, but that covers quite a few scope versions.Any link to what can \ cannot be enabled appreciated.Thanks.

author: elor
author_rank: Contributor
timestamp: March 31, 2022, 08:55:28 pm
content: himaybe someone have and willing to share it (64-bit version)managed to get a 32-bit version 7.9.1.1 if anyone interested (~250mb)dont know how long it will stay so grab it while its there for your archivemediafire.com/file/1gn7sfmu005l2le/XStreamDSOInstaller_7_9_0_1_32bit.exe/file

author: sixtimesseven
author_rank: Frequent Contributor
timestamp: March 31, 2022, 09:08:58 pm
content: Quote from: elador on March 31, 2022, 08:55:28 pmNot sure if this is a 64bit Version or also a 32bit, can't remember, but give it a try:https://www.mediafire.com/file/58fs25z30rg3ioc/XStreamDSOInstaller_7.9.0.1.exe/file

author: elor
author_rank: Contributor
timestamp: March 31, 2022, 11:20:59 pm
content: Quote from: sixtimesseven on March 31, 2022, 09:08:58 pmlooks like its 32-bit

author: scenz
author_rank: Contributor
timestamp: April 30, 2022, 09:04:42 pm
content: Hello everyone,I have picked up a WR1 LT224 and succesfully used the tools from this thread. But does anyone know how to convert a LT224 to LT344? I have checked the service manual and compared the bill of materials against each other and have only seen that some capacitors and resistors need to be changed to get the LT344 hardware. But I want also the higher samples rates of the LT344 which are probably looked by software. Does anyone know how to unlock these capabilities?Maybe is it possible to change the Board ID of the Mainboard in some way?Thanks

author: calin
author_rank: Regular Contributor
timestamp: June 08, 2022, 06:45:42 pm
content: Oook .. brave IDIOT here. I went the 0xFFFFFFF route on my 7300A and ... the result isAnyone knows where is that eeprom located on 7300A so I take it off and fix it ?UPDATE: Found it !!! and is off the board for re-programmingUPDATE 2: And after the well intended re-education of the EEPROM we are back in business.Actually good that I screwed things up .. gave me a good reason to open the scope and give it a well deserved cleanup; OMG !!! these things are like vacuum cleaners. They don't just sound like one they also suck in dust like one.

author: Jickel
author_rank: Newbie
timestamp: June 20, 2022, 03:05:14 pm
content: Hello everyone.I got the Lecroy Wavesurfer 24Xs-A.But it seems that only a single grid is available ...Are there any options or hacks to enable multigrid like dual grid, quad grid ...?Thank you.

author: Momchilo
author_rank: Regular Contributor
timestamp: July 13, 2022, 10:06:29 am
content: Quote from: Jickel on June 20, 2022, 03:05:14 pmTo unlock this feature, you must hack your scope from a Wavesurfer to a Waverunner model. As far as I know no one did this successful so far.So it is not possible.

author: Martin72
author_rank: Super Contributor
timestamp: July 13, 2022, 06:50:51 pm
content: Yapp,Only the upper class starting with Waverunner got this (in my opinion cool) option.The HDOs got it too, even the HDO4000 - But not the Wavesurfer 4000...

author: MilkmanCDN
author_rank: Contributor
timestamp: August 24, 2022, 01:42:07 pm
content: Has anyone tried to download MAUI software from LeCroy lately? It would appear that they are directing all requested software downloads to their sales channel.

author: alm
author_rank: Super Contributor
timestamp: August 24, 2022, 06:56:43 pm
content: Indeed, it says to email support. 32-bit and 64-bit versions of 7.9.x are already shared below, but any other versions like 32-bit 8.1.2.0 or newer, or any other version, would be very welcome.

author: Momchilo
author_rank: Regular Contributor
timestamp: August 31, 2022, 11:20:53 am
content: I tried this and was forwarded to the contact form as well. But after logging into my Lecroy account, I could download the software again as usual.They added the extra step to force you to create an account before downloading software.

author: alm
author_rank: Super Contributor
timestamp: August 31, 2022, 12:24:19 pm
content: And how do you create a Lecroy account? Looks like they removed that functionality, too.

author: Kosmic
author_rank: Super Contributor
timestamp: August 31, 2022, 01:07:44 pm
content: I wonder now if they are going to try to close non business account?Side note about Teledyne/Lecroy, I bought a scope from them on ebay. They then contacted me and told me they could only sell to business clients. So i filled their form and sent them my business # and everything (a small personal company). They answered back my application was refused for reasons they couldn't discussThen they cancelled the transaction on ebay.Just hope Lecroy is not slowly adopting Keysight politics

author: alm
author_rank: Super Contributor
timestamp: October 14, 2022, 11:39:04 am
content: Quote from: abyrvalg on September 29, 2017, 01:10:10 pmTo make it easier to run on modern systems, aka Python 3.x and PyCryptodome, applythis patchto the original files.

author: spicytofu
author_rank: Contributor
timestamp: October 18, 2022, 03:14:28 pm
content: I was able to gen the keys using the older 2.7.x with pycrypto. One of the first things I did was change me scope to an M model and VHBW. My scope is a 104 Xi and now shows as a 204 MXi (2 GHz). One thing that did not change is the smallest time division, which is 200ps/div. This is the same as when it was a 104 Xi (1 Ghz). Does Lecroy have different front end hardware for the 1 and 2 GHz scopes?EDIT: I see now the time div is tied to the GS/s. I get the time division on my real 2 GHz scope at 5 or 10 GS/s. I guess I will have to feed a 2 GHz signal and compare.

author: darkstar49
author_rank: Frequent Contributor
timestamp: October 24, 2022, 12:26:38 pm
content: Quote from: spicytofu on October 18, 2022, 03:14:28 pmBased on the parts numbers, the 104Xi and 204Xi do have different FE boards, but the same acquisition board, for the 44 & 64, it's the opposite.The few attempts I know about (to increase BW) with LeCroy scopes, were never successful.

author: hpw
author_rank: Frequent Contributor
timestamp: October 24, 2022, 04:48:09 pm
content: Quote from: Kosmic on August 31, 2022, 01:07:44 pmI did get some message to update my "blocked" account, they complained about my used xxx name as this is as an .com business name.So no chance to download or even the account get running up again.This means, since US did some special chip's blocking's to deal with China... this means Teledyne gets involved with this behavior.As Teledyne delivers high speed stuff as rebranded Siglent low end stuff (as 2x price of Siglent).So I expect some, as Teledyne lets build the gear in China or may add required ADC in the US.

