Refurbishing a Tektronix TDS7104 Oscilloscope

• Introduction
• The TDS7104
• Common Failures
• Make an Image of the Hard Drive
• CR2032 Backup Battery Replacement and Display Brightness
• Do NOT Remove the Front Panel
• Scope Disassembly
• A Failed Attempt astatine Switching complete to an SSD
• Reinstalling from Scratch: Windows 2000 Pro aliases Windows XP?
• Not All TEAC CD-224E Drives are the Same
• Installing Windows 2000 Pro connected an Old Machine done a Virtual Machine
• Burning the Windows 2000 Pro Installation Disk onto a USB Stick
• Booting from USB Stick pinch a Plop Boot Manager
• Installing Windows 2000 Pro
• Installing Special TDS7104 Drivers
• Installing Tektronix Firmware
• Installing TekFonts
• The Scope is Working!
• Re-enabling the Existing License
• Cleaning Up
• The End
• References
• Footnotes

A small complete a period ago, I ran into a Tektronix TDS7104 astatine the Silicon Valley Flea Market, where else?

Other than immoderate soiled buttons, a fewer smudges present and there, and the usual assortment of calibration and plus search tags, the portion was successful fantabulous cosmetic shape, but the value tag of $700 was measurement retired of line: arsenic I constitute this a try-before-you-buy TDS7104 tin beryllium had connected Craigslist for the aforesaid price.

But Paul, the seller/liquidator, has a wont of saying “I’ll make you a deal” and he did earlier I moreover asked: $300. That’s still a batch by flea marketplace standards, but a beautiful bully value for a TDS7104… if you tin get it to work.

At home, the scope powered up correct distant and it booted consecutive into the main scope application. Other than a surface that was measurement excessively dim, everything seemed fine.

But erstwhile I tried it again a fewer hours later, it sewage stuck astatine the BIOS surface pinch a CMOS artillery error.

In this blog post, I spell complete the steps I took to get the scope backmost successful apical shape.

The TDS7104 is simply a 4-channel oscilloscope pinch 1 GHz bandwidth and a maximum sample rate of 10Gs/s, though that’s only imaginable erstwhile utilizing 1 channel. The sample rates drop to 5 Gs/s for 2 channels and 2.5 Gs/s for 3 aliases 4. Even by today’s standards, the specs transcend those of hobbyist people oscilloscopes, deliberation Rigol and Siglent, though there’s a value to salary successful position of weight, 39 pounds, and volume: they’re arsenic wide and deep arsenic the earlier TDS700 series, for example, and overmuch taller. The TDS7054 is its little brother, figuratively speaking only. In the aforesaid chassis, it has a 500 MHz bandwidth and 5 Gs/s.

Unlike much precocious TDS7xxx models, the 7104 and 7054 person BNC connectors alternatively of custom Tektronix ones that require probes aliases adapters pinch prices that transcend today’s price of the scope itself.

Introduced mid 2000, these scopes initially ran Windows 98 but they must person upgraded soon aft to Windows 2000 Pro Embedded, because that’s what excavation has and it has components with a precocious 2000 timestamp.

The PC motherboard has the little-used NLX shape factor. Mine was a RadiSys SF810 with a Socket 370 and a 100 MHz front-side bus. Originally, these scopes shipped with a canine slow 550 MHz Celeron, I sewage fortunate pinch a 850 MHz Celeron. The fastest compatible Celerons pinch 100 MHz FSB spell up to 1.4 GHz, but they’re pricy. You should beryllium capable to find 1.1 GHz versions for astir $20 connected eBay.

Unlike my Agilent 54831, the 640x480 LCD surface has resistive touch power which makes it possible to usage the precocious scope features without the request to link a mouse.

In summation to the PC motherboard, location is simply a PowerPC-based controller committee that runs VxWorks for illustration galore different Tektronix products of that time, and a ample acquisition board.

In summation to a fewer hardware options specified arsenic a 4M/channel sample memory, up from a 500k default, there are plentifulness of package options for precocious measurements: jitter testing, USB certification testing, etc. Both the package and hardware options tin beryllium enabled pinch a licence key. To the suprise of nary one, that protection strategy was hacked agelong clip ago…

According to the labels connected the chassis, my scope came from the PSD laboratory astatine Cypress Semiconductor, wherever it was utilized for things for illustration measuring high-bandwidth signals specified as the artillery existent connected the Apple TV Remote. :o)

As always, you’ll find a bunch of hobbyists trying to revive this benignant of scope connected the EEVblog forum, Youtube and immoderate blogs. Here are the astir communal failures:

1. PC motherboard CMOS backup artillery dead
2. PowerPC backup artillery dead
3. Hard thrust dead
4. Power proviso capacitors leaking

I was fortunate and only had to woody pinch issues 1 and 3, benignant of.

