Author Topic: Possible upgrade - Agilent 34410A to 34411A  (Read 14111 times)

0 Members and 2 Guests are viewing this topic.

Offline coromonadalix

  • Super Contributor
  • ***
  • Posts: 7001
  • Country: ca
Re: Possible upgrade - Agilent 34410A to 34411A
« Reply #25 on: December 25, 2022, 02:17:34 am »
An eevblog member tried a few  hacks on the 34411a firmware

the  XS  file with an + at the end   is patched and  the FW updater  too

Never worked for me    and did not brick the meter

Try at you own risk and not liable for any problems


The XS file was compressed again,  but the compression ratio is not the same, they are less bigger,    my meter failed in the last  FW portion, and if one worked fine  it would ask for the 34410a   fw  on the screen
 If you flashback the original keysight software   it will function correctly again

https://www.sendspace.com/file/f5qj0d

added the 34410a   eeprom dump
« Last Edit: December 25, 2022, 02:43:45 pm by coromonadalix »
 

Offline zrq

  • Frequent Contributor
  • **
  • Posts: 341
  • Country: 00
Re: Possible upgrade - Agilent 34410A to 34411A
« Reply #26 on: May 21, 2023, 01:19:38 am »
Going 34410 to 34411 is pretty easy. In the past you just needed swap the names of the bin files so the upgrade package would install the 34411 firmware into your 34410. When it boots it will be unhappy so the other thing required is to edit the model # in the eeprom that is in the back left corner of the unit(8 pin SOIC). You can get an SOIC clip onto it without even removing the PCB. Just edit the instances of 34410 to 34411.

Have you tried this or saw evidence that this worked? I had another look into the 34410A flash dump on another post (https://www.eevblog.com/forum/repair/agilent-34410a-u1001-flash-dump/msg3786704/#msg3786704 ), and it appears to me that the magic number being checked is just in the flash rather than the eeprom. The value checked against in _checkModelNumber() is hardcoded in the boot rom.

Code: [Select]
        006022cc 3c 20 01 c0     lis        r1,0x1c0
        006022d0 38 21 00 00     addi       r1,r1,0x0
        006022d4 28 08 40 00     cmplwi     r8,0x4000
        006022d8 40 82 00 10     bne        LAB_006022e8
        006022dc 39 00 00 00     li         r8,0x0
        006022e0 38 60 00 02     li         r3,0x2
        006022e4 48 00 00 0c     b          LAB_006022f0
                             LAB_006022e8                                    XREF[1]:     006022d8(j) 
        006022e8 38 60 00 01     li         r3,0x1
        006022ec 48 00 08 95     bl         FUN_00602b80                                     undefined FUN_00602b80()
                             LAB_006022f0                                    XREF[1]:     006022e4(j) 
        006022f0 3c 80 90 00     lis        r4,-0x7000
        006022f4 38 84 00 08     addi       r4,r4,0x8
        006022f8 98 64 00 00     stb        r3,0x0(r4)=>DAT_90000008
        006022fc 38 60 01 00     li         r3,0x100
        00602300 3c 80 00 1f     lis        r4,0x1f
        00602304 38 84 84 80     subi       r4=>DAT_001e8480,r4,0x7b80                       = E5h
        00602308 48 00 09 15     bl         FUN_00602c1c                                     undefined FUN_00602c1c()
        0060230c 38 60 23 5a     li         r3,0x235a                             <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<BINGO
        00602310 3c 80 90 00     lis        r4,-0x7000
        00602314 38 84 00 0a     addi       r4,r4,0xa
        00602318 b0 64 00 00     sth        r3,0x0(r4)=>DAT_9000000a
        0060231c 3c 80 ff e0     lis        r4,-0x20
        00602320 38 84 2d e4     addi       r4,r4,0x2de4
 

Offline coromonadalix

  • Super Contributor
  • ***
  • Posts: 7001
  • Country: ca
Re: Possible upgrade - Agilent 34410A to 34411A
« Reply #27 on: May 21, 2023, 10:49:51 am »
In my case nothing worked, some patched xs files, patched firmware updaters  ... a mix of them,  nada  niet

the only thing is : the meter will spit a FW warning  saying it need the 34410a FW


