Most of the reverse-engineering jobs we get called on are emergencies. The touchscreen has already gone blank, nobody has the project file, and production is down. We can still help at that point, but it's the expensive path. The jobs that save our customers real money are the ones that come in before the panel fails.
If your HMI is still running but the program files are gone (installer moved on, backup never existed, file is locked to a panel that's on its last legs), there's a lot we can pull off the panel while it's still alive. Once it's dead, that window closes.
What We Can Read Off a Running HMI
When the panel is on and responding, it's a live document of everything the system does. We can pull:
- Every screen. Navigation, layout, buttons, indicators, data fields. We capture each screen state and the logic that drives transitions between them.
- The tag list. Every register the HMI reads from or writes to the controller. This is the map of the whole system. Without it, rebuilding is guesswork.
- Comms configuration. Which controller, which protocol, which baud rate, which station address. A lot of systems in FNQ are running on settings nobody has documented anywhere.
- Alarm logic. Which registers trigger which alarms, what thresholds, what the operator sees. Alarms are often the hardest part to rebuild from scratch because they encode years of tweaking.
- Recipes and parameters. Any stored product recipes, setpoints, or configuration data that operators have built up over time.
- Version info and change history. Some panels track who changed what and when, which helps if the last person who touched it isn't around to ask.
On some platforms (Weintek with EasyAccess, Kinco with DTools remote) we can do a lot of this without even being on site.
What a Recent Job Looked Like
We recently did a full rebuild of a Weintek HMI where the original project file had been lost years earlier. The panel was still running but showing early signs of failure, and the customer wasn't confident it would survive another season.
The process ran about like this:
- Connected to the panel over Ethernet, captured every screen the operator could navigate to.
- Logged live comms between the HMI and the PLC to rebuild the tag list from what the panel was actually reading.
- Documented the alarm logic by watching which registers triggered which indicators during normal running.
- Rebuilt the entire project in EasyBuilder Pro from scratch, matching the live panel screen for screen.
- Tested the rebuild against the live controller before swapping hardware.
- Handed over the clean, documented project file plus a register map the customer owns.
When the original panel eventually does fail, it's now a straightforward swap. The project file is theirs, in a supported editor, with full documentation.
Why Waiting Is the Expensive Path
Once the screen is dead, most of what's above becomes much harder. We can still recover the situation but it turns into a different job:
- Rebuilding screens from operator interviews and photos rather than from the panel itself.
- Guess-and-test register mapping instead of live comms capture.
- Re-deriving alarm thresholds by watching the PLC run with a temporary panel.
- Days of downtime during rebuild and testing, instead of hours of documentation while the plant keeps producing.
The cost difference is real. Pre-failure reverse-engineering on a mid-sized HMI is typically a day or two of work. Post-failure rebuild on the same panel can run into a week or more, plus whatever production you're losing while the plant is down.
Who This Is For
If any of these sound familiar, it's worth having a conversation now:
- You've got a touchscreen on critical equipment with no project file on site.
- The original installer is unreachable, retired, or closed up shop.
- The panel is old enough that you're nervous about it surviving the next season.
- You've inherited a system and nobody's handed you documentation.
We cover Weintek, Kinco, Touchwin, Delta HMI and more across Cairns, the Tablelands, and all of FNQ. Remote work Australia-wide for panels that don't need physical access.
Get in touch while the screen still works. It's a much easier conversation now than after.