Dietmar Posted March 16 Posted March 16 (edited) @reboot12 I dont have more information about this win8.1 version. I found out with Linux live from USB stick build via Rufus ubuntu-24.04.2-desktop-amd64.iso what is going on with this WLan card. Crazy, I always used the wrong firmware Dietmar Working Firmware 77.f92b5fed.0 so-a0-jf-b0-77.ucode Not working versions of Firmware, which I tested before iwlwifi-so-a0-jf-b0-89.ucode iwlwifi-so-a0-jf-b0-88.ucode iwlwifi-so-a0-jf-b0-87.ucode iwlwifi-so-a0-jf-b0-86.ucode iwlwifi-so-a0-jf-b0-85.ucode iwlwifi-so-a0-jf-b0-84.ucode iwlwifi-so-a0-jf-b0-83.ucode iwlwifi-so-a0-jf-b0-82.ucode iwlwifi-so-a0-jf-b0-81.ucode iwlwifi-so-a0-jf-b0-80.ucode iwlwifi-so-a0-jf-b0-79.ucode iwlwifi-so-a0-jf-b0-78.ucode Edited March 16 by Dietmar
reboot12 Posted March 16 Posted March 16 (edited) @Mov AX, 0xDEAD writes in the readme that the driver files can be any 6.3.xxxx but the kdnet.dll file must be exactly 17276. I found only 16384 version files in this update Update for Windows 8.1 for x64-based Systems (KB3000850) in Windows8.1-KB3000850-x64.msu file - all files have version 16384 date 2013-08-22 except kd_02_8086.dll which has version 17276 date 2014-08-08 2013-08-22 13:39 87 904 kdnet.dll 6.3.9600.16384 2013-08-22 13:39 14 176 kdstub.dll 6.3.9600.16384 2013-08-22 13:39 28 512 kd_02_10df.dll 6.3.9600.16384 2013-08-22 13:39 308 064 kd_02_10ec.dll 6.3.9600.16384 2013-08-22 13:39 110 944 kd_02_14e4.dll 6.3.9600.16384 2013-08-22 13:39 33 632 kd_02_15b3.dll 6.3.9600.16384 2013-08-22 13:39 37 728 kd_02_1969.dll 6.3.9600.16384 2013-08-22 13:39 28 512 kd_02_19a2.dll 6.3.9600.16384 2014-08-08 17:55 172 344 kd_02_8086.dll 6.3.9600.17276 Interestingly, all these files are located in a folder called ...transport-network...6.3.9600.17276... I check also files Windows8.1-KB3003057-x64.msu & Windows8.1-KB3014442-x64.msu but no any kd*.dll files Edited March 16 by reboot12
Dietmar Posted March 16 Posted March 16 @reboot12 I think, there is a mistake: kdnet.dll is 16384 and kd_02_8086.dll is 17276 Dietmar
reboot12 Posted March 16 Posted March 16 (edited) 3 hours ago, Dietmar said: I think, there is a mistake: kdnet.dll is 16384 and kd_02_8086.dll is 17276 Nooo, this is not mistake. All files except Intel .dll has version 16384 https://www.upload.ee/files/19165674/kd81x64_KB3000850.zip.html F..k, I downloaded 6.3.9600.17415.winblue_r4.141028-1500_amd64fre_client-professional_core_retail.iso but file kdnet.dll in boot.wim\install.wim still only 6.3.9600.16384 Where can I get version 17276 ??? I think I'm giving up on trying to make a 64-bit version of KDNET - I don't know how to correct the KDNET_PATCH.ASM file for 64-bit anyway. Moreover, I think that the .ASM file contains offsets strictly related only to the 32-bit kdnet.dll file and for the 64-bit version it probably needs to be corrected accordingly. Edited March 16 by reboot12
Dietmar Posted March 16 Posted March 16 @reboot12 Grok tells, that it is impossible to bring a modern Wlan card to life under XP SP3. But I am very near to exact this, the correct(!) firmware is already loaded and started in the 9560 Wlan card Dietmar 9560!WifiEnableBringupInterrupts: b57039a0 8bff mov edi,edi 9560v40: enable INTx bringup mask=80000001 === V51_ALIVE_WAIT === eax=8c965000 ebx=8ca73130 ecx=8052b704 edx=0000002b esi=8c965000 edi=00479000 eip=b5704ac0 esp=b7b6e6b8 ebp=b7b6e71c iopl=0 nv up ei ng nz ac pe nc cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000296 9560!WifiWaitForInitialAlive: b5704ac0 8bff mov edi,edi # ChildEBP RetAddr Args to Child 00 b7b6e6b4 b5703582 8c965000 00000000 b7b6e924 9560!WifiWaitForInitialAlive (FPO: [Non-Fpo]) (CONV: stdcall) 01 b7b6e71c b5700d0c 8c965000 8052b704 b7b6e748 9560!WifiAttemptFirmwareBootstrapGen2V2+0x1632 (FPO: [Non-Fpo]) (CONV: stdcall) 02 b7b6e72c b5705959 8c965000 8c965000 00000000 9560!WifiAttemptFirmwareBootstrap+0x3c (FPO: [Non-Fpo]) (CONV: stdcall) 03 b7b6e748 b7bc3dea b7b6e784 b7b6e78c b7bbf200 9560!MiniportInitialize+0x2b9 (FPO: [Non-Fpo]) (CONV: stdcall) 04 b7b6e900 b7bc39cc 8cae4f20 b7b6e924 b7b6e9cc NDIS_b7bb9000!ndisMInitializeAdapter+0x3b7 (FPO: [Non-Fpo]) ;dv /t /v">05 b7b6e9d4 b7bc38ba 8cae4f20 00000000 8cc7b218 NDIS_b7bb9000!ndisInitializeAdapter+0xb9 (FPO: [Non-Fpo]) 06 b7b6ea08 b7bc4daf 8cc180e4 8ca73ae0 8cc18008 NDIS_b7bb9000!ndisPnPStartDevice+0xd6 (FPO: [Non-Fpo]) 07 b7b6ea38 804ef18f 8ca73030 8cc18008 b7b6eab4 NDIS_b7bb9000!ndisPnPDispatch+0x306 (FPO: [Non-Fpo]) 08 b7b6ea48 80592b63 b7b6eab4 8cf4ce50 00000000 nt!IopfCallDriver+0x31 (FPO: [0,0,0]) 09 b7b6ea74 80592be1 8ca73030 b7b6ea90 00000000 nt!IopSynchronousCall+0xb7 (FPO: [Non-Fpo]) 0a b7b6eab8 804f61ea 8cf4ce50 8caf1220 00000001 nt!IopStartDevice+0x4d (FPO: [Non-Fpo]) 0b b7b6ead4 8059229b 8cf4ce50 8caf1201 00000000 nt!PipProcessStartPhase1+0x4e (FPO: [Non-Fpo]) 0c b7b6ed2c 8059276e 8cf049e8 00000001 00000000 nt!PipProcessDevNodeTree+0x1db (FPO: [Non-Fpo]) 0d b7b6ed54 804f6996 00000003 8055b5c0 8056485c nt!PiProcessStartSystemDevices+0x3a (FPO: [Non-Fpo]) 0e b7b6ed7c 8053876d 00000000 00000000 8cf3e020 nt!PipDeviceActionWorker+0x170 (FPO: [Non-Fpo]) 0f b7b6edac 805cff64 00000000 00000000 00000000 nt!ExpWorkerThread+0xef (FPO: [Non-Fpo]) 10 b7b6eddc 805460de 8053867e 00000001 00000000 nt!PspSystemThreadStartup+0x34 (FPO: [Non-Fpo]) 11 00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16 9560v40: poll[alive-wait] ltr=88C888C8 bootstage=00000000 ipc=003B1000 sleep=00000000 rfid=00105110 alive=0 pnvm=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 === V51_RX_SCAN === 1
reboot12 Posted March 17 Posted March 17 I tried another 6.3.9600.17238.winblue_gdr.140723-2018_amd64fre_client-core_retail_en-us-IR4_CCRA_X64FRE_EN-US_DV9.iso image and again the kd files have version 6.3.9600.16384 except the kd_02_8086.dll - this one has version 6.3.9600.16442
Dietmar Posted March 17 Posted March 17 @reboot12 I want to disable ME and to show all Hidden Entries in the Bios of the Biostar z690A Valkyrie. What version of FPT do I need for to dump and flash the Bios Dietmar
reboot12 Posted March 17 Posted March 17 (edited) 1 hour ago, Dietmar said: What version of FPT do I need for to dump and flash the Bios I think I've explained this before? Open the full BIOS file in UEFITool, click ME Region and on the right side in Information area you will see the Version: of the tools you need to use. Edited March 17 by reboot12
Dietmar Posted March 17 Posted March 17 @reboot12 I use FPT.efi version 16.1 And I succeed to show all Hidden Devices in the Bios of the Biostar z690A Valkyrie via this hack in via UEFItool extracted system.bin (found with key word administrator) of Bios version Z69CC508.BST 0A821206071300000F0F9110642110000000FFFF00CF272902 ==> 0A821206071301000F0F9110642110000000FFFF00CF272902 And after this, I set ME = disabled Dietmar Here is this Bios. The only thing I changed is to show ALL Hidden Settings in Bios https://www.upload.ee/files/19169056/biosval.rom.html
K4sum1 Posted March 18 Posted March 18 On 2/23/2026 at 7:30 PM, Dietmar said: Hi, I learned soso painfull, that I have to edit the RTL8125.inf file. But now it is ready. This is by far the best driver, that I ever made, here also with Source Code, please test Dietmar https://www.upload.ee/files/19104527/RTL8125allbest.zip.html 12 hours ago, K4sum1 said: With the RTL8125, I initially get no connectivity for like 10 seconds or so, until I get a DRIVER_IRQL_NOT_LESS_OR_EQUAL BSOD, 0x000000D1 from NDIS.sys. After reboot the device doesn't start with a code 39. https://awau.moe/9C7WWYd.mp4 please help me too
