--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/loadtools/scripts/pirelli.config	Fri May 03 23:38:08 2013 +0000
@@ -0,0 +1,7 @@
+# The following parameters go into the <p command sent to the boot ROM
+
+pll-config 4/1		# 26 MHz in, PLL&DSP @ 104 MHz, ARM @ 52 MHz
+rhea-cntl 0x00		# fastest setting, used by OsmocomBB, presumably correct
+
+# The remaining settings are carried out via loadagent commands
+init-script pirelli.init

--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/loadtools/scripts/pirelli.init	Fri May 03 23:38:08 2013 +0000
@@ -0,0 +1,15 @@
+# This phone has 3 memory chip selects:
+#
+# nCS0: flash chip select 1
+# nCS1: RAM chip select
+# nCS3: flash chip select 2
+#
+# All 3 chip select lines go to the same physical IC, a RAM/flash MCP.
+# We set WS=4 for all 3 here, copying what OsmocomBB does.  The access
+# time listed in the datasheet is 70 ns for both RAM and flash, and per
+# my math setting WS=3 *might* work, but it could be marginal, so let's
+# play it safe for now.
+
+w16 fffffb00 00A4
+w16 fffffb02 00A4
+w16 fffffb06 00A4