On Wed, Feb 22, 2012 at 11:22:02PM +0100, Hans-Frieder Vogt wrote:
> 00000040: Firmware_CODELENGTH bytes
Some time ago I analyzed the firmware of the AF9035.
The firmware download command inside the on-chip ROM expects chunks
with a 7 byte header:
Byte 0: MCS 51 core
There are two inside the AF9035 (1=Link and 2=OFDM) with
separate address spaces
Byte 1-2: Big endian destination address
Byte 3-4: Big endian number of data bytes following the header
Byte 5-6: Big endian header checksum, apparently ignored by the chip
Calculated as ~(h[0]*256+h[1]+h[2]*256+h[3]+h[4]*256)
This might help locate the firmware inside the Windows drivers.
The Windows drivers often contain two copies of the same firmware.
Daniel
--
To unsubscribe from this list: send the line "unsubscribe linux-media" in
the body of a message to majord...@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
