How to hack app modules on MDO4000B?  - Page 1
Forum section: electronics / testgear

author: AlexBorro
author_rank: Newbie
timestamp: July 30, 2018, 01:00:17 am
content: Hi folks,I'm new here on this forum. I've digged it for hours looking for an application modules hack for a Tek MDO4054B-6.I came across the threads [MDO3000 Hacking] and [Someone has hacked MDO4000C?], but could not find a way to enable the applications on -B series, just the -C one.I found a doc in [MDO3000 Hacking] showing how to access manufacturer mode on -B but nothing about enabling extra applications. I'm interested on enabling protocol decoders for LA.Any hint on that?Cheers.Alex.Enviado de meu SM-G930F usando o Tapatalk

author: andyturk
author_rank: Frequent Contributor
timestamp: July 30, 2018, 02:09:52 pm
content: Quote from: AlexBorro on July 30, 2018, 01:00:17 amIt's pretty easy if you don't mind building a tiny board that impersonates the $$$ modules from Tek.Order this board from OSHPark:https://oshpark.com/shared_projects/pE9Ff8iuand then follow these instructions:https://www.scribd.com/doc/236065278/Cloning-Tektronix-Application-Modules-pdf

author: AlexBorro
author_rank: Newbie
timestamp: July 30, 2018, 06:38:05 pm
content: Thanks @andyturkI've saw this project for MSO2000, but I was not aware it is compatible to MDO4000B series. I found nothing about such use on internet.Cheers.Alex.

author: andyturk
author_rank: Frequent Contributor
timestamp: July 30, 2018, 07:00:55 pm
content: Quote from: AlexBorro on July 30, 2018, 06:38:05 pmSeems like not that many people hack the MDO4 series, but those modules are signal compatible with earlier scopes. The DPO4BND and MDO4TRIG options should unlock everything on the scope.

author: AlexBorro
author_rank: Newbie
timestamp: July 30, 2018, 07:12:28 pm
content: That's awesome.I saw in other post you have (or had) a MDO4034B. Did you unlock these app features using this "board" hack?By the way, reading the project, it says to write the SKU in the EEPROM but didn't mention the offset. Should I just write "DPO4EMBD" starting on address 0x00?Cheers.Alex.

author: andyturk
author_rank: Frequent Contributor
timestamp: July 30, 2018, 07:33:15 pm
content: Yes, I have a fully unlocked MDO4034B-3 which now operates as a MDO4104B-3 (with all the software options).It's been a while since I programmed the "module" I built, but now that I look at my notes, I think I followed these instructions (more or less):http://forum.tsebi.com/viewtopic.php?f=4&t=113

author: Howardlong
author_rank: Super Contributor
timestamp: July 21, 2019, 10:07:16 am
content: Google seems to hide the following thread, which is referred to earlier. It’s essential reading if you’ve stumbled on this thread.https://www.eevblog.com/forum/testgear/someone-has-hacked-mdo4000c/msg1464991/#msg1464991

author: analogRF
author_rank: Super Contributor
timestamp: December 30, 2020, 11:45:46 pm
content: Quote from: andyturk on July 30, 2018, 07:33:15 pmwould you mind saying how you upgraded the BW from 350MHz to 1GHz?

author: Neuro
author_rank: Contributor
timestamp: July 07, 2024, 11:05:22 am
content: Here is a hex-file for an M24C16-based unit for a DPO4000. It can unlock 4 options.In my case I've unlocked the DPO4AUTO, DPO4LMT, DPO4PWR and DPO4USB options in my DPO4054.