Dietmar

@reboot12 Code 10 means, that this driver is acceptet but just can not start. With Windbg it would be easy to solve. So, from my side, next step would be to bring the @Mov AX, 0xDEAD Lan-Windbg to XP bit 64 Dietmar

@reboot12 I have the same Dell Wyse 5070 as you, same Wlan 9560, same cpu, same M.2 Sata, same ram and same cpu. But I have no idea, how to install XP 64 there Dietmar

@reboot12 Here is the 9560 Wlan driver for XP SP3 and XP bit 64. Free and Checked version each and Source Code. I notice crazy things: The most most stable run of this driver is on an original XP SP3 from 2008, 4GB. I got millions of packages without crash, MyPal 13.7 via DSL Speed test. 64 bit XP I have not tested. Tomorrow I make a try to compile the 77 firmware for to understand it much better. NO(!!!) 32 GB or something else, those "patches" make whole XP SP3 instable. Until now no WPA2 only unencrypted, open Wlan, Channel 6 at 2.4 GHZ Good luck, Dietmar https://www.upload.ee/files/19336803/9560m136_m120_nodebug_x64.zip.html

@reboot12 I was one step away from to give up with the Wlan 9560 driver. I use old firmware, which is not supported officially for this card. To come to live for this card is from Ubuntu, Scan is from OpenBSD, the RX Ring is first part from OpenBSD and updated with a nice idea from Ubuntu, wifi path is from XP SP1. But the most most crazy things were 1,) The CNVi firmware always kills my card with power switch off between 11.000 and 700.000 packages. For to overcome this I modd my Bios like crazy, to really force any power on. Later I come to the idea, to look, how OpenBSD and Ubuntu solve this. Win10, win11 have problems with this too, but I succeed with a simple OpenBSD hack. 2.) The CNVi firmware looks for MSI-X. This is something, that XP does not like. Crazy, this I noticed only today. So I rewrite my driver from IRQ ==> Polling just now. And voila, see this result, It is much better than my lan result via DSL Speedtest from Computerbild and any Wlan card that I know Dietmar PS: The 9560 card I tested on the Asrock N100DC-ITX and just now on the Biostar z690A Valkyrie.

@reboot12 I am writing this to you from the 9560 Wlan driver on XP SP3, niccceeeeeee Dietmar PS: About 500h work and I build about 2000 not working drivers..

@reboot12 Until now it is not stable. Always after 2000-65000 packages it stops. I compile it for you for 64 bit XP, when it is more stable. @canonkong It is build from scratch in about crazy 500h of work. No Wlan Sources for XP can be found in Internet. I build it with the OpenBSD 79 files from 26 April 2026 and with Ubuntu and with the hacked XP SP1 sources, net.zip . I cant believe for myself, that I succeed and what crazy things I have done for to reach this Dietmar

Yessssssssssssssssaaaaaaaaaaaaaaaa!!!!! I can see the google.com Website with my CNVi Wlan driver 9560 under XP SP3. Now, XP can do more than win7 Dietmar

