This guide will help you fix the latest "There is a Serious Problem
With Your Reciever" nag for the 2700 Expressvu IRD. After following
this guide you will be able to have married sub autoroll using
Turnip 4 Beta. If you want to use Winvu, there is a new version
called Winvu 2007 that will not show the nag. This guide will
assume you have some basic knowledge and know how to download files
off the internet and
unzip
them. Please note I take no resposiblity for any damage you may
cause as well as any laws you may be breaking. Please read the
disclaimer on the home page. This guide is for educational purposes
only. Enjoy.
Difficulty Level
This is rather difficult to complete. It involves connecting a
JTAG to your IRD and dumping your TSOP, the rewriting an edited
image. I give it a 8 for difficulty on a scale of 1 to 10.
this is just a free hex editor that I found. You can use any hex editor you want but the examples in the guide pertain to this hex editor
Soldering Iron
any wattage will do
Connecting the JTAG
The first thing you're going to do is hook up your JTAG connector
so you can dump your current TSOP. Here is a diagram and a
table. For more information, see the
JTAG guide
.
2700 IRD
Back of IRD (2700)
+-----------------------+
|1 2 3 4 5 6 7 8
|Large ground pad
+-----------------------+
Front of IRD (2700)
Please note where the front and back of the IRD is.
Here is the pin out for soldering the JTAG reader to the 2700 IRD:
DB 25 Pin #
IRD Pad Number
2
2
3
3
4
4
5
6
13
5
18-25
Ground Pad
Dumping the TSOP
The next step is to dump the current image on your TSOP. With
the JTAG connected to the pads on the bottom, plug in your IRD
but make sure the light on the front is off. Open up
Jkeys
. Your boxkey should be displayed right away. If you don't
see your box key, then you don't have a good connection with
the pads on the bottom of your IRD. Make sure none of your
wires are crossed (sometimes my resistors touch each other,
and they shouldn't). Once you get that figured out and the
boxkeys displayed you are now ready to dump your TSOP. To do
this, enter the follwing numbers into JKeys:
Start Adress: 7FF80000
Bytes: 80000
After that, press "Save Mem". A window will pop up asking you
what you want to save you dump as. Give it a name of your choice.
This is an important file and you shouldn't delete it because
it holds your current TSOP image in case you ever need to load
it back on to your TSOP. Once the dump is finished you can
close JKeys. Leave your JTAG connected to your IRD though because
we will need it later.
Creating a new Image
The next step is to determine your IRD's Build Config. To do
this, but your regular smart card in the IRD (I'm assuming you
are subbed because the whole point of this guide is to allow
for married sub autoroll using Turnip 4 Beta) and press Menu>
6>
1>
3 and you should be in your System Info screen. Where it says
"Software Version" you will probably see something like E308Cxxx-y.
You build config is the Cxxx part. You will either have CAxx
or COxx where the x's are variables. E308 is the latest firmware
that is causing the nag and we want to change this. If you
have CAxx Build Config. then you want to download
E225CAxx
firmware and if your Build Config. is COxx then you want to download
E225COxx
firmware. Once you've downloaded that older version of firmware
you are going to want to open your hex editor. I found a free
hex editor on the web just by doing a search. You can download it
here
. Extract the hex editor to a new folder on your desktop.
To create a new folder right click then put your mouse over
"New" then select "Folder". Give the folder a name like Hex
Editor or something. Now open up your hex editor and open the
file you just dumped from your JTAG from the "Dumping your TSOP"
section of this guide. Now, click on edit near the top and
then select copy. A window will pop up. You want to type in
the following:
Start copying at offset:
x7ff90
Copy up to and including offset:
x7ffcb
Number of bytes to copy:
60
What you have done now is copy important information from yout
TSOP dump such as your IRD number, Boxkey and Bootstrap to your
clipboard.
The next thing you want to do is open up the old firmware that
you downloaded off this site and paste that information you
just coppied into it. To do that, open the file you downloaded
off this site (either E225COxx or E225CAxx) in the hex editor.
Now click edit and select "Delete". Now
TYPE
in (It is important you TYPE because you don't want to accidently
paste in what you just coppied before):
Star cutting at offset:
x7ff90
Cup up to and including offset:
x7ffcc
Number of bytes to cut:
60
Now that you have removed that info, you now want to paste in
your information. Click on "Edit" then select paste. Select
the "Insert" radio button, not "Overwrite".
Now you have edited the older firmware to be loaded onto your
TSOP. If you want to be sure that everything has been done
correctly, open up the hex editor again (now you should have
2 hex editors running) and open your original TSOP image that
we dumped with JKeys. Scroll down to the bottomand compare
the information from 7FF90 to 7FFCB. This information should
be identical. You now want to save the editted Cxxx file.
Call it something like "Firmware to Load" or something that
you will remember.
Loading the Firmware
The next step is to load the edited Cxxx file to your TSOP.
To do this, open up JKeys (you should still have your JTAG
reader connected). Make sure that JKeys shows you your Boxkey,
that way you know your JTAG is connected properly still. Remember,
when using JKeys to have your IRD plugged in but the power
light off. Now press "Flash Tools" in JKeys. You will get
a message a box that pops up stating "Flash tools utilizes the
DCU........". When you get this message, unplug your IRD and
count 3 seconds. Then plug it back in and press O.K. You must
now erase yout TSOP. Click on "Erase Flash". You will have
to wait a few seconds and then your flash will be erased. Now,
we are finally ready to load on the edited E225Cxxx firmware.
Click on "Write Flash" and then select the file that you edited
(we called it "Firmware to Load"). JKeys will start loading
the firmware right away. Congratulations, you now have the
E225Cxxx firmware loaded on your TSOP.
Watch TV
You now want to set your IRD to not take the new firmware updates.
Put in your subbed smart card and go to Menu>
6>
1>
5 and you should be in the System Upgrade screen. Make sure
you select "Ask Before Downloading" and then press "Save".
If in the future, you get a message asking if you want to download
the latest firmware, select No. Now, program you AVR board
with Turnip 4 Beta and you now have married sub autoroll without
any nags! Please note that I tried running Winvu with this
firmware and I got runtime errors. Winvu 2007 works good but
only with the recent E308 Firmware. Enjoy!
This guide was written by
The Dishnewbies Team
. If you have problems, please ask on the message board
or the #Dishnetwork or #Expressvu channels on
irc.dishnewbies.tv
.