In the first and in-between posts I leaned on “symbols left in the firmware” a few times without saying how I got hold of that firmware. This post covers that. There are gentle ways to pull firmware off a device, and there is the sledgehammer: pry the case open, lift the flash chip off the board with hot air, and read it in a socket. My controller was dead anyway, so the sledgehammer it is. ...