And was not able to receive any data from the internal serial console, all parts and connector is there ??  maybe i have not wired it correctly ? 
« Last Edit: May 21, 2023, 10:53:17 am by coromonadalix »
 

Offline HighVoltage

  • Super Contributor
  • ***
  • Posts: 5560
  • Country: de
Re: Possible upgrade - Agilent 34410A to 34411A
« Reply #28 on: May 21, 2023, 12:46:32 pm »
This hack also did not work for me.
Once I got a real 34411A, I did not try anymore.

 
There are 3 kinds of people in this world, those who can count and those who can not.
 

Offline coromonadalix

  • Super Contributor
  • ***
  • Posts: 7001
  • Country: ca
Re: Possible upgrade - Agilent 34410A to 34411A
« Reply #29 on: May 21, 2023, 03:38:08 pm »
 :-+ :-+

but it seems "easy"  since the only notable difference is the sampling rate   from the L4411a, 34410a  to the 34411a ???  or not  loll


 

Offline zrq

  • Frequent Contributor
  • **
  • Posts: 341
  • Country: 00
Re: Possible upgrade - Agilent 34410A to 34411A
« Reply #30 on: May 21, 2023, 03:40:31 pm »
Now I believe the only reason that the 34411A firmware will refuse to run on 34410A is: the 34410A bootloader at physical address 0x0060230c on the flash (loaded address 0xFFE0230E) is writing a magical word 0x235a to RAM 0x9000000A. This address is then checked by the main firmware (store compressed on the flash too, in two copies) and expecting 0xB643. If it reads 0x235A, the meter will hang with the Load 34410A Firmware message.

One can see the evil instruction (38 60 23 5a     li         r3,0x235a) in the bootloader by querying DIAG:PEEK? 4292879116 and DIAG:PEEK? 4292879118,(4292879118=0xFFE0230E). If someone is willing to remove the flash from the main board and change the 23 5A at offset 0x0060230E to B6 43 with a programmer, then the meter should accept 34411A firmware as well. Someone brave enough can also try DIAG:POKE 0xB643 into 0xFFE0230E. I'm not sure if DIAG:POKE can write to flash, as the implementation is just a memory assignment, so it may not do anything. Alternatively, instead of crafting a firmware update package with the checkModelNumber patched, one can try to craft a file that overwrites the bootloader and modify the 0x235A to 0xB643. I'm not sure how the firmware update works (yet?) but it doesn't sound easy.

I have only a L4411A so have little motivation (and capability) of looking into this deeper, but if anyone interested want a GHIDRA project to play with, I may send it.

Bonus:
Code: [Select]
L4411A> DIAG:PEEK:FIRM? 24,0,0
Elapsed Time Hours: 266.822
This seems to return the total powered on hours of the meter.

OT: I was looking all around in the code to find a backdoor to allow backup of the cal rom, but couldn't. Most accesses are done by a call to iiceeprom and I couldn't find if the memory is mapped somewhere so I can fish out data by DIAG:PEEK?. If someone does find one, please let me know.
« Last Edit: May 21, 2023, 03:44:46 pm by zrq »
 

Offline coromonadalix

  • Super Contributor
  • ***
  • Posts: 7001
  • Country: ca
Re: Possible upgrade - Agilent 34410A to 34411A
« Reply #31 on: May 21, 2023, 05:13:32 pm »
i'll try any commands later   going out   NOT  loll

but removing the flash for now is a no can't do

i dont have a socket for it and for the programmer i have ....  they sell it  pretty darn high  loll  but i would ...

i'm trying to understand you diag poke commands  loll   in RSVisaTester 5.12....