A dormant PowerPC backup artillery will springiness you considerably much activity than what’s described in this blog post. After booting up the TekScope exertion will show the scatter screen, but it will bent location forever. You will request to:

• Take isolated the scope moreover much and return retired each the PC components: floppy, HD, CDROM drive, motherboard.
• Replace the apical headdress of the Dallas DS9034 NVRAM pinch a caller battery.
• Connect pinch RS-232 to the PowerPC controller board.
• Enter a bunch of values to shop successful the NVRAM.

You tin elaborate step-by-step instructions here. You should besides cheque retired this repair video by Feedbackloop.

A dormant powerfulness proviso is different communal problem. It often will forestall the scope from booting up astatine all. There are plentifulness of discussions astir this connected the Eevblog forum, here is 1 that has the reverse engineered powerfulness proviso schematic attached. Often, each that’s needed is to switch immoderate leaking capacitors.

I didn’t person to do immoderate of that…

Whether the instrumentality boots aliases not, your first measurement should ever beryllium to make an image of the difficult drive, a 6 GB IBM Travelstar successful my case. Like my Agilent 54831, I thought that I’d person to unfastened the lawsuit to entree the drive, but you tin conscionable push on the spring-loaded achromatic screen successful the backmost and propulsion the thrust sled out1. Nice!

Remove the thrust from the sled, plug it into a USB-to-IDE adapter, and extract the data. On Windows, I usage HDD Raw Copy Tool.

I often usage Linux for this benignant of maintenance, but since this scope is simply a Windows 2000 machine, I ended up needing a bunch of Windows-only tools.

The Travelstar HD was moving connected fumes, because HDD Raw Copy Tool ran into a number of corrupt sectors during the copying operation. I was lucky, the impacted files were related to the French Windows 2000 manual, but it shows the value of making an image of the thrust ASAP.

You’ll request to unfastened up the lawsuit to get to the PC motherboard CR2032 backup battery. See the adjacent 2 sections for that.

After installing the caller CR2032, the scope booted backmost up again, but the TekScope window had immoderate weird corruption and waveforms didn’t render right. This was because the Chips & Technologies 69000 graphics paper settings had been changed to a 256 color palette mode. It needs to beryllium group to True Color 24-bit mode.2

Notice the beingness of 2 video cards: an Intel 810 integrated graphics paper and the Chips & Technologies 69000. The second is responsible for driving the LCD screen. It has typical hardware to render oscilloscope waveforms successful overlay mode: they are sent by the acquisition committee to the video representation done DMA3 without CPU intervention.

While we’re connected the taxable of the display: aft installing the CR2032, the LCD display was still very dim, to the constituent that I was researching replacement CCFL backlight tubes. That turned retired to beryllium wholly unnecessary: the TDS7104 doesn’t person a measurement to control the strength of the LCD backlight. The erstwhile users must person utilized it successful a acheronian lab and dialed down the brightness by adjusting the gamma settings successful Windows:

I’m putting this conception earlier the Disassembly 1 to make judge those pinch a debased attention span get the message: chances are precocious that you don’t request to region the beforehand panel.

And that’s bully because, dissimilar the TDSnnn bid scopes, the beforehand sheet has some integrative tabs that are very easy to break. That said, moreover if you do break them (I did!), the consequence is not catastrophic and you should beryllium capable to put the sheet backmost firmly wherever it belongs pinch nary 1 noticing a thing.

(Click to Enlarge)

The TDS7000 Series Service Manual makes it sound easy enough:

To region the trim ring, descent the level extremity of a soldering assistance into the side slot connected the trim ring. Press in, past assistance up to hook it underneath, past pry up.

And from the pictures, it’s arsenic if you tin region the beforehand sheet without removing anything else. That conscionable didn’t work…

The beforehand sheet consists of aggregate click tabs: 1 connected the near side, 1 connected the correct and then a bunch astatine the apical and the bottom. So acold truthful good. However, the near and correct broadside also have 2 descent tabs that spell into the metallic rails. If you assistance the near and correct tabs excessively much, these integrative descent tabs break off.

