On Wed, Feb 22, 2012 at 11:22:02PM +0100, Hans-Frieder Vogt wrote: > 00000040: Firmware_CODELENGTH bytes Some time ago I analyzed the firmware of the AF9035. The firmware download command inside the on-chip ROM expects chunks with a 7 byte header: Byte 0: MCS 51 core There are two inside the AF9035 (1=Link and 2=OFDM) with separate address spaces Byte 1-2: Big endian destination address Byte 3-4: Big endian number of data bytes following the header Byte 5-6: Big endian header checksum, apparently ignored by the chip Calculated as ~(h[0]*256+h[1]+h[2]*256+h[3]+h[4]*256) This might help locate the firmware inside the Windows drivers. The Windows drivers often contain two copies of the same firmware. Daniel -- To unsubscribe from this list: send the line "unsubscribe linux-media" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
