unsigned short FrameControl // спрямо това има и разширени адресации
    unsigned char SequenseNumber;
    unsigned short DestinationPAN;
    unsigned short DestinationAddress;
    unsigned short SourcePAN;
    unsigned short SourceAddress;
    unsigned char Cmd;
    unsigned char Data[];

....

void RF_SendTo(char * buf, int len, unsigned short address) {
    unsigned char i = 0;
    WORD_VAL A;
    A.Val = address;
    PHYSetLongRAMAddr(i++, len + 12);
    PHYSetLongRAMAddr(i++, len + 12);
    PHYSetLongRAMAddr(i++, 0x03);
    PHYSetLongRAMAddr(i++, 0x88); // 16 bits short
    PHYSetLongRAMAddr(i++, 0xA5); // Sequense number

    PHYSetLongRAMAddr(i++, PAN_BYTE0);
    PHYSetLongRAMAddr(i++, PAN_BYTE1);

    PHYSetLongRAMAddr(i++, A.v[0]);
    PHYSetLongRAMAddr(i++, A.v[1]); // Destination Address

    PHYSetLongRAMAddr(i++, PAN_BYTE0);
    PHYSetLongRAMAddr(i++, PAN_BYTE1); // Source PAN

    PHYSetLongRAMAddr(i++, MAC_SHORT_ADDR_BYTE0);
    PHYSetLongRAMAddr(i++, MAC_SHORT_ADDR_BYTE1); // Source Address

    PHYSetLongRAMAddr(i++, 0x07);

    while (len) {
        PHYSetLongRAMAddr(i++, *buf++);
        len--;
    }

    PHYSetShortRAMAddr(RF_TXNCON, 0b00000001);
}