warehack.ing/skywalker-1
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Extract firmware from official Genpix updater EXEs via Wine memory dump

Browse source 
Updater EXEs are packed (RWX sections, near-random entropy) with anti-debug
protection (IsDebuggerPresent/SoftICE check). Bypassed by running under plain
Wine and reading /proc/PID/mem with elevated privileges.

SW1 v2.13.x updater contains 3 firmware variants (likely .1/.2/.3):
  - All use LJMP 0x170D entry, 9322-9377 bytes, 10 C2 records each
  - FW2 vs FW3 differ by 1525 bytes (most similar pair)

Rev.2 v2.10.4 updater contains 1 firmware image:
  - PID=0x0202 (vs SW1's 0x0203), LJMP 0x155F, 8843 bytes, 9 C2 records

All images use standard Cypress C2 EEPROM format with entry at 0xE600 (CPUCS).
This commit is contained in:
Ryan Malloy 2026-02-11 06:05:13 -07:00
parent ba37105e2a
commit 4447d2c0e7
19 changed files with 364 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

BIN
firmware-dump/rev2_v210_fw_1_c2.bin Normal file
View file

Binary file not shown.

BIN
firmware-dump/rev2_v210_fw_1_flat.bin Normal file
View file

Binary file not shown.

BIN
firmware-dump/sw1_v213_fw_1_c2.bin Normal file
View file

Binary file not shown.

BIN
firmware-dump/sw1_v213_fw_1_flat.bin Normal file
View file

Binary file not shown.

BIN
firmware-dump/sw1_v213_fw_1_full64k.bin Normal file
View file

Binary file not shown.

BIN
firmware-dump/sw1_v213_fw_2_c2.bin Normal file
View file

Binary file not shown.

BIN
firmware-dump/sw1_v213_fw_2_flat.bin Normal file
View file

Binary file not shown.

BIN
firmware-dump/sw1_v213_fw_2_full64k.bin Normal file
View file

Binary file not shown.

BIN
firmware-dump/sw1_v213_fw_3_c2.bin Normal file
View file

Binary file not shown.

BIN
firmware-dump/sw1_v213_fw_3_flat.bin Normal file
View file

Binary file not shown.

BIN
firmware-dump/sw1_v213_fw_3_full64k.bin Normal file
View file

Binary file not shown.