- stock_firmware.bin: 15KB dump from working device (v2.13) - disasm8051.py / v2: Custom 8051 disassemblers for FX2LP firmware analysis, used to trace init block loading and I2C sequences - STARTUP_DISASSEMBLY.md: Annotated startup sequence disassembly - TODO: Notes on stock vs custom firmware BCM4500 init differences
9 lines
460 B
Plaintext
9 lines
460 B
Plaintext
Both stock and our custom firmware report the same status
|
|
progression (0x00 → 0x03 → 0x07), but the stock firmware's
|
|
BCM4500 initialization actually works (SNR raw ~64000) while
|
|
the custom firmware's returns all zeros. The custom
|
|
firmware's bcm4500_boot() silently fails somewhere in the
|
|
I2C init block writes — it sets BM_STARTED | BM_FW_LOADED
|
|
but the hardware isn't actually running. This is a firmware
|
|
bug that needs investigation.
|