author: py-bb
author_rank: Regular Contributor
timestamp: December 28, 2022, 06:28:07 am
content: I've read the forum several times, is it possible to damage/lock an original Waverunner scope this way? I don't quite get the codes, like say I add a WavePro XL does it think it is that? It cannot grow more acquisition memory...There's already a trigger output/multipurpose BNC on the back, and it can already be clocked externally, but I'd like to try CKIO?What's the worst case? I don't really want to fish out the EEPROMSo far though it works great, WP01 thru 3 installed no problems.PRML (Partial Response Maximum Likelihood) would be great too but I'm not sure if there's any risk (of downtime at least)Thanks

author: Momchilo
author_rank: Regular Contributor
timestamp: February 14, 2023, 12:25:36 am
content: This is trial and error. But most of those options should work without any problem. And most of those options that don't work don't cause the fatal error.It is possible to add more function to a scope than you could bought. At least for the Wavesurfer series. I don't own a Waverunner.The memory options shouldn't cause the error. For the old 500 Wavesurfer series it was possible to increase the memory with the option from M to L. So the memory chip(s) was already populated.I know it is annoying but to reprogram the EEPROM is not a big deal. It will take 1-2 hours, a soldering iron and an Arduino. The worst case is not that bad

author: sprit
author_rank: Regular Contributor
timestamp: March 14, 2023, 11:31:47 am
content: Quote from: Momchilo on February 14, 2021, 04:16:52 pmHi SchenkensteinSorry for degging this post but can you make a tutorial how to do that plz? Thank you very muchSincerely

author: Schtolz
author_rank: Newbie
timestamp: July 21, 2023, 06:15:41 pm
content: Hello, colleagues!I wanted to tell you about the attempt to apply the instructions specified in the first post for the HDO4054A model. First of all, I would like to note the need for strict compliance with the instructions attached to the .py files. Namely:1) installing Python version 2.7.9 from the site repository python.org (it is worth mentioning separately that the path must be written in the system variables for correct operation) to avoid problems with the pip utility earlier versions;2) installing Visual C++ version 9.0 for Python from the Microsoft website,3) installing PyCrypto using the utility pip ("pip install pycrypto" in the console).One of the posts included an archive with the most detailed text of the instructions for use. Following them, i managed to get a list of available extensions, generate a key for the required extension, perform its validation and additional verification.The only catch is that XStreamSDO version 8.6 was installed on my oscilloscope, which obviously did not allow the necessary extension to be activated. At the same time, the oscilloscope sees the entered key as a LegacyKey (which indirectly indicates its validity, since even the name of the extension is displayed). In one of the posts there was a link for the XStreamSDO program version 8.0.1. By installing it on the oscilloscope, it was possible to achieve the functioning of the necessary extension (previously. additional testing is needed).In this regard, a number of questions arose:1) Is it correct to use XStreamSDO 8.0.1 for the HDO5054A oscilloscope?2) Can someone provide a 64-bit version of the XStreamSDO 8.6, or the most relevant for my model, since I can't download it due to a strange blocking of my account on the Lecroy website? I wanted to be able to return the XStream to its original position.Thank you in advance for any help!

author: tv84
author_rank: Super Contributor
timestamp: July 21, 2023, 11:46:26 pm
content: Quote from: Schtolz on July 21, 2023, 06:15:41 pmHerev8.9 for 24 hours.

author: Schtolz
author_rank: Newbie
timestamp: July 22, 2023, 03:55:10 pm
content: Quote from: tv84 on July 21, 2023, 11:46:26 pmI'm sorry, sir! could you please send another link? didn't have enough time to download the file

author: alm
author_rank: Super Contributor
timestamp: July 24, 2023, 01:17:07 am
content: Quote from: Schtolz on July 21, 2023, 06:15:41 pmOr instead of using a Python version from almost a decade ago, you can apply the patch I postedhereto make it work with current Python versions and the current Pycryptodome library.

author: alm
author_rank: Super Contributor
timestamp: July 24, 2023, 04:51:13 pm
content: Quote from: RedCali on November 14, 2021, 02:33:33 pmI observed the same with flags 80 options. Looking at the X-Stream 7.9.0.1 options.cfg, it has no 0x08 or 0x80 options listed, so I guess this was stored as two 3-bit digits (0-7) at some point, causing both 0x08 and 0x80 to be interpreted as 0. I noticed that the license generation swaps bytes in the scope ID if the mask is >= 0x40, and tried any other permutation of scope ID bytes with mask 0x8, but none of them was accepted by the scope. Since the 0x08 and 0x80 options started appearing around the same time as the change to a new key generation scheme, I'm guessing the scope won't accept these options with the old key format as is currently implemented in the key gen.

author: tv84
author_rank: Super Contributor
timestamp: July 24, 2023, 05:10:48 pm
content: Quote from: alm on July 24, 2023, 04:51:13 pmNo need to reinvent the wheel. Look at the options listhereand use those flags/bitmasks.

author: alm
author_rank: Super Contributor
timestamp: July 24, 2023, 09:56:42 pm
content: Quote from: tv84 on July 24, 2023, 05:10:48 pmThis is on X-Stream version 8.4.1.4 (same on 8.1.2.0) on a Windows XP / 32-bit WP7300A, which as far as I know is the last that supports Windows XP, and 32-bit support ended shortly after. Generating a key with as flags 0x4201 gives "this key cannot be installed, appears to be invalid".

author: tv84
author_rank: Super Contributor
timestamp: July 25, 2023, 07:46:56 am
content: Quote from: alm on July 24, 2023, 09:56:42 pmFlag is 0x42. The rest is part of the bitmask.

author: alm
author_rank: Super Contributor
timestamp: July 25, 2023, 11:07:58 am
content: Quote from: tv84 on July 25, 2023, 07:46:56 amI didn't get that, thanks! But it still doesn't work. For example I2C-TDME is 42-01002000 according to that file, but the scope also rejects a key for that with the same error about the key being invalid.

author: Azusa
author_rank: Contributor
timestamp: July 25, 2023, 11:30:50 am
content: Does anybody know how to generate key for wavesurfer 3000？It‘s based on WinCE 7,different to normal x86.

author: hpw
author_rank: Frequent Contributor
timestamp: July 25, 2023, 03:59:13 pm
content: Quote from: alm on July 24, 2023, 09:56:42 pmDo you altered some releases to false as6.4.1.4for W2K SP4, while there is IMHO no8.4.1.4or I am wrongWhile there is no such8.4.1.4to downloadHp

author: Azusa
author_rank: Contributor
timestamp: July 26, 2023, 01:47:51 am
content: https://1drv.ms/u/s!AkhYvp-r_jl5jUmbsT1Q8quH-qY9?e=nhKmp88.4.1.4 32bit here.The last version for XP.And the last version of 32bit is 8.6.2.10,you can download it on lecroy's website at model wavesurfer10.but It's for win7 only.

author: Azusa
author_rank: Contributor
timestamp: July 26, 2023, 01:58:23 am
content: Old models are limited.Most of TDME is only allow decode and measurement.So they are the same with old options.Qscape is unavailable.and all three phase power options are only for 8ch HDO or newer.

author: Azusa
author_rank: Contributor
timestamp: July 26, 2023, 03:26:26 am
content: When I install 32bit 8.4.1.4/8.6.2.10 version on WaveRunner 8404.It has new onetouch function.It‘s a large improvement of human–computer interaction.It can do a lot of thing by slide makes use easily.So,Does anyone tried to hack the configmgr.dll to make it possible on older models?

author: hpw
author_rank: Frequent Contributor
timestamp: July 26, 2023, 04:23:19 am
content: Quote from: Azusa on July 26, 2023, 03:26:26 amDoes this means, 8.4.1.4 is not for the older models as WM8000, SDA6000 as DDA5000 series by default?

author: Azusa
author_rank: Contributor
timestamp: July 26, 2023, 11:12:43 am
content: Quote from: hpw on July 26, 2023, 04:23:19 amThe 32bit version higher than 8.1.2.0 is for wavesurfer10 but reserved support for old WM/WP/WR/WS.and it supported other newer models like Zi,HDO,WR8000 even they are 64bit by default.8.4.1.4 32bit can run on old WM/WP/WR/WS.but without onetouch fuction and most of new options are limited.