reboot12 Posted March 18 Posted March 18 @Mov AX, 0xDEAD wrote that the kdnet.dll x86 6.3.9600.17276 file is in the original Win8.1 or in the KB3000850 update. I found file .csv with a detailed description of all the x86 and x64 files included in this update: https://download.microsoft.com/download/1/c/d/1cda9567-573a-4383-b061-e33c85935e47/file information 3000850.csv After analyzing the file, it appears that the kdnet.dll x64 file is only in version 16384 (x64 version 17276 does not exist !!!) Files x86: Kdnet.dll,6.3.9600.17276,"83,776",8-Aug-14,15:35,x86,, Kdstub.dll,6.3.9600.16384,"13,664",22-Aug-13,5:25,x86,, Kd_02_10df.dll,6.3.9600.16384,"24,416",22-Aug-13,5:25,x86,, Kd_02_10ec.dll,6.3.9600.16384,"248,672",22-Aug-13,5:25,x86,, Kd_02_14e4.dll,6.3.9600.16384,"96,096",22-Aug-13,5:25,x86,, Kd_02_1969.dll,6.3.9600.16384,"33,120",22-Aug-13,5:25,x86,, Kd_02_19a2.dll,6.3.9600.16384,"24,416",22-Aug-13,5:25,x86,, Kd_02_8086.dll,6.3.9600.17276,"142,656",8-Aug-14,15:35,x86,, Files x64: Kdnet.dll,6.3.9600.16384,"87,904",22-Aug-13,12:39,x64,, Kdstub.dll,6.3.9600.16384,"14,176",22-Aug-13,12:39,x64,, Kd_02_10df.dll,6.3.9600.16384,"28,512",22-Aug-13,12:39,x64,, Kd_02_10ec.dll,6.3.9600.16384,"308,064",22-Aug-13,12:39,x64,, Kd_02_14e4.dll,6.3.9600.16384,"110,944",22-Aug-13,12:39,x64,, Kd_02_15b3.dll,6.3.9600.16384,"33,632",22-Aug-13,12:39,x64,, Kd_02_1969.dll,6.3.9600.16384,"37,728",22-Aug-13,12:39,x64,, Kd_02_19a2.dll,6.3.9600.16384,"28,512",22-Aug-13,12:39,x64,, Kd_02_8086.dll,6.3.9600.17276,"172,344",8-Aug-14,16:55,x64,, I collected all 64-bit files except: KDNET_PATCH.ASM, dummy, kdnet_delta.bin, kdusb_delta.bin - 64-bit_kdnet_w81.zip
Dietmar Posted March 21 Posted March 21 (edited) @reboot12 I worked now for about 100 hours on this crazy Wlan card to get it work under XP SP3. It starts very nice, I check that I load the correct firmware to the one of the 2 cpus in this card. After the firmware is loaded, the Wlan-cpu starts working. One cpu is for Wifi, the other for Bluetooth. But then happens something strange: The Wlan-cpu after starting jumps always to the umac=8047E450 place. This firmware is from Intel and I can see its content via Winhex but it is not disassembled by Intel for the public. Even more crazy, with Windbg you cant check the memory of this Wlan chip. I have the Source Code from OpenBSD, which is EXACT for this Wlan card. All is ok. But the Wlan-cpu always stops working at this place 0x8047E450. With Windbg you can see via Stack (kd>kv) that via this stopping of this Wlan-cpu you never get the signal ALIVE from this cpu, so that Wlan traffic can happen. I also try disint+-, no helps. The Wlan card works. On the same compi I read out all values of this card via Linux Ubuntu life. I even can fetch the full original Source Code, from which this driver for the Wlan card was compiled for Linux. All seems ok. But the translation to XP SP3 fails until now. This is the first time for me. Ok, all the lan drivers which I modded have a size of about 20kb. This Wlan driver is another cathegory, about 1.5 Mb(!). Dietmar 1.) What I tested 1.1) Correct hardware / device path - PCI device is consistently detected as Intel 8086:7AF0. - hwrev is consistently 0x430. - rfid is consistently 0x00105110. - CNVi value is consistently 0x00080400. - This matches the expected AX210 / so-a0-jf-b0 path well enough to be accepted by the driver. 1.2) Correct firmware selection - The embedded firmware selected is always: iwlwifi-so-a0-jf-b0-77.ucode - Firmware header is read correctly: api = 77 build = F92B5FED - So the driver is not loading a random or obviously wrong blob. 1.3) Full firmware section loading - All runtime sections are allocated and copied successfully: - LMAC sections = 15 - UMAC sections = 15 - PAGE sections = 20 - All pre/post verification checks pass: - checks = 50 - failures = 0 - So the blob content survives copy/load intact. 1.4) GEN3 context / OpenBSD-based bootstrap structure - I built the GEN3 context from the OpenBSD source code for this exact card. - Context header remains valid: - ver = 2 - size_dw = 26 - prphinfo / scratch / context addresses are filled consistently. - I tested both: - closer-to-Linux/OpenBSD variants - strict OpenBSD-style layout / sequencing 1.5) IML / firmware kick path - IML buffer is allocated and copied correctly. - IML response becomes 1. - bootctrl changes correctly: - before = 0x00480000 - after = 0x00480002 - So the kick path itself works. 1.6) Interrupt setup - NdisMRegisterInterrupt succeeds. - Bringup interrupt mask is applied. - I also tested disint+- pulse. - The pulse toggles exactly as intended: - before = 0x80000001 - after_disable = 0x00000000 - after_enable = 0x80000001 1.7) RX / RFH experiments - I tested several variants: - deferred OpenBSD-style RX until ALIVE - forced pre-ALIVE host-owned RFH / RX arm - pre-kick re-arm attempts - doorbell / write pointer programming - I also traced direct-vs-UMAC RFH register paths. 2.) What works 2.1) The driver reaches deep firmware bootstrap - MiniportInitialize runs. - PCI resources are mapped. - MMIO is readable. - Scatter/gather DMA init succeeds. - Interrupt registration succeeds. 2.2) The correct WiFi CPU is actually running - Very important: Not just talking to the Bluetooth side. - The WiFi UMAC definitely starts executing. - I can see the UMAC PC move: - first around C00C09E4 - then later consistently to 8047E450 - So the WLAN CPU does start and execute code. 2.3) Firmware integrity looks good - Correct firmware family is selected. - Full runtime image loads. - All copied sections verify perfectly. - IML responds positively. - So there is no evidence of a corrupted firmware copy/load. 2.4) The physical card works - On the same machine, Linux Ubuntu live can read out the card and use it. - Hardware values from Linux are consistent with the XP-side probing. - So this is not a dead/broken card. 2.5) The failure is highly reproducible - The stop is deterministic. - The WiFi UMAC always ends at the same place: UMAC PC = 0x8047E450 3.) NOT works 3.1) ALIVE never arrives - The fundamental failure remains: - no ALIVE notification - no working WLAN traffic after bootstrap 3.2) No real interrupt activity after firmware start - MiniportISR is never hit after the firmware begins running. - MiniportHandleInterrupt is never hit after the firmware begins running. - Combined state stays dead: - int = 0 - fh = 0 - bootstage = 0 - ipc = 0 3.3) No RX notification traffic appears - rxst stays 0 - used0 stays 0000/00 - data0 stays 0 - cur/hw indices stay 0 - So the first notification packet never becomes visible on the host side. 3.4) Forced pre-ALIVE RX/RFH arm did not help - I tested host-owned RFH before ALIVE. - I tested write pointer / doorbell programming. - I tested re-arm while waiting. - Result stayed the same: - UMAC ends at 8047E450 - no ALIVE 3.5) Strict OpenBSD deferred RX-until-ALIVE also did not help - In L62 I went back to strict OpenBSD deferred RX behavior, except for disint pulse tests. - Result still stayed the same. - So the bug is not explained simply by: "RX was armed too early" or "RX was armed too late". 3.6) disint+- did not help - The interrupt disable/enable pulse executes correctly. - But it changes nothing. - The WiFi CPU still stalls at 8047E450. 4.1) The main new finding - The problem is no longer "wrong firmware file" or "firmware not loaded". - The firmware is loaded correctly and verified completely. - The WiFi UMAC really starts running. - It then reproducibly stalls at: UMAC PC = 0x8047E450 4.2) Very important technical conclusion - I tested BOTH opposite RX theories: - force RX/RFH before ALIVE - strict OpenBSD deferred RX until ALIVE - Neither changed the result. - That is an important negative result and should be mentioned. 