So you request to beryllium very observant to make judge that you don’t assistance the integrative trim excessively much, and that you descent the sheet retired while it stays parallel pinch the display.

Or… you don’t touch it: you tin do each PC maintenance, including replacing the floppy drive, without removing the beforehand panel.

I will proceed my contented of documenting the disassembly of trial instrumentality successful excessively overmuch detail because nobody other does it. Even though the work manual technically describes how to do it, a fewer pictures spell a agelong measurement to make it easier.

To entree the wrong of the scope, you request to region much than 30 screws. On the plus side, they’re each Torx-15 screws and they’re each the aforesaid length, truthful you don’t need to interest astir keeping way of which screw goes where.

Still, it takes a while and it validated my caller acquisition of this cordless screwdriver, recommended by Shrirar over astatine The SignalPath.

Unbutton the accessory bag

This took maine longer to fig retired than I want to admit: you tin conscionable unclick the bag from the chassis, but the buttons tin beryllium very tight and if you’re not observant the fabric can tear. Use a flat-head screwdriver correct adjacent to each fastener to lever it off.

Put the scope upright connected its backmost feet

It’s an different arrangement, but the easiest measurement to dismantle the scope is by putting it on its backmost feet: you don’t request to region immoderate screw from the back!

Let maine erstwhile again singing the praises of a sturdy instrumentality cart: it’s truthful overmuch easier to walk astir the cart than to musculus astir bulky, dense trial instrumentality connected a table.

Remove the apical panel

4 screws done the accessory container buttons (“snap studs”) hole the apical sheet to the chassis.

After removing this panel, you could region the broadside panels already, but I recovered it overmuch easier to region the bottommost sheet next.

Remove the bottommost sheet and loosen the achromatic beforehand connector trim

Next, region the 5 screws of the bottommost sheet arsenic good arsenic 3 screws that support the achromatic trim of the beforehand BNC connectors successful place.

The achromatic trim doesn’t request to beryllium wholly removed, only loosened because otherwise it will soon beryllium successful the measurement of immoderate different screws.

The bottommost sheet shall now beryllium removed though. Just descent it down a spot and return it off.

In the image above, you tin spot 2 screws that aren’t marked successful red. That’s because they don’t support the bottommost sheet successful place. But if you consciousness for illustration it, you mightiness arsenic good region them now too.

Remove the grip and broadside panels

With the bottommost sheet gone, the broadside panels are a breeze to region aft unscrewing the handle.

I lied: these 2 screws are different than the others. But they’re a different colour and intolerable to get wrong.

Remove the 2 expanse metallic parts

With the outer covers removed, you’re now staring astatine the expanse metallic RF protection enclosure. It consists of 2 parts, each portion covers 2 sides. Remove each the screws, take disconnected the bottommost portion and past the top.

Note really immoderate of the bottommost screws are hidden underneath the BNC connector cover. That’s why you had to region its 3 screws of the achromatic trim.

Congratulations! For those who didn’t support track: you’ve removed 32 screws!

After removing the panels, you now person entree to the acquisition board at the bottommost and the PC motherboard astatine the top:

One broadside has thing but cooling fans, but from the different broadside you tin spot the power proviso and an RS-232 larboard that you will request to link if the backup battery of the PowerPC controller committee expires.

If you request entree to those items, you’ve only done the easy disassembly part. On my unit, some the PSU and the controller backup artillery were good truthful I was done.

Note connected the image supra that the beforehand sheet has been removed. You do NOT have to do this for beautiful overmuch each restoration cases! And you really shouldn’t.

Reinstall the bottommost expanse metallic cover

All of my activity connected the scope was connected the PC motherboard and I had to put the scope back successful its horizontal position. To make judge that I didn’t accidentally damage the acquistion board, I put the bottommost expanse metallic screen backmost successful its place.

I’ve been utilizing CompactFlash cards successful the past to switch ailing difficult drives. They work, but unless you bargain a much costly “industrial” card, they don’t person built-in deterioration leveling support. That is not a problem connected a Rohde AMIQ that runs DOS, but connected an OS for illustration Windows pinch switch space, it could be4. So this time, I chose a 64 GB mSATA SSD ($35) and an mSATA SSD to IDE 44 Pin 2.5” adapter ($15)5.

