I'm not in a position to test my findings yet but just looking at the hex, it would appear that the 4 bytes starting at address 7ff00054 which read: 30 30 33 30 is the boot code (remember running make boot 30). In the official technomate it reads 30 30 31 30, which is 0010.
Now looking in both firmwares there is an entry which is exactly the same at address 7ff45BB4, so in next it says 0030 and in technomate 0010. Maybe this is the part of the code where it validates the boot version. Hmmm, well I shall give it a play later. I just hope I dont kill the thing altogether. |