4.3) Another important negative result - disint+- was tested and does not solve it. 4.4) Important logical conclusion - This strongly suggests the remaining bug is not just one obvious visible register value. - It is more likely something deeper such as: - DMA visibility / coherency - cache / uncached behavior - memory ordering / barrier issue - XP-specific transport / synchronization mismatch - some hidden prerequisite that Linux/OpenBSD satisfy indirectly 5.) - Correct firmware is selected: iwlwifi-so-a0-jf-b0-77.ucode (api 77, build F92B5FED) - All LMAC/UMAC/PAGE sections load and verify perfectly (50 checks, 0 failures). - IML responds successfully and bootctrl changes correctly to 0x00480002. - The WiFi UMAC definitely starts running, so this is not just the Bluetooth CPU. - The UMAC always ends reproducibly at 0x8047E450. - No ALIVE notification is ever received afterward. - No ISR / HandleInterrupt is ever triggered afterward. - I tested both opposite RX strategies: - strict deferred RX until ALIVE - forced host-owned RFH/RX before ALIVE - Neither changes the outcome. - disint+- was also tested and does not help. - Therefore the remaining failure is likely deeper than firmware selection or one obvious register mismatch; DMA/coherency/synchronization on XP SP3 is now a strong suspect. 15: kd> bc * 15: kd> bd * 15: kd> .logopen /t c:\9560l62_kd.txt Closing open log file c:\9560l61_kd_09ec_2026-03-21_00-27-51-609.txt Opened log file 'c:\9560l62_kd_01a8_2026-03-21_00-55-48-812.txt' 15: kd> sxd ibp 15: kd> sxi ld 15: kd> sxi ud 15: kd> sxe av 15: kd> sxe gp 15: kd> sxe ud 15: kd> !sym quiet quiet mode - symbol prompts on 15: kd> .reload /f nt 15: kd> .reload /f ndis.sys 15: kd> .reload /f 9560.sys 15: kd> lm vm 9560 Browse full module list start end module name b2fc3000 b3135780 9560 (private pdb symbols) c:\9560l62\l62\wdm\objchk_wxp_x86\i386\9560.pdb Loaded symbol image file: 9560.sys Image path: \SystemRoot\system32\DRIVERS\9560.sys Image name: 9560.sys Browse all global symbols functions data Timestamp: Sat Mar 21 00:50:24 2026 (69BDDD40) CheckSum: 00181399 ImageSize: 00172780 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 15: kd> x 9560!*AttemptFirmwareBootstrap* b2fc72c0 9560!WifiAttemptFirmwareBootstrap (struct _ADAPTER *) b2fc7330 9560!WifiAttemptFirmwareBootstrapLegacy (struct _ADAPTER *) b2fc8440 9560!WifiAttemptFirmwareBootstrapGen2V2 (struct _ADAPTER *) 15: kd> x 9560!*SeedGen3* b2fca000 9560!WifiSeedGen3PrphInfoWindows (struct _ADAPTER *) 15: kd> x 9560!*PrimeOpenBsdRxRing* b2fc60b0 9560!WifiPrimeOpenBsdRxRing (struct _ADAPTER *) 15: kd> x 9560!*ProgramOpenBsdRxDma* b2fca500 9560!WifiProgramOpenBsdRxDma (struct _ADAPTER *, char *) 15: kd> x 9560!*ApplyDisintPulse* b2fca9a0 9560!WifiApplyDisintPulse (struct _ADAPTER *, char *) 15: kd> x 9560!*EnableBringupInterrupts* b2fca7f0 9560!WifiEnableBringupInterrupts (struct _ADAPTER *) 15: kd> x 9560!*WaitForInitialAlive* b2fcaae0 9560!WifiWaitForInitialAlive (struct _ADAPTER *) 15: kd> x 9560!*PollBringupState* b2fcc0b0 9560!WifiPollBringupState (struct _ADAPTER *, char *) 15: kd> x 9560!*ReadCombinedInterruptState* b2fcc3f0 9560!WifiReadCombinedInterruptState (struct _ADAPTER *, unsigned long *, unsigned long *, unsigned long *, unsigned long *) 15: kd> x 9560!*AckCombinedInterruptState* b2fcc640 9560!WifiAckCombinedInterruptState (struct _ADAPTER *, unsigned long, unsigned long, unsigned long, unsigned long) 15: kd> x 9560!*ReadAx210BringupInterruptState* b2fcc6d0 9560!WifiReadAx210BringupInterruptState (struct _ADAPTER *, unsigned long *, unsigned long *, unsigned long *, unsigned long *) 15: kd> x 9560!*PrimeOpenBsdAliveRx* b2fccd60 9560!WifiPrimeOpenBsdAliveRx (struct _ADAPTER *, char *) 15: kd> x 9560!*ConsumeOpenBsdRxNotifs* b2fcb970 9560!WifiConsumeOpenBsdRxNotifs (struct _ADAPTER *) 15: kd> x 9560!*TryDecodeNotifBuffer* b2fcbd90 9560!WifiTryDecodeNotifBuffer (struct _ADAPTER *, unsigned char *, unsigned long, unsigned long) 15: kd> bu 9560!WifiAttemptFirmwareBootstrapGen2V2 15: kd> bu 9560!WifiSeedGen3PrphInfoWindows 15: kd> bu 9560!WifiPrimeOpenBsdRxRing 15: kd> bu 9560!WifiProgramOpenBsdRxDma 15: kd> bu 9560!WifiApplyDisintPulse 15: kd> bu 9560!WifiEnableBringupInterrupts 15: kd> bu 9560!WifiWaitForInitialAlive 15: kd> bu 9560!WifiPollBringupState 15: kd> bu 9560!WifiReadCombinedInterruptState 15: kd> bu 9560!WifiAckCombinedInterruptState 15: kd> bu 9560!WifiReadAx210BringupInterruptState 15: kd> bu 9560!WifiPrimeOpenBsdAliveRx 15: kd> bu 9560!WifiConsumeOpenBsdRxNotifs 15: kd> bu 9560!WifiTryDecodeNotifBuffer 15: kd> bu 9560!MiniportISR 15: kd> bu 9560!MiniportHandleInterrupt 15: kd> bl 0 e b2fc8440 0001 (0001) 9560!WifiAttemptFirmwareBootstrapGen2V2 1 e b2fca000 0001 (0001) 9560!WifiSeedGen3PrphInfoWindows 2 e b2fc60b0 0001 (0001) 9560!WifiPrimeOpenBsdRxRing 3 e b2fca500 0001 (0001) 9560!WifiProgramOpenBsdRxDma 4 e b2fca9a0 0001 (0001) 9560!WifiApplyDisintPulse 5 e b2fca7f0 0001 (0001) 9560!WifiEnableBringupInterrupts 6 e b2fcaae0 0001 (0001) 9560!WifiWaitForInitialAlive 7 e b2fcc0b0 0001 (0001) 9560!WifiPollBringupState 8 e b2fcc3f0 0001 (0001) 9560!WifiReadCombinedInterruptState 9 e b2fcc640 0001 (0001) 9560!WifiAckCombinedInterruptState 10 e b2fcc6d0 0001 (0001) 9560!WifiReadAx210BringupInterruptState 11 e b2fccd60 0001 (0001) 9560!WifiPrimeOpenBsdAliveRx 12 e b2fcb970 0001 (0001) 9560!WifiConsumeOpenBsdRxNotifs 13 e b2fcbd90 0001 (0001) 9560!WifiTryDecodeNotifBuffer 14 e b2fcdf80 0001 (0001) 9560!MiniportISR 15 e b2fce080 0001 (0001) 9560!MiniportHandleInterrupt 15: kd> g 9560v38: MiniportInitialize enter 9560v38: NdisMInitializeScatterGatherDma -> 00000000 9560v38: PCI ven=8086 dev=7AF0 subven=8086 subsys=4234 status=00000000 9560v38: PCI cmd=0006 stat=0010 class=02/80/00 rev=11 BAR0=2B41C004 BAR1=00000000 9560v38: query resources pass0 status=C000009A need=56 9560v38: query resources pass1 status=00000000 size=56 9560v38: resources version=0 rev=0 count=3 9560v38: RES[0] MEM start=00000000:2B41C000 len=00004000 flags=00000000 9560v38: map MEM[0] phys=00000000:2B41C000 len=00004000 -> 00000000 va=B1DA2000 9560v38: RES[1] type=129 flags=00000000 9560v38: RES[2] IRQ level=18 vector=18 affinity=FFFFFFFF flags=00000000 share=3 9560v38: resource mapping done, probing key registers 9560v38: mapped resources summary mmio0=B1DA2000 len0=00004000 mmio1=00000000 len1=00000000 9560v38: linux target fw=iwlwifi-so-a0-jf-b0 queues=512 tfd=65536 smem=00400000 len=000D0000 family=21000 gen2=1 integrated=1 umac=00300000 9560v38: regs 000=00080000 020=00000011 024=08040000 028=00000430 02C=D55555D5 030=D55555D5 9560v38: regs 090=00000000 09C=00105110 0A8=802FFFFF 0AC=00000000 0B0=00800000 0FC=5FFF7FFE 9560v38: linux-ish ids rfid=105110 cnv=80400 9560v53: 7AF0 expected hwrev=00000430 cnv=00080401 alt=00080400 rfid=00105110 crf=01300202 wfpm=80000030 board=00480002 fseq=00000024 got hwrev=00000430 cnv=00080400 rfid=00105110 match=1/0/1 accept=1 base=1 9560v53: 7AF0 refs[probe] hw=00000430/00000430 cnv=00080400 exact=0 alt=1 base=1 accepted=1 rfid=00105110/00105110 crf_ref=01300202 board_ref=00480002 wfpm_ref=80000030 fseq_ref=00000024 fw_ref=0000004D.F92B5FED iml_ref=00000B03 wait_ref=00011F5A flow_ref=00000024 auth_ref=00000080 9560v38: regs 200=00000000 204=05008010 208=00020000 220=AAAAA0AA 224=00000000 228=3F1D0430 9560v38: regs 250=00000000 258=3666CCDC 25C=00000000 260=00000000 270=21000000 278=80000400 318=00000020 9560v38: resource setup status=00000000 mmio0=B1DA2000 len0=00004000 mmio1=00000000 len1=00000000 irq=18/18 9560v38: transport setup fw=iwlwifi-so-a0-jf-b0 stage=29 cmd=4096 txq=16384 rxq=8192 9560v38: alloc Cmd uncached len=4096 va=B67DC000 pa=00000000:00331000 9560v38: alloc TxQ uncached len=16384 va=B1D9E000 pa=00000000:00332000 9560v38: alloc RxQ uncached len=8192 va=B865C000 pa=00000000:00336000 9560v38: alloc RxStatus uncached len=4 va=B7876000 pa=00000000:00338000 9560v38: alloc RxUsed uncached len=16384 