for me it's like a game to see how many different firmwares I can load before I kill the receiver.
I already have the cover pried off just in case.
The receiver has an 8mg flash but the upgrades are only 4meg size.
There is a chunk of code near the end of the flash that is the same in all firmware versions,since it never gets overwritten during the upgrade process.It may have something to do with clone detection or keeping the rs232 port working when the flash is corrupt.It is encrypted/compressed so I haven't been able to look at it more closely.
The blindscan is painfully slow,reminds me of my old s10.