I got the firmware updates here:
Odyssey firmware upgrade 4.0 (build 1476)
Orizon firmware upgrade 3.1 (build 1398)
I used "hexdump -s4 -C CybUpdate.bin" in linux to make the dumps show in my previous post. On the left of the dumps you can see the byte positions in hexadecimal. The -s4 argument skips the first 4 characters (which are 'Boo1' for both files)
btw, I don't know if it's ok to put links to the firmware upgrade files here since you normally need to log in to get to the download section.. should I remove it and replace it with a link to the download page?