@reboot12 What a crazy hard job to make this 9560 Wlan card CNVi to work under XP. But today I fix the most most difficult part, that the 9560 can see my Router with its correct values. The prove is easy: Switch the Router on: Channnel 6 and my router can be seen. Switch router off, clean all(!) SSID list, Channel 6 is gone. Switch router on again: Channel 6 is there with the correct name of my Router, its correct Mac and on Channel6 Dietmar 1: kd> bc * 1: kd> bd * 1: kd> .logopen /t c:\KD_nn56openbsd3.txt Closing open log file c:\KD_nn56openbsd4_0c08_2026-04-19_16-16-43-078.txt Opened log file 'c:\KD_nn56openbsd3_135c_2026-04-19_18-47-32-328.txt' 1: kd> sxd ibp 1: kd> sxi ld 1: kd> sxi ud 1: kd> sxe av 1: kd> sxe gp 1: kd> sxe ud 1: kd> !sym quiet quiet mode - symbol prompts on 1: kd> .reload /f nt 1: kd> .reload /f ndis.sys 1: kd> .reload /f 9560.sys 1: kd> bu 9560!WifiConfigureLinuxLikeInit ".printf "==== OPENBSD3 INIT ====\n"; gu" ^ Malformed string in 'bu 9560!WifiConfigureLinuxLikeInit ".printf "==== OPENBSD3 INIT ====\n"; gu"' 1: kd> bu 9560!WifiPrepareLinuxExactScanHcmd ".printf "==== BUILD OPENBSD3 SCAN ====\n"; gu" ^ Malformed string in 'bu 9560!WifiPrepareLinuxExactScanHcmd ".printf "==== BUILD OPENBSD3 SCAN ====\n"; gu"' 1: kd> bu 9560!WifiHoldMutableScanDebugMap ".printf "==== HOLD BEFORE OPENBSD3 0D ====\n"; gu" ^ Malformed string in 'bu 9560!WifiHoldMutableScanDebugMap ".printf "==== HOLD BEFORE OPENBSD3 0D ====\n"; gu"' 1: kd> bu 9560!WifiHandleLinuxLikeScanReqAck ".printf "==== SCAN ACK ====\n"; gu" ^ Malformed string in 'bu 9560!WifiHandleLinuxLikeScanReqAck ".printf "==== SCAN ACK ====\n"; gu"' 1: kd> bu 9560!WifiHandleLinuxLikeScanUmacComplete ".printf "==== UMAC COMPLETE ====\n"; gu" ^ Malformed string in 'bu 9560!WifiHandleLinuxLikeScanUmacComplete ".printf "==== UMAC COMPLETE ====\n"; gu"' 1: kd> bu 9560!WifiStoreRealBss ".printf "==== STORE BSS ====\n"; gu" ^ Malformed string in 'bu 9560!WifiStoreRealBss ".printf "==== STORE BSS ====\n"; gu"' 1: kd> g 9560nn56: NdisMInitializeScatterGatherDma -> 00000000 9560nn56: query resources pass0 status=c000009a need=56 9560nn56: query resources pass1 status=00000000 size=56 9560nn56: resources count=3 bytes=56 bar0raw=00000000:8b224004 9560nn56: resource[0] type=3 share=1 flags=0000 start=00000000:8b224000 len=16384 9560nn56: resource[1] type=129 share=1 flags=0000 start=00000000:00000001 len=0 9560nn56: resource[2] type=2 share=3 flags=0000 start=00000010:00000010 len=4294967295 9560nn56: mapped resources mmio=00000000:8b224000 len=16384 irq=16/16 hwrev=00000370 hwif=00080000 gp=08040000 mbox=00000000 9560n14: awake hwready=1 awake=1 hwrev=00000370 hwif=00480000 gp=0804000d mbox=00000020 9560n14: sw_reset before=00000011 after=00000011 hwif=00080000 gp=08040000 mbox=00000000 9560n14: awake hwready=1 awake=1 hwrev=00000370 hwif=00480000 gp=0804000d mbox=00000020 9560n14: retake after reset ok=1 hwready=1 awake=1 hwif=00480000 gp=0804000d mbox=00000020 9560nn56: NdisMRegisterInterrupt vec=16 lvl=16 shared=1 level=1 -> 00000000 9560nn56: embedded fw hdr ver=0000004d api=77 build=f92b5fed 9560nn56: alloc LMAC uncached len=1656 va=B7964000 pa=00000000:001cb000 9560nn56: alloc LMAC uncached len=32768 va=B83F8000 pa=00000000:001cc000 9560nn56: alloc LMAC uncached len=32768 va=B8400000 pa=00000000:001d4000 9560nn56: alloc LMAC uncached len=32768 va=B8408000 pa=00000000:001dc000 9560nn56: alloc LMAC uncached len=32760 va=B8410000 pa=00000000:001e4000 9560nn56: alloc LMAC uncached len=32768 va=B8418000 pa=00000000:001ec000 9560nn56: alloc LMAC uncached len=32768 va=B8420000 pa=00000000:001f4000 9560nn56: alloc LMAC uncached len=32768 va=B8428000 pa=00000000:001fc000 9560nn56: alloc LMAC uncached len=32768 va=B8430000 pa=00000000:00204000 9560nn56: alloc LMAC uncached len=32768 va=B8338000 pa=00000000:0020c000 9560nn56: alloc LMAC uncached len=32768 va=B8340000 pa=00000000:00214000 9560nn56: alloc LMAC uncached len=32768 va=B8348000 pa=00000000:0021c000 9560nn56: alloc LMAC uncached len=32768 va=B8360000 pa=00000000:00224000 9560nn56: alloc LMAC uncached len=13248 va=B7A1A000 pa=00000000:0022c000 9560nn56: alloc LMAC uncached len=5312 va=B85D8000 pa=00000000:00230000 9560nn56: alloc UMAC uncached len=1656 va=B7964678 pa=00000000:001cb678 9560nn56: alloc UMAC uncached len=32768 va=B8368000 pa=00000000:00232000 9560nn56: alloc UMAC uncached len=32768 va=B8370000 pa=00000000:0023a000 9560nn56: alloc UMAC uncached len=32768 va=B8378000 pa=00000000:00242000 9560nn56: alloc UMAC uncached len=32768 va=B8380000 pa=00000000:0024a000 9560nn56: alloc UMAC uncached len=32768 va=B8388000 pa=00000000:00252000 9560nn56: alloc UMAC uncached len=32768 va=B8390000 pa=00000000:0025a000 9560nn56: alloc UMAC uncached len=32768 va=B8398000 pa=00000000:00262000 9560nn56: alloc UMAC uncached len=32768 va=B83A0000 pa=00000000:0026a000 9560nn56: alloc UMAC uncached len=32768 va=B83A8000 pa=00000000:00272000 9560nn56: alloc UMAC uncached len=32768 va=B83B0000 pa=00000000:0027a000 9560nn56: alloc UMAC uncached len=32768 va=B83B8000 pa=00000000:00282000 9560nn56: alloc UMAC uncached len=4280 va=B85DA000 pa=00000000:0028a000 9560nn56: alloc UMAC uncached len=3592 va=B7968000 pa=00000000:0028c000 9560nn56: alloc UMAC uncached len=24756 va=B83C0000 pa=00000000:0028d000 9560nn56: alloc PAGE uncached len=1656 va=B75BC000 pa=00000000:00294000 9560nn56: alloc PAGE uncached len=32768 va=B8438000 pa=00000000:00295000 9560nn56: alloc PAGE uncached len=32768 va=B8440000 pa=00000000:0029d000 9560nn56: alloc PAGE uncached len=32768 va=B8448000 pa=00000000:002a5000 9560nn56: alloc PAGE uncached len=32768 va=B8450000 pa=00000000:002ad000 9560nn56: alloc PAGE uncached len=32768 va=B8458000 pa=00000000:002b5000 9560nn56: alloc PAGE uncached len=32768 va=B8460000 pa=00000000:002bd000 9560nn56: alloc PAGE uncached len=32768 va=B8468000 pa=00000000:002c5000 9560nn56: alloc PAGE uncached len=32768 va=B8470000 pa=00000000:002cd000 9560nn56: alloc PAGE uncached len=32768 va=B8478000 pa=00000000:002d5000 9560nn56: alloc PAGE uncached len=32768 va=B8480000 pa=00000000:002dd000 9560nn56: alloc PAGE uncached len=32768 va=B8488000 pa=00000000:002e5000 9560nn56: alloc PAGE uncached len=32768 va=B8490000 pa=00000000:002ed000 9560nn56: alloc PAGE uncached len=32768 va=B8498000 pa=00000000:002f5000 9560nn56: alloc PAGE uncached len=32768 va=B84A0000 pa=00000000:002fd000 9560nn56: alloc PAGE uncached len=32768 va=B62BC000 pa=00000000:00305000 9560nn56: alloc PAGE uncached len=32768 va=B62B4000 pa=00000000:0030d000 9560nn56: alloc PAGE uncached len=32768 va=B62AC000 pa=00000000:00315000 9560nn56: alloc PAGE uncached len=32768 va=B62A4000 pa=00000000:0031d000 9560nn56: alloc PAGE uncached len=12288 va=B7A16000 pa=00000000:00325000 9560nn56openbsd2: fw sections lmac=15 umac=15 page=20 iml=13944 phy_cfg=00330018 scan_req_cmdver=15 scan_cfg_cmdver=5 9560nn56: alloc Cmd uncached len=16384 va=B7A12000 pa=00000000:00328000 9560nn56: alloc TxQ uncached len=16384 va=B7A0E000 pa=00000000:0032c000 9560nn56: alloc RxQ uncached len=16384 va=B7A0A000 pa=00000000:00330000 9560nn56: alloc RxStatus uncached len=2 va=B75BC678 pa=00000000:00294678 9560nn56: alloc RxUsed uncached len=32768 va=B629C000 pa=00000000:00334000 9560nn56: alloc RxData uncached len=4194304 va=B5DD4000 pa=00000000:01000000 9560nn56: rx-prime count=1024 posted=1023 buf=4096 9560nn56: transport cmd=16384 txq=16384 rxq=16384 rxdata=4194304 9560nn56: alloc CtxG3 uncached len=104 va=B75BC67C pa=00000000:0029467c 9560nn56: alloc PrphInfo uncached len=4096 va=B7946000 pa=00000000:0033c000 9560nn56: alloc PrphScr uncached len=1660 va=B75BC6E4 pa=00000000:002946e4 9560nn56: alloc IML uncached len=13944 va=B7A06000 pa=00000000:0033d000 9560nn56: ctxt prepared ver=2 size=26 prph=00000000:0033c000 scratch=00000000:002946e4 9560nn56: disint-pulse[fwload] before=80000001 after_disable=00000000 after_enable=80000001 mask=80000001 9560nn56: ALIVE interrupt observed int=00000003 msix=00000000 9560nn56: ax210-iml-spin irq=0 loops=100000 msix_before=00000000 msix_after=00000000 ltr_before=00000000 ltr_after=881f881f iml_resp=00000001 9560nn56: alive wait end alive=1 status=0000cafe last_int=00000003 last_msix=00000000 spin=100000 9560nn56: bootstrap status alive=1 cpu_run=00000000 boot_before=00480000 boot_after=00480002 9560nn56: rfh-rx[post-boot] write=1023 write_actual=1016 read=0 active=00010001 frbdcb=00000000:00330000 urbdcb=00000000:00334000 stts=00000000:00294678 9560nn56: rx-slot[0] rbid=1 flags=00 