Hi @johnth
Did you maybe had any time to take a look at the LZ77 decompression of the Wifi board and CAL files by any chance? If we want Hap ax2/ax3 support, we will definitely need that.
On the Chateau 12 side of things: with the help of Robi I managed to force the the board file of another device (Hap ac3) on the device, and everything seems to work now. So the last step is to resolve this LZ77 decompression thing.
I tried to disassemble the flash.ko and I found some relevant functions for this, but I was not able to reverse engineer it to a point where I can decompress the files even with an external lz77 decompressor. The prefix seems to be the same, and I have a feeling the reason my attempt fails is that they added some sort of a dictionary to LZ77 (which to my understanding is not part of the original LZ77/LZ2 standard), and that is that prefix part.
If you need any more input from me, please let me know. The mtd2 is uploaded in the Routerboot7 topic with my findings.