va=B1D9A000 pa=00000000:00339000 9560v38: alloc RxData uncached len=2097152 va=B0A32000 pa=00000000:00AE9000 Breakpoint 2 hit 9560!WifiPrimeOpenBsdRxRing: b2fc60b0 8bff mov edi,edi 15: kd> g 9560L62: openbsd-rx-prime deferred count=512 buf=4096 write=0 actual=0 9560v38: transport cmd va=B67DC000 pa=00000000:00331000 len=4096 cached=0 ok=1 9560v38: transport txq va=B1D9E000 pa=00000000:00332000 len=16384 cached=0 ok=1 9560v38: transport rxq va=B865C000 pa=00000000:00336000 len=8192 cached=0 ok=1 9560v54: transport rxdata va=B0A32000 pa=00000000:00AE9000 len=2097152 cached=0 ok=1 9560v38: transport summary ok=1 stage=29 9560v38: transport setup status=00000000 shared=1 stage=29 9560L45: start-hw ok hw_if=00080000 reset=00000011 gp=08040005 gio=041F0042 hpet=FFFF0000 linkpm=00000000 9560L45: early hw ready hw_if=00080000 gp=08040005 int_coalescing=40 9560v38: mapped resources summary mmio0=B1DA2000 len0=00004000 mmio1=00000000 len1=00000000 9560v38: linux target fw=iwlwifi-so-a0-jf-b0 queues=512 tfd=65536 smem=00400000 len=000D0000 family=21000 gen2=1 integrated=1 umac=00300000 9560v38: regs 000=00080000 020=00000011 024=08040005 028=00000430 02C=D55555D5 030=D55555D5 9560v38: regs 090=00000000 09C=00105110 0A8=802FFFFF 0AC=00000000 0B0=00000000 0FC=5FFF7FFE 9560v38: linux-ish ids rfid=105110 cnv=80400 9560v53: 7AF0 expected hwrev=00000430 cnv=00080401 alt=00080400 rfid=00105110 crf=01300202 wfpm=80000030 board=00480002 fseq=00000024 got hwrev=00000430 cnv=00080400 rfid=00105110 match=1/0/1 accept=1 base=1 9560v53: 7AF0 refs[probe] hw=00000430/00000430 cnv=00080400 exact=0 alt=1 base=1 accepted=1 rfid=00105110/00105110 crf_ref=01300202 board_ref=00480002 wfpm_ref=80000030 fseq_ref=00000024 fw_ref=0000004D.F92B5FED iml_ref=00000B03 wait_ref=00011F5A flow_ref=00000024 auth_ref=00000080 9560v38: regs 200=00000000 204=05008010 208=00020000 220=AAAAA0AA 224=00000000 228=3F1F2210 9560v38: regs 250=00000000 258=3666CCDC 25C=00000000 260=00000000 270=21000000 278=80000400 318=00000020 9560v40: NdisMRegisterInterrupt vec=18 lvl=18 shared=1 level=1 -> 00000000 Breakpoint 0 hit 9560!WifiAttemptFirmwareBootstrapGen2V2: b2fc8440 8bff mov edi,edi 3: kd> g 9560v38: embedded fw selected name=iwlwifi-so-a0-jf-b0-77.ucode size=1446036 9560v38: embedded fw hdr ver=0000004D api=77 build=F92B5FED text=release/core74_pv::f92b5fed 9560v38: alloc LMAC uncached len=1656 va=B7876004 pa=00000000:00338004 9560L41: fw section LMAC idx=0 pa=00000000:00338004 rawlen=1660 payload=1656 load=00440000 cached=0 first=00000006 tail=00000000 hash=6CD08191 cap=1 9560v38: alloc LMAC uncached len=32768 va=B67E9000 pa=00000000:0033D000 9560L41: fw section LMAC idx=1 pa=00000000:0033D000 rawlen=32772 payload=32768 load=00800000 cached=0 first=00000000 tail=00000000 hash=00000000 cap=1 9560v38: alloc LMAC uncached len=32768 va=B67E1000 pa=00000000:00345000 9560L41: fw section LMAC idx=2 pa=00000000:00345000 rawlen=32772 payload=32768 load=00000000 cached=0 first=00000060 tail=00832009 hash=E4606A05 cap=1 9560v38: alloc LMAC uncached len=32768 va=B79FE000 pa=00000000:0034D000 9560L41: fw section LMAC idx=3 pa=00000000:0034D000 rawlen=32772 payload=32768 load=00008000 cached=0 first=782AD8D8 tail=00011800 hash=AE01458D cap=1 9560v38: alloc LMAC uncached len=32760 va=B79F6000 pa=00000000:00355000 9560L41: fw section LMAC idx=4 pa=00000000:00355000 rawlen=32764 payload=32760 load=00010000 cached=0 first=004018A8 tail=7E7E7E7E hash=AC99C48C cap=1 9560v38: alloc LMAC uncached len=32768 va=B79EE000 pa=00000000:0035D000 9560L41: fw section LMAC idx=5 pa=00000000:0035D000 rawlen=32772 payload=32768 load=004B8000 cached=0 first=B805C0F1 tail=F5F77724 hash=093DB8D4 cap=1 9560v38: alloc LMAC uncached len=32768 va=B79E6000 pa=00000000:00365000 9560L41: fw section LMAC idx=6 pa=00000000:00365000 rawlen=32772 payload=32768 load=004C0000 cached=0 first=7E554E41 tail=0CBA0000 hash=CA811E0A cap=1 9560v38: alloc LMAC uncached len=32768 va=B79DE000 pa=00000000:0036D000 9560L41: fw section LMAC idx=7 pa=00000000:0036D000 rawlen=32772 payload=32768 load=004C8000 cached=0 first=26150600 tail=86018622 hash=E73EEF43 cap=1 9560v38: alloc LMAC uncached len=32768 va=B79D6000 pa=00000000:00375000 9560L41: fw section LMAC idx=8 pa=00000000:00375000 rawlen=32772 payload=32768 load=004D0000 cached=0 first=165C7FB6 tail=7E7E7E7E hash=213105E3 cap=1 9560v38: alloc LMAC uncached len=32768 va=B79CE000 pa=00000000:0037D000 9560L41: fw section LMAC idx=9 pa=00000000:0037D000 rawlen=32772 payload=32768 load=004D8000 cached=0 first=7E7E7E7E tail=7E7E7E7E hash=00000000 cap=1 9560v38: alloc LMAC uncached len=32768 va=B79C6000 pa=00000000:00385000 9560L41: fw section LMAC idx=10 pa=00000000:00385000 rawlen=32772 payload=32768 load=004E0000 cached=0 first=7E7E7E7E tail=00000000 hash=12377400 cap=1 9560v38: alloc LMAC uncached len=32768 va=B79BE000 pa=00000000:0038D000 9560L41: fw section LMAC idx=11 pa=00000000:0038D000 rawlen=32772 payload=32768 load=004E8000 cached=0 first=00000000 tail=7E7E7E7E hash=12377400 cap=1 9560v38: alloc LMAC uncached len=32768 va=B8438000 pa=00000000:00395000 9560L41: fw section LMAC idx=12 pa=00000000:00395000 rawlen=32772 payload=32768 load=004F0000 cached=0 first=7E7E7E7E tail=33312B25 hash=52641390 cap=1 9560v38: alloc LMAC uncached len=13248 va=B0CD6000 pa=00000000:0039D000 9560L41: fw section LMAC idx=13 pa=00000000:0039D000 rawlen=13252 payload=13248 load=004F8000 cached=0 first=25253D39 tail=00000000 hash=2ECDE456 cap=1 9560v38: alloc LMAC uncached len=5312 va=B865E000 pa=00000000:003A1000 9560L41: fw section LMAC idx=14 pa=00000000:003A1000 rawlen=5316 payload=5312 load=00629980 cached=0 first=10C02020 tail=00000000 hash=C1029EC7 cap=1 9560v54: embedded IML selected len=13944 first=00000006 9560v38: fw separator cpu1->cpu2 type=19 9560v38: alloc UMAC uncached len=1656 va=B787667C pa=00000000:0033867C 9560L41: fw section UMAC idx=0 pa=00000000:0033867C rawlen=1660 payload=1656 load=80440000 cached=0 first=00000006 tail=00000000 hash=533CEFB5 cap=1 9560v38: alloc UMAC uncached len=32768 va=B8448000 pa=00000000:003A3000 9560L41: fw section UMAC idx=1 pa=00000000:003A3000 rawlen=32772 payload=32768 load=C0080000 cached=0 first=0F802020 tail=80470F80 hash=C9B2F00B cap=1 9560v38: alloc UMAC uncached len=32768 va=B8450000 pa=00000000:003AB000 9560L41: fw section UMAC idx=2 pa=00000000:003AB000 rawlen=32772 payload=32768 load=C0088000 cached=0 first=F0031EF4 tail=7E7E7E7E hash=C2D55671 cap=1 9560v38: alloc UMAC uncached len=32768 va=B8458000 pa=00000000:003B3000 9560L41: fw section UMAC idx=3 pa=00000000:003B3000 rawlen=32772 payload=32768 load=C0880000 cached=0 first=00000000 tail=7E7E7E7E hash=12377400 cap=1 9560v38: alloc UMAC uncached len=32768 va=B8478000 pa=00000000:003BB000 9560L41: fw section UMAC idx=4 pa=00000000:003BB000 rawlen=32772 payload=32768 load=80447000 cached=0 first=2022C0F1 tail=00000000 hash=ADF9FE3E cap=1 9560v38: alloc UMAC uncached len=32768 va=B8480000 pa=00000000:003C3000 9560L41: fw section UMAC idx=5 pa=00000000:003C3000 rawlen=32772 payload=32768 load=80466000 cached=0 first=70CFC0F1 tail=08021378 hash=4EA1AD9A cap=1 9560v38: alloc UMAC uncached len=32768 va=B8468000 pa=00000000:003CB000 9560L41: fw section UMAC idx=6 pa=00000000:003CB000 rawlen=32772 payload=32768 load=8046E000 cached=0 first=BA91BA8E tail=D90070A9 hash=26B06EC1 cap=1 9560v38: alloc UMAC uncached len=32768 va=B6821000 pa=00000000:003D3000 9560L41: fw section UMAC idx=7 pa=00000000:003D3000 rawlen=32772 payload=32768 load=80476000 cached=0 first=0F802022 tail=768B7708 hash=5BE7E634 cap=1 9560v38: alloc UMAC uncached len=32768 va=B8460000 pa=00000000:003DB000 9560L41: fw section UMAC idx=8 pa=00000000:003DB000 rawlen=32772 payload=32768 load=8047E000 cached=0 first=202270C9 tail=F420E081 