bufslot=0 cmd=01 grp=00 seq=C000 len=148 type=alive mgmt_off=-1 data_off=-1 phys=00000000:01000000 9560nn56: rx-slot +000: 94 00 00 20 01 00 00 C0 FE CA 00 00 4D 00 00 00 9560nn56: rx-slot +010: ED 5F 2B F9 00 01 00 00 00 00 00 00 D0 7B 4F 00 9560nn56: rx-slot +020: 0C 6C 4F 00 18 71 4F 00 70 15 80 00 14 71 4F 00 9560nn56: rx-slot +030: 00 00 62 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-payload +000: FE CA 00 00 4D 00 00 00 ED 5F 2B F9 00 01 00 00 9560nn56: rx-payload +010: 00 00 00 00 D0 7B 4F 00 0C 6C 4F 00 18 71 4F 00 9560nn56: rx-payload +020: 70 15 80 00 14 71 4F 00 00 00 62 00 00 00 00 00 9560nn56: rx-payload +030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-payload +040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-payload +050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: notif alive seq=C000 len=148 status=0000cafe 9560nn56: rx-slot[1] rbid=2 flags=00 bufslot=1 cmd=B1 grp=00 seq=C001 len=24 type=notif-b1 mgmt_off=-1 data_off=-1 phys=00000000:01001000 9560nn56: rx-slot +000: 18 00 00 20 B1 00 01 C0 00 00 00 00 0C 00 00 14 9560nn56: rx-slot +010: 00 00 35 00 B0 12 00 00 94 60 00 00 00 00 00 00 9560nn56: rx-slot +020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-payload +000: 00 00 00 00 0C 00 00 14 00 00 35 00 B0 12 00 00 9560nn56: rx-payload +010: 94 60 00 00 00 00 00 00 9560nn56: notif b1 seq=C001 len=24 9560nn56: rx-slot[2] rbid=3 flags=00 bufslot=2 cmd=FF grp=02 seq=C002 len=8 type=rx-other mgmt_off=-1 data_off=-1 phys=00000000:01002000 9560nn56: rx-slot +000: 08 00 00 20 FF 02 02 C0 04 00 00 00 00 00 00 00 9560nn56: rx-slot +010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-payload +000: 04 00 00 00 00 00 00 00 9560nn56: notif other cmd=FF grp=02 seq=C002 len=8 9560nn56: rx-consume[openbsd-init-pre] closed=3 cur=3 write=2 write_actual=0 raw=3 notif=3 mpdu=0 alive=1 b1=1 f7=0 mgmt=0 data=0 bss=0 9560nn56: raw-hcmd[init-203] tail=0 next=1 len=12 seq=001B pa=00000000:00328000 db=00000001 queued=1 9560nn56: rfh-dump[dpc] frbdcb=00328000:000c0001 urbdcb=00000000:00334000 stts=00000000:00294678 orb=00000000:00000000 gen=40031800 active=00000000 dma=87940000 umac_dma=87000000 9560nn56: rx-slot[3] rbid=4 flags=00 bufslot=3 cmd=F7 grp=00 seq=C003 len=16 type=notif-f7 mgmt_off=-1 data_off=-1 phys=00000000:01003000 9560nn56: rx-slot +000: 10 00 00 00 F7 00 03 C0 74 14 08 01 00 00 00 20 9560nn56: rx-slot +010: F7 C5 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-payload +000: 74 14 08 01 00 00 00 20 F7 C5 00 00 00 00 00 00 9560nn56: notif f7 seq=C003 len=16 9560nn56: rx-slot[4] rbid=5 flags=00 bufslot=4 cmd=03 grp=02 seq=001B len=8 type=rx-other mgmt_off=-1 data_off=-1 phys=00000000:01004000 9560nn56: rx-slot +000: 08 00 00 20 03 02 1B 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-payload +000: 00 00 00 00 00 00 00 00 9560nn56: notif other cmd=03 grp=02 seq=001B len=8 9560nn56: rx-consume[openbsd-init-post-203] closed=5 cur=5 write=4 write_actual=0 raw=5 notif=5 mpdu=0 alive=1 b1=1 f7=1 mgmt=0 data=0 bss=0 9560nn56: raw-hcmd[init-c00] tail=1 next=2 len=12 seq=001B pa=00000000:00328800 db=00000002 queued=2 9560nn56: rx-slot[5] rbid=6 flags=00 bufslot=5 cmd=00 grp=0C seq=001B len=4 type=rx-other mgmt_off=-1 data_off=-1 phys=00000000:01005000 9560nn56: rx-slot[5] rbid=6 flags=00 bufslot=5 cmd=00 grp=0C seq=001B len=4 type=rx-other mgmt_off=-1 data_off=-1 phys=00000000:01005000 9560nn56: rx-slot +000: 04 00 00 20 00 0C 1B 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-payload +000: 00 00 00 00 9560nn56: notif other cmd=00 grp=0C seq=001B len=4 9560nn56: rx-consume[init-wait] closed=6 cur=6 write=5 write_actual=0 raw=6 notif=6 mpdu=0 alive=1 b1=1 f7=1 mgmt=0 data=0 bss=0 9560nn56: rx-slot +000: 04 00 00 20 00 0C 1B 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot[6] rbid=7 flags=00 bufslot=6 cmd=04 grp=00 seq=C004 len=8 type=rx-other mgmt_off=-1 data_off=-1 phys=00000000:01006000 9560nn56: rx-slot +000: 08 00 00 20 04 00 04 C0 01 00 00 00 00 00 00 00 9560nn56: rx-slot +010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-payload +000: 01 00 00 00 00 00 00 00 9560nn56openbsd2: notif init-complete seq=C004 len=8 9560nn56openbsd2: notif init-complete seq=C004 len=8 9560nn56: rx-consume[init-wait] closed=7 cur=7 write=6 write_actual=0 raw=7 notif=7 mpdu=0 alive=1 b1=1 f7=1 mgmt=0 data=0 bss=0 9560nn56: rx-consume[openbsd-init-post-c00] closed=7 cur=7 write=6 write_actual=0 raw=7 notif=7 mpdu=0 alive=1 b1=1 f7=1 mgmt=0 data=0 bss=0 9560nn56: raw-hcmd[init-98] tail=2 next=3 len=12 seq=001B pa=00000000:00329000 db=00000003 queued=3 9560nn56: rx-slot +010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot[7] rbid=8 flags=00 bufslot=7 cmd=98 grp=01 seq=001B len=4 type=rx-other mgmt_off=-1 data_off=-1 phys=00000000:01007000 9560nn56: rx-slot +000: 04 00 00 20 98 01 1B 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-payload +000: 00 00 00 00 9560nn56: notif other cmd=98 grp=01 seq=001B len=4 9560nn56: rx-consume[openbsd-init-post-98] closed=8 cur=8 write=7 write_actual=0 raw=8 notif=8 mpdu=0 alive=1 b1=1 f7=1 mgmt=0 data=0 bss=0 9560nn56: raw-hcmd[init-10c-openbsd] tail=3 next=4 len=20 seq=001B pa=00000000:00329800 db=00000004 queued=4 9560nn56: rx-slot +020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot[8] rbid=9 flags=00 bufslot=8 cmd=0C grp=01 seq=001B len=4 type=rx-other mgmt_off=-1 data_off=-1 phys=00000000:01008000 9560nn56: rx-slot +000: 04 00 00 20 0C 01 1B 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-payload +000: 00 00 00 00 9560nn56: notif other cmd=0C grp=01 seq=001B len=4 9560nn56: rx-consume[openbsd-init-post-10c] closed=9 cur=9 write=8 write_actual=8 raw=9 notif=9 mpdu=0 alive=1 b1=1 f7=1 mgmt=0 data=0 bss=0 9560nn56: raw-hcmd[init-1d2-openbsd] tail=4 next=5 len=68 seq=001B pa=00000000:0032a000 db=00000005 queued=5 9560nn56: rx-slot +030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot[9] rbid=10 flags=00 bufslot=9 cmd=D2 grp=01 seq=001B len=4 type=rx-other mgmt_off=-1 data_off=-1 phys=00000000:01009000 9560nn56: rx-slot +000: 04 00 00 20 D2 01 1B 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-payload +000: 00 00 00 00 9560nn56: notif other cmd=D2 grp=01 seq=001B len=4 9560nn56: rx-consume[openbsd-init-post-1d2] closed=10 cur=10 write=9 write_actual=8 raw=10 notif=10 mpdu=0 alive=1 b1=1 f7=1 mgmt=0 data=0 bss=0 9560nn56openbsd2: openbsd-init ok203=1 okc00=1 initdone=1 seq=C004 ok98=1 ok10c=1 ok1d2=1 txq=5 bell=5 raw=10 notif=10 mpdu=0 bss=0 txchains=3 rxchains=3 scan_cfg_cmdver=5 9560nn56: WifiInitialize success hwpresent=1 hwready=1 awake=1 alive=1 status=0000cafe mmio=00000000:8b224000 len=16384 9560nn56: rx-slot +040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-payload +000: 00 00 00 00 9560nn56: notif other cmd=00 grp=0C seq=001B len=4 9560nn56: rx-consume[dpc] closed=6 cur=6 write=10 write_actual=8 raw=11 notif=11 mpdu=0 alive=1 b1=1 f7=1 mgmt=0 data=0 bss=0 9560nn56: rfh-dump[dpc] frbdcb=0032a000:00440001 urbdcb=00329800:00140001 stts=00000000:00294678 orb=00000000:00000000 gen=40031800 active=00000000 dma=40031800 umac_dma=87000000 9560nn56: rx-slot[6] rbid=7 flags=00 bufslot=6 cmd=04 grp=00 seq=C004 len=8 type=rx-other mgmt_off=-1 data_off=-1 phys=00000000:01006000 9560nn56: rx-slot +000: 08 00 00 20 04 00 04 C0 01 00 00 00 00 00 00 00 9560nn56: rx-slot +010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-slot +050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9560nn56: rx-payload +000: 01 00 00 00 00 00 00 00 9560nn56openbsd2: notif init-complete seq=C004 len=8 9560nn56openbsd2: notif init-complete seq=C004 len=8 9560nn56: notif other cmd=98 grp=01 seq=001B len=4 9560nn56: notif other cmd=0C grp=01 seq=001B len=4 9560nn56: notif other cmd=D2 grp=01 seq=001B len=4 9560nn56: rx-consume[dpc] closed=10 cur=10 write=14 write_actual=8 raw=15 notif=15 mpdu=0 alive=1 b1=1 f7=1 mgmt=0 data=0 bss=0 Unload module Flpydisk.SYS at b628c000 nt!DebugService2+0x10: 80532042 cc int 3 1: kd> g Unload module Sfloppy.SYS at b5a00000 nt!DebugService2+0x10: 80532042 cc int 3 2: kd> g Unload module Cdaudio.SYS at b6284000 nt!DebugService2+0x10: 80532042 cc int 3 1: kd> g Unload module serial.sys at b7d09000 nt!DebugService2+0x10: 80532042 cc int 3 1: kd> g Unload module imapi.sys at b7cf9000 nt!DebugService2+0x10: 80532042 cc int 3 2: kd> g Unload module nv4_disp.dll at bd012000 nt!DebugService2+0x10: 80532042 cc int 3 0: kd> g Unload module vga.dll at bff70000 nt!DebugService2+0x10: 80532042 cc int 3 0: