By the way, my Freescale/NXP Service Processor disassembler has been merged into radare2 master. So with 'e asm.arch=fslsp' you can now inspect the start of your boot image. https://github.com/radareorg/radare2/commit/e1c0d22eb969d573c1352672491ad49dd21dffbf