Undoing the Next YE-2000 Technomate Patch Mess

[damhy]

Right guys / girls.

I hope someone has done the Next patch for Technomate 5000 receivers and has also been as disappointed as me. Only because that will make me feel better!!!

Anyway I'm trying to sus out how to get round this irreversible patch and its really annoying me. So I am hoping someone is in the same situation so that they can play around like I am and get it fired up again.

Basically I copied the first few lines from the YE-2000 firmware, plonked it in to the original technomate firmware. Now by using PCLink 02.0i and selecting to upgrade the boot, I can load this firmware in to the receiver. I ws even surprised to reset the thing and find my original Technomate splash screen and have a working remote again.

Yes it fired up and worked fine. So, why am I posting this??? Is it to help you all out to restore the thing??? Nope, its because it failed. Failed??? But why when you have the working remote, working splash screen...

Well the problem is that as soon as I turn off the receiver using the switch at the back (clicking the stand by button is fine). When you turn it back on there is nothing. How weird, it worked 30 seconds earlier, and then its gone when you reboot again.

So maybe I have a blind hope that I can restore my receiver. Maybe it is really possible. Someone must have some idea. Someone must want to experiment.

I think the only tip worth noting is that if it screws up then it would appear you can in most cases, use the up button on the front, flick the switch and it will take a boot load again. Not the main program update since this required some info from the receiver.

Come on guys, its got to be possible, I will never meddle with the receiver again, if i can get it back to original state ;)

BTW I Have the Technomate 5500 CI - Plus (which takes the super firmware).

 

[damhy]

Just a bit more info on what I changed, if you look at the original firmware in notepad the first few lines read:
7ff00000 54 00 00 00 03 00 00 00 49 4e 48 31 30 36 62 00
7ff00010 00 00 00 00 01 00 00 00 41 00 00 00 00 00 00 00
7ff00020 00 00 00 00 2d 00 00 00 02 00 00 00 30 34 00 00
7ff00030 00 00 00 00 02 00 00 00 54 4d 00 00 00 00 00 00
7ff00040 02 00 00 00 41 53 00 00 00 00 00 00 04 00 00 00
7ff00050 04 00 00 00 30 30 31 30 22 f0 93 20 26 08 24 40


I switched this with the same lines in the NEXT firmware which are very similar:
7ff00000 54 00 00 00 03 00 00 00 49 4e 46 36 30 39 61 00
7ff00010 00 00 00 00 01 00 00 00 41 00 00 00 00 00 00 00
7ff00020 00 00 00 00 2d 00 00 00 02 00 00 00 30 34 00 00
7ff00030 00 00 00 00 02 00 00 00 59 53 00 00 00 00 00 00
7ff00040 02 00 00 00 4d 33 00 00 00 00 00 00 04 00 00 00
7ff00050 04 00 00 00 30 30 33 30 22 f0 93 20 26 08 24 40


This was enough to fool the receiver to take the code, just a shame it cant remember it.

 

[damhy]

I'm not in a position to test my findings yet but just looking at the hex, it would appear that the 4 bytes starting at address 7ff00054 which read: 30 30 33 30 is the boot code (remember running make boot 30). In the official technomate it reads 30 30 31 30, which is 0010.

Now looking in both firmwares there is an entry which is exactly the same at address 7ff45BB4, so in next it says 0030 and in technomate 0010. Maybe this is the part of the code where it validates the boot version. Hmmm, well I shall give it a play later. I just hope I dont kill the thing altogether.

 

[damhy]

Damn I got nowhere with this, I am now a bit confused. Looking at satellite receiver images I managed to find out that the Nextpower 6000 CI is the equivalent receiver, i put the firmware on. Again remote works fine but dies on reboot.

I guess that it has to be the bootloader, which I cant modify to get it working again. Oh well, I will have to live with my Next receiver.

 

[moordown66]

I might be missing the point here and confusing things so sorry if this is the case, but....

Isn't the next equaivalent for the TM 5000 the Next YE-7500, not 2000?

I've got an ex TM5000 DAPCI which I converted to Next YE-7500 DAPCI and it's fantastic.