EEVblog Electronics Community Forum

Products => Test Equipment => Topic started by: abyrvalg on September 29, 2017, 01:10:10 pm

Title: Lecroy options -=recovery=-
Post by: abyrvalg on September 29, 2017, 01:10:10 pm
Combing pastebin.com reveals interesting things sometimes. Like these sources useful in lost Lecroy scope option keys recovery process: https://pastebin.com/tALEEWDZ

Edit: Too shy thread name. This is Lecroy hacking thread actually. The sources are tested to work for fw versions prior to 8.xxx.
Python 2.7.x, PyCrypto
Title: Re: Lecroy options -=recovery=-
Post by: eliocor on October 01, 2017, 01:49:46 am
Any more details on usage?
Title: Re: Lecroy options -=recovery=-
Post by: darkstar49 on October 01, 2017, 09:27:19 pm

indeed... relatively cryptic...  probably the typical "it was hard to write, it should be hard to read" syndrome...   ;-)
No, more seriously, seems quite well-written, if you download all pieces, it's pretty self-explanatory...

I'm pretty sure this will make some people in the forum veeeeeerrryyyy happy, and others (including some outside the forum...) veeeeerrrryyyyyy angry !!!    >:D


Title: Re: Lecroy options -=recovery=-
Post by: abyrvalg on October 01, 2017, 11:34:07 pm
Remembering Tek’s reaction against similar things I didn’t wanted to make too much noise this time.
Short instructions:
- install Python 2.7.x from python.org
- install VC for Python from here https://www.microsoft.com/en-us/download/details.aspx?id=44266 (https://www.microsoft.com/en-us/download/details.aspx?id=44266)
- install PyCrypto ("pip install pycrypto" in console. Or use any available installer)
- copy all pieces from pastebin to files naming them according to paste names and putting to respective folders
- use gen/validate/list scripts. The optional cfg file some scripts asking for is X-STREAM options.cfg. Either get it from scope or from firmware package. This file contains option bits to names mapping.
Title: Re: Lecroy options -=recovery=-
Post by: eliocor on October 02, 2017, 04:11:32 am
stupid me: I was saving the files with the 'raw' name, instead of using the 'download' option!  :palm:
Title: Re: Lecroy options -=recovery=-
Post by: MilkmanCDN on December 16, 2017, 07:50:15 pm
OK.   So I managed to get everything installed, and downloaded the files.    I have the following:

- gen.py.py
- lec_crypto.py.py
- lec_db.py.py
- lec_key.py.py
- list.py.py
- validate.py.py

I do have C:\Python27 in my path and I've copied all these files to a single directory.

Upon running "python list.py.py" at the command prompt, I'm returned with the following error "ImportError: No module named lec.db"

I did use the "Download" option, however I suspect many of these files should be placed in various different locations.   Any clues on these locations?
Title: Re: Lecroy options -=recovery=-
Post by: alm on December 16, 2017, 10:20:38 pm
Read the filenames on Pastebin more closely. For example, the file you called lec_db.py.py is called lec/db.py according to Pastebin. Try creating a directory 'lec' and moving the file there with the correct name. Same for the other files. If it still does not work, try creating an empty file called '__init__.py' inside the lec directory.
Title: Re: Lecroy options -=recovery=-
Post by: MilkmanCDN on December 17, 2017, 05:32:50 pm
That did it!    I renamed files accordingly, and no dice.    Adding the __init__.py blank file into the lec directory made it work.

More so, I had upgraded my firmware to v8.1.0.1 some time ago and the list.py does not work with the new options file.   However, I did a search on the scope for an older rev options.cfg file and found it.    Use that instead and generation worked like a champ.   

THANK YOU!!!
Title: Re: Lecroy options -=recovery=-
Post by: bson on December 17, 2017, 08:10:11 pm
How did you get options.cfg off the scope?
Title: Re: Lecroy options -=recovery=-
Post by: MilkmanCDN on December 17, 2017, 08:20:57 pm
I have a WaveRunner 104Mxi-A, which is a Windows XP scope.   The file is actually called "X-STREAM options.cfg", so I looked for "options.cfg" using the windows xp search tool.   

I found "X-STREAM options.cfg" in two places.   One dated from 2010 (the original one) and one dated from 2016 (the regenerated one when I updated the Firmware file).

Once you find the file, copy it to a USB stick with windows file explorer.
Title: Re: Lecroy options -=recovery=-
Post by: bson on December 18, 2017, 01:13:08 pm
My WaveSurfer 3000 is also a Windows scope but does't seem to have a windows desktop accessible.  (It runs WinCE, so no, no desktop.) The firmware updates come in a flash container (.FLA) that is executed by Adobe Flash Lite, which I'm not familiar enough with to know how it's used to package firmware and hence how to unpack it...