hash=85ED5596 cap=1 9560v38: alloc UMAC uncached len=32768 va=B8490000 pa=00000000:003E3000 9560L41: fw section UMAC idx=9 pa=00000000:003E3000 rawlen=32772 payload=32768 load=80486000 cached=0 first=F003DA00 tail=00000000 hash=F647C2BA cap=1 9560v38: alloc UMAC uncached len=32768 va=B84A8000 pa=00000000:003F1000 9560L41: fw section UMAC idx=10 pa=00000000:003F1000 rawlen=32772 payload=32768 load=8048E000 cached=0 first=00000000 tail=00000000 hash=00000000 cap=1 9560v38: alloc UMAC uncached len=32768 va=B8498000 pa=00000000:003F9000 9560L41: fw section UMAC idx=11 pa=00000000:003F9000 rawlen=32772 payload=32768 load=80496000 cached=0 first=00000000 tail=00000000 hash=00000000 cap=1 9560v38: alloc UMAC uncached len=4280 va=B8660000 pa=00000000:003EB000 9560L41: fw section UMAC idx=12 pa=00000000:003EB000 rawlen=4284 payload=4280 load=8049E000 cached=0 first=00000000 tail=00000000 hash=00000000 cap=1 9560v38: alloc UMAC uncached len=3592 va=B7875000 pa=00000000:003ED000 9560L41: fw section UMAC idx=13 pa=00000000:003ED000 rawlen=3596 payload=3592 load=80415000 cached=0 first=00000000 tail=0001520C hash=0C1F0AE3 cap=1 9560v38: alloc UMAC uncached len=24756 va=B8488000 pa=00000000:00401000 9560L41: fw section UMAC idx=14 pa=00000000:00401000 rawlen=24760 payload=24756 load=80409000 cached=0 first=01000080 tail=00000000 hash=9FFE4F3C cap=1 9560v38: fw separator paging type=19 9560v38: alloc PAGE uncached len=1656 va=B67DB000 pa=00000000:003EE000 9560L41: fw section PAGE idx=0 pa=00000000:003EE000 rawlen=1660 payload=1656 load=00000000 cached=0 first=00000006 tail=00000000 hash=C7546061 cap=1 9560v38: alloc PAGE uncached len=32768 va=B84B0000 pa=00000000:00408000 9560L41: fw section PAGE idx=1 pa=00000000:00408000 rawlen=32772 payload=32768 load=01000000 cached=0 first=2022C0F1 tail=78E078E0 hash=00037E26 cap=1 9560v38: alloc PAGE uncached len=32768 va=B8408000 pa=00000000:00410000 9560L41: fw section PAGE idx=2 pa=00000000:00410000 rawlen=32772 payload=32768 load=01008000 cached=0 first=2022C0F1 tail=78E078E0 hash=BCAC3A00 cap=1 9560v38: alloc PAGE uncached len=32768 va=B7A06000 pa=00000000:00418000 9560L41: fw section PAGE idx=3 pa=00000000:00418000 rawlen=32772 payload=32768 load=01010000 cached=0 first=2022C0F1 tail=7E7E7E7E hash=5CD90AF3 cap=1 9560v38: alloc PAGE uncached len=32768 va=B84A0000 pa=00000000:00420000 9560L41: fw section PAGE idx=4 pa=00000000:00420000 rawlen=32772 payload=32768 load=01018000 cached=0 first=2022C0F1 tail=0101C8B4 hash=A497F3C0 cap=1 9560v38: alloc PAGE uncached len=32768 va=B8470000 pa=00000000:00428000 9560L41: fw section PAGE idx=5 pa=00000000:00428000 rawlen=32772 payload=32768 load=01020000 cached=0 first=00000001 tail=78E078E0 hash=BFEE781D cap=1 9560v38: alloc PAGE uncached len=32768 va=B6829000 pa=00000000:00430000 9560L41: fw section PAGE idx=6 pa=00000000:00430000 rawlen=32772 payload=32768 load=01028000 cached=0 first=2022C0F1 tail=00000000 hash=C9EB8940 cap=1 9560v38: alloc PAGE uncached len=32768 va=B6819000 pa=00000000:00438000 9560L41: fw section PAGE idx=7 pa=00000000:00438000 rawlen=32772 payload=32768 load=01030000 cached=0 first=00000000 tail=78E078E0 hash=EA79D894 cap=1 9560v38: alloc PAGE uncached len=32768 va=B0A2A000 pa=00000000:00440000 9560L41: fw section PAGE idx=8 pa=00000000:00440000 rawlen=32772 payload=32768 load=01038000 cached=0 first=2022C0F1 tail=00000000 hash=D40A992B cap=1 9560v38: alloc PAGE uncached len=32768 va=B0A22000 pa=00000000:00448000 9560L41: fw section PAGE idx=9 pa=00000000:00448000 rawlen=32772 payload=32768 load=01040000 cached=0 first=00000000 tail=00000000 hash=00000000 cap=1 9560v38: alloc PAGE uncached len=32768 va=B0A1A000 pa=00000000:00450000 9560L41: fw section PAGE idx=10 pa=00000000:00450000 rawlen=32772 payload=32768 load=01048000 cached=0 first=2022C0F1 tail=00000000 hash=F6517548 cap=1 9560v38: alloc PAGE uncached len=32768 va=B0A12000 pa=00000000:00458000 9560L41: fw section PAGE idx=11 pa=00000000:00458000 rawlen=32772 payload=32768 load=01050000 cached=0 first=00000000 tail=00000000 hash=00000000 cap=1 9560v38: alloc PAGE uncached len=32768 va=B0A0A000 pa=00000000:00460000 9560L41: fw section PAGE idx=12 pa=00000000:00460000 rawlen=32772 payload=32768 load=01058000 cached=0 first=00000000 tail=7E7E7E7E hash=12377400 cap=1 9560v38: alloc PAGE uncached len=32768 va=B0A02000 pa=00000000:00468000 9560L41: fw section PAGE idx=13 pa=00000000:00468000 rawlen=32772 payload=32768 load=01060000 cached=0 first=78E07EE0 tail=78E078E0 hash=FDE67B52 cap=1 9560v38: alloc PAGE uncached len=32768 va=B09FA000 pa=00000000:00470000 9560L41: fw section PAGE idx=14 pa=00000000:00470000 rawlen=32772 payload=32768 load=01068000 cached=0 first=2022C0F1 tail=78E078E0 hash=B97CB369 cap=1 9560v38: alloc PAGE uncached len=32768 va=B09F2000 pa=00000000:00478000 9560L41: fw section PAGE idx=15 pa=00000000:00478000 rawlen=32772 payload=32768 load=01070000 cached=0 first=2022C0F1 tail=7E7E7E7E hash=DF9CC818 cap=1 9560v38: alloc PAGE uncached len=32768 va=B09EA000 pa=00000000:004B0000 9560L41: fw section PAGE idx=16 pa=00000000:004B0000 rawlen=32772 payload=32768 load=01078000 cached=0 first=2022C0F1 tail=7E7E7E7E hash=ED458946 cap=1 9560v38: alloc PAGE uncached len=32768 va=B09E2000 pa=00000000:004B8000 9560L41: fw section PAGE idx=17 pa=00000000:004B8000 rawlen=32772 payload=32768 load=01080000 cached=0 first=C0F1C1A1 tail=00000100 hash=C09BC6A3 cap=1 9560v38: alloc PAGE uncached len=32768 va=B09B2000 pa=00000000:004C0000 9560L41: fw section PAGE idx=18 pa=00000000:004C0000 rawlen=32772 payload=32768 load=01088000 cached=0 first=00000000 tail=00000000 hash=F3CE5FDE cap=1 9560v38: alloc PAGE uncached len=12288 va=B0CD2000 pa=00000000:004C8000 9560L41: fw section PAGE idx=19 pa=00000000:004C8000 rawlen=12292 payload=12288 load=01090000 cached=0 first=02000000 tail=7E7E7E7E hash=DB1A0D17 cap=1 9560v38: embedded fw sections rt=52 init=0 wow=0 lmac=15 umac=15 paging=20 9560v54: embedded IML ready=1 len=13944 9560v38: alloc CtxG3 uncached len=104 va=B67DB678 pa=00000000:003EE678 9560v38: alloc PrphInfo uncached len=4096 va=B787C000 pa=00000000:003EF000 9560v38: alloc PrphScr uncached len=1660 va=B67DB6E0 pa=00000000:003EE6E0 9560v38: alloc IML uncached len=13944 va=B0CCE000 pa=00000000:004CB000 9560v54: IML buffer pa=00000000:004CB000 len=13944 cached=0 Breakpoint 1 hit 9560!WifiSeedGen3PrphInfoWindows: b2fca000 8bff mov edi,edi 3: kd> g 9560L57: seed prphinfo va=B787C000 pa=00000000:003EF000 len=4096 win=32 crh=B7876000 trt=B787C800 crt=B787CC00 trh=00000000 9560L57: seed openbsd-map crh=00000000:00338000 trt=00000000:003EF800 crt=00000000:003EFC00 trh=00000000:00000000 9560L57: seed prphinfo+000 d0=00000000 d1=00000000 d2=00000000 d3=00000000 9560L57: seed prphinfo+800=0000 0000 0000 0000 0000 0000 0000 0000 src_trt=0000 0000 0000 0000 0000 0000 0000 0000 9560L57: seed prphinfo+C00=0000 0000 0000 0000 0000 0000 0000 0000 src_crt=0000 0000 0000 0000 0000 0000 0000 0000 9560L57: seed idx src crh=0000 0000 0006 0000 trh=0000 0000 0000 0000 9560L62: bootstrap START - OpenBSD GEN3 ctxt layout + UCODE only + strict OpenBSD deferred RX until ALIVE, except disint pulse Breakpoint 2 hit 9560!WifiPrimeOpenBsdRxRing: b2fc60b0 8bff mov edi,edi 3: kd> g 9560L62: openbsd-rx-prime deferred count=512 buf=4096 write=0 actual=0 9560L45: GEN3 CONTEXT FIXED ver=2 size=26 prph=00000000:003EF000 scratch=00000000:003EE6E0 mtr=00000000:00332000 mtr_sz=5 mcr=00000000:00339000 mcr_sz=9 idx_cr=16 idx_tr=16 9560L45: gen3 scratch macid=0430 ctrl=00AF0000 rsv=00000000 free_rbd=00000000:00336000 lmac0=00000000:00338004 umac0=00000000:0033867C page0=00000000:003EE000 9560L57: layout ctxt=003EE678 prph_page=003EF000 scratch=003EE6E0 scratch_dw=415 scratch_bytes=1660 cr_head=00338000 tr_tail=003EF800 