The modular measurement to move distant from a failing difficult thrust to an SSD is to erstwhile again usage HDD Raw Copy Tool to constitute the image to the SSD and that is that. I tried that pinch the 64 GB SSD, and while the scope sewage past the first-stage footwear process, it errored retired during the 2nd stage erstwhile it tries to bring up the Windows GUI pinch a STOP: c0000218 {Registry File Failure} error.

Older systems often had issues pinch partitions larger than 32 GB, so I bought a 32 GB mSATA SSD instead, $3 cheaper for half the capacity, but I sewage the aforesaid error.

Just copying the thrust image to an SSD worked good for others, but for maine it was a dead-end that I spent galore hours trying to get around. I yet decided to reinstall each the software from scratch, which was a full different adventure.

I had wanted to debar reinstalling the OS from scratch because I expected to tally into a bunch of driver issues, but successful the extremity I had nary choice. While a number of group have reported that Windows XP tin activity connected immoderate of the TDS7104 motherboards, I decided to stick pinch Windows 2000 Pro because I cognize that useful and I didn’t person a pressing need for much functionality, immoderate that mightiness be.

The scope has Windows 2000 Pro Embedded, but I wasn’t capable to find an installation disk for that and the regular type useful good too. The ISO record tin beryllium downloaded from the Internet Archive.

The licence cardinal that’s printed connected the backmost to the scope does not activity pinch the regular Windows 2000 Pro. The Internet Archive 1 has a cardinal that works, and different valid keys are conscionable a Google away, but I didn’t moreover request one: I was ne'er asked for a licence cardinal during the Win2k installation connected the scope.

The modular measurement to instal Win2k Pro is pinch a CDROM drive. Unfortunately, the thrust didn’t activity which meant I had to unfastened the full instrumentality again to instal a replacement drive.

The TEAC CD-224E laptop thrust successful my TDS7104 sewage detected conscionable good by the BIOS and successful Windows, but erstwhile you inserted a disc successful the drive, neither the BIOS nor Windows could publication from it.

Since the RadiSys motherboard doesn’t support booting from USB stick, I decided to replace the TEAC CD-224E laptop drive with a ‘new’ 1 that I sewage from eBay for $20.

Unlike the difficult drive, the CDROM thrust can’t beryllium removed without opening up the TDS7104, but erstwhile the lawsuit is open, the effort is minimal. I first removed the floppy thrust to person a spot much maneuvering state pinch the cables, but it’s not really necessary.

Unplug the CDROM IDE cable

Remove 2 screws

The CDROM thrust sits successful a metallic enclosure pinch a mini adapter PCB that converts the CD-224E 50-pin slimline IDE connector to a modular PATA/IDE connector.

I tested the surgery thrust pinch the adapter PCB and my USB-to-IDE dongle connected my laptop to make judge the rumor was pinch the thrust and not the CDROM disc, and that didn’t work, as expected. With the caller CD-224E/dongle combo, my laptop could publication the installation CD conscionable fine, but erstwhile I installed the caller thrust successful the TDS7104, the BIOS couldn’t even detect the drive! I tried each BIOS mounting nether the sun, but nary luck.

There are galore versions of the CD-224E, each pinch the aforesaid dimensions and slimline IDE interface, but intelligibly they don’t each behave the same. The type of the surgery 1 is type A93 (2000), the caller 1 is CD0 (2005). You tin find A93 drives connected eBay, but $69 is measurement excessively precocious for thing that I’d beryllium utilizing precisely once.

(Another dead-end)

It is allegedly imaginable to instal Windows 2000 Pro connected an aged instrumentality without CDROM and USB larboard by utilizing a virtual machine. The process is convoluted:

• mount the installation CDROM ISO and the SSD onto the virtual machine.
• go done the first shape of the installation process until asked to reboot.
• now move the SSD to the aged the instrumentality (the scope) and proceed pinch the installation there.

I erstwhile again spent a fewer hours getting this to work, but the scope ne'er managed to make it to the Windows installation GUI.

Alright, truthful I’m moving retired of options and USB is astir the only retention interface left. The scope can’t footwear from a USB instrumentality directly but location is simply a measurement astir that.

Let’s first create a bootable USB instrumentality pinch the Win2k installation ISO connected it.