Edit: on close inspection it's not FLA, they just use that extension.  It's a custom container that starts with two 16-byte 0 padded text strings identifying LeCroy and the release, and then what I assume to be compressed data.  Not sure why they call it FLA but I assume maybe they have some SWF associated with that extension.  I'll take a look and see if anything in it looks like gzip/lz/zip/stuffit...
Title: Re: Lecroy options -=recovery=-
Post by: MilkmanCDN on December 19, 2017, 10:01:09 pm
hmmm.   Can't say I'm familiar with the Windows CE scopes; however, I do notice that there's a menu bar on the top.    With the Windows XP scopes, you can select File->Exit and that will close the Lecroy scope application revealing the windows desktop.    If that works for you, then you may be able to poke around a little further.   My options.cfg file was found in C:\Program Files\Lecroy.
Title: Re: Lecroy options -=recovery=-
Post by: darkstar49 on December 21, 2017, 08:49:42 pm
this works with options DB from software version up to 7.9.x.x, anything after that won't work...
options generation scheme remained unchanged, but the encryption of the database with all possible options has changed from version 8 onwards... thus all options that appeared after the release of the very first 8.x.x.x version are unknown...   :-//
Title: Re: Lecroy options -=recovery=-
Post by: darkstar49 on December 21, 2017, 08:52:47 pm
and about the DB, get a decent package manager / unpacker and find the file directly in the installer package if you can't manage to get it from your scope... but be careful not to use options that are unknown to your current software version...
The options DB file is the same, whatever the platform... get a Windows (x86 or x64) installer for simplicity, even if you're using a WS3000 (for example)
Title: Re: Lecroy options -=recovery=-
Post by: xemax on December 22, 2017, 04:59:32 pm
For WaveRunner LTxxx / WavePro 9xx
https://pastebin.com/GijjVqbQ (https://pastebin.com/GijjVqbQ)
Title: Re: Lecroy options -=recovery=-
Post by: bson on December 22, 2017, 10:48:35 pm
I can't seem to manage to locate any pre-8 installer.  All I could find is a 7.2 installer, but that predates my scope and doesn't have those options in it.  If anyone should happen to have one for say 7.9...
Title: Re: Lecroy options -=recovery=-
Post by: Mr Nutts on May 03, 2018, 06:32:13 am
For WaveRunner LTxxx / WavePro 9xx
https://pastebin.com/GijjVqbQ (https://pastebin.com/GijjVqbQ)

Has anyone successfully used this? Because I can't get it to work. I got the python files setup under Linux. Gen.py tells me it expects some arguments, <ScopeID> (self-explanatory), <flags> (this one isn't), and <mask> (is this the option code, ie WP02?). And what are list.py and validate.py for?

Of course it's great that these files exist but whoever wrote it could have put a bit more information as to how to use them into the files.

Would be great if anyone could give me a hand here...
Title: Re: Lecroy options -=recovery=-
Post by: abyrvalg on May 03, 2018, 10:25:35 pm
Example:
From xemax’s pastebin:
00-00000008   DDM      Disk Drive Measurements
00 is "flags", 00000008 is "mask"
It is possible to combine multiple options with the same flag value to a single key: just OR their masks. So entire xemax’s list can be packed into two keys:
flags 00, mask ffffffff
flags 01, mask 7f

List is for generating the flags-mask list from options.cfg. Validate is for decoding an existing key back to InstrumentID, flags, mask.

Edit: a bonus of using numbers instead of option names: you can generate something even if you don’t have the options mapping. I.e. flags 00 mask ffffffff seems to be a valid combination on all models.
Title: Re: Lecroy options -=recovery=-
Post by: aj4ks on May 04, 2018, 10:56:16 am
The people who have figured this out before you have kept this private.  As such, the mechanism did not change.  Now it surely will for new machines.  Thanks for ruining it for all.
Title: Re: Lecroy options -=recovery=-
Post by: Mr Nutts on May 04, 2018, 12:58:01 pm
Example:
From xemax’s pastebin:
00-00000008   DDM      Disk Drive Measurements
00 is "flags", 00000008 is "mask"

Ok, that makes sense. Thanks a lot!

The people who have figured this out before you have kept this private.  As such, the mechanism did not change.  Now it surely will for new machines.  Thanks for ruining it for all.

Stop whining, it's not ruined for anyone. They can hardly change the key system retroactively for those old non-Windows scopes, and I doubt they care about scopes that had their last software update 15 years ago.

Besides, if you really think they don't know about this then you're deluding yourself. This discussion is one of the first results when googling for "lecroy hacking", so much for your effort of keeping this to yourself   :palm:.

Of course they will change the key system for new scopes at some point, and once these scopes get older and fall into the hands of hobby user they will get hacked, too. It's inevitable.
Title: Re: Lecroy options -=recovery=-
Post by: abyrvalg on May 04, 2018, 11:08:01 pm
The people who have figured this out before you have kept this private.  As such, the mechanism did not change.  Now it surely will for new machines.  Thanks for ruining it for all.
What a pity :palm:
Title: Re: Lecroy options -=recovery=-
Post by: darkstar49 on May 05, 2018, 03:23:12 am
The people who have figured this out before you have kept this private.  As such, the mechanism did not change.  Now it surely will for new machines.  Thanks for ruining it for all.

This is the most selfish and ridiculous comment I’ve read since quite a while here...  :palm:

numerous hacks were published on this forum, and many hobbyists took avantage of that... much more people can now enjoy getting more out of their h/w... but indeed, there’s a risk that YOU might loose the « exclusivity » and that the manufacturer will react (for some models, this btw occurred already BEFORE this was published !!)

Furthermore, some people had this knowledge indeed before this thread popped up, but in the very most cases, not because they worked hard to get to that info, but simply because they took advantage of some insider info that leaked quite a while ago... so, yes, indeed, we blew their little secret...
Title: Re: Lecroy options -=recovery=-
Post by: Warranty on May 11, 2018, 02:14:33 pm
Seems to work fine.
Is there a way to undo this?

Regards
Warranty
Title: Re: Lecroy options -=recovery=-
Post by: Mr Nutts on May 11, 2018, 02:23:49 pm
At least on the non-Windows scopes there doesn't appear to be a way to remove options - or if there is then I haven't found it.
Title: Re: Lecroy options -=recovery=-
Post by: eb4eqa on May 11, 2018, 10:22:35 pm
Well, on the non-windows scopes (at least on the LT series) you can actually delete option keys easily via the maintenance menu:

MAINTENANCE MENU
- Exit any menu.
- Press and hold 3rd menu key AUTO SETUP being key 1)
- Press and hold 4th menu key, 3rd still held.
- Press and hold 5th menu key, 3rd and 4th still held.
- Release only 3rd menu key, leave 4th and 5th still held.
- Release all keys
- Press 6th menu key
- * Sometimes if you get the wrong sequence the scope will
  not react to the right one for some time, try
  bringing-up any menu then exiting. (i.e: "Timebase setup"
  key -> "Return" key and retry above 3,4,5 sequence.)


That menus has A LOT of functionality, be careful not to upset something badly...

Roberto EB4EQA
Title: Re: Lecroy options -=recovery=-
Post by: Mr Nutts on May 15, 2018, 08:15:28 am
Thanks, that did it!  :-+
Title: Re: Lecroy options -=recovery=-
Post by: eb4eqa on May 16, 2018, 05:52:14 pm
 :-+
Title: Re: Lecroy options -=recovery=-
Post by: darkstar49 on May 17, 2018, 02:55:52 pm
btw, for Windows scopes, you can access the Service menu with code 9472... (and delete options from there...)
As said... be careful, you can screw up quite a few things from there...   >:D
Title: Re: Lecroy options -=recovery=-
Post by: Jwalling on May 17, 2018, 03:51:53 pm
btw, for Windows scopes, you can access the Service menu with code 9472... (and delete options from there...)
As said... be careful, you can screw up quite a few things from there...   >:D

Can you add them from the service manual as well?  ;)
Title: Re: Lecroy options -=recovery=-
Post by: darkstar49 on May 17, 2018, 04:27:13 pm

obviously not...   8)
Title: Re: Lecroy options -=recovery=-
Post by: Jwalling on May 17, 2018, 04:57:50 pm

obviously not...   8)

Pity...
Title: Re: Lecroy options -=recovery=-
Post by: darkstar49 on May 17, 2018, 06:17:05 pm

obviously not...   8)

Pity...

indeed...  ;-
but well... this is why this tool exists...  :-/O
Title: Re: Lecroy options -=recovery=-
Post by: Mr Nutts on June 11, 2018, 09:17:44 am
Does anyone know the option code for the Waverunner 2 sample memory configuration? I want to enable the full 8MB memory.
Title: Re: Lecroy options -=recovery=-
Post by: darkstar49 on June 20, 2018, 02:36:50 pm

WR2 had M and L memory options as far as I know... (VL was for WavePro's)

L option is 01-00000002
Title: Re: Lecroy options -=recovery=-
Post by: darkstar49 on June 20, 2018, 02:44:59 pm
Plus, the higher-end 374 and 584 had a 4MPts/ch option, whereas the other models could only get 2MPts/ch.
My guess is that the 4MPts option is the same as -VL, i.e. 01-00000004, but is likely not to work or even to cause trouble on non 374+ models.
Title: Re: Lecroy options -=recovery=-
Post by: Mr Nutts on June 20, 2018, 07:03:25 pm
Got a LT374M today, which has 1MB per channel. Made sure first that there was no option with sample memory definition, and then tried 01-00000002 for L and 01-00000004 for VL. No change in the reported memory size (still 1MB). VL gave me WPVL in the option list but that's it.