cr_tail=003EFC00 tr_head=00000000 9560L57: ctxt map stat=00338000 prph_page=003EF000 cr_head=00338000 tr_tail=003EF800 cr_tail=003EFC00 tr_head=00000000 idx=16 scratch_field=1660(openbsd-bytes) 9560L45: doublecheck mtr_base uses TxQ pa=00000000:00332000 cmd_pa=00000000:00331000 9560v38: verify pre boot header va=B67DB678 ver=2 size_dw=26 cfg=00000000 raw0=001A0002 raw1=00000000 9560v38: verify pre LMAC[0] ok=1 va=B7876004 pa=00000000:00338004 len=1656 first=00000006/00000006 tail=00000000/00000000 hash=6CD08191/6CD08191 9560v38: verify pre LMAC[1] ok=1 va=B67E9000 pa=00000000:0033D000 len=32768 first=00000000/00000000 tail=00000000/00000000 hash=00000000/00000000 9560v38: verify pre LMAC[2] ok=1 va=B67E1000 pa=00000000:00345000 len=32768 first=00000060/00000060 tail=00832009/00832009 hash=E4606A05/E4606A05 9560v38: verify pre LMAC[3] ok=1 va=B79FE000 pa=00000000:0034D000 len=32768 first=782AD8D8/782AD8D8 tail=00011800/00011800 hash=AE01458D/AE01458D 9560v38: verify pre LMAC[4] ok=1 va=B79F6000 pa=00000000:00355000 len=32760 first=004018A8/004018A8 tail=7E7E7E7E/7E7E7E7E hash=AC99C48C/AC99C48C 9560v38: verify pre LMAC[5] ok=1 va=B79EE000 pa=00000000:0035D000 len=32768 first=B805C0F1/B805C0F1 tail=F5F77724/F5F77724 hash=093DB8D4/093DB8D4 9560v38: verify pre LMAC[6] ok=1 va=B79E6000 pa=00000000:00365000 len=32768 first=7E554E41/7E554E41 tail=0CBA0000/0CBA0000 hash=CA811E0A/CA811E0A 9560v38: verify pre LMAC[7] ok=1 va=B79DE000 pa=00000000:0036D000 len=32768 first=26150600/26150600 tail=86018622/86018622 hash=E73EEF43/E73EEF43 9560v38: verify pre LMAC[8] ok=1 va=B79D6000 pa=00000000:00375000 len=32768 first=165C7FB6/165C7FB6 tail=7E7E7E7E/7E7E7E7E hash=213105E3/213105E3 9560v38: verify pre LMAC[9] ok=1 va=B79CE000 pa=00000000:0037D000 len=32768 first=7E7E7E7E/7E7E7E7E tail=7E7E7E7E/7E7E7E7E hash=00000000/00000000 9560v38: verify pre LMAC[10] ok=1 va=B79C6000 pa=00000000:00385000 len=32768 first=7E7E7E7E/7E7E7E7E tail=00000000/00000000 hash=12377400/12377400 9560v38: verify pre LMAC[11] ok=1 va=B79BE000 pa=00000000:0038D000 len=32768 first=00000000/00000000 tail=7E7E7E7E/7E7E7E7E hash=12377400/12377400 9560v38: verify pre LMAC[12] ok=1 va=B8438000 pa=00000000:00395000 len=32768 first=7E7E7E7E/7E7E7E7E tail=33312B25/33312B25 hash=52641390/52641390 9560v38: verify pre LMAC[13] ok=1 va=B0CD6000 pa=00000000:0039D000 len=13248 first=25253D39/25253D39 tail=00000000/00000000 hash=2ECDE456/2ECDE456 9560v38: verify pre LMAC[14] ok=1 va=B865E000 pa=00000000:003A1000 len=5312 first=10C02020/10C02020 tail=00000000/00000000 hash=C1029EC7/C1029EC7 9560v38: verify pre UMAC[0] ok=1 va=B787667C pa=00000000:0033867C len=1656 first=00000006/00000006 tail=00000000/00000000 hash=533CEFB5/533CEFB5 9560v38: verify pre UMAC[1] ok=1 va=B8448000 pa=00000000:003A3000 len=32768 first=0F802020/0F802020 tail=80470F80/80470F80 hash=C9B2F00B/C9B2F00B 9560v38: verify pre UMAC[2] ok=1 va=B8450000 pa=00000000:003AB000 len=32768 first=F0031EF4/F0031EF4 tail=7E7E7E7E/7E7E7E7E hash=C2D55671/C2D55671 9560v38: verify pre UMAC[3] ok=1 va=B8458000 pa=00000000:003B3000 len=32768 first=00000000/00000000 tail=7E7E7E7E/7E7E7E7E hash=12377400/12377400 9560v38: verify pre UMAC[4] ok=1 va=B8478000 pa=00000000:003BB000 len=32768 first=2022C0F1/2022C0F1 tail=00000000/00000000 hash=ADF9FE3E/ADF9FE3E 9560v38: verify pre UMAC[5] ok=1 va=B8480000 pa=00000000:003C3000 len=32768 first=70CFC0F1/70CFC0F1 tail=08021378/08021378 hash=4EA1AD9A/4EA1AD9A 9560v38: verify pre UMAC[6] ok=1 va=B8468000 pa=00000000:003CB000 len=32768 first=BA91BA8E/BA91BA8E tail=D90070A9/D90070A9 hash=26B06EC1/26B06EC1 9560v38: verify pre UMAC[7] ok=1 va=B6821000 pa=00000000:003D3000 len=32768 first=0F802022/0F802022 tail=768B7708/768B7708 hash=5BE7E634/5BE7E634 9560v38: verify pre UMAC[8] ok=1 va=B8460000 pa=00000000:003DB000 len=32768 first=202270C9/202270C9 tail=F420E081/F420E081 hash=85ED5596/85ED5596 9560v38: verify pre UMAC[9] ok=1 va=B8490000 pa=00000000:003E3000 len=32768 first=F003DA00/F003DA00 tail=00000000/00000000 hash=F647C2BA/F647C2BA 9560v38: verify pre UMAC[10] ok=1 va=B84A8000 pa=00000000:003F1000 len=32768 first=00000000/00000000 tail=00000000/00000000 hash=00000000/00000000 9560v38: verify pre UMAC[11] ok=1 va=B8498000 pa=00000000:003F9000 len=32768 first=00000000/00000000 tail=00000000/00000000 hash=00000000/00000000 9560v38: verify pre UMAC[12] ok=1 va=B8660000 pa=00000000:003EB000 len=4280 first=00000000/00000000 tail=00000000/00000000 hash=00000000/00000000 9560v38: verify pre UMAC[13] ok=1 va=B7875000 pa=00000000:003ED000 len=3592 first=00000000/00000000 tail=0001520C/0001520C hash=0C1F0AE3/0C1F0AE3 9560v38: verify pre UMAC[14] ok=1 va=B8488000 pa=00000000:00401000 len=24756 first=01000080/01000080 tail=00000000/00000000 hash=9FFE4F3C/9FFE4F3C 9560v38: verify pre PAGE[0] ok=1 va=B67DB000 pa=00000000:003EE000 len=1656 first=00000006/00000006 tail=00000000/00000000 hash=C7546061/C7546061 9560v38: verify pre PAGE[1] ok=1 va=B84B0000 pa=00000000:00408000 len=32768 first=2022C0F1/2022C0F1 tail=78E078E0/78E078E0 hash=00037E26/00037E26 9560v38: verify pre PAGE[2] ok=1 va=B8408000 pa=00000000:00410000 len=32768 first=2022C0F1/2022C0F1 tail=78E078E0/78E078E0 hash=BCAC3A00/BCAC3A00 9560v38: verify pre PAGE[3] ok=1 va=B7A06000 pa=00000000:00418000 len=32768 first=2022C0F1/2022C0F1 tail=7E7E7E7E/7E7E7E7E hash=5CD90AF3/5CD90AF3 9560v38: verify pre PAGE[4] ok=1 va=B84A0000 pa=00000000:00420000 len=32768 first=2022C0F1/2022C0F1 tail=0101C8B4/0101C8B4 hash=A497F3C0/A497F3C0 9560v38: verify pre PAGE[5] ok=1 va=B8470000 pa=00000000:00428000 len=32768 first=00000001/00000001 tail=78E078E0/78E078E0 hash=BFEE781D/BFEE781D 9560v38: verify pre PAGE[6] ok=1 va=B6829000 pa=00000000:00430000 len=32768 first=2022C0F1/2022C0F1 tail=00000000/00000000 hash=C9EB8940/C9EB8940 9560v38: verify pre PAGE[7] ok=1 va=B6819000 pa=00000000:00438000 len=32768 first=00000000/00000000 tail=78E078E0/78E078E0 hash=EA79D894/EA79D894 9560v38: verify pre PAGE[8] ok=1 va=B0A2A000 pa=00000000:00440000 len=32768 first=2022C0F1/2022C0F1 tail=00000000/00000000 hash=D40A992B/D40A992B 9560v38: verify pre PAGE[9] ok=1 va=B0A22000 pa=00000000:00448000 len=32768 first=00000000/00000000 tail=00000000/00000000 hash=00000000/00000000 9560v38: verify pre PAGE[10] ok=1 va=B0A1A000 pa=00000000:00450000 len=32768 first=2022C0F1/2022C0F1 tail=00000000/00000000 hash=F6517548/F6517548 9560v38: verify pre PAGE[11] ok=1 va=B0A12000 pa=00000000:00458000 len=32768 first=00000000/00000000 tail=00000000/00000000 hash=00000000/00000000 9560v38: verify pre PAGE[12] ok=1 va=B0A0A000 pa=00000000:00460000 len=32768 first=00000000/00000000 tail=7E7E7E7E/7E7E7E7E hash=12377400/12377400 9560v38: verify pre PAGE[13] ok=1 va=B0A02000 pa=00000000:00468000 len=32768 first=78E07EE0/78E07EE0 tail=78E078E0/78E078E0 hash=FDE67B52/FDE67B52 9560v38: verify pre PAGE[14] ok=1 va=B09FA000 pa=00000000:00470000 len=32768 first=2022C0F1/2022C0F1 tail=78E078E0/78E078E0 hash=B97CB369/B97CB369 9560v38: verify pre PAGE[15] ok=1 va=B09F2000 pa=00000000:00478000 len=32768 first=2022C0F1/2022C0F1 tail=7E7E7E7E/7E7E7E7E hash=DF9CC818/DF9CC818 9560v38: verify pre PAGE[16] ok=1 va=B09EA000 pa=00000000:004B0000 len=32768 first=2022C0F1/2022C0F1 tail=7E7E7E7E/7E7E7E7E hash=ED458946/ED458946 9560v38: verify pre PAGE[17] ok=1 va=B09E2000 pa=00000000:004B8000 len=32768 first=C0F1C1A1/C0F1C1A1 tail=00000100/00000100 hash=C09BC6A3/C09BC6A3 9560v38: verify pre PAGE[18] ok=1 va=B09B2000 pa=00000000:004C0000 len=32768 first=00000000/00000000 tail=00000000/00000000 hash=F3CE5FDE/F3CE5FDE 9560v38: verify pre PAGE[19] ok=1 va=B0CD2000 pa=00000000:004C8000 len=12288 first=02000000/02000000 tail=7E7E7E7E/7E7E7E7E hash=DB1A0D17/DB1A0D17 9560v38: verify pre summary ok=1 ctxt=1 checks=50 failures=0 lmac=15 umac=15 