I also tracked down two failed protection diodes D303 and D304 that were on the HI signal line, and replaced them with BAS16 as the Keysight 34401A schematic has certain similarities and it typically uses BAV99. That restored the 0.1 and 1V ranges.
I then identified a bad logic FET Q1401 that grounded the hi signal line through a 1k, but couldn't specifically identify the FET model, so swapped in a BSS138 that had the same footprint and likely nominal ratings. But still had bad resistance capacitance and diode ranges.
The only other part I could identify as possibly suspect was a MAX4635 dual spdt switch, but I couldn't easily confirm it, and didn't want to replace a 10-pin soic just for the fun of it.
So if anyone comes across a service manual or schematics then I'd appreciate a pm. Unfortunately the 34401A schematic is significantly different in many sections so I can't even start probing for correct signals.