The sample memory codes for Waverunner must be completely different from the ones for the Wavepro. My LT374M had one option (MC01) and validate shows the option code is for MC01 only. That means with no option code which sets sample config the scope has M. Strange.
Title: Re: Lecroy options -=recovery=-
Post by: darkstar49 on June 20, 2018, 10:11:11 pm
until now, sampling memory options have always been using the 0x01 flags... I don't believe WR2's are different... but maybe the WR2 had to be ordered with the required memory, I'm not 100% sure it was 'software' upgradeable back then... I think it was for the WP9xx, but that doesn't mean it was the same for the WR2...
Title: Re: Lecroy options -=recovery=-
Post by: Mr Nutts on June 21, 2018, 06:32:26 am
As far as I know the Waverunner 2 comes with full sample memory,same as Wavepro. I looked into the service manual and did a search here (there is a member with a strange user name who seems to really know these scopes inside out and who seems to have provided most of the information about them, but it appears he has been banned?), and everything I found confirms that the sample memory size is software configurable as on the Wavepro.

I probably should try higher option code numbers, i.e 01-00000010, but to test them out like that will take forever.
Title: Re: Lecroy options -=recovery=-
Post by: tautech on June 21, 2018, 08:10:57 am
As far as I know the Waverunner 2 comes with full sample memory,same as Wavepro. I looked into the service manual and did a search here (there is a member with a strange user name who seems to really know these scopes inside out and who seems to have provided most of the information about them, but it appears he has been banned?), and everything I found confirms that the sample memory size is software configurable as on the Wavepro.

I probably should try higher option code numbers, i.e 01-00000010, but to test them out like that will take forever.
Yeah it sucks that Wuerstchenhund was banned as he had a hell of a lot of knowledge to offer this forum about high end scopes and LeCroy in particular. Last I heard he'd asked to beta test SDG6000X so hopefully he's had the opportunity to add his expertise into Siglent products.

Shame others here wouldn't just listen to what he had to say instead of taking it personally.  :-//
Title: Re: Lecroy options -=recovery=-
Post by: darkstar49 on June 21, 2018, 02:21:48 pm
Quote
Yeah it sucks that Wuerstchenhund was banned as he had a hell of a lot of knowledge to offer this forum about high end scopes and LeCroy in particular.

on the other hand, he probably wouldn't have been too happy with this thread... from what I saw, he was not too keen giving out any information around this 'touchy' subject...
Title: Re: Lecroy options -=recovery=-
Post by: Mr Nutts on June 22, 2018, 08:23:19 am
Yes, Wurstunhund was that guy's name. I guess there's probably a good reason why he's been banned, couldn't find anything wrong with the messages he posted, though, and I like how he explained things in a way which even I understand (some topics I found are still way above my level). I did learn a lot about lecroy scopes.

Anyways, I'll probably try some higher numbered codes in 01-. Or can this damage my scope? I don't wanna brick it!
Title: Re: Lecroy options -=recovery=-
Post by: darkstar49 on June 22, 2018, 07:43:23 pm

I don't think there's any logic to prevent tampering (with option keys) in the PowerPC firmware (but I might be wrong...). Situation is different for Windows, although no one could ever say under what conditions something bad would happen... 

To me, the only other option you can try is 01-00000008 (XL), but I just saw an LT584L popping up on Ebay (it has a 'LT584L' label above the display)... and I've never seen Lecroy giving specific model names for 'options' that could be field-enabled (i.e. by key), unless otherwise proven, I'm still not convinced that all memory upgrades are possible via key on the WR2...

Title: Re: Lecroy options -=recovery=-
Post by: Mr Nutts on June 24, 2018, 03:33:17 am
Don't think memory upgrades were ever sold as field upgradeable for any of those scopes, including the Wavepro.  I believe they had to go back to lecroy where the front sticker was changed to reflect the new config.

