It's impossible for us to get bootrom's source code. If you'd like to dig this, there's one suggestion: go step by step in jtag. And by default on Zylonite , there's one LDO output connected to vcc_sram and dynamically changed thru PMIC LDO control register.