Xbox wireless adapter MN740 notes

MN740.md

Firmware is ARJ compressed MN740_01.00.02.0022_RUNTIME.bin extracted results into a NML.MEM

some strings inside this memory dump/file are:

D:\Source Code\stack\arch\ar531x\wireless\common\crypto\ccm.c
Copyright string: "Copyright © 2004 D-Link Systems, Inc.
DGL-3420 Bootrom 00.03.00.0000
D-Link 108AG Gaming Adapter
From isolation / Deliver me o Xbox - / Through the ethernet
Copyright (c) Microsoft Corporation All Rights Reserved
Device is Xbox Compatible
AR5312 CPU
ar5212
halProcessRxDesc:  Michael error found

https://wiki.openwrt.org/doc/hardware/soc/soc.qualcomm.ar5xxx Boards based on the old Atheros AR231x/AR5312 CPUs. The AR531x/231x is a platform by Atheros, which is used for dual-band and single-band 108Mb/s routers and APs. It is also referred as a WiSoC - Wireless System-on-a-Chip, and the radio inside often refereed as RoC - Radio-on-a-Chip as it is contained on a distinct chip. MIPS R4000

https://github.com/wlanslovenija/old-firmware/blob/master/target/linux/atheros/files/include/asm-mips/mach-atheros/ar531x.h

 /*
 * Atheros CPUs before the AR2315 are using MIPS 4Kc core, later designs are
 * using MIPS 4KEc R2 core. This makes it easy to determine the board at runtime.
 */

https://wikidevi.com/wiki/D-Link_DGL-3420 This runs ThreadX JADE/Green Hills Version G4.0.4.0 ive seen "3.0.1.12" mentioned and te wikidevi mentioned this together with what OS it runs "ThreadX JADE/Green Hills Version G4.0.4.0" confirms this

the AR5312 is mentioned in code, wich is a chip of this chipset and nicknamed Venice It also tries to read an eeprom (mac adress and stuff) So we are MIPS 4Kc? Probably not much ram and not much flash (no DD-WRT or OpenWRT) BUT, do we realy care? MIPS R4000 (based on https://wikidevi.com/wiki/Atheros)

The hacked PackageCatalog.zip mentions and their official names:

• MN740_01.03.00.0005_BOOT.bin Xbox Wireless Adapter (MN-740) boot firmware
• MN740_01.00.02.0022_RUNTIME.bin Xbox Wireless Adapter (MN-740) runtime firmware

Difernt versions seem to excist. im not realy intrested into these others. Seems i have the runtime, (mem) but not the boot.

FCC details

https://fccid.io/C3KMN740/Internal-Photos/Internal-Photos-360373.iframe shows IC parts 8 MB ram https://www.insidegadgets.com/wp-content/uploads/2014/07/IC42S16400.pdf AR2112 RoC (Radio on Chip) SST39LF0?0A (FLASH, unkown size, Dump is 1.4Mb, a 10Mbit flash? )