author: hpw
author_rank: Frequent Contributor
timestamp: July 27, 2023, 10:20:32 am
content: Quote from: Azusa on July 26, 2023, 11:12:43 amOK,as long the 8.4.1.4 deals with existing options and less bugs. Often have an automatic restart of the 8.1.2.0 as in addition touch panel working once than later on as dead or only partial..Hp

author: darkstar49
author_rank: Frequent Contributor
timestamp: August 10, 2023, 03:06:34 pm
content: Quote from: hpw on July 27, 2023, 10:20:32 ambetter behaviour with 8.4 than 8.1 with the touchscreen ?? (I've had issues with 8.1 and W7 recently... very strange, had to launch LecTouchScreenCtrl.exe manually after the DSO software)

author: darkstar49
author_rank: Frequent Contributor
timestamp: August 10, 2023, 03:11:28 pm
content: Quote from: tv84 on July 24, 2023, 05:10:48 pm0x80 support existed, but not public... My Mac had to be replaced 2 times within 6 months, and cherry on the cake, my multi-TB TimeMachine backups have become corruptI'll check if I can find something back.

author: sprit
author_rank: Regular Contributor
timestamp: August 26, 2023, 12:44:36 pm
content: Hello everyone, have a nice day.I have a WS424 scope that is giving me the error "No hardware Detected- Not authorized to run on this system - something like 5c16d-84884...."This behavior occurs after I read data from DS2433. In the process I accidentally erased that chip. currently I have a backup copy of eeprom but don't know how to write back. i use arduino when doing it. I don't have a 1-wire ds9097 programming circuit. Can anyone help me, thanks for your help.Sincerely,JingFeng

author: Nx-1997
author_rank: Regular Contributor
timestamp: August 27, 2023, 03:01:04 pm
content: This worked for me on windows 10. I used an Arduino Nano.https://github.com/meawoppl/eepromTool-ds2433

author: mickab
author_rank: Newbie
timestamp: August 28, 2023, 01:32:07 am
content: Quote from: darkstar49 on August 10, 2023, 03:06:34 pmI have some stability issue with 8.4.1.4 (Hard reset after ~2min).8.6.2.10 works fine for the Waverunner 64Xi-A-N but I'm not able to decode with list.py the option.cfg (no problem to decode options on 8.1.2.0)Did you patch the existing code to decode the options available on 9.7.0.3 @darkstar49 & @tv84?The error is :Code:C:\PythonScript>python list.py options.cfgTraceback (most recent call last):File "list.py", line 8, in <module>db = lec.db.fromfile(argv)File "C:\PythonScript\lec\db.py", line 299, in fromfilereturn LicDB(LicReader(fname))File "C:\PythonScript\lec\db.py", line 35, in __init__DecryptFile(hfi, hfo)File "C:\PythonScript\lec\db.py", line 18, in DecryptFilehfo.write(decrypt(hfi.read(8)))File "C:\PythonScript\lec\crypto.py", line 20, in decryptreturn revd(cipher.decrypt(revd(blk)))File "C:\PythonScript\lec\crypto.py", line 16, in revdreturn pack(">LL", *unpack("<LL", blk))struct.error: unpack requires a string argument of length 8

author: wysp2023
author_rank: Newbie
timestamp: August 28, 2023, 09:14:41 am
content: Quote from: mickab on August 28, 2023, 01:32:07 amChanged key and data arrangement, requiring new key and data storage methods。

author: mickab
author_rank: Newbie
timestamp: August 28, 2023, 10:14:41 am
content: I guess so. But I haven't any clue about the new data arrangement.If anyone has a x86 version of the 9.7.0.3, I will be glad to test if it is still stable on Wr Xi-A

author: wysp2023
author_rank: Newbie
timestamp: August 29, 2023, 12:36:38 am
content: X-STREAM options 8.4.1.4 cannot be decoded and different encryption methods are used, indicating that the encryption method has changed since version 8.4.1.4. But it can recognize old format option codes.

author: paul_gurry
author_rank: Newbie
timestamp: September 07, 2023, 02:22:35 pm
content: Hello. I have 610Zi. Tried to update XStream from 7.6.1.1 to 10.4.0.3. After this update, old options bought from Mfr started to be 30- or 36 bytes coded (Service menu "More options"), but all additional options started to be <legacy option key> and don't work. What to do?

author: tv84
author_rank: Super Contributor
timestamp: September 07, 2023, 06:47:42 pm
content: Quote from: paul_gurry on September 07, 2023, 02:22:35 pmNew options need to be in the newer format. The older ones supposedly were migrated to the new format.

author: paul_gurry
author_rank: Newbie
timestamp: September 07, 2023, 07:42:40 pm
content: The key word: "Supposedly". But not at all. Now I have a choice to downshift, or to find a way to add additional options. The question is it real or not?

author: tv84
author_rank: Super Contributor
timestamp: September 07, 2023, 09:43:50 pm
content: Quote from: paul_gurry on September 07, 2023, 07:42:40 pmWhat is "downshift"? Rollback?And what is real or not?

author: paul_gurry
author_rank: Newbie
timestamp: September 07, 2023, 11:40:22 pm
content: Yes, rollback. And I alredy did it to 7.8.1.1 and I see my additional options again. But the control panel (knobs, encoders) doesn't work at all now after updating its firmware after 10.4.0.3 (((

author: mickab
author_rank: Newbie
timestamp: September 11, 2023, 07:36:16 pm
content: Do you have check the options to flash the microcode during the installation of 7.8.1.1 ?

author: paul_gurry
author_rank: Newbie
timestamp: September 15, 2023, 11:34:30 pm
content: I don't clearly understand your question. The situation is when I updated XStream from 7.8.1.1 to 10.4.0.3, the installation software asked me to update FPGA, Microcontroller and Panel microcode. I said yes and the oscillo lost all additional options. After that, the control panel (knobs, encoders) isn't working at all. And when I tried to downgrade to 7.8.1.1 back, all the additional option were back, but the control panel is still not working.

author: hpw
author_rank: Frequent Contributor
timestamp: September 17, 2023, 08:50:50 am
content: Well, it is wise to upgrade the LeCroy DSO SW using acloned HD, this saved me a lot of pain. So quick to go back as a snap

author: paul_gurry
author_rank: Newbie
timestamp: September 17, 2023, 02:40:53 pm
content: It is not working in my case, because the Panel FW is already changed by 10.4.0.3 ((

author: tv84
author_rank: Super Contributor
timestamp: September 17, 2023, 05:34:26 pm
content: Quote from: paul_gurry on September 17, 2023, 02:40:53 pmHave you retried updating to 10.4.0.3? If so, does it work OK?

author: paul_gurry
author_rank: Newbie
timestamp: September 17, 2023, 09:59:51 pm
content: No. Starterily I've updated from 7.6.1.1. to the latest 10.4.0.3 than downgraded to "medium stable" 7.8.1.1, and again upgraded to 10.4.0.3 and the Panel doesn't work. There were not any interventions inside the instrument. I think there is a bug in the latest firmware...

author: djac
author_rank: Regular Contributor
timestamp: October 23, 2023, 05:54:32 pm
content: I found the following in the depths of the internet. It is a port to Python3 and all the software is concentrated in one file, which makes it easier for inexperienced users to install and use. The instructions in readme.txt are explanatory and contain a summary of the positive and negative experiences from this thread. I have tested it successfully.Regards Dieter

author: tv84
author_rank: Super Contributor
timestamp: December 08, 2023, 11:53:47 am
content: New options available in MAUI 10.5.0.4, since 9.7.0.3.

