[PATCH] Flash download works!!!

[Pavel Roskin]

Hello!

> I can recover cards and will gladly help test this.

As I already wrote today, it's possible to recover cards using a DOS
utility described in this message:

http://lists.shmoo.com/pipermail/hostap/2003-April/002225.html

we110.exe can be unpacked by unzip, no wine required.  It worked just fine
to recover a card damaged by flashing with the original prism2_srec.

> The truly daring might want to upload a new CIS, or a new PDA, as well.  
> If prism2_srec can handle multiple srec files, and a simple app to
> generate srecs from PDA sourcefiles, I think this should be possible
> too.  Or do you need to use genesis mode for that?

Be careful, you need to know where PDA is located.  Its location in NVRAM
may be different from its location in RAM.  I don't know for sure, but
it's better to be sure.  To read NVRAM through the AUX port, you should
set bit 12 in the offset register - then you will be able to locate it in 
NVRAM.

linux-wlan-ng looks for PDA at 0x7f0000, 0x3f0000 and 0x390000.  NVRAM is 
checked before RAM.  The last address in only checked in NVRAM.

The DOS utility supports flashing the PDA.  I don't know which address is 
used by default, but you can specify it bu the "-pda" option.

Loading I40003C0.HEX by the same utility should set genesis mode on 
HFA3841.  In case of HFA3842 and newer chips it should be possible to set 
genesis mode using the HCR resister (either 0x42 in the address space or 
CCSR in the PCMCIA attribute space).  Unfortunately, I don't know what 
exactly should be written to HCR.

I have a card with CIS erased.  I cannot flash I40003C0.HEX into it.  
Maybe I should do something with the pin MD11 during reset, but I don't 
know what and how.  The documentation for HFA3841 is quite unclear about 
it (or maybe it's because I'm not a hardware engineer).

-- 
Regards,
Pavel Roskin