Title: Re: Lecroy options -=recovery=-
Post by: EEVblog on June 26, 2018, 12:00:07 am
FYI
Lecroy has requested that this thread be removed.
I have told them no, as no Copyrighted material has been stored on this server.
Not a good look for Lecroy.
Title: Re: Lecroy options -=recovery=-
Post by: Mr Nutts on June 26, 2018, 11:28:22 am
And it only took them 9 months to find this thread  :-DD
Title: Re: Lecroy options -=recovery=-
Post by: digsys on June 26, 2018, 12:11:46 pm
Quote from: Mr Nutts
Yes, Wurstunhund was that guy's name. I guess there's probably a good reason why he's been banned, couldn't find anything wrong with the messages he posted, though, and I like how he explained things in a way which even I understand (some topics I found are still way above my level). I did learn a lot about lecroy scopes.
He was a fantastic guy, helped me a lot with my LeCroys. Then a couple fanboys of other brands started intense arguments over nit-picking specs
that never ended ... Unfortunately, Mr Wurst wouldn't ignore them, and seems he paid the price. He's still out there somewhere :-)
Title: Re: Lecroy options -=recovery=-
Post by: 2N3055 on June 26, 2018, 12:20:52 pm
FYI
Lecroy has requested that this thread be removed.
I have told them no, as no Copyrighted material has been stored on this server.
Not a good look for Lecroy.
Not to mention people here are discussing ancient 10 years+ old scopes. Long out of active support.
If they wanted brand promotion, they should give for free unlock codes for old out of support scopes...
I don't see that making a dent in to their sales to their customer base...
Title: Re: Lecroy options -=recovery=-
Post by: digsys on June 26, 2018, 01:06:02 pm
Quote from: 2N3055
... If they wanted brand promotion, they should give for free unlock codes for old out of support scopes... 
They did !? There is a LeCroy owners / users group in Yahoo groups. There are many posts on how to max out all the old LeCroys.
I've bought several kits (memory / PALs etc) from members there, often very cheap ie $15 for a complete maths set.
If you search "Wuerstchenhund Lecroy" there are still all the original helpful posts.
No idea why they're hassling EEVBlog now? It's all old news.
Title: Re: Lecroy options -=recovery=-
Post by: Mr Nutts on June 26, 2018, 02:09:11 pm
Quote from: Mr Nutts
Yes, Wurstunhund was that guy's name. I guess there's probably a good reason why he's been banned, couldn't find anything wrong with the messages he posted, though, and I like how he explained things in a way which even I understand (some topics I found are still way above my level). I did learn a lot about lecroy scopes.
He was a fantastic guy, helped me a lot with my LeCroys. Then a couple fanboys of other brands started intense arguments over nit-picking specs
that never ended ... Unfortunately, Mr Wurst wouldn't ignore them, and seems he paid the price. He's still out there somewhere :-)

I've seen a few of those threads, didn't look like anything more than (ok slighly heated) discussions on technical grounds. And this can get you banned????  :-//

Anyways, there seems to be a guy with a similar name on another forum, I'll see if it's him and if he is then he'll even might help me getting more memory out of my old scopes   ;)
Title: Re: Lecroy options -=recovery=-
Post by: tautech on June 26, 2018, 08:19:39 pm
Quote from: Mr Nutts
Yes, Wurstunhund was that guy's name. I guess there's probably a good reason why he's been banned, couldn't find anything wrong with the messages he posted, though, and I like how he explained things in a way which even I understand (some topics I found are still way above my level). I did learn a lot about lecroy scopes.
He was a fantastic guy, helped me a lot with my LeCroys. Then a couple fanboys of other brands started intense arguments over nit-picking specs
that never ended ... Unfortunately, Mr Wurst wouldn't ignore them, and seems he paid the price. He's still out there somewhere :-)

I've seen a few of those threads, didn't look like anything more than (ok slighly heated) discussions on technical grounds. And this can get you banned????  :-//

Anyways, there seems to be a guy with a similar name on another forum, I'll see if it's him and if he is then he'll even might help me getting more memory out of my old scopes   ;)
Would you mind popping a link to it up so those that need big W's advise can find him ?
Title: Re: Lecroy options -=recovery=-
Post by: abraxa on June 26, 2018, 08:45:26 pm
FYI
Lecroy has requested that this thread be removed.
I have told them no, as no Copyrighted material has been stored on this server.
Not a good look for Lecroy.
Not to mention people here are discussing ancient 10 years+ old scopes. Long out of active support.
If they wanted brand promotion, they should give for free unlock codes for old out of support scopes...
I don't see that making a dent in to their sales to their customer base...

They do still very much sell the options for those who want/need it, though. Allowing customers to get options for "free" certainly does make some think twice whether they will ask Teledyne LeCroy for a quote or not.
Title: Re: Lecroy options -=recovery=-
Post by: darkstar49 on June 26, 2018, 09:46:55 pm

FYI
Lecroy has requested that this thread be removed.
I have told them no, as no Copyrighted material has been stored on this server.
Not a good look for Lecroy.
Not to mention people here are discussing ancient 10 years+ old scopes. Long out of active support.
If they wanted brand promotion, they should give for free unlock codes for old out of support scopes...
I don't see that making a dent in to their sales to their customer base...

Up to some early 8.x version (and from PowerPC models...), the stuff this thread is about allows generating keys for almost ANY past and current models... so no wonder they’re somewhat pissed off... although people thinking of using rogue keys would typically not consider buying those a single second, so the ‘real’ loss should be fairly limited...
But Lecroy perfectly knew their license stuff was ‘getting old’, and they seriously changed it in newer software versions, so that should also make all this somewhat less critical...