kd> g 9560nn56: rx-consume[oid-bssid-list] closed=10 cur=10 write=14 write_actual=8 raw=15 notif=15 mpdu=0 alive=1 b1=1 f7=1 mgmt=0 data=0 bss=0 9560nn56: OID_802_11_BSSID_LIST count=0 media=1 real_frames=15 9560nn56: set oid=0D01011D len=64 auth=3 enc=6 9560nn56: set oid=0D010113 len=28 auth=0 enc=0 9560nn56: desired SSID set len=0 first=00 00 00 00 9560nn56: set oid=0D01011D len=64 auth=3 enc=6 9560nn56: rfh-dump[scan-pre] frbdcb=0032a000:00440001 urbdcb=00329800:00140001 stts=00000000:00294678 orb=00000000:00000000 gen=40031800 active=00000000 dma=40031800 umac_dma=87000000 9560nn56: rfh-rx[scan-pre-refresh] write=14 write_actual=8 read=10 active=00010001 frbdcb=00000000:00330000 urbdcb=00000000:00334000 stts=00000000:00294678 9560nn56: rfh-dump[scan-pre-after-refresh] frbdcb=00000000:00330000 urbdcb=00000000:00334000 stts=00000000:00294678 orb=00000000:00000000 gen=00000003 active=00010001 dma=87940000 umac_dma=87000000 9560nn56openbsd4: openbsd-scan v14 wildcard passive on channels 6 and 100 9560nn56openbsd4: scan-builder-openbsd v14 cmdver=15 chan0_flags=00000000 chan1_flags=00000000 gp_flags=0886 band0=1 band1=0 9560nn56: scan-builder uid=0 prio=6 chan_count=2 chan_flags=20 first_ch=6 last_ch=100 ssid_len=0 schedule0=0/1 schedule1=0/0 start_mac=0 gp_flags=0886 gp_flags2=00 9560nn56: scan-builder direct[0] id=0 len=0 first=00 00 00 00 count=2 9560nn56: scan-debug base=8B4190D4 bytes=1948 hold@=8B419878 ready@=8B419874 submit_count@=8B41987C uid@=8B419880 release_spin@=8B419884 cmdver=15 9560nn56: scan-debug offs hdr cmd=+0000 grp=+0001 seq=+0002 len=+0004 ver=+0007 req=+0008 uid=+0008 ooc=+0012 gp=+0016 chan=+0052 periodic=+0592 probe=+0604 9560nn56: scan-debug offs gp flags=+0016 reserved=+0018 start_mac=+0019 active=+0020 adwell2g=+0022 adwell5g=+0023 social=+0024 flags2=+0025 budget=+0026 maxoot=+0028 suspend=+0036 prio=+0044 passive=+0048 frags=+0050 9560nn56: scan-debug offs chan flags=+0052 count=+0053 numaps=+0054 ch0=+0056 chN=+0056+(N*8) periodic.s0=+0592 periodic.s1=+0596 delay=+0600 probe.shortssid_count=+1136 probe.bssid_count=+1137 direct0=+1140 directN=+1140+(N*34) shortssid0=+1820 shortssidN=+1820+(N*4) bssid0=+1852 bssidN=+1852+(N*6) 9560nn56: scan-debug hdr cmd=0D grp=01 seq=001C len=1940 ver=0 uid=0 ooc=6 9560nn56: scan-debug gp flags=0886 reserved=00 start_mac=0 active=10/10 adwell=2/8/10 flags2=00 budget=300 maxoot=0/0 suspend=0/0 prio=6 passive=110/110 frags=0/0 9560nn56: scan-debug chan flags=20 count=2 numaps=10/2 9560nn56: scan-debug ch[0] off=+0038 flags=00000000 num=6 psd=1 iter=1 interval=0 9560nn56: scan-debug ch[1] off=+0040 flags=00000000 num=100 psd=0 iter=1 interval=0 9560nn56: scan-debug periodic s0=0/1 s1=0/0 delay=0 reserved=0 9560nn56: scan-debug probe mac_hdr=0/26 band0=26/47 band1=73/52 band2=125/0 common=125/9 shortssid_count=0 bssid_count=0 9560nn56: scan-debug direct[0] off=+0474 id=0 len=0 first=00 00 00 00 9560nn56: scan-debug direct[1] off=+0496 id=0 len=0 first=00 00 00 00 9560nn56: scan-debug direct[2] off=+04b8 id=0 len=0 first=00 00 00 00 9560nn56: scan-debug direct[3] off=+04da id=0 len=0 first=00 00 00 00 9560nn56: scan-debug direct[4] off=+04fc id=0 len=0 first=00 00 00 00 9560nn56: scan-debug direct[5] off=+051e id=0 len=0 first=00 00 00 00 9560nn56: scan-debug direct[6] off=+0540 id=0 len=0 first=00 00 00 00 9560nn56: scan-debug direct[7] off=+0562 id=0 len=0 first=00 00 00 00 9560nn56: scan-debug direct[8] off=+0584 id=0 len=0 first=00 00 00 00 9560nn56: scan-debug direct[9] off=+05a6 id=0 len=0 first=00 00 00 00 9560nn56: scan-debug direct[10] off=+05c8 id=0 len=0 first=00 00 00 00 9560nn56: scan-debug direct[11] off=+05ea id=0 len=0 first=00 00 00 00 9560nn56: scan-debug direct[12] off=+060c id=0 len=0 first=00 00 00 00 9560nn56: scan-debug direct[13] off=+062e id=0 len=0 first=00 00 00 00 9560nn56: scan-debug direct[14] off=+0650 id=0 len=0 first=00 00 00 00 9560nn56: scan-debug direct[15] off=+0672 id=0 len=0 first=00 00 00 00 9560nn56: scan-debug direct[16] off=+0694 id=0 len=0 first=00 00 00 00 9560nn56: scan-debug direct[17] off=+06b6 id=0 len=0 first=00 00 00 00 9560nn56: scan-debug direct[18] off=+06d8 id=0 len=0 first=00 00 00 00 9560nn56: scan-debug direct[19] off=+06fa id=0 len=0 first=00 00 00 00 9560nn56: scan-debug short_ssid[0] off=+071c value=00000000 9560nn56: scan-debug short_ssid[1] off=+0720 value=00000000 9560nn56: scan-debug short_ssid[2] off=+0724 value=00000000 9560nn56: scan-debug short_ssid[3] off=+0728 value=00000000 9560nn56: scan-debug short_ssid[4] off=+072c value=00000000 9560nn56: scan-debug short_ssid[5] off=+0730 value=00000000 9560nn56: scan-debug short_ssid[6] off=+0734 value=00000000 9560nn56: scan-debug short_ssid[7] off=+0738 value=00000000 9560nn56: scan-debug bssid[0] off=+073c value=00-00-00-00-00-00 9560nn56: scan-debug bssid[1] off=+0742 value=00-00-00-00-00-00 9560nn56: scan-debug bssid[2] off=+0748 value=00-00-00-00-00-00 9560nn56: scan-debug bssid[3] off=+074e value=00-00-00-00-00-00 9560nn56: scan-debug bssid[4] off=+0754 value=00-00-00-00-00-00 9560nn56: scan-debug bssid[5] off=+075a value=00-00-00-00-00-00 9560nn56: scan-debug bssid[6] off=+0760 value=00-00-00-00-00-00 9560nn56: scan-debug bssid[7] off=+0766 value=00-00-00-00-00-00 9560nn56: scan-debug bssid[8] off=+076c value=00-00-00-00-00-00 9560nn56: scan-debug bssid[9] off=+0772 value=00-00-00-00-00-00 9560nn56: scan-debug bssid[10] off=+0778 value=00-00-00-00-00-00 9560nn56: scan-debug bssid[11] off=+077e value=00-00-00-00-00-00 9560nn56: scan-debug bssid[12] off=+0784 value=00-00-00-00-00-00 9560nn56: scan-debug bssid[13] off=+078a value=00-00-00-00-00-00 9560nn56: scan-debug bssid[14] off=+0790 value=00-00-00-00-00-00 9560nn56: scan-debug bssid[15] off=+0796 value=00-00-00-00-00-00 9560nn56: raw-hcmd[scan-0d-openbsd] tail=5 next=6 len=1948 seq=001C pa=00000000:0032a800 db=00000006 queued=6 9560nn56: rfh-dump[dpc] frbdcb=00000000:00330000 urbdcb=0032a800:079c0001 stts=00000000:00294678 orb=00000000:00000000 gen=00000003 active=00010001 dma=40031800 umac_dma=87000000 9560nn56: linux scan req ack grp=01 code=0D seq=001C len=4 uid=0 9560nn56: notif other cmd=0D grp=01 seq=001C len=4 9560nn56: rx-consume[scan-post-0d-openbsd] closed=11 cur=11 write=15 write_actual=8 raw=16 notif=16 mpdu=0 alive=1 b1=1 f7=1 mgmt=0 data=0 bss=0 9560nn56: scan-rx-candidate cmd=C1 grp=00 seq=8000 len=328 mgmt_off=64 data_off=8 9560nn56: real-bss add bssid=04-02-1F-F7-0D-B8 ssid_len=11 ds=2437000 count=1 9560nn56: rx-consume[scan-wait] closed=12 cur=12 write=16 write_actual=16 raw=17 notif=16 mpdu=1 alive=1 b1=1 f7=1 mgmt=1 data=1 bss=1 9560nn56openbsd2: openbsd-scan-submit ok0d=1 progress=1 gen=1 uid=0 ack=1 iter=0 umac_iter=0 done=0 status=0 mpdu=1 bss=1 wait_ms=0 9560nn56: rx-consume[scan] closed=12 cur=12 write=16 write_actual=16 raw=17 notif=16 mpdu=1 alive=1 b1=1 f7=1 mgmt=1 data=1 bss=1 9560nn56: OID_802_11_BSSID_LIST_SCAN gen=1 count=1 frames=17 mgmt=1 txq=6 bell=6 ack=1 iter=0 umac_iter=0 done=0 status=0 mpdu=1 wait_ms=0 9560nn56: scan-rx-candidate cmd=B5 grp=00 seq=C005 len=916 mgmt_off=10 data_off=8 9560nn56: linux scan umac iter grp=00 code=B5 seq=C005 len=916 uid=0 channels=2 status=1 bt=0 last_ch=100 tsf=00000000:0353737a 9560nn56: linux scan umac complete grp=00 code=0F seq=C006 len=20 uid=0 sched=0 iter=0 status=1 ebs=3 time=0 bss=1 mpdu=2 9560nn56: notif other cmd=0F grp=00 seq=C006 len=20 9560nn56: rx-consume[dpc] closed=14 cur=14 write=18 write_actual=16 raw=19 notif=17 mpdu=2 alive=1 b1=1 f7=1 mgmt=1 data=2 bss=1 9560nn56: rfh-dump[dpc] frbdcb=00000000:00330000 urbdcb=0032a800:079c0001 stts=00000000:00294678 orb=00000000:00000000 gen=00000003 active=00010001 dma=40031800 umac_dma=87000000 9560nn56: rx-consume[dpc] closed=14 cur=14 write=18 write_actual=16 raw=19 notif=17 mpdu=2 alive=1 b1=1 f7=1 mgmt=1 data=2 bss=1 9560nn56: rx-consume[oid-bssid-list] closed=14 cur=14 write=18 write_actual=16 raw=19 notif=17 mpdu=2 alive=1 b1=1 f7=1 mgmt=1 data=2 bss=1 9560nn56: OID_802_11_BSSID_LIST count=1 media=1 real_frames=19 9560nn56: desired SSID set len=11 first=57 4C 41 4E 9560nn56: set oid=0D01011D len=64 auth=3 enc=6 9560nn56: set oid=0D010113 len=28 auth=0 enc=0 9560nn56: desired SSID set len=0 first=00 00 00 00 36: ERROR: UMRxReadDWORDFromTheRegistry/ZwQueryValueKey: NtStatus = c0000034 ERROR: DavReadRegistryValues/RegQueryValueExW(4). WStatus = 127 ERROR: DavReadRegistryValues/RegQueryValueExW(5). WStatus = 127 ERROR: DavReadRegistryValues/RegQueryValueExW(6). WStatus = 127

