warehack.ing/skywalker-1
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Add stock firmware dump, 8051 disassembler, and analysis notes

Browse source 
- stock_firmware.bin: 15KB dump from working device (v2.13)
- disasm8051.py / v2: Custom 8051 disassemblers for FX2LP firmware
  analysis, used to trace init block loading and I2C sequences
- STARTUP_DISASSEMBLY.md: Annotated startup sequence disassembly
- TODO: Notes on stock vs custom firmware BCM4500 init differences
This commit is contained in:
Ryan Malloy 2026-02-20 10:56:59 -07:00
parent a12a394099
commit 97c1000d8b
5 changed files with 1932 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
TODO Normal file
View file

@ -0,0 +1,8 @@
Both stock and our custom firmware report the same status
progression (0x00 → 0x03 → 0x07), but the stock firmware's
BCM4500 initialization actually works (SNR raw ~64000) while
the custom firmware's returns all zeros. The custom
firmware's bcm4500_boot() silently fails somewhere in the
I2C init block writes — it sets BM_STARTED | BM_FW_LOADED
but the hardware isn't actually running. This is a firmware
bug that needs investigation.