author: Sighound36
author_rank: Frequent Contributor
timestamp: December 08, 2023, 02:01:21 pm
content: Quote from: paul_gurry on September 17, 2023, 09:59:51 pmThe firmware is quite stable I had five Lecory units running no issue with this version.Also do remember that it depends on which scope you have; the earlier 32bit units can only run up to 8.1.2.0. FW

author: hpw
author_rank: Frequent Contributor
timestamp: December 08, 2023, 03:48:58 pm
content: Quote from: Sighound36 on December 08, 2023, 02:01:21 pmyou should say _8.4.1.4 on 32 bit O;)

author: tv84
author_rank: Super Contributor
timestamp: December 08, 2023, 03:51:13 pm
content: Quote from: hpw on December 08, 2023, 03:48:58 pmBetter: 8.6.2.10

author: hpw
author_rank: Frequent Contributor
timestamp: December 08, 2023, 03:59:48 pm
content: Quote from: tv84 on December 08, 2023, 03:51:13 pm8.6.2.10: Did not worked (yet) as on XP 32 bit dual 3 GHz CPU... so went back ...

author: Tinu
author_rank: Newbie
timestamp: January 02, 2024, 12:54:55 am
content: Quote from: Mr Nutts on May 03, 2018, 06:32:13 am<ScopeID> is shown in the S/W OPTIONS menue (on a LeCroy LT322), using the MAINTENANCE MENU (seehttps://www.eevblog.com/forum/testgear/lecroy-options-recovery/msg1533605/#msg1533605).<ScopeID> has the following format (as an example): 1AB234-C5For gen.py use only the digits before the "-", in this example: 1AB234I have tested this and it works

author: Astralix
author_rank: Regular Contributor
timestamp: January 05, 2024, 07:47:22 pm
content: Hi!Great topic! I got an old LT264ML unit and checked this topic for some "upgrades". However, the topic really quick went down (or upwards?) to the far more modern scopes. I got the cleaned lecroy.py to work on my linux system and could enable quite some options. But the option masks seem not always to match and the big device.cfg that I found seem to be for far more bigger and modern units.Does anyone have a complete list for the LT264ML and family?I also wonder if there are bus analysis functions available for these scopes? I mean, HP/Agilent was full of I2C, UART, LIN, CAN at that time, I guess there should be options for that in the Waverunner LT264 series too? But I may be wrong as this is my first LeCroy ever.The following options worked for me so far:00-0000 0001 WP0100-0000 0002 WP0200-0000 0004 WP0300-0000 0100 MATE00-0001 0000 DEVP00-0000 2000 ATP00-0000 4000 ENET00-0080 0000 JTA00-0100 0000 CCTM00-0400 0000 DMOD00-1000 0000 EMM00-2000 0000 WAVA00-8000 0000 JPROThe following options where ignored00-0000 0010 CKIO01-0008 0000 SPI01-0004 0000 I2C01-0002 0000 USART01-0001 0000 UART01-0010 0000 CANAny more info on the serial bus analysis on the Waverunner2 series?

author: tv84
author_rank: Super Contributor
timestamp: January 05, 2024, 09:33:27 pm
content: Quote from: Astralix on January 05, 2024, 07:47:22 pmCan't you get more info fromhere?

author: alm
author_rank: Super Contributor
timestamp: January 05, 2024, 11:00:37 pm
content: Quote from: Astralix on January 05, 2024, 07:47:22 pmI thinkthis listis pretty complete.Quote from: Astralix on January 05, 2024, 07:47:22 pmAs far as I know during that time Lecroy was more focused on disk drive analysis and analysis of analog signals. It took until the second generation of X-Stream (Windows-based) scopes to get decent mixed-signal abilities.Quote from: Astralix on January 05, 2024, 07:47:22 pmAre you sure WP01/WP02/WP03 do anything? I believe these were for older scopes (9300/9400 series). I'm curious if JPRO does anything. It's the more advanced version of the JTA jitter and timing analysis option that's supposed to be just for the WavePro series. I thought I tested this on my WR LT2 and it didn't make any difference compared to JTA, but I might be wrong. I personally wouldn't mess with DEVP (parameters under development). Other options that work for me are PMSK, DFP, PMT and SMAP. I vaguely recall having problems with the DMOD and CCTM options. Something would hang, but I don't remember specifics.

author: jackcharity
author_rank: Newbie
timestamp: February 13, 2024, 07:55:02 pm
content: Has anyone run into problems with executing 01_list.bat with python 2.7 or 3.0. when I execute with 2.7 no errors but also empty my_options.log file. This may involve an issue with pycrypto but I have tried pycryptodome and pycryptodomex with little success. If Python 3 is used there is some incompatible syntax. Any suggestions? or Anyone interested in exexuting using my options.cfg file?Thank you,JC

author: Vit G
author_rank: Regular Contributor
timestamp: February 14, 2024, 09:53:35 am
content: Hi! By chance, I purchased an oscilloscope with many options, but there is a problem that many of them do not have any descriptions, even on the manufacturer’s website. I'm interested in analyzing the FM signal using the DMOD option. But I couldn’t find anything on how to use it, and I can’t configure it myself, I’m missing something important that I don’t know. (and many other options I don’t have documentation)

author: alm
author_rank: Super Contributor
timestamp: February 14, 2024, 01:23:23 pm
content: Quote from: jackcharity on February 13, 2024, 07:55:02 pmI'd trythis versionwith Python 3.x (3.12 should work fine) and pycryptodomex. See readme.txt for further instructions.

author: alm
author_rank: Super Contributor
timestamp: February 14, 2024, 01:42:08 pm
content: Quote from: Vit G on February 14, 2024, 09:53:35 amLooks like someone enabled all the options with a 00 flags with a wildcard key. A lot of the options, like WP01/02/03 and JTA (superseded by JPRO) are not relevant on the WavePro. And I'd say optical recording and telecom masks will just be filling up menus and crowding out more useful options for most of us. So I'd recommend deleting that key (after recording it) using the service menu (read the first few pages of this topic for instructions), and add more specific keys for the options you really want. Note that this key is missing some options with the 01 flags, like memory size and surface MAP (a pretty neat visualization, I think).It may take some digging in various manuals, not necessarily for your specific scope, to find information about options. About DMOD I find some information in the laterX-Stream (Windows-based scopes) manual(see page 230, actual printed page number, not PDF page number). Try looking if you can find them in the functions menu for a math trace if you scroll through them all? It may also be that this option doesn't actually work on the WavePro 9xx. Have you found it referenced in a catalog or datasheet for this scope? From what I remember, on my WaveRunner LT2 enabling the DMOD option made it hang when I selected it, so I removed the option again.

author: Vit G
author_rank: Regular Contributor
timestamp: February 14, 2024, 02:53:51 pm
content: Thanks, ALM!Yes, indeed, in the datasheet for the 960XL there is no mention of DMOD, so the question is most likely not relevant. I'll try to find information on managing options. Most of all I would not like to make a brick if my attempt fails. The official website has more recent firmware for this device. Should I try to update it or is it better to leave everything as is? I am attaching a photo with hardware options and memory size.(VGA, LAN and CF card via PCMCIA adapter works fine)PS: I apologize for the amateurish question, but can I somehow generate the keys for the necessary options myself? or do they not depend on the serial number of the device?