page=20 9560v54: gen3 ctxt addr=00000000:003EE678 iml=00000000:004CB000 iml_len=13944 resp=00000000 ok=1 Breakpoint 5 hit 9560!WifiEnableBringupInterrupts: b2fca7f0 8bff mov edi,edi 3: kd> g Breakpoint 4 hit 9560!WifiApplyDisintPulse: b2fca9a0 8bff mov edi,edi 3: kd> g 9560L62: disint-pulse[fwload] before=80000001 after_disable=00000000 after_enable=80000001 mask=80000001 9560L62: enable AX210/INTx fwload mask=80000001 9560L62: strict-openbsd fwload interrupt armed before kick mask=80000001 9560v38: verify post boot header va=B67DB678 ver=2 size_dw=26 cfg=00000000 raw0=001A0002 raw1=00000000 9560v38: verify post LMAC[0] ok=1 va=B7876004 pa=00000000:00338004 len=1656 first=00000006/00000006 tail=00000000/00000000 hash=6CD08191/6CD08191 9560v38: verify post LMAC[1] ok=1 va=B67E9000 pa=00000000:0033D000 len=32768 first=00000000/00000000 tail=00000000/00000000 hash=00000000/00000000 9560v38: verify post LMAC[2] ok=1 va=B67E1000 pa=00000000:00345000 len=32768 first=00000060/00000060 tail=00832009/00832009 hash=E4606A05/E4606A05 9560v38: verify post LMAC[3] ok=1 va=B79FE000 pa=00000000:0034D000 len=32768 first=782AD8D8/782AD8D8 tail=00011800/00011800 hash=AE01458D/AE01458D 9560v38: verify post LMAC[4] ok=1 va=B79F6000 pa=00000000:00355000 len=32760 first=004018A8/004018A8 tail=7E7E7E7E/7E7E7E7E hash=AC99C48C/AC99C48C 9560v38: verify post LMAC[5] ok=1 va=B79EE000 pa=00000000:0035D000 len=32768 first=B805C0F1/B805C0F1 tail=F5F77724/F5F77724 hash=093DB8D4/093DB8D4 9560v38: verify post LMAC[6] ok=1 va=B79E6000 pa=00000000:00365000 len=32768 first=7E554E41/7E554E41 tail=0CBA0000/0CBA0000 hash=CA811E0A/CA811E0A 9560v38: verify post LMAC[7] ok=1 va=B79DE000 pa=00000000:0036D000 len=32768 first=26150600/26150600 tail=86018622/86018622 hash=E73EEF43/E73EEF43 9560v38: verify post LMAC[8] ok=1 va=B79D6000 pa=00000000:00375000 len=32768 first=165C7FB6/165C7FB6 tail=7E7E7E7E/7E7E7E7E hash=213105E3/213105E3 9560v38: verify post LMAC[9] ok=1 va=B79CE000 pa=00000000:0037D000 len=32768 first=7E7E7E7E/7E7E7E7E tail=7E7E7E7E/7E7E7E7E hash=00000000/00000000 9560v38: verify post LMAC[10] ok=1 va=B79C6000 pa=00000000:00385000 len=32768 first=7E7E7E7E/7E7E7E7E tail=00000000/00000000 hash=12377400/12377400 9560v38: verify post LMAC[11] ok=1 va=B79BE000 pa=00000000:0038D000 len=32768 first=00000000/00000000 tail=7E7E7E7E/7E7E7E7E hash=12377400/12377400 9560v38: verify post LMAC[12] ok=1 va=B8438000 pa=00000000:00395000 len=32768 first=7E7E7E7E/7E7E7E7E tail=33312B25/33312B25 hash=52641390/52641390 9560v38: verify post LMAC[13] ok=1 va=B0CD6000 pa=00000000:0039D000 len=13248 first=25253D39/25253D39 tail=00000000/00000000 hash=2ECDE456/2ECDE456 9560v38: verify post LMAC[14] ok=1 va=B865E000 pa=00000000:003A1000 len=5312 first=10C02020/10C02020 tail=00000000/00000000 hash=C1029EC7/C1029EC7 9560v38: verify post UMAC[0] ok=1 va=B787667C pa=00000000:0033867C len=1656 first=00000006/00000006 tail=00000000/00000000 hash=533CEFB5/533CEFB5 9560v38: verify post UMAC[1] ok=1 va=B8448000 pa=00000000:003A3000 len=32768 first=0F802020/0F802020 tail=80470F80/80470F80 hash=C9B2F00B/C9B2F00B 9560v38: verify post UMAC[2] ok=1 va=B8450000 pa=00000000:003AB000 len=32768 first=F0031EF4/F0031EF4 tail=7E7E7E7E/7E7E7E7E hash=C2D55671/C2D55671 9560v38: verify post UMAC[3] ok=1 va=B8458000 pa=00000000:003B3000 len=32768 first=00000000/00000000 tail=7E7E7E7E/7E7E7E7E hash=12377400/12377400 9560v38: verify post UMAC[4] ok=1 va=B8478000 pa=00000000:003BB000 len=32768 first=2022C0F1/2022C0F1 tail=00000000/00000000 hash=ADF9FE3E/ADF9FE3E 9560v38: verify post UMAC[5] ok=1 va=B8480000 pa=00000000:003C3000 len=32768 first=70CFC0F1/70CFC0F1 tail=08021378/08021378 hash=4EA1AD9A/4EA1AD9A 9560v38: verify post UMAC[6] ok=1 va=B8468000 pa=00000000:003CB000 len=32768 first=BA91BA8E/BA91BA8E tail=D90070A9/D90070A9 hash=26B06EC1/26B06EC1 9560v38: verify post UMAC[7] ok=1 va=B6821000 pa=00000000:003D3000 len=32768 first=0F802022/0F802022 tail=768B7708/768B7708 hash=5BE7E634/5BE7E634 9560v38: verify post UMAC[8] ok=1 va=B8460000 pa=00000000:003DB000 len=32768 first=202270C9/202270C9 tail=F420E081/F420E081 hash=85ED5596/85ED5596 9560v38: verify post UMAC[9] ok=1 va=B8490000 pa=00000000:003E3000 len=32768 first=F003DA00/F003DA00 tail=00000000/00000000 hash=F647C2BA/F647C2BA 9560v38: verify post UMAC[10] ok=1 va=B84A8000 pa=00000000:003F1000 len=32768 first=00000000/00000000 tail=00000000/00000000 hash=00000000/00000000 9560v38: verify post UMAC[11] ok=1 va=B8498000 pa=00000000:003F9000 len=32768 first=00000000/00000000 tail=00000000/00000000 hash=00000000/00000000 9560v38: verify post UMAC[12] ok=1 va=B8660000 pa=00000000:003EB000 len=4280 first=00000000/00000000 tail=00000000/00000000 hash=00000000/00000000 9560v38: verify post UMAC[13] ok=1 va=B7875000 pa=00000000:003ED000 len=3592 first=00000000/00000000 tail=0001520C/0001520C hash=0C1F0AE3/0C1F0AE3 9560v38: verify post UMAC[14] ok=1 va=B8488000 pa=00000000:00401000 len=24756 first=01000080/01000080 tail=00000000/00000000 hash=9FFE4F3C/9FFE4F3C 9560v38: verify post PAGE[0] ok=1 va=B67DB000 pa=00000000:003EE000 len=1656 first=00000006/00000006 tail=00000000/00000000 hash=C7546061/C7546061 9560v38: verify post PAGE[1] ok=1 va=B84B0000 pa=00000000:00408000 len=32768 first=2022C0F1/2022C0F1 tail=78E078E0/78E078E0 hash=00037E26/00037E26 9560v38: verify post PAGE[2] ok=1 va=B8408000 pa=00000000:00410000 len=32768 first=2022C0F1/2022C0F1 tail=78E078E0/78E078E0 hash=BCAC3A00/BCAC3A00 9560v38: verify post PAGE[3] ok=1 va=B7A06000 pa=00000000:00418000 len=32768 first=2022C0F1/2022C0F1 tail=7E7E7E7E/7E7E7E7E hash=5CD90AF3/5CD90AF3 9560v38: verify post PAGE[4] ok=1 va=B84A0000 pa=00000000:00420000 len=32768 first=2022C0F1/2022C0F1 tail=0101C8B4/0101C8B4 hash=A497F3C0/A497F3C0 9560v38: verify post PAGE[5] ok=1 va=B8470000 pa=00000000:00428000 len=32768 first=00000001/00000001 tail=78E078E0/78E078E0 hash=BFEE781D/BFEE781D 9560v38: verify post PAGE[6] ok=1 va=B6829000 pa=00000000:00430000 len=32768 first=2022C0F1/2022C0F1 tail=00000000/00000000 hash=C9EB8940/C9EB8940 9560v38: verify post PAGE[7] ok=1 va=B6819000 pa=00000000:00438000 len=32768 first=00000000/00000000 tail=78E078E0/78E078E0 hash=EA79D894/EA79D894 9560v38: verify post PAGE[8] ok=1 va=B0A2A000 pa=00000000:00440000 len=32768 first=2022C0F1/2022C0F1 tail=00000000/00000000 hash=D40A992B/D40A992B 9560v38: verify post PAGE[9] ok=1 va=B0A22000 pa=00000000:00448000 len=32768 first=00000000/00000000 tail=00000000/00000000 hash=00000000/00000000 9560v38: verify post PAGE[10] ok=1 va=B0A1A000 pa=00000000:00450000 len=32768 first=2022C0F1/2022C0F1 tail=00000000/00000000 hash=F6517548/F6517548 9560v38: verify post PAGE[11] ok=1 va=B0A12000 pa=00000000:00458000 len=32768 first=00000000/00000000 tail=00000000/00000000 hash=00000000/00000000 9560v38: verify post PAGE[12] ok=1 va=B0A0A000 pa=00000000:00460000 len=32768 first=00000000/00000000 tail=7E7E7E7E/7E7E7E7E hash=12377400/12377400 9560v38: verify post PAGE[13] ok=1 va=B0A02000 pa=00000000:00468000 len=32768 first=78E07EE0/78E07EE0 tail=78E078E0/78E078E0 hash=FDE67B52/FDE67B52 9560v38: verify post PAGE[14] ok=1 va=B09FA000 pa=00000000:00470000 len=32768 first=2022C0F1/2022C0F1 tail=78E078E0/78E078E0 hash=B97CB369/B97CB369 9560v38: verify post PAGE[15] ok=1 va=B09F2000 pa=00000000:00478000 len=32768 first=2022C0F1/2022C0F1 tail=7E7E7E7E/7E7E7E7E hash=DF9CC818/DF9CC818 9560v38: verify post PAGE[16] ok=1 va=B09EA000 pa=00000000:004B0000 len=32768 first=2022C0F1/2022C0F1 tail=7E7E7E7E/7E7E7E7E hash=ED458946/ED458946 9560v38: verify post PAGE[17] ok=1 va=B09E2000 pa=00000000:004B8000 len=32768 first=C0F1C1A1/C0F1C1A1 tail=00000100/00000100 hash=C09BC6A3/C09BC6A3 9560v38: verify post PAGE[18] ok=1 va=B09B2000 pa=00000000:004C0000 len=32768 first=00000000/00000000 