2e00a054e8
Add comparative firmware analysis reports from Ghidra 8051 reverse engineering
...
Two detailed reports from analyzing all firmware variants loaded into Ghidra:
1. v2.06 vs v2.13 FW1 comparative analysis:
- Complete vendor command dispatch table mapping (0x80-0x9D)
- 3 new commands in v2.13: GET_DEMOD_STATUS (0x99), INIT_DEMOD (0x9A), DELAY_COMMAND (0x9C)
- DiSEqC architecture change: GPIO bit-bang -> I2C controller
- INT0 repurposed from USB re-enumeration to demodulator polling
- Hardware revision detection via descriptor byte
2. v2.13 sub-variant comparison (FW1/FW2/FW3):
- FW1: I2C-connected demodulator (original SkyWalker-1 hardware)
- FW2: Parallel-bus demodulator via P0/P1 GPIO
- FW3: Enhanced parallel-bus with dual-phase read and OR accumulation
- All three support identical modulation types, differ only in hardware interface
2026-02-11 06:44:26 -07:00