author: alm
author_rank: Super Contributor
timestamp: February 14, 2024, 04:04:33 pm
content: I am not very familiar with the WavePro 9xx software updates, but as far as they know they just added features and never blocked anything, so I don't think there's any harm in upgrading.I'm not saying that DMOD doesn't work, I'm just saying it didn't on the WaveRunner LT2 (which is a lower end model). It would still be worth exploring the menus, particular the waveform math.I recommend you read through the entire thread. Particularly the posts regarding the WavePro 9xx and WaveRunner LT/LT2, because these are very similar. For the actual software I recommend the version I linked to a few posts higher, which is the easiest to use. The software can both generate (lecroy.py gen) and decode (lecroy.py validate) keys. If you decode your existing key, it should show the scope ID, flags and mask. The mask works like a bit mask (so a bitwise AND of the option number and the mask). The flags has to match the flags your find in wavepro.txt (is technically also a bit mask). So you can construct a single bit mask covering all options for that particular flag. If you pay attention, all option numbers represent a single bit. In addition to decoding the existing key, you can also get the scope ID from your first screenshot (A878C3).

author: Kosmic
author_rank: Super Contributor
timestamp: February 14, 2024, 05:19:47 pm
content: Quote from: Vit G on February 14, 2024, 09:53:35 amIf you go in the Math setup, you should have a "Demodulate" Math Type. From there you can chose Freq as type and some other options.

author: Vit G
author_rank: Regular Contributor
timestamp: February 14, 2024, 05:39:31 pm
content: Thanks, Kosmicyes, there is such a screen but it doesn’t give me anything. In the demodulator settings I entered the carrier values and bandwidth but nothing happens.I suspect that you first need to somehow prepare the signal in function A and then apply a demodulator to it with function B. but this is not certain. I want to say that perhaps not all conditions for the demodulator to work are met.I made a make a short video to make things clearer

author: Kosmic
author_rank: Super Contributor
timestamp: February 14, 2024, 06:10:12 pm
content: Quote from: Vit G on February 14, 2024, 05:39:31 pmI have no idea how to use it exactly but got something working over here. The carrier is detected correctly by using "Find Frequency". Same for the Range and Scale. You probably need to increase Time/Div of the input.

author: Vit G
author_rank: Regular Contributor
timestamp: February 14, 2024, 06:17:28 pm
content: but I don't see the actual modulation. in theory the decoded modulation signal envelope should be shown

author: Vit G
author_rank: Regular Contributor
timestamp: February 15, 2024, 01:49:11 pm
content: To ALM:you're right. the key opens all 00 options.so as not to break anything, maybe I should just add Surface Map key? Judging by what the menu shows me, the XL option already works and there is no need to add it?

author: alm
author_rank: Super Contributor
timestamp: February 15, 2024, 02:17:09 pm
content: I would be more worried about the wildcard key breaking something, or at least cluttering the menus with options I'll never use: the chance that I'm ever going to test an ISDN device for compliance is extremely slim. I prefer to add options I want and see if they add anything. But your choice. Surface map would be a separate key anyway, so there's no harm in adding that (so flags 1 and mask 40). I had actually originally skipped the SMAP option thinking it would be related to hard drive analysis, but later saw indocumentationthat it's a general visualization method that's like a waterfall plot.

author: Vit G
author_rank: Regular Contributor
timestamp: February 15, 2024, 03:27:28 pm
content: Thanks, almThen it’s probably better for me to first spend some time learning the functions of an oscilloscope in order to create a list of the necessary tools for myself. and perhaps i need to think about how i can save the current state of the device by backup the eeprom in order to restore it if necessary.

author: Vit G
author_rank: Regular Contributor
timestamp: February 15, 2024, 07:58:08 pm
content: Hi!OK. After reading the recommendations, i activated only those options that I plan to use (and not all of them). But.. still have a question: My oscilloscope already shows me that it is 960XL, so I don’t know if it makes sense to activate the WPXL key? In my opinion, is he already XL? how to check this?PS: someone wrote that his CF does not work through the PCMCIA adapter. To do this, you need to activate the HDS key, then everything will work.

author: alm
author_rank: Super Contributor
timestamp: February 15, 2024, 10:41:59 pm
content: If the scope shows the correct amount of acquisition memory, then I don't think there is anything to be gained messing with the memory-related keys. It may be that the keys were used to later upgrade the memory, although I haven't seen any mention of post-sale upgrades of these scopes.A while ago I tried to collect information on the options for my WaveRunner LT2. The WaveRunner LT, WaveRunner LT2 and WavePro 9xx have very similar software. It appears to me that some options are documented in the main manual (like extended math and advanced trigger), and others had a dedicated manual for the option (for example DFP, PMA and PolyMask). This manual wasn't necessarily updated every time they released a new scope, since the software remained largely the same until the X-Stream Windows-based / touch screen scopes. I tried to find WaveRunner LT/LT2/WavePro 9xx era or older data sheets and manuals for the options. Attached is what I found. It doesn't include anything on the DMOD option as far as I could find. On the LecroyOwners groups.io group there are archives of application notes. Maybe you'll be lucky and there is an application note about the DMOD option?

author: Vit G
author_rank: Regular Contributor
timestamp: February 16, 2024, 07:19:12 am
content: to alm:big thanks for your help! I will try to find out whether the demodulator can work on this device by experimentationI took this list of options from the groups.io. I think in the WP9xx other options are not relevant.DDA-120 Software OptionsAORM: Advanced ORMCCTM: Extension to JitterPro for RAMBUS testingCKIO: Clock In/OutDDFA: Disk Drive Failure AnalysisDDM: Disk Drive MeasurementDFP: Digital Filter PackageEMM: Extended Math and Measurements PackageJPRO: Enhanced Jitter and Timing AnalysisJTA: Jitter and Timing AnalysisMC01: PCMCIA Memory Card SupportMT01: Mask Tester: ITU G.703MT02: Mask Tester: ANSI T1.102-1993MT03: Mask Tester: ITU-T G.957; ANSI T1.105-1996ORM: Optical Recording MeasurementPMA1: PowerMeasure PackagePMSK: PolyMask PackagePMT: Pulse Mask Test PackagePRML: Supplementary Disk Drive MeasurementsSMAP: Surface MapWAVA: WaveAnalyzer analysis PackageWP01: Advanced Waveform Math Package |WP02: Spectrum Analysis Package |probably not needed for WP9xx ?WP03: Parameter Analysis Package |DDA-120 Hardware OptionsCENT: Parallel Centronics Printer PortCKTR: Clock TriggerCLBZ: Piezo Buzzer AlarmCPUP: PowerPC High Speed ProcessorFD01: Floppy DriveGP01: Internal Graphics PrinterGPIB: IEEE-488 I/O Control BusHD01: PCMCIA Hard Drive Slot (back)I2C: ProBusR232: Serial I/OVGAC: VGA Output Port

author: alm
author_rank: Super Contributor
timestamp: February 16, 2024, 12:00:20 pm
content: Quote from: Vit G on February 16, 2024, 07:19:12 amJTA and JPRO are redundant. JTA is the simpler version for the WaveRunner LT/LT2, and JPRO the more advanced version for the WavePro 9xx. So there's no reason to enable JTA on the WavePro if it does anything at all. The WP01/02/03 options are from older scopes for features that are included by default on these scopes indeed. Features like FFT and parameter histograms.