tail=00000000/00000000 hash=F3CE5FDE/F3CE5FDE 9560v38: verify post PAGE[19] ok=1 va=B0CD2000 pa=00000000:004C8000 len=12288 first=02000000/02000000 tail=7E7E7E7E/7E7E7E7E hash=DB1A0D17/DB1A0D17 9560v38: verify post summary ok=1 ctxt=1 checks=50 failures=0 lmac=15 umac=15 page=20 9560v54: gen3 regs bootctrl_before=00480000 bootctrl_after=00480002 kick_read=00000000 stale=0 ctxt_lo=003EE678 ctxt_hi=00000000 ctxt_ok=1 shadow=802FFFFF dramtbl=00000000 iml_resp=00000001 ltr_skip=2 gp=08040005 nic_fail=0 prph_r=00D05C20/03D05C20/00000000 prph_w=00D05C44/03D05C44/00000001 9560v54: gen3 ltr_before=00000000 ltr_after=88C888C8 msix_before=00000000 msix_after=00000000 int_before=00000000 int_after=00000002 spins=4998 bootstage=00000000 ipc=00000000 umac_pc=C00C09E4 lmac1_pc=00000000 lmac2_pc=00000000 9560v54: bootstrap ctxt ok, fw-load INT enabled before kick, doing integrated-gen3 IML busy spin ltr_before=00000000 ltr_after=88C888C8 iml_resp=00000001 9560v54: post-IML spin ltr=881E881E bootctrl=00480002 int=00000002 fh=00000000 iml_resp=00000001 bootstage=00000000 ipc=00000000 spins=0 umac_pc=8047E450 lmac1_pc=00000000 lmac2_pc=00000000 9560w4: gen3-regs[post-iml] load=00000000 cpu=00000000 pc=8047E450/00000000/00000000 rfh_cfg=0118C25E active=40FA1989 frbdcb=ACFE7B7C:5F708070 widx=07020801 ridx=30506D40 urbdcb=F3C6F7AD:0088001B stts=AC6E7EFF:8B78D315 orb=78DFFB55:C4688C84 Breakpoint 5 hit 9560!WifiEnableBringupInterrupts: b2fca7f0 8bff mov edi,edi 3: kd> g Breakpoint 4 hit 9560!WifiApplyDisintPulse: b2fca9a0 8bff mov edi,edi 3: kd> g 9560L62: disint-pulse[fwload] before=80000001 after_disable=00000000 after_enable=80000001 mask=80000001 9560L62: enable AX210/INTx fwload mask=80000001 9560L54: waiting for ALIVE after context kick on Linux/OpenBSD path Breakpoint 6 hit 9560!WifiWaitForInitialAlive: b2fcaae0 8bff mov edi,edi 3: kd> g 9560L33: dma-snapshot armed regions=10 ctxt=003EE678 rxused=00339000 rxdata=00AE9000 Breakpoint 7 hit 9560!WifiPollBringupState: b2fcc0b0 8bff mov edi,edi 3: kd> g Breakpoint 10 hit 9560!WifiReadAx210BringupInterruptState: b2fcc6d0 8bff mov edi,edi 3: kd> g Breakpoint 9 hit 9560!WifiAckCombinedInterruptState: b2fcc640 8bff mov edi,edi 3: kd> g 9560L32: rx-write[alive-wait] st=0000 hw=0 cur=0 used[cur]=0000/00 used[hw]=0000/00 pkt_ring=-1 lenf=00000000 frame=0 hdr=00/00 idx=00 qid=00 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 Breakpoint 7 hit 9560!WifiPollBringupState: b2fcc0b0 8bff mov edi,edi 3: kd> g 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=00105110 alive=0 notif=00/00 seq=0000 len=0 scan=0 cand=0 9560L40: fw-activity[alive-wait] umac=8047E450 lmac1=00000000 lmac2=00000000 int=00000000 fh=00000000 boot=00000000 ipc=00000000 iml=00000001 rxst=0000 used0=0000/00 data0=00000000 cur=0 hw=0 alive=0 9560v62: poll[alive-wait] ltr=881E881E bootstage=00000000 ipc=00000000 sleep=00000000 rfid=0 Edited March 21 by Dietmar
Dietmar Posted March 21 Posted March 21 @reboot12 Wooaoh, it looks like, if there is also a mechanismus against XP, very similar to ME on this Wifi card, better this special M2 slots. I fake via Windbg for the Wlan-cpu cpu=0 ==> cpu=1 And like from hand from ghost, suddently is set back to cpu=0 out of nowhere. Exakt this I have seen under ME on the AIMB 786 board. But on the Biostar z690 Valkyrie I disabled with Bioshack ME. So, it is this special Wifi M2 slot, that tells to XP: "We dont want to have you here". But the hack i did via Windbg direkt in the register. This can be done also permanent at the right time during recognicing of the Wlan card. Soon we will know Dietmar 1
reboot12 Posted March 21 Posted March 21 (edited) 19 minutes ago, Dietmar said: So, it is this special Wifi M2 slot, that tells to XP: "We dont want to have you here". I wonder if this problem also occurs when we connect this WLAN card using such an adapter to the PCIe slot: EDITED No, this not work with WLAN card CNVio: https://www.amazon.com/GLOTRENDS-M-2-Key-PCIe-Bluetooth/dp/B09ZDPP43X To be noted: can not work with M.2 CNVio2/CNVio interface WiFi module, such as intel AX211NGW, AX201NGW, AC 9560NGW, AC 9462NGW, AC 9461NGW, etc. Not support Mini PCIe WiFi module. Edited March 21 by reboot12
Dietmar Posted March 21 Posted March 21 (edited) @reboot12 Yessssaaaaaaaaaaaaa Dietmar 9560L38: dpc cause=00000003 fh=00000000 msix_hw=00000000 msix_fh=00000000 [alive=1 wake=1 swrx=0 rfkill=0 ctkill=0 swerr=0 fhtx=0 hwerr=0 fhrx=0] 9560L53: rx-widx[alive] write=511 write_actual=504 cur=0 hw=0 Really crazy, how I solved this. I boot the compi with this Wlan card on Ubuntu life. Nothing good in this life Ubuntu but for me the only possibility to check, what is going on. And then I noticed something very strange: The Wlan card hangs at Ubuntu with exakt my symptoms, firmware hangs, so no ALIVE. And then I look, how Ubuntu overcomes this problem, because the Wlan card later works under Ubuntu. And it is this what i found and I copied it simple into my Source Code for XP SP3 --- /tmp/l66orig/l66/WDM/9560.c 2026-03-21 17:39:59.000000000 +0000 +++ /tmp/package_l67/l67/WDM/9560.c 2026-03-21 18:00:18.537173358 +0000 @@ -1849,6 +1849,51 @@ Adapter->ImlResp = WifiReadRegister32(Adapter->MmioBase0, Adapter->MmioLength0, INTEL9560_CSR_IML_RESP_ADDR); } +static VOID WifiSpinForAx210Iml(PADAPTER Adapter, ULONG TimeoutUs) +{ + ULONG loops; + ULONG ltr; + ULONG msix; + BOOLEAN irqSeen; + + if (Adapter == NULL || Adapter->MmioBase0 == NULL) + return; + + WifiClearMsixImrCause(Adapter); + Adapter->BootstrapLastMsgBefore = WifiReadRegister32(Adapter->MmioBase0, Adapter->MmioLength0, INTEL9560_CSR_LTR_LAST_MSG); + Adapter->BootstrapMsixCauseBefore = WifiReadMsixImrCause(Adapter); + ltr = Adapter->BootstrapLastMsgBefore; + irqSeen = FALSE; + + for (loops = 0; loops < TimeoutUs; ++loops) { + msix = WifiReadMsixImrCause(Adapter); + if ((msix & INTEL9560_MSIX_HW_INT_CAUSES_REG_IML) != 0) { + irqSeen = TRUE; + break; + } + ltr = WifiReadRegister32(Adapter->MmioBase0, Adapter->MmioLength0, INTEL9560_CSR_LTR_LAST_MSG); + if ((loops & 0x3FFUL) == 0) + NdisStallExecution(1); + } + + Adapter->BootstrapSpinLoops = loops; + Adapter->BootstrapLastMsgAfter = ltr; + Adapter->BootstrapMsixCauseAfter = WifiReadMsixImrCause(Adapter); + Adapter->ImlResp = WifiReadRegister32(Adapter->MmioBase0, Adapter->MmioLength0, INTEL9560_CSR_IML_RESP_ADDR); + + DbgPrint("9560L67: ax210-iml-spin irq=%u loops=%lu msix_before=%08lX msix_after=%08lX ltr_before=%08lX ltr_after=%08lX iml_resp=%08lX\n", + irqSeen ? 1 : 0, + loops, + Adapter->BootstrapMsixCauseBefore, + Adapter->BootstrapMsixCauseAfter, + Adapter->BootstrapLastMsgBefore, + Adapter->BootstrapLastMsgAfter, + Adapter->ImlResp); + + if (irqSeen) + WifiClearMsixImrCause(Adapter); +} + ULONG WifiReadPrph32(PADAPTER Adapter, ULONG Reg) { @@ -4494,9 +4539,17 @@ Adapter->BootstrapCpuRunOmitted = FALSE; WifiWriteRegister32(Adapter->MmioBase0, Adapter->MmioLength0, INTEL9560_CSR_CTXT_INFO_BOOT_CTRL, BootCtrl | INTEL9560_CSR_AUTO_FUNC_BOOT_ENA); - LtrVal = WifiBuildAx210BootLtrValue(); - WifiApplyBootLtr(Adapter, LtrVal); - WifiWriteUmacPrph32(Adapter, INTEL9560_UREG_CPU_INIT_RUN, 1); + if (Adapter->ChipKind == WifiChipSO_7AF0) { + Adapter->BootstrapLtrWriteSkipped = 1; + WifiClearMsixImrCause(Adapter); + WifiWriteUmacPrph32(Adapter, INTEL9560_UREG_CPU_INIT_RUN, 1); + WifiSpinForAx210Iml(Adapter, 100000UL); + } else { + LtrVal = WifiBuildAx210BootLtrValue(); + WifiApplyBootLtr(Adapter, LtrVal); + WifiWriteUmacPrph32(Adapter, INTEL9560_UREG_CPU_INIT_RUN, 1); + WifiSpinForBootstrapProgress(Adapter, 0x8000UL); + } Adapter->BootstrapCpuRunReadback = 0; Adapter->BootstrapCpuRunReadLooksStale = 0; Adapter->BootstrapUmacCurrentPc = 0; Edited March 21 by Dietmar
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now