I have the Speedport W 724V router from the Telekom germany. There I notice, that the channel can change (automatisch) or can be fixed to one channel. So, I can and will really test everything (WPA, WPA2, WEP, unsecured) with the Wlan driver 9560 for XP Dietmar

@Mark-XP Hihi, the situation is a little bit other. There is no driver for Win7 for the wlan 9560 card. But soon will be there a driver for XP. Oh..soso much crazy things happen to me today. First I get Wlan contact to my router with this Wlan card for the very first time. On 2.4 GHZ on channel 6 and on 5 GHZ on channel 100. Later I was wondering, why suddently I get contact on channel 1. Interesting, it is from neighbor. But in the meantime, my router switched to 2.4 GHZ channel 11, but why Dietmar PS: From a user I get a hint, that it is possible to use Win11 and on the same board a virtual machine with XP for to pass through this Wlan device 9560. On his board is such a 9560 Wlan card, running under win11. He reported, that with my driver version 9560rr15 under XP SP3 he already gets contact with 6 different WPA2 sources. Hm, I always think that for tests, XP on real hardware is better. But in the same time I never make such a try with real hardware devices, and I think it is very difficult. I make pass through only one time with Linux in summer 2012 for the game Moorhuhn and sound.

@reboot12 Yessssaahh.. today is break through with the XP driver for wlan 9560. Crazy, I was one step away from to give up. Now I build around 1000(!) different versions of this driver. Now I have prove, that my 9560 driver connects to my router. Nowhere in Internet you can find any like this for Wlan and XP Dietmar Intel 9560 Wi-Fi Driver for Windows XP Current Status (rr12) 1. What this driver is This is a ground-up NDIS 5.1 miniport driver for the Intel 9560 Wi-Fi project on Windows XP. It does not rely on Intel's original Windows XP Wi-Fi driver, because no such complete modern driver exists for this hardware path. Instead, it loads the real Linux iwlwifi firmware and talks directly to the hardware with Linux-style low-level commands, DMA rings, RX/TX queues, and firmware notifications. In the current test logs, the active hardware path is the Intel CNVi device with PCI ID 8086:7AF0 and firmware API 77 (SoJf B0 family, build f92b5fed). 2. What already works The driver now performs the full low-level hardware and firmware bring-up successfully: - PCI BAR mapping - device reset and wake-up - interrupt registration - DMA/RFH/RX queue allocation - firmware loading - ALIVE notification handling - bootstrap completion After firmware startup, the driver can run the modern Linux-style UMAC scan sequence: - pre-scan command 0x03 - full scan request 0x0D - scan request ACK - UMAC iteration notification B5 - UMAC complete notification 0x0F This is important, because earlier revisions only got ACK/COMPLETE without usable scan results. The newer revisions now receive real scan-result traffic from the hardware. 3. What the driver can do right now At the current rr12 stage, the driver can already do the following: - initialize the hardware and firmware reliably - run real over-the-air Wi-Fi scans - receive real 802.11 management traffic from the air - parse scan-result notifications from the modern UMAC scan path - detect beacons / probe responses in the RX path - populate the Windows XP BSSID list - return real networks through OID_802_11_BSSID_LIST - repeat scans reliably when Windows XP requests them - detect whether a scanned network is open, WPA, or WPA2/WPA-family encrypted - set the Privacy flag for encrypted networks so the XP Wi-Fi UI can distinguish protected networks In plain words: The driver is no longer only loading firmware. It is now actually hearing Wi-Fi signals and building a real network list that Windows XP can query. 4. What the current logs prove The latest successful logs show all of the following: - firmware boot completes cleanly - ALIVE status is received - scan commands are accepted - B5 UMAC iteration results are returned - management frames are parsed - at least one BSS entry is created - OID_802_11_BSSID_LIST returns count = 1 instead of 0 This means the scan path is now real and functional. This is the first major milestone where the XP driver is no longer "talking to firmware only", but is actually receiving real radio data and exposing it back to Windows XP. 5. What is proven about radio reception The logs now prove real RF reception. That means this is no longer a fake scan, a synthetic result, or a firmware-only illusion. The driver is now receiving real scan-result data from the radio path and converting it into BSS entries. The current successful logs clearly prove real reception on 2.4 GHz. The scan also runs on 5 GHz channels, but in the currently confirmed logs the strongest proven decoded result is from the 2.4 GHz side. So the safe statement is: - 2.4 GHz reception is proven - 5 GHz scanning is active - 5 GHz reception is very likely, but should still be confirmed with a clearly decoded 5 GHz BSS entry in the log 6. WPA / WPA2 status WPA / WPA2 support is currently present at the scan-detection level, not yet at the full connection level. What works now: - RSN / WPA-family information can be recognized from scan results - encrypted networks can be marked as protected - the driver can expose that protection state in the BSS list What does not work yet: - no full WPA/WPA2 association - no 4-way handshake - no PTK/GTK installation - no real data traffic under WPA2 yet So at the moment: The driver can see WPA/WPA2-protected networks. 7. What still does NOT work yet The following major parts are still unfinished: - association / authentication sequence - full connect logic - WPA/WPA2 key installation - real TX data path for connected traffic - full RX data path for normal user packets - IP traffic over Wi-Fi - stable end-to-end network connection So the current status is: Scanning works. Discovery works. BSS list reporting works. Encryption detection works. Connection does not work yet. 8. Current technical limitation Although scan reception is now real, the management-frame decoding is still not fully clean. The latest logs show that the driver is extracting real BSS data, but some parsed fields are still not fully trustworthy in every case. That means the scan-result path is alive, but the embedded frame interpretation still needs refinement. So the remaining scan-side work is no longer "make scanning work at all". It is now much narrower: - improve exact management-frame alignment inside the B5 result path - refine SSID / BSSID / channel extraction - confirm 5 GHz decoding with a clean real entry - keep WPA / RSN interpretation attached to the corrected frame parser 9. Practical summary What the Intel 9560 XP driver can do now: - bring up hardware - load real firmware - run real Wi-Fi scans - receive real over-the-air management frames - build a real BSS list - show at least one real access point in Windows XP - detect protected networks as encrypted What it still cannot do yet: - associate - authenticate fully - complete WPA2 handshake - pass normal network traffic 11. Bottom line This project has now moved beyond basic firmware bring-up. The Intel 9560 XP driver is already capable of: - real firmware initialization - real radio scanning - real management-frame reception - real BSS list reporting - WPA/WPA2 network detection during scan The next big milestone is no longer scanning. The next big milestone is full connection support: association, key handling, and real data traffic. Current state in one sentence: The driver can already see real Wi-Fi networks under Windows XP, including protected WPA/WPA2 networks