Advanced hobbyists have always wanted to use real men’s gear, with all the options, and not a single brand (unless maybe the more ‘exotic’ ones, like R&S, exotic for scopes...) has been left unhacked, at least for the models that become ‘affordable’ for these ‘advanced’ hobbyists on the 2nd hand market... and that trend is not gonna stop anytime soon...  >:D

Title: Re: Lecroy options -=recovery=-
Post by: Mr Nutts on June 27, 2018, 10:48:06 am
Would you mind popping a link to it up so those that need big W's advise can find him ?

https://forum.allaboutcircuits.com/blog/a-new-beginning.1137/ (https://forum.allaboutcircuits.com/blog/a-new-beginning.1137/)

Hope this doesn't get me banned now  :scared:
Title: Re: Lecroy options -=recovery=-
Post by: digsys on June 27, 2018, 11:44:18 am
oooooo nice site ... just got a new member :-) thanks
Title: Re: Lecroy options -=recovery=-
Post by: slbender on July 03, 2018, 06:38:36 am
Hi, my Lecroy 9450A which I believe is about 30 years old ( maybe more ) and I read that there is a gal options upgrade which supports, and allows FFT, something which I would like to do.  But it seems I cannot locate the file to program a gal at this point.

Supposedly this code and file it was given out by Lecroy years or decades ago, and the gal ends in the #02 for the FFT WP02 function.  Anyone know where it is at?  I believe my 866 programmer can make the proper gal part, if I can find both the gal part number and that old program file.  Can anyone locate that upgrade?

-thanks,

Steven
Title: Re: Lecroy options -=recovery=-
Post by: ollopa on July 03, 2018, 06:53:20 am
They're over at https://groups.yahoo.com/neo/groups/LeCroy_Owners_Group/files/9410-20-30-50%20Series%20GAL%20Files/

But I'll attach them in case you don't have access.
Title: Re: Lecroy options -=recovery=-
Post by: MilkmanCDN on July 31, 2018, 08:37:10 pm
Hello,

I'm looking for a x64 bit Xstream software package v8.1.2.0.   Please PM me if you can share.

Many thanks in advance.
Title: Re: Lecroy options -=recovery=-
Post by: Marchello on August 01, 2018, 09:50:10 am
Hello,

I'm looking for a x64 bit Xstream software package v8.1.2.0.   Please PM me if you can share.

Many thanks in advance.

Hello!

And me too, please!
I have v8.1.0.1 and v8.3.0.7 and i need all versions between

BR
Mark
Title: Re: Lecroy options -=recovery=-
Post by: bartver on August 15, 2018, 05:52:51 am
Hello,

Just a few days ago i bought a Wavepro 725Zi. Great !
But, when i couldn't get the thing to run 40GS/s I started searching for the problem, and discovered that the software actually shows it is an 715Zi.
The max samplerate of a 715Zi is 20GS/s....

Is there anyway to check that the hardware is in fact a 715Zi , or that i have a 725Zi and someone used a 715Zi diskimage after a HD crash ?
I already cloned the disk en did a recovery, but that does noet help. the recovery is essentially a Windows Vista Image, and the software is reinstalled from the D: drive which remains intact during recovery, so it still shows as a 715Zi.

Maybe some HW ID via service menu or so ?

Any thoughts ?

Tnx, Bart
Title: Re: Lecroy options -=recovery=-
Post by: Mr Nutts on August 15, 2018, 09:58:43 am
Could anyone have a look if we can get the bits to set memory sizes in the waverunner 2LT?

Here's an uncompressed firmware file of a lt574:
https://mega.nz/#!TbZFkKSL!3prVX1vsuCPJ80U3Dp4QtMq7FAM4GCCBwORdf-QBGBk (https://mega.nz/#!TbZFkKSL!3prVX1vsuCPJ80U3Dp4QtMq7FAM4GCCBwORdf-QBGBk)
Title: Re: Lecroy options -=recovery=-
Post by: darkstar49 on August 16, 2018, 07:28:49 am
The 715Zi has 10GS/s FEs by default, while all other models have 20 GS/s FEs, so the first thing would be to check whether your 715Zi has the 4x20GS/s option or not (in the acquisition menus, you'll see what sample rates are effectively available).

In any case, I'm not too sure Lecroy really ever offered BW upgrade options for the 7Zi (it's mentioned in the data sheet, but I've never seen any BW-upgraded 7zi..., nor are any option codes mentioned for those upgrades, although there are some option IDs in the database for that...), and for the 715, this would have required the replacement of the FEs... as said, check in the acq menu what you have... If you don't have 4 x 20GS/s, you got a 'disguised' 715...  :-(

The model-ID, serial, options & Co are stored on an EEPROM on the interface card, and none of the system menus allow to perform modifications at that level (although some have managed to read & write from the chip, but it was a whole bunch more complicated than it sounds...)

One thing that can eventually confuse the software (but not about BW...this is rather 'cosmetic') is when the computer name (in Windows) doesn't match the scope's serial.

Would be nice to have a few pics of the scope's 'About' and 'Options' screens...


Title: Re: Lecroy options -=recovery=-
Post by: Mr Nutts on August 16, 2018, 09:56:08 am
The 715Zi has 10GS/s FEs by default, while all other models have 20 GS/s FEs, so the first thing would be to check whether your 715Zi has the 4x20GS/s option or not (in the acquisition menus, you'll see what sample rates are effectively available).