author: darkstar49
author_rank: Frequent Contributor
timestamp: February 16, 2024, 01:30:02 pm
content: Quote from: Vit G on February 16, 2024, 07:19:12 amnever had a 9xx, but those 3 exist in the 9xx firmware as:"Basic Function Package", "Basic FFT Package" and "Histogram/Trend Package", respectively. I guess that WAVA and EMM would supersede those, indeed...There's also DDNA (disk drive noise analysis), ATP (advanced trigger package) and DMOD.

author: Kosmic
author_rank: Super Contributor
timestamp: February 16, 2024, 03:31:41 pm
content: On my WavePro 960 I have those options installed:Wava, JPRO, DMOD, DFP, MC01, PMSK, PMT and SMAP

author: Vit G
author_rank: Regular Contributor
timestamp: February 16, 2024, 04:15:18 pm
content: to: almThanks for answer.Yes, I left only JPRO. according to the table from the JPRO manual it inherits all previous functions.

author: tv84
author_rank: Super Contributor
timestamp: February 27, 2024, 07:44:18 pm
content: New option names in the MAUI FW 10.6.0.5

author: Vit G
author_rank: Regular Contributor
timestamp: March 23, 2024, 10:00:59 am
content: Hi!Does the WP9xx implement a function or some kind of the Z input emulation for blanking?

author: figgie
author_rank: Contributor
timestamp: April 04, 2024, 06:39:46 pm
content: Quote from: Vit G on March 23, 2024, 10:00:59 amthat is not an option question... i saw a couple of questions regarding working with z axis outside of here with someone making it work for what they needed. you might search for that on your favorite search engine.

author: figgie
author_rank: Contributor
timestamp: April 08, 2024, 07:45:47 pm
content: Ok.On win7... 8.0.1.2. It works ok on a WRHRO66ZI.Of note: only the 16 character keys are present. The 26 character keys do not show in the options.Upgrading to 8.8.0.5, the 16 character keys are present but are not applied. The 26 character keys now show up and are the only ones applied.Anyone have 8.1.0.2 and/or any of the flavors between 8.0.1.2 and 8.8.0.5 in 64bit? Pm me!

author: alm
author_rank: Super Contributor
timestamp: April 08, 2024, 08:26:17 pm
content: Quote from: figgie on April 08, 2024, 07:45:47 pmYou should be able to download versions 8.5.1.1 and 8.6.2.10 from Lecroy if you select the right scope. Playing around with choosing different X-Stream scopes from that era or slightly later may get you more versions than just selecting your scope.

author: figgie
author_rank: Contributor
timestamp: April 08, 2024, 09:00:16 pm
content: Quote from: alm on April 08, 2024, 08:26:17 pmalready tried... all 64 bit software is showing the latest MAUI 10.XThe 32 bit goes to 8.1.2.0 but the installer detects the 64 bit and balks.

author: alm
author_rank: Super Contributor
timestamp: April 08, 2024, 09:24:54 pm
content: Quote from: figgie on April 08, 2024, 09:00:16 pmInteresting, they have removed them since I looked last year. Possibly to prevent unlocking licenses by downgrading?Have you tried if upgrading to versions 10.X works? For the older 32-bit scopes installing an older version officially supporting that scope first (for the drivers) and then upgrading to a later 32-bit function worked as far as I know.

author: figgie
author_rank: Contributor
timestamp: April 08, 2024, 10:05:09 pm
content: Quote from: tv84 on April 08, 2024, 09:39:17 pmmuch obliged sir!

author: figgie
author_rank: Contributor
timestamp: April 08, 2024, 10:07:42 pm
content: Quote from: alm on April 08, 2024, 09:24:54 pmI tried going to MAUI 10.6.x.. that version sees the 16 character keys but does not apply them.

author: figgie
author_rank: Contributor
timestamp: April 08, 2024, 10:56:37 pm
content: ok minor update...8.1.0.1 - shows ONLY the 16 character options and the options work. Unfortunately, it does not show the 26 character options (either normally or in the svc menu). I am thinking from the documentation. 8.1.2.0 was a major release...8.7.0.5 - shows both 16 character (legacy key) and 26 character. 16 character legacy keys though showing are not being applied unlike 8.1.0.1 (highest version tested at this point) with operational options on W7.

author: Schnibbelwind
author_rank: Newbie
timestamp: August 22, 2024, 12:58:33 pm
content: Hi,i have a HDO6000-MS with an X-STREAM 7 firmware running. I like to "recover" some options.Can someone explain me, how I recover the SW options.So what files i need zu extract and so. Thx

author: tv84
author_rank: Super Contributor
timestamp: September 03, 2024, 07:07:05 pm
content: Differences between MAUI v10.8.0.0 and v10.8.0.5, for those interested.

author: dolomike
author_rank: Newbie
timestamp: September 06, 2024, 08:11:28 pm
content: Hey All,I have a Wavesurfer 424 and did an upgrade to an SSD (Transcend TS32GPSD330) and had 2GB of RAM laying around that I put in as well. Boots up fast but for some reason, it displays the "factory calibration data has been moved" and none of the settings seem to have been saved.It appears that if I do make some adjustments, shut down the scope then start it up again, the settings are saved. All of the cal data is there on the D: drive so I think it's just because of the drive change.It seems the registry keyHKEY_CURRENT_USER\Software\LeCroy\Maui\ShowCalibrationDataErrorshould be deleted and everything will be back to "normal". Can someone confirm this?Edit: Found the solution to the serial decode menu not showing as @RedCali had the same issue:https://www.eevblog.com/forum/testgear/lecroy-options-recovery/msg3352494/#msg3352494And one more thing - I can't seem to get the serial decode option to show up. I have the following options set:Hardware Options: ATPSoftware options: DECODE_MEASURE DFP2 EMC ET I2C JTA2 MSURF PMA2 XDEV XMAP XMATHWhat am I missing here?Thanks!

author: minolta
author_rank: Contributor
timestamp: October 08, 2024, 10:52:39 am
content: After many hours I found where licences in Waverunner HRO 6Zi are stored. I have 2 types of these 12bit scopes - newer version of CPU board with some extension card and running with SSD (type WRHRO 66 Zi) and Win 10 and older version with win W7 (type WRHRO 64 Zi).After change all parts between scopes I found licences are stored somewhere on CPU board - not depends on HDD or sampler board etc.It is on Dallas chip - 1wire eeprom 28EC20. And there (although I hoped) are not only some switches if use or not the option - like in most of units, but there are stored a crypted keys. For communicating with this is used SM bus driver (see HW settings in Windows).Structure of data are:- first block has ASCII licence codes for legacy keys.- second block has ASCII licence codes for legacy keys with temporary activation (demo codes)- 3rd - next block has new licence keys, but stored in 16bytes (not in 26bytes)each block has info how many keys are in the block stored and if this is enabled (0x01) or disabled (0x00) key.In the last bytes of memory is saved unique ID called "unspecified value" (see its datasheet). This ID is the same ID in the scope - called Scope ID. This value is in ROM section - not rewritable and by this are calculated licence keys.Using this I was able to bring the licences from one unit to another and is possible to clone licences. Not possible direct copy of Dallas chip (has unique ID), not possible to use bigger memory chip (this Dallas is 20kbit and larger is not available, but is possible to use emulator with some micro. Maybe should be easier when some chip with deeper memory will be produced or with the china "fake" with editable ROM section.Interesting is that the keys are converted back to 16bytes format. I made a test: program new 16bytes key with programmer into Dallas - this key on the scope is visible as 26bytes key (is recalculated by SW).Of coarse, the easiest way is to generate the licence code directly and use them , but I have not find this keygen yet, so for me is now better to build Dallas emulator and use a known combination of ID and keys.Conversion unit 64Zi to 66Zi is done after unnamed option key.I will add the dump of chips.I found some diagnostic list glued under PC board, there are visible all voltages - useful for scope repair. It is on photo.Next interesting is handy cut for USB-B connector on new scope. So Lecroy produces handy made scopes and improvizes in few pcs, this is crazy work..