@reboot12 I have this switch in Bios also, because with hack for ME I can see everything in the Bios of the Biostar z690A Valkyrie. I just switch this CNVi from Auto ===> disable. But because of those "IF" constructions there, then the whole device 9560 disappears. May be with ru.efi I can switch ONLY this CNVi but until now I have not tested because I do not think, that this will help me Dietmar PS: On your Dell the switch for CSM is write protected. But you can read out the whole Bios, switch this CSM to enabled and flash Bios back. This was the only way, how I can enable CSM on the N100 board. 0x41D1B Form: Connectivity Configuration, FormId: 0x2720 {01 86 20 27 75 02} 0x41D21 Text: Statement.Prompt: CNVi CRF Present, TextTwo: No {03 08 F8 16 F9 16 FA 16} 0x41D29 Text: Statement.Prompt: CNVi Configuration, TextTwo: {03 08 FC 16 FC 16 00 00} 0x41D31 One Of: CNVi Mode, VarStoreInfo (VarOffset/VarName): 0x734, VarStore: 0x6, QuestionId: 0x5E, Size: 1, Min: 0x0, Max 0x1, Step: 0x0 {05 91 76 02 FD 16 5E 00 06 00 34 07 10 10 00 01 00} 0x41D42 One Of Option: Disable Integrated, Value (8 bit): 0x0 {09 07 FF 16 00 00 00} 0x41D49 One Of Option: Auto Detection, Value (8 bit): 0x1 (default) {09 07 FE 16 30 00 01} 0x41D50 End One Of {29 02} 0x41D52 Suppress If {0A 82} 0x41D54 QuestionId: 0x5E equals value 0x0 {12 06 5E 00 00 00} 0x41D5A Gray Out If {19 82} 0x41D5C String Ref: No (0x16FB) {4E 84 FB 16} 0x41D60 String Ref: No (0x16FA) {4E 04 FA 16} 0x41D64 Match {2A 02} 0x41D66 End {29 02} 0x41D68 One Of: Wi-Fi Core, VarStoreInfo (VarOffset/VarName): 0x735, VarStore: 0x6, QuestionId: 0x5F, Size: 1, Min: 0x0, Max 0x1, Step: 0x0 {05 91 77 02 00 17 5F 00 06 00 35 07 10 10 00 01 00} 0x41D79 One Of Option: Enabled, Value (8 bit): 0x1 (default) {09 07 03 00 10 00 01} 0x41D80 One Of Option: Disabled, Value (8 bit): 0x0 {09 07 04 00 00 00 00} 0x41D87 End One Of {29 02} 0x41D89 One Of: BT Core, VarStoreInfo (VarOffset/VarName): 0x736, VarStore: 0x6, QuestionId: 0x60, Size: 1, Min: 0x0, Max 0x1, Step: 0x0 {05 91 78 02 01 17 60 00 06 00 36 07 10 10 00 01 00} 0x41D9A One Of Option: Enabled, Value (8 bit): 0x1 (default) {09 07 03 00 10 00 01} 0x41DA1 One Of Option: Disabled, Value (8 bit): 0x0 {09 07 04 00 00 00 00} 0x41DA8 End One Of {29 02} 0x41DAA Gray Out If {19 82} 0x41DAC QuestionId: 0x60 equals value 0x0 {12 06 60 00 00 00} 0x41DB2 One Of: BT Audio Offload, VarStoreInfo (VarOffset/VarName): 0x737, VarStore: 0x6, QuestionId: 0x271E, Size: 1, Min: 0x0, Max 0x1, Step: 0x0 {05 91 79 02 02 17 1E 27 06 00 37 07 14 10 00 01 00} 0x41DC3 One Of Option: Disabled, Value (8 bit): 0x0 (default) {09 07 04 00 10 00 00} 0x41DCA One Of Option: Enabled, Value (8 bit): 0x1 {09 07 03 00 00 00 01} 0x41DD1 End One Of {29 02} 0x41DD3 End If {29 02} 0x41DD5 End If {29 02} 0x41DD7 End If {29 02}