In any case, I'm not too sure Lecroy really ever offered BW upgrade options for the 7Zi (it's mentioned in the data sheet, but I've never seen any BW-upgraded 7zi..., nor are any option codes mentioned for those upgrades, although there are some option IDs in the database for that...), and for the 715, this would have required the replacement of the FEs... as said, check in the acq menu what you have... If you don't have 4 x 20GS/s, you got a 'disguised' 715...  :-(

The model-ID, serial, options & Co are stored on an EEPROM on the interface card, and none of the system menus allow to perform modifications at that level (although some have managed to read & write from the chip, but it was a whole bunch more complicated than it sounds...)

One thing that can eventually confuse the software (but not about BW...this is rather 'cosmetic') is when the computer name (in Windows) doesn't match the scope's serial.

Would be nice to have a few pics of the scope's 'About' and 'Options' screens..

Shouldn't this be discussed in a separate thread? This one is about 'recovering' software options which clearly is not the issue with this 715zi  ;)

I don't know what the rules here are but in most other forums throwing your offtopic problem in an existing thread is considered rude  :--

Or are we now discussing every lecroy related issue here?  :-//
Title: Re: Lecroy options -=recovery=-
Post by: darkstar49 on August 16, 2018, 07:42:04 pm
Quote
Or are we now discussing every lecroy related issue here?  :-//

Nope... unless the problem is indeed linked to an 'evaporated' BW upgrade option...   ;-)
Title: Re: Lecroy options -=recovery=-
Post by: bartver on August 19, 2018, 12:00:04 pm
Ok,

if this is the wrong thread i apologize, but i think i'm ok here.

The 725Zi show itself in the 'about' section as 715Zi, the serialnumber shown in 'about' is just copying the systemname from windows, so if you name it 'blablabla' that will show in the scope-software.
Strangely 'about' shows no hardware and only 'HDTV' as a software option, but the licenses section does not show any keys.

On one of the screws in the back is still the 'Lecroy calibration void if removed' sticker and intact, at least i cannot detect any tampering so i think the casing is the original one. Or are these stickers available outside Lecroy ?

It starts to look like the hardware is correct, but there are no licenses active, maybe that's the reason it shows itself as the lowest version.
Does a 725Zi have a 'base'-license ?

Another thread describes all the 'btd' calibration files, i cannot find any on the D: drive, so i'm beginning to suspect a botched hd-recovery.
 
Is there any way to recover original licenses/original serialnumber from eeprom ? i searched the net for it but did not find it.

regards,

Title: Re: Lecroy options -=recovery=-
Post by: ollopa on August 19, 2018, 08:12:44 pm
The 7Zi series have the HDTV option enabled automatically, no key required.  The base model with no hw options is the 715Zi, the 725Zi has the LBW (low bandwidth) hardware option, the 735Zi has the MBW option, etc.

LeCroy uses LC filters to set the front end bandwidth so adding bandwidth options won't get you anything you don't already have on your acquisition board.  If you don't have a bandwidth option, however, you are limited to 10GS/s and 20GS/s rates in the horizontal setup -- so that's not a reliable way to tell what your actual hardware is.  You need the option and then to measure the actual cutoff frequency of your scope.

I've only seen the serial number revert to the hostname if there's a missing driver or it's unable to talk to the acquisition board.  Is your scope working with real signals / are you sure it's not in simulation mode?

P.S. in simulation mode it will not read your licenses from hardware so your symptoms would be consistent:  Hostname in place of serial number, no licenses visible, no LBW option so your scope reverts to the base 715Zi model.  Check the device manager and make sure all drivers are installed, particularly the the driver for the acquisition board.
Title: Re: Lecroy options -=recovery=-
Post by: darkstar49 on August 20, 2018, 11:01:50 am
The 7Zi series have the HDTV option enabled automatically, no key required.  The base model with no hw options is the 715Zi, the 725Zi has the LBW (low bandwidth) hardware option, the 735Zi has the MBW option, etc.

@bartver: be aware however, that you won't typically see these 'bandwidth' options in the scope's about screen(s)... only in 'service' mode...
Title: Re: Lecroy options -=recovery=-
Post by: ollopa on August 20, 2018, 03:38:10 pm
The BW options are still visible in the list, they just have a blank description unless viewed after logging into the service menu.
Title: Re: Lecroy options -=recovery=-
Post by: rhb on September 07, 2018, 02:17:07 pm
I don't seem to be able to find anything at pastebin except a list of file names.  Are the files gone?  I'm not familiar with the site.

If they are gone can someone who has the files PM me?
Title: Re: Lecroy options -=recovery=-
Post by: MilkmanCDN on October 04, 2018, 05:10:37 pm
Has anyone tried to remove codes through the service menu?   When selecting some of the codes (I2C/SPI serial decode and others) with Flags = "01", the "Remove Key" button is grayed out.   
Title: Re: Lecroy options -=recovery=-
Post by: ollopa on October 05, 2018, 11:25:40 am
That's right, some options flag the license as non-removable in the service menu.
Title: Re: Lecroy options -=recovery=-
Post by: dxl on October 06, 2018, 08:57:11 pm
I think you need the DEV License to be able to remove all kind of licenses.
Title: Re: Lecroy options -=recovery=-
Post by: ollopa on October 06, 2018, 09:12:52 pm
I think you need the DEV License to be able to remove all kind of licenses.

