Tektronix TDS2004B TDS2XXX hack?

[CaptDon]

I have followed the other thread about the 1XXX, 2XXX, 3XXX series hacks. It mostly pertains to the 3000 series. One poster indicated to remove an EEPROM or FLASH device and reprogram it with his .py script. That is two hurdles for me, can't do the small pitch surface mount stuff at home and how do you run a .py script to program a device?? Seems like he would have supplied a binary or hex file and not a .py??? So my question is this, has anyone found a way to do the hack without opening the unit up? There are two USB ports, one front side and one back side. It would seem this hack could be done via USB? I do have a leveled sinewave generator (SG 503) which goes to 250Mhz so I sould be able to complete a calibration if my 2004B could be hacked to a 2024B. Many have said the upgrade to the 3000 series won't occur until a full calibration is run. Otherwise the scope ignores the upgrade attempt. TDS2024B was the highest operating level for the family of boards in my scope. Thanks for any binary or hex files and a simple way to flash my unit without SMD soldering.

[tautech]

Maybe you missed this post and another 2 posts later:
https://www.eevblog.com/forum/testgear/tds-1000-2000-3000-bw-hack/msg1283087/#msg1283087
https://www.eevblog.com/forum/testgear/tds-1000-2000-3000-bw-hack/msg1283607/#msg1283607

[CaptDon]

The first link is the one pertaining mostly to the 3000 series, one guy mentioned he seems to have upgraded his 2014 to a 2024 but then wasn't sure it really changed the rise times, and two others reported no joy / didn't work. The second link does indicate success IF you unsolder the SMD and program it using a .py script and then do a full calibration (which I can do with a 250Mhz leved SG503 generator). Still means removing an SMD device and running a .py script. I have nothing running Python nor experience with it. However a .hex or .bin would be universal to all of the programmers I own and I could take the TDS2004B to my former workplace and do the SMD work there. Up until those threads died I don't think anyone has been able to enable the ENG MODE or flash the unit via the front or rear USB port which is my actual goal. It was mentioned that there seems to be kernels within the operating system that would allow flashing from a memory stick but it didn't go beyond that.