Agilent E7495A/B Hacking

[Wuerstchenhund]

Since I'm apparently not the only owner of an Agilent E7495 BTS Test Set, did any of the other owners make any progress in terms of hacking that thing?

What I'm particularly interested in is if the predefined waveforms for the AWG can be replaced by less cellphone centric waveforms, or if the built-in speaker could be enabled for demodulation.

If we're at it, maybe someone can find a way to prevent the screen capture setting reverting to white background 

Did anyone make any progress?