author: figgie
author_rank: Contributor
timestamp: October 10, 2024, 09:15:31 pm
content: Quote from: minolta on October 08, 2024, 10:52:39 amBe careful.I spoke to Lecroy at length and they informed me that the HRO models (12 bits) of the Waverunner had a massive bug with Windows 10 and they did not support it (and i was talking as a paid purchase). The Non-HRO models of the Waverunner can in fact be upgraded to Windows 10 without issues.More than likely that is the difference in motherboard layouts you are seeing.1 is a HRO model (12 bits) and the other is just a normal Waverunner (8 bits).

author: tv84
author_rank: Super Contributor
timestamp: October 10, 2024, 09:40:30 pm
content: Quote from: minolta on October 08, 2024, 10:52:39 amPlease do.

author: tv84
author_rank: Super Contributor
timestamp: October 24, 2024, 08:52:24 pm
content: Majordifferences between MAUI v10.8.0.5 and v10.9.0.5, for those interested.Code:FEATURES:00000443|FEAT_MARKERS|00000000|00000000|0000|FFFF|enables Markers in the Std cursor dialog|00000003|0000|0000|0000|00000000000000000100000444|FEAT_SDAX_ADV_TIE|00000000|00000000|FFFF|0000||00000003|0000|0000|0000|00000000000000000100000445|FEAT_8CHANNEL_BOARD|00000000|00000000|FFFF|0000|Sets the number of channels per board to 8. This is normally auto-detected in hardware.|00000001|0000|FFFF|0000|00000000000000000100000446|FEAT_SDAX_NRZ|00000000|00000000|FFFF|0000|all the features in the base SDAX package which is what SDA2 and 3 will upgrade to|00000003|0000|0000|0000|00000000000000000100000447|FEAT_SDAX_COMPLETE|00000000|00000000|FFFF|0000|features for SDAX-COMPLETE and SDA3-LINQ|00000003|0000|0000|0000|00000000000000000100000448|FEAT_CLK_BASIC|00000000|00000000|FFFF|0000|features for the basic Clock Expert package. Also enabled by SDA3|00000003|0000|0000|0000|00000000000000000100000449|FEAT_6CHANNEL_BOARD|00000000|00000000|FFFF|0000|Sets the number of channels per board to 6. This is normally auto-detected in hardware.|00000001|0000|FFFF|0000|0000000000000000010000044A|FEAT_DECODE_NEW_24|00000000|00000000|FFFF|0000||00000003|0000|0000|0000|0000000000000000010000044B|FEAT_LPDDR5_D|00000000|00000000|0000|FFFF|enable LPDDR5 decoder|00000003|0000|0000|0000|0000000000000000010000044C|FEAT_QPHY2|00000000|00000000|FFFF|0000|Add QualiPHY 2 shortcut in the Analysis Menu|00000003|0000|0000|0000|0000000000000000010000044D|FEAT_SDAX_SHAPE_FILTER|00000000|00000000|0000|0000||00000003|0000|0000|0000|000000000000000001OPTIONS:0000044E|ZONETRIGGER|0000000D|0000000D|0000|FFFF|Enable Secondary Zone Trigger|00000002|0000|FFFF|0000|FFFF00004303002000

author: with
author_rank: Contributor
timestamp: January 07, 2025, 07:13:19 am
content: Hi allFor Xi and Xs series. The options stored in eeprom are encrypted ?

author: Momchilo
author_rank: Regular Contributor
timestamp: January 07, 2025, 09:44:42 am
content: No, they are not encrypted.

author: onuf19
author_rank: Newbie
timestamp: January 26, 2025, 08:37:51 pm
content: Hi,I tried to enable some of the options into WS24Xs and one of them was the SDM ( Serial Data analysis for scopes ), this made the Xstream to fail and said something about "component not licensed" or something like this. I thought I bricked it and I will need to rewrite the eeprom until I looked in windows registers:HKEY_CURRENT_USER / Software / LeCroy / XStream / Options / XStream > Masked keyI added the SDM to the list of other options which I have masked from the XStream service menu previously and I restart the app and everything start to work again.Masked= SDM, ... [any other option that shall be masked ]If you know which option mask you activate you can add the short name in the register under the key Masked and the app will not try to activate, I suppose that any option can be deactivated by this masking mechanism and once back in XStream, you can delete the option keys from the service menuHope it will help you and others to avoid opening the osci.Regards

author: with
author_rank: Contributor
timestamp: February 01, 2025, 01:05:50 am
content: Did someone a try to open options on hdo ?

author: with
author_rank: Contributor
timestamp: February 01, 2025, 09:20:36 pm
content: Quote from: with on February 01, 2025, 01:05:50 amOk, it works

author: with
author_rank: Contributor
timestamp: February 01, 2025, 10:43:31 pm
content: Hi for everyone. What is "Hawk" series for Lecroy ?

author: ollopa
author_rank: Regular Contributor
timestamp: February 01, 2025, 11:03:31 pm
content: Quote from: with on February 01, 2025, 10:43:31 pmWaveMaster 8Zi

author: with
author_rank: Contributor
timestamp: February 02, 2025, 10:39:20 am
content: I'm playing with the hdo model for now. My scope has 7.6.1.1, and this allows the options.cfg file to be readed dy pycrypto.Maybe someone will need it, so I added an attachment.

author: zhongzuocheng520
author_rank: Contributor
timestamp: March 20, 2025, 08:00:43 am
content: Zone Trigger option for HDO4000 Can this option be unlocked?

author: ollopa
author_rank: Regular Contributor
timestamp: March 21, 2025, 06:47:00 am
content: Quote from: zhongzuocheng520 on March 20, 2025, 08:00:43 amThe Zone Trigger option was added in firmware release 10.9.0.5. It doesn't exist in earlier firmware so you can't enable it without upgrading and using the newer license format.

author: zhongzuocheng520
author_rank: Contributor
timestamp: March 24, 2025, 01:34:08 am
content: Thank you for your explanation. The new code has not yet been cracked by anyone so far.

author: yoyobob24
author_rank: Contributor
timestamp: April 28, 2025, 07:17:02 am
content: I have my 610zi which I sorta messed up but I fixed the options codes with a programmer.I have attached a dump of my eeprom if anyone is interested in it. It has been upgraded to v10. something then back down to v7.I have the install files too if anyone wants the installer for that.You cant do the bandwidth unlocks it seems that acq board has another eeprom that tells the main system what type it is.But you can unlock the mem depth so thats nice.

author: sprit
author_rank: Regular Contributor
timestamp: May 14, 2025, 11:54:51 am
content: Hello everyone. Sorry for digging this up but I have a problem that I hope you can help me with.I have a WR6050 but I don't understand why it turns into a WR6030 after Xstream boots. Is it a bad EEPROM? On the PCI board I see a classic 1-wire eeprom DS2433. I was wondering if anyone has the original dump for this model? Thanks everyone.Sincerely,Feng

author: tv84
author_rank: Super Contributor
timestamp: May 14, 2025, 09:43:44 pm
content: Quote from: sprit on May 14, 2025, 11:54:51 amDoes it have any license?