@K4sum1 I make a new version for RTL812x. Then I compile everything for XP SP3 free, chk and 2003 NT5.2 bit 64 also free and chk. I have not tested, good luck Dietmar https://www.upload.ee/files/19243043/RTL8125_NT52_x86_x64_patched_v3.zip.html

Hi, just for fun, for to look what is possible to do with the WDK 7600 under XP SP3, I wrote a pure Assembler program, for to calculate the sum of 1^3 + 2^3 + 3^3 + 4^3 + ...+ 10.000.000.000^3 = [n*(n+1)/2]^2 (zur Probe). The stupid compi has to add all one by one.. But he did this very tricky, for to avoid multiplication, uses always the "6" as constant difference in 3. order sum, and now only has to sum everything up. On my X58 board the program gives the time out of nearly exact 120 sec. The whole program kubik.exe is only 3kb in size. This program kubik.exe should run on a lot of different Windows versions. And I make an interesting discovery: I wrote another kubik.exe program, that make use of the 4 cores of my i920 cpu on this x58 board. Now, the cpu last goes up from 13% ==> 53%, means all cores are involve. But now I get nearly 200sec as result.. Dietmar PS: Here is the program kubik.exe and the whole Source Code that you run in commandline, nice(!).. https://www.upload.ee/files/19235972/kubik10.zip.html EDIT: I make a small joke: I just fake the Header PE signature. Now kubikOS.exe should also run on win95 >=Win95 XP 108: 03 05 10A: 0A 01 110: 03 05 112: 0A 01 https://www.upload.ee/files/19236111/kubikOS.exe.html .686 .model flat, stdcall option casemap:none EXTERN GetStdHandle@4:PROC EXTERN WriteFile@20:PROC EXTERN ExitProcess@4:PROC EXTERN GetTickCount@0:PROC .data sum0 dd 0 sum1 dd 0 sum2 dd 0 sum3 dd 0 sum4 dd 0 cube0 dd 1 cube1 dd 0 cube2 dd 0 cube3 dd 0 d10 dd 7 d11 dd 0 d12 dd 0 d13 dd 0 d20 dd 12 d21 dd 0 count0 dd 540BE400h count1 dd 2 startTick dd 0 elapsed dd 0 hout dd 0 bytesWritten dd 0 outptr dd 0 outlen dd 0 timeptr dd 0 timelen dd 0 prefix db 'Zeit ms: ' outbuf db 128 dup(0) timebuf db 32 dup(0) .code start PROC call GetTickCount@0 mov startTick, eax L1: mov eax, sum0 add eax, cube0 mov sum0, eax mov eax, sum1 adc eax, cube1 mov sum1, eax mov eax, sum2 adc eax, cube2 mov sum2, eax mov eax, sum3 adc eax, cube3 mov sum3, eax mov eax, sum4 adc eax, 0 mov sum4, eax mov eax, cube0 add eax, d10 mov cube0, eax mov eax, cube1 adc eax, d11 mov cube1, eax mov eax, cube2 adc eax, d12 mov cube2, eax mov eax, cube3 adc eax, d13 mov cube3, eax mov eax, d10 add eax, d20 mov d10, eax mov eax, d11 adc eax, d21 mov d11, eax mov eax, d12 adc eax, 0 mov d12, eax mov eax, d13 adc eax, 0 mov d13, eax add d20, 6 adc d21, 0 sub count0, 1 sbb count1, 0 mov eax, count0 or eax, count1 jnz L1 call GetTickCount@0 sub eax, startTick mov elapsed, eax mov edi, OFFSET outbuf add edi, 127 mov byte ptr [edi], 0 dec edi mov byte ptr [edi], 10 dec edi mov byte ptr [edi], 13 dec edi L2: mov ebx, 10 xor edx, edx mov eax, sum4 div ebx mov sum4, eax mov eax, sum3 div ebx mov sum3, eax mov eax, sum2 div ebx mov sum2, eax mov eax, sum1 div ebx mov sum1, eax mov eax, sum0 div ebx mov sum0, eax add dl, '0' mov byte ptr [edi], dl dec edi mov eax, sum0 or eax, sum1 or eax, sum2 or eax, sum3 or eax, sum4 jnz L2 inc edi mov outptr, edi mov eax, OFFSET outbuf add eax, 127 sub eax, edi mov outlen, eax mov edi, OFFSET timebuf add edi, 31 mov byte ptr [edi], 0 dec edi mov byte ptr [edi], 10 dec edi mov byte ptr [edi], 13 dec edi mov eax, elapsed cmp eax, 0 jne L3 mov byte ptr [edi], '0' dec edi jmp L4 L3: mov ebx, 10 L3A: xor edx, edx div ebx add dl, '0' mov byte ptr [edi], dl dec edi test eax, eax jnz L3A L4: inc edi mov timeptr, edi mov eax, OFFSET timebuf add eax, 31 sub eax, edi mov timelen, eax push -11 call GetStdHandle@4 mov hout, eax push 0 push OFFSET bytesWritten push outlen push outptr push hout call WriteFile@20 push 0 push OFFSET bytesWritten push 9 push OFFSET prefix push hout call WriteFile@20 push 0 push OFFSET bytesWritten push timelen push timeptr push hout call WriteFile@20 push 0 call ExitProcess@4 start ENDP end start