Most of the time, you tin usage a inferior for illustration Balena Etcher to pain a CDROM ISO onto a USB stick, but of course that doesn’t activity for the Windows 2000 Pro installation CDROM.

Instead, you request to usage WinSetupFromUSB to hole the USB stick:

• Download, install, launch
• Select the USB instrumentality arsenic target
• Select Auto format pinch FBinst and usage the FAT32 record system
• Add to USB disk: Windows 2000/XP/2003 Setup
• Select the mounted Win2K Pro ISO thrust arsenic source
• Press “GO” to transcript Win2K Pro onto the USB stick

Plop Boot Manager makes it imaginable to footwear from a USB instrumentality connected machines that don’t support it.

It goes for illustration this:

• copy the plpbt.img image from the plpbt-5.0.15.zip archive to a floppy disk with a instrumentality for illustration WinImage, Rawrite32, or RawWrite for Windows.6
• boot the Plop Boot Manager from floppy disk.
• the footwear head has a USB wide retention instrumentality driver
• select USB arsenic footwear device

I tried difficult to debar the floppy disk way because my acquisition pinch floppy drives on old trial instrumentality has been abysmal: nary of them worked. Having nary choice, I tried to transcript the footwear head image pinch my USB floppy thrust and… that didn’t activity either. All these years the USB floppy drive, freshly bought from Amazon, was the culprit!

Since the scope still worked good pinch the IBM HD, I utilized its ain floppy thrust to put the image onto the floppy disc and that worked.

After mounting the BIOS to let booting from floppy, the scope booted into the Plop Boot Manager conscionable good and it was capable to footwear the USB instrumentality pinch the Windows 2000 Installation ISO.

Plop doesn’t support USB hubs. The RadiSys motherboard has only 1 USB larboard which will beryllium occupied by the USB stick, truthful you’ll astatine slightest request a PS/2 keyboard to do anything.

With the quiet 32GB SSD plugged into the scope, the installation of Windows 2000 Pro was uneventful. There are 2 phases: the first 1 uses matter mode and chiefly copies each the basal drivers onto the SSD. The instrumentality past reboots and continues the installation successful Windows GUI mode from the SSD, though the USB instrumentality is still needed successful a later stage.

The TDS7104 has a bunch of specialty hardware that needs dedicated drivers, but those are not needed to get the OS up and running.

At agelong last, I was capable to spot this image:

There is simply a awesome GitHub repo with a bunch of TDS7000-series software, including this Drivers directory. The README.md says that the driver should work for Windows 98 and XP, but the Chips and Technologies video driver decidedly did not activity for Win2k!7

I utilized Driver Collector to extract drivers from the original difficult thrust and that worked fine. You tin find these drivers here.

The 4 specialty drivers are for these components:

• Front panel

  This is the USB Device that’s listed nether “Other Devices”

• Texas Instruments PCI-1225 CardBus Controller

  You request to instal this driver twice, erstwhile for each port. Windows installed a default PCI-1225 driver for this, but that 1 doesn’t work, hence the exclamation people adjacent to it. The sanction of the driver .inf file is unsup.inf, for unsupported? Confusing, but that’s the 1 to use.

• PCI2PCI bridge

  That’s the Other PCI Bridge Device.

  

• Chips and Technologies 69000 video driver

  The default Windows driver for the C&T 69000 is what makes the surface work when moving Windows, but it’s not capable to render measured signals in the TekScope application. For that, you request to update to the Chips and Technologies (Asiliant) 69000 driver.

  

The TDS7104 and TDS7054 firmware v2.5.5 can beryllium freely downloaded from the Tektronix website. The installation was painless, conscionable launch the executable.

The TDS7104 has a convoluted architecture wherever the PowerPC connected the controller committee tin access files connected the difficult thrust of the regular PC that are located successful the c:\vxboot directory. Since the controller backup artillery connected my scope was still successful bully condition, I didn’t person to do thing special: the vxboot directory was created automatically during the firmware installation.

The Tektronix scope exertion uses civilization TrueType fonts to render immoderate of the symbols screen, e.g. the rising separator trigger symbol. Without those fonts, it will show some Greek characters instead.

To hole that, you request to download the tekfonts.zip file, unzip it, and instal the 3 fonts.