 :o   You're right.  I didn't know you got that power with DEV!
Title: Re: Lecroy options -=recovery=-
Post by: MilkmanCDN on October 18, 2018, 11:31:12 pm
Can you remove the DEV key after installing?
Title: Re: Lecroy options -=recovery=-
Post by: darkstar49 on January 30, 2019, 07:05:08 am
Can you remove the DEV key after installing?

YES ! 

Luckily... as this seems the only way to 'cleanup' demo keys and other things that appear (at the first sight) to be there for good.
Title: Re: Lecroy options -=recovery=-
Post by: imett on April 27, 2019, 06:43:04 pm
I did, i bricked my scope with  ffffffff option.. I restore  it with a 1-wire eeprom  programmer for Dallas eeprom. :wtf:
Title: Re: Lecroy options -=recovery=-
Post by: imett on April 29, 2019, 12:39:51 pm
Once again,
the  options code are stored in a 1-wire eeprom,  with the same code xxxx-xxxx-xxxx-xxxx give by well descripted above procedure...

now the question is:

if i store manually  the code into the 1-wire eeprom :-/O, the  software 8.x.x.x could accept the options?

Could be true for this reason, if i've an instrument with the 7.2.0.5 software version (for example...) i buy an option, that software store this option into the 1-wire eeprom and everythings run
Now i upgrade the software with a 8.x.x.x version, my option must work again maybe with the same code  :-+


Title: Re: Lecroy options -=recovery=-
Post by: Mechatrommer on April 29, 2019, 03:54:49 pm
Once again,
the  options code are stored in a 1-wire eeprom,  with the same code xxxx-xxxx-xxxx-xxxx give by well descripted above procedure...
which eeprom? on the pci card? or on the acquisition board below?
Title: Re: Lecroy options -=recovery=-
Post by: imett on April 29, 2019, 06:43:59 pm
in my instrument (44xs) there is a small card connected to the pc main board (mini atx) with a spartan 6 and that eeprom from maxim
(i don't want reveal the chip name.... :-[) 
Title: Re: Lecroy options -=recovery=-
Post by: imett on April 30, 2019, 06:43:35 am
News, i found the schematics of wavesurfer 424 and with surprise also that model has this eeprom  >:D
Title: Re: Lecroy options -=recovery=-
Post by: imett on May 01, 2019, 01:14:28 pm
Fresh news about 8.x.x.x and options...
Online i've found an WS24MXs with 4 option keys , LBW (is WS24..) ATP,HDTV,MSURF and software version 8.1.2.0.

i run for each keys the command  "validate", it return the correct scope id and option name!! :scared:

for example the key "67f2-9132-b9fd-247g" is MSURF option and it works on 8.1.2.0  !! :-DD

now the question is: maybe, with 8.x.x.x they change how the options are accepted and stored but the options keys are the same. Is true?? :o
Title: Re: Lecroy options -=recovery=-
Post by: darkstar49 on June 02, 2019, 09:47:07 am

The point is that 'old' options are not 're-encoded' by default when upgrading (as far as I know)... it's not even known whether old options are affected at all by the new encoding scheme(s)...
It's not 100% clear neither from what exact version things changed... ever tried the latest one (8.6) ?

But it would be interesting to see if you could wipe one of these 'old' options, and re-install it with the same key ?
If you have 8.x, could you try installing some (recent) decoding option (like CAN-FD) generated with the pre-8.x keygen ?

And for sure all post-8.x options are unusable, as the options file (i.e. the database with all possible options) is encrypted with a new scheme.

Title: Re: Lecroy options -=recovery=-
Post by: darkstar49 on June 02, 2019, 09:54:33 am
in my instrument (44xs) there is a small card connected to the pc main board (mini atx) with a spartan 6 and that eeprom from maxim
(i don't want reveal the chip name.... :-[)

 :popcorn:  Lecroy uses a DS2433 EEPROM on their interface boards, that's known for years...
Title: Re: Lecroy options -=recovery=-
Post by: F4409 on June 09, 2019, 09:03:22 pm
Hey,
can anyone confirm that the DEV key can be deleted?
I have to delete an grayed out key!
What function does the DEV key/option provide furthermore?

Thanks in advance!
F4490
Title: Re: Lecroy options -=recovery=-
Post by: Aleks on August 18, 2019, 03:19:04 pm
Has someone found an update to list.py that can decrypt/list the options from FW 8.x.x.x onward?
Title: Re: Lecroy options -=recovery=-
Post by: Ivan_Vetrov on September 25, 2019, 08:53:06 pm
Ok