Specifications

Remote Control and Receiver-Transceiver Specifications and Requirements
for Windows Media Center in Windows Operating Systems
125
Offset
Name
Valu
e
Description
3
EMULATOR_WRAUTHSEQ
3
0x67
Second authorization byte
4
EMULATOR_WRAUTHSEQ
4
0xD
0
Third authorization byte
Description
Authorize firmware writes. The device should save the four auth bytes to a known location. Later,
when the device is about to commit changes to flash memory, the device should check the
known location to validate that the auth bytes match. This is intended to prevent random jumps
from overwriting flash memory.
The device does not respond to this command.
CMD_BOOT_WRITEBLOCK – Write Firmware Block
EMVER_EMULATOR_V2 ONLY
Message ID: CMD_BOOT_WRITEBLOCK
Message length: arbitrary
Message direction: Host to device
Offset
Name
Value
Description
0
CMD_BOOT_WRITEBLO
CK
0xF0
Command: write a block to
firmware memory
1+
Firmware data
Numb
er
Data to write to firmware memory
Description
The device should write the given data to firmware memory. The data comes from the registry on
the host. The device manufacturer should have placed this data into the registry. The device
manufacturer defines the block size and format of this data. It is expected that a destination
address will be encoded somewhere in the block and a checksum will be encoded somewhere in
the block. It is also possible that the device manufacturer will apply encryption to the data that it
places in the registry. Then, it is the responsibility of the device to decrypt the firmware before
storing it in flash memory.
Response
Description
RSP_BOOT_BLOCKWRITTEN
Block written successfully
RSP_BOOT_BADSERIALCHECKSUM
Block not written: checksum was incorrect
RSP_BOOT_BADWRITEAUTH
Block not written: write was not authorized