DIAG:PEEK? 4292879116
gave me this ?   +14432

DIAG:PEEK? 4292879118
gave me            +9050

DIAG:POKE 0xB643       gave a beeep ?  and received an VI Error TMO ???

and your bonus
DIAG:PEEK:FIRM? 24,0,0
gave 
Elapsed Time Hours: 9.77694

« Last Edit: May 21, 2023, 05:20:32 pm by coromonadalix »
 

Offline zrq

  • Frequent Contributor
  • **
  • Posts: 341
  • Country: 00
Re: Possible upgrade - Agilent 34410A to 34411A
« Reply #32 on: May 21, 2023, 05:18:25 pm »
Ahhh, I'd not recommend trying without a proper backup. Even you have a cal rom backup, recovering from corrupt firmware may need soldering and the flash programmer.

I think DIAG:POKE will only accept decimal input. And I'd suggest first trying out with a few safer addresses (checked by DIAG:PEEK? to be non-essential data), figure out the syntax (likely DIAG:POKE <decimal address>, <decimal number of the two bytes, big endian>) and then try the real thing.

Also:
+14432 = 38 60
+9050   = 23 5A
These are the expected values.
« Last Edit: May 21, 2023, 05:26:53 pm by zrq »
 

Offline coromonadalix

  • Super Contributor
  • ***
  • Posts: 7001
  • Country: ca
Re: Possible upgrade - Agilent 34410A to 34411A
« Reply #33 on: May 21, 2023, 05:24:13 pm »
DIAG:PEEK?   doesn't work  VI Error IO ?

sorry  noob in this world of commands  loll

and the dangerous command would be  loll   ........  DIAG:POKE   uh oh  endians  ?? 


ok   ill try to find some progammer  loll and or a socket .......


« Last Edit: May 21, 2023, 05:29:59 pm by coromonadalix »
 

Offline TheSteve

  • Supporter
  • ****
  • Posts: 3785
  • Country: ca
  • Living the Dream
Re: Possible upgrade - Agilent 34410A to 34411A
« Reply #34 on: May 21, 2023, 05:32:09 pm »
100% for certain I did change two 34410's to 34411's. This was a number of years ago and I don't have them anymore to compare/verify or repeat the process.
VE7FM
 

Offline zrq

  • Frequent Contributor
  • **
  • Posts: 341
  • Country: 00
Re: Possible upgrade - Agilent 34410A to 34411A
« Reply #35 on: May 21, 2023, 05:36:26 pm »
Hmm, then that's weird. Maybe I missed something?
 

Offline coromonadalix

  • Super Contributor
  • ***
  • Posts: 7001
  • Country: ca
Re: Possible upgrade - Agilent 34410A to 34411A
« Reply #36 on: May 21, 2023, 05:39:12 pm »
Maybe on the older FW ???  i was to speedy to upgrade my meter  damn     it was very old   |O
 

Offline TheSteve

  • Supporter
  • ****
  • Posts: 3785
  • Country: ca
  • Living the Dream
Re: Possible upgrade - Agilent 34410A to 34411A
« Reply #37 on: May 21, 2023, 05:52:59 pm »
I know the only thing I did was trick the firmware update util to program the 34411 firmware into the 34410, I then made changes to the eeprom.
VE7FM
 

Offline coromonadalix

  • Super Contributor
  • ***
  • Posts: 7001
  • Country: ca
Re: Possible upgrade - Agilent 34410A to 34411A
« Reply #38 on: May 22, 2023, 10:31:59 am »
oh found out some solderless clip test  for tsop 56  ... 68$ cad

i hope  my programmer will take it, if not  a new one will come too

 

Offline MegaVolt

  • Frequent Contributor
  • **
  • Posts: 931
  • Country: by
Re: Possible upgrade - Agilent 34410A to 34411A
« Reply #39 on: May 22, 2023, 11:58:44 am »
oh found out some solderless clip test  for tsop 56  ... 68$ cad

i hope  my programmer will take it, if not  a new one will come too
Where is it sold?
 

Offline coromonadalix

  • Super Contributor
  • ***
  • Posts: 7001
  • Country: ca
Re: Possible upgrade - Agilent 34410A to 34411A
« Reply #40 on: May 22, 2023, 01:43:18 pm »
aliexpress   searched for this  and they appeared

Uni-clip 56pin Universal CLIP  ...........

Example
https://vi.aliexpress.com/item/32814634915.html?
 
The following users thanked this post: MegaVolt


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf