Broadcom Crystal HD Reverse Engineering

Quick start

Software dependencies

• Python 3
• Kaitai Struct Compiler
• Kaitai Struct Python Runtime

Procedure

1. Install dependencies.
2. Run make in the tools directory to generate the parser modules.
3. Obtain the firmware binaries you're interested in. You can download all the publicly-available Crystal HD firmware using the download.sh script in the firmware directory.
4. Explore the firmware with the Kaitai Web IDE and the Kaitai Struct definition (*.ksy) files in the tools directory.

Reverse engineering notes

See Notes.md.

License

Except where otherwise noted:

• All software in this repository (e.g., tools for unpacking and generating firmware, tools for building documentation, etc.) is made available under the GNU General Public License, version 3 or later.
• All copyrightable content that is not software (e.g., chip register and programming manuals, reverse engineering notes, this README file, etc.) is licensed under the Creative Commons Attribution-ShareAlike 4.0 International License.