author: sprit
author_rank: Regular Contributor
timestamp: May 15, 2025, 01:54:42 am
content: Hello tv84, nice to meet you.It used to have some licenses but I don't remember what it was. Now the licenses are gone and the model is changed.RegardsFeng

author: zhongzuocheng520
author_rank: Contributor
timestamp: May 15, 2025, 02:03:29 am
content: It's possible that the DS2433 is damaged or has been formatted, causing the bandwidth option to be lost. You can try re-entering the option to check.

author: sprit
author_rank: Regular Contributor
timestamp: May 15, 2025, 03:11:11 am
content: Hi zhongzuocheng520, have a nice day.Where can I find this option code? on the back of the machine there is no information about the option installed.

author: sprit
author_rank: Regular Contributor
timestamp: May 15, 2025, 07:02:55 am
content: HiI attached a picture below, including the scope id and serial. I thought the eeprom was faulty but it seems not. This scope has never been hacked. Now even the front panel does not work.

author: sprit
author_rank: Regular Contributor
timestamp: May 15, 2025, 07:03:50 am
content: Serial number image on the back.

author: Nx-1997
author_rank: Regular Contributor
timestamp: May 15, 2025, 08:36:11 am
content: @spritHey try entering these serial numbers into your scope and see if that works.Bandwidth: EF82-FECE-C116-FDB1Memory: 6E4E-3068-0945-CF35

author: sprit
author_rank: Regular Contributor
timestamp: May 15, 2025, 09:30:05 am
content: Hello, thanks for helping me. Have a nice day!After I entered the above code the range changed to WR6200. But the front panel still doesn't work, there is no trace on the screen even though I press auto set.The virtual front panel screen appears every time I start it, and I can only operate on it. I will attach the photo below. Thanks a lot anyway. Sincerely, Feng

author: Nx-1997
author_rank: Regular Contributor
timestamp: May 15, 2025, 06:07:58 pm
content: @spritTry this code 2BA7-9252-674E-2E1A this will enable developer options, very useful. use the service manual and go into autocal menu, uncheck everything then run cal. If you see any traces then check everything back and run the calibration again. Not seeing any traces is usually a calibration issues with these scopes.Also, 4135-A7FB-8CBD-4106 for 500Mhz bandwidth option, remove the 2GHz option first.The front panel controls is a usb device that connects to a usb hub on the front panel pcb which connects to the motherboard through the usb 2.0 header. check the voltages and these usb connections. Could also be a driver issues maybe reinstall scope software.Get the manual from here:https://www.opweb.de/en/manufacturer/lecroy/waverunner-6000-series

author: sprit
author_rank: Regular Contributor
timestamp: May 21, 2025, 08:34:25 pm
content: Hi @NX197Thanks for the help, the DEV code you sent helped me a lot.I tried running the calibration in there but it didn't work. I thought it was hardware related so decided to take it apart to check again.Today I decided to open it up again and take a look at the whole thing. And guess what, 2 of these ADCs were on fire. They were grayed out in the middle (LTC1664) and one of them was so hot that it melted the other 12GHz rail (U35)The board was blown up in the picture below (I fixed it) and I forgot to check the other components on that -4V rail. Now I look back and find out.I'm waiting for the parts to arrive and replace them, at least it's progressing xDI'll update as soon as the parts arrive.

author: pmx
author_rank: Contributor
timestamp: June 13, 2025, 06:03:43 am
content: Hi all,I just got a WR2 6050A.The Scope ID doesn't seem to be in the format expected by the python code (page 1 of this thread).I have XXXXXX-XX, but the code seems to expect an hexadecilmal string (without hyphen) .I have the latest firmware fot the 6000A series : 6.5.Maybe there is another Scope ID somewhere, or the firmware has changed since the start of this thread ?

author: pmx
author_rank: Contributor
timestamp: June 13, 2025, 10:23:16 pm
content: I reply to myself... the Scope ID is the part before the hyphen.I managed to run the Python code.Running Python 2.7 and pip on a recent Linux (or Windows) machine has become very complicated !I have 2 options in the scope (Very Long Memeory, and Medium Bandwith). I was able to validate that Ithe Python code returns the same keys and Scope ID.But when I generated other option keys, none of these keys was accepted by the scope (Key invalid...). I used the "X-STREAM options.cfg" file from my scope,There is orobably a "lock" somewhere.Any clues ?(FYI : I re-entered the code of one of the already installed option, as a test. It worked perfectly, the key was accepted. The lock, if any, is selective...)

author: pmx
author_rank: Contributor
timestamp: June 14, 2025, 01:07:16 pm
content: Ireply to mysel againWorks this afternoon (CEST = UTC+2 here...)The only difference is that I entered the codes using an external USB keyboard.And also that I had good night of sleep...Maybe yesterday evening (night...), after a long day at work followed by a battle to install Python2.7 + PIP again, this time in Linux, I had my eyes crossed and accumulated typos !By the way, I almost converted the code to Python3. The database decoding part works perfectly (in the debugger traces) witth pycryptodome, but I still need to find a replacement for cStringIO.OK, I've to admit that my motivation just dropped below zero now that everythink works "as-is"...I do,n't know who wrote the original python code, nor how he or she got the cryptographic details, but they did a good job.

author: pmx
author_rank: Contributor
timestamp: June 15, 2025, 10:01:21 am
content: Hi all,I was wondering if there was a way to perform the factory calibration of a WR 6050A. I've not installed the DEV option yet. Is it the way to go ?The maintenance mode offers the option to save / recall "essential data", I suppose that covers the original factory calibration ?I feel adventurous... I would like to see how far I can go in converting the 6050A into a 6100A or a 6200A. There are a few L and C to change on the board, but I suspect that the factory calibration is different, maybe some compensation filtering too, especially in the higher frequency range.Not that I really need a 2GHz scope... it's more for the sake of the experimentation (as it seems possible to revert the scope to its original 6050A condition).As it been already done (probably, if it is possible...) ?Or any relevant info to share ?

author: pmx
author_rank: Contributor
timestamp: June 15, 2025, 01:04:46 pm
content: I didn't see anything related to a frequency response calibration in the DEV submenus, only delays, gains and and offset corrections, so maybe there is no need for a revised calibration when switching between models?Which would only left the HW mods.

author: with
author_rank: Contributor
timestamp: July 18, 2025, 12:12:56 pm
content: Quote from: pmx on June 15, 2025, 10:01:21 amHiYou'll need to change the LCR circuits in FE.The values for every Frequency level is specified in Service Manual.Here is the table with this values.

author: pmx
author_rank: Contributor
timestamp: July 25, 2025, 06:55:15 pm
content: Thankswith,in fact I've noticed this on the schematics tooSo you confirm that there is no extra calibration step required after changing these components ? (That was the reason of my question)BTW, did anybody experiment with these HW mod ?

author: sq8cbu
author_rank: Newbie
timestamp: July 28, 2025, 06:33:25 am
content: Hello to all Lecroy enthusiasts.I have a WR44MXi with firmware 5.3.2.8. I've tried generating keys for various options, but they either don't work properly (one turned the oscilloscope into a brick) or appear as "BETA-1" and don't contribute anything interesting to the operation.Therefore, I have a question: what should the syntax for generating an option key, e.g., UART, CAN, look like in my case? What mask and flag should I use?Regards AndrzejSorry for the confusion. Everything is cleared up. I used the "validate" script and found my mistake when entering the "flags." Now everything works.