@sk9392 ntoskrnl.exe from XP SP3 and W2003 are not the same. They have some similarities but also big differences. So, when you use the Patch Integrator, I think it will always fail, when you use modded drivers, that depend on ntoskrn8.sys . Other drivers, which make no use of the ntoskrn8.sys, should work Dietmar PS: By the way I noticed, that the USB AMD 145 driver gives Bsod c0005 on z690 boards, even with the patch from @reboot12 .

@reboot12 I can only take a deeper look in this "not find UEFI data in RAM" when you tell me, what you are trying. By the way: My Wlan driver under XP for the 9560 device now shows "ALIVE=1" and also "ack=1" . This means, that the Wlan-cpu is feeding with the correct firmware, starts and works. But I still have problems for to convert the search from Linux Ubuntu for "Wlan network" to the XP search. The driver is nearly ready but still no able to find Wlan traffic, all other works Dietmar

@reboot12 Here is your wished driver, for XP SP3 and XP bit 64 compiled. I always compile under XP SP3 with WDK 7600 Dietmar https://www.upload.ee/files/19219218/gelipDriver.zip.html EDIT: I just correct the link.

@reboot12 After such a long and crazy search in the dark, I succed to print out each function, register, each adress, each size, a whole trace, what happens, when the Wlan 9560 driver starts in Linux. And the most hard and crazy step was to dump the full Payload in Linux for the firmware of the Wlan-cpu. Under XP I need for all those dumps via Windbg 5 min. Now I make a one by one compare and I find already small(?!) differences between my XP driver for the Wlan 9560 device and the Linux one. Now I put all whats different from Linux ==> XP, because the Wlan-cpu understands only what is given by Linux to its firmware, like food. Nowhere in internet is an example for a working payload for this Wlan-cpu. Now I have and maybe, whol fun starts is a very short moment Dietmar

@Damnation Oh yes, I am interested, because nearly nothing can to be found in Internet about Wireless lan an Windows Dietmar

@Damnation For me it was not possible, to reduce the Wlan 9560 driver from Linux Ubuntu ubuntu-24.04.2-desktop-amd64 to a maximal simplified single 9560.c 9560.h and sources and makefile. This is Open Source? ChatGPT tells, that it needs about 198 files for this and still the Kernel Sources?! ChatGPT 5.4 is much too stupid for such a task. The maximal end for to convert from Linux to XP is Lan-driver, at least in this moment. And you have no chance to put the nose of ChatGPT to that point, what really has to be looked on. For example I make a try for to figure out, what has to be the input for the Wlan-cpu when it accepts an input for scan. In Linux, it does not seem to be possible. When I am at this Linux, suddently the screen becomes black and I get a message, that my resolution of this screen is not perfect. BUT BLACK SCREEN SEEMS TO BE BETTER. How can somebody with brain work with this stupid, ugly OS, Win95 is much better. IT IS SOO STUPID, I mean ChatGPT. But I also do not know another KI, which is better Dietmar EDIT: Just when I write this, I come to an crazy idea. Even stupid ChatGPT cant find out, which bits the Wlan-cpu needs for to start a Scan, I can use Windbg and offer this Wlan-cpu really all of different bits, and it has to eat them..

@windows2 The answer is very easy, because I dont know anything about Copilot with Visual Studio Code. I compare some KI models. ChatGPT is for me the most most best of all, until now. I just think about if it is possible, to construct a machine, that automatically translated any working driver under ubuntu-24.04.2-desktop-amd64 direct in Source Code for XP, where it is possible Dietmar

@reboot12 I do not succeed to translate the Linux scan sequence to XP SP3. Even I succeed to get the full path under Linux Ubuntu, how Linux is doing everything and also a reset I can trace step by step. Strange for me. Linux hangs sometimes at the same point as XP during this scan for Wifi network, firmware of the integrated Wlan-cpu looks like dead. Linux did in this case a reset of all the rings, alive=1 etc. But I do not succeed to redo this reset in XP Dietmar PS: It is only a small step but I cant solve, even I have all the information for the Wlan 9560 card, that I need. Funny, I get the feeling, that ChatGPT does not want to help me with this. EDIT: This feeling becomes even more real. Now I trick Chatgpt, during build this whole Wlan driver for Linux Ubuntu from only 3 files 9560.c 9560.h firmware.c together with makefile and sources. This means to pack all the files from Linux intelligent together. Soon we will see..because now ChatGPT suddently forgets, that it does not want to help me with scan. EDIT2: Oh nice, this trick works. For the very first time I have Scan code for XP, build direct from Linux.

@reboot12 First Grok tells: Impossible ChatGPT: 0 % Chance. Now GroK: Nearly ready Chatgpt: 70 % chance for a full working Wlan driver for XP with WPA2 Dietmar PS: By the way I noticed, that there is not a single Wlan driver code for XP in whole Internet. Reactos also has none. This was other for to look for a normal Lan driver. All try and error and with the help of the XP SP1 Sources by myself. Interesting is the help of ChatGPT. This Ki can do a lot of programs, but comes very quick to an end. So just now no Terminator at all. ALL (100%) of ideas how to continue come only from me. Grok is good for some crazy ideas. But makes such a lot of mistakes..brrr..

@reboot12 I look at the SP1 Sources, what needs to be done, that an device is recogniced as wireless. This bit=1 I fake with Windbg. Waaoooh, fun is really endless in this Dietmar

@reboot12 I am not sure about this Valley-view graphik. Is it 3D? But I think such a hack would be easier for me than this crazy Wlan card because the working driver is close to the existing one for XP, Needs a lot of Hex work I think Dietmar