Despite rendering those Greek characters, those font files were already installed connected the new system, truthful I had to delete them first and reinstall the caller file. Things looked good after that.

To delete aliases instal the fonts, do Start -> Settings -> Control Panel -> Fonts.

And pinch that, I yet had a moving TDS7104 pinch SSD!

The clip from pressing the powerfulness fastener to having a waveform connected the surface was overmuch lower too: from 2min50s down to 1min35s.

One point was missing, though: the precocious jitter licence option.

The aforesaid GitHub repo that I mentioned earlier besides has an unlock options directory pinch scripts to alteration and validate licence cardinal features. On the Eevblog forum, plenty of group person been capable to usage it, but it’s not arsenic user-friendly arsenic different licence key schemes.

Most of the time, licence keys are additive, pinch 1 licence cardinal per characteristic that must be enabled. On the TDS7104, location is 1 licence cardinal that enables each features astatine once.

The validate book shows really that useful pinch the licence cardinal and serial number of my scope:

We tin spot really that agelong drawstring of gibberish contains:

• the serial number 21551
• the exemplary number TDS/DSA/DPO7104
• a UID that is really conscionable a operation of the serial number and the model
• a CRC
• an 18-byte aliases 144-bit bitmask

I tin recreate the licence cardinal by feeding these parameters backmost successful the procreation tool:

I had to subordinate the 18 bytes into 1 72-digit hex number.

The licence cardinal that comes retired doesn’t lucifer the original one, but aft entering it into my scope, it worked conscionable the same:

The scope is very forgiving astir the licence keys: precocious case, little case, dash aliases nary dash, it each seems to work. You tin moreover trim the number of hex digits successful the licence enable mask to a definite extent, and the licence cardinal will still work:

What remains is the mobility which spot maps to which feature? This station successful the eevblog forum has you partially covered here:

Note really JA3, precocious jitter analysis, so has spot 14 group to 1.

Some group conscionable usage a disguise of FFFFFFF....FFFF.

Some of these study devices tin erstwhile again beryllium recovered successful the aforesaid GitHub repo, aliases connected the Tektronix website.

This is each theoretical, of course. I don’t deliberation I’ll ever person a hobbyist request for any of this…

The last enactment is cleaning. This scope was successful exceptional condition, isolated from for the knobs on the power panel.

The knobs person a bladed anti-slip furniture connected them that is simply a digit grease magnet. Removing that layer pinch isopropyl intoxicant makes the knobs look for illustration caller without a noticeable quality in control. Just beryllium observant astir utilizing 99% isopropyl, I deliberation it attacks the plastic. 90% was fine.

If immoderate knobs are missing aliases cracked, the ones of a TDS220 are identical. You tin bargain knobs new aliases connected eBay, but they’re expensive. If you really request a few, you mightiness beryllium amended disconnected buying a philanthropist TDS220 instead.

And pinch that, the scope is fresh to beryllium deployed to a support successful my garage. One time I’ll need thing pinch this benignant of firepower but for everything else, a mini scope with lower specs is measurement much practical. I for illustration the scope amended than the Agilent 54831 truthful that will probably deed Craigslist astatine immoderate point.

All words successful this blog posts were written by a human.

• TDS7000 Series User Manual

• TDS7000 Series Service Manual

• Eevblog forum - Tek CSA7404/TDS7000 repair project

  This is the spot to go. Chances are that each your questions will beryllium answered present arsenic long as you person the patience to publication done 41+ pages of discussion.

• xdevs - Tektronix TDS7000 bid repair

  Repair of a CSA7404. Many things use to the TDS7104.

• 41J Blog - TDS7054 repair

• exit-failure/tds7000 Github Repo

  Lots of resources present that I’ve utilized for this blog post.

• TDS7104 powerfulness proviso schematic

  Created by Xyphro and attached to this Eevblog forum comment. This schematic was created done reverse engineering the PCB, truthful proceed pinch be aware and use astatine your ain risk. I didn’t verify immoderate of the accusation successful it.

• Youtube - Feedbackloop - Tektronix TDS7104 oscilloscope repair

  Replaces the PowerPC NVRAM pinch an FRAM that doesn’t request a battery.

• Youtube - John Tinkers - Fun pinch Oscilloscopes: SCOPEZILLA! Tektronix TDS7104 1GHz Monster

  Shows the process of disassembly and immoderate of the PowerPC NVRAM reprogramming.