include "bt_format " org 0x0000 p_start: 0000 20200040 branch p_patch_array p_zcode: p_wake_from_power: 0001 204003d8 call p_mouse_data_init 0002 6800c1de fetch 1 ,mem_tx_power 0003 6000cce1 store 1 ,mem_tx_power_temp 0004 204006f5 call power_ctrl_pac_succ_cnt_init 0005 6800c685 fetch 1 ,mem_ui_button_timeout 0006 6000cb46 store 1 ,mem_select_ui_button_count 0007 6800cb32 fetch 1 ,mem_bt_ui_button_timeout 0008 6000cb33 store 1 ,mem_bt_ui_button_count 0009 204043ca call mouse_bt_discovery_button_down_disable 000a 204002c4 call p_mouse_spi_init 000b 20400784 call p_drawing_optima_init 000c 2040000f call p_mouse_cb_fuction 000d 20400022 call p_mouse_wakeup_from_power 000e 20200301 branch p_mouse_setting_config p_mouse_cb_fuction: 000f 580003aa setarg p_mouse_g24_package_data 0010 60014d5b store 2 ,mem_cb_24g_data 0011 580003c4 setarg p_mouse_le 0012 600141ef store 2 ,mem_cb_le_process 0013 5800063d setarg p_le_mouse_bb_event_connect_complete 0014 600141f9 store 2 ,mem_cb_att_write 0015 580003f3 setarg p_mouse_bt 0016 600141f1 store 2 ,mem_cb_bt_process 0017 5800028b setarg p_mouse_before_lpm 0018 600141ed store 2 ,mem_cb_before_lpm 0019 58000431 setarg p_mouse_priority_bb_event 001a 600141f5 store 2 ,mem_cb_bb_event_process 001b 5800041b setarg p_mouse_idle 001c 600141f3 store 2 ,mem_cb_idle_process 001d 5800045d setarg p_mouse_before_hibernate 001e 600141eb store 2 ,mem_cb_before_hibernate 001f 58000463 setarg p_mouse_bb_event_timer 0020 600141fd store 2 ,mem_cb_event_timer 0021 20600000 rtn p_mouse_wakeup_from_power: 0022 58000019 setarg 25 0023 60014d6d store 2 ,mem_24g_transmit_by_interrupt_exit_count_init 0024 2455802a ncall p_mouse_24g_transmit_by_interrupt_exit_count_max ,wake 0025 204002c6 call p_mouse_init_sunt 0026 204002fe call p_mouse_sensor_powerdown p_mouse_wakeup_no_from_power: 0027 6800c71f fetch 1 ,mem_reconn_times_init 0028 6000c71e store 1 ,mem_reconn_times 0029 20600000 rtn p_mouse_24g_transmit_by_interrupt_exit_count_max: 002a 58000177 setarg 375 002b 60014d6d store 2 ,mem_24g_transmit_by_interrupt_exit_count_init 002c 20600000 rtn 002d 20000001 nop 1 002e 20000001 nop 1 002f 20000001 nop 1 0030 20000001 nop 1 0031 20000001 nop 1 0032 20000001 nop 1 0033 20000001 nop 1 0034 20000001 nop 1 0035 20000001 nop 1 0036 20000001 nop 1 0037 20000001 nop 1 0038 20000001 nop 1 0039 20000001 nop 1 003a 20000001 nop 1 003b 20000001 nop 1 003c 20000001 nop 1 003d 20000001 nop 1 003e 20000001 nop 1 003f 20000001 nop 1 p_patch_array: 0040 c2840058 bbit1 8 ,pf_patch_ext 0041 c0008075 beq patch00_1 ,p_soft_reset_1 0042 c001007e beq patch00_2 ,p_soft_reset_2 0043 c0428761 beq patch10_5 ,p_shutdown_radio 0044 c0448732 beq patch11_1 ,p_set_freq_tx 0045 c00d8652 beq patch03_3 ,p_page_wait_fhs_reply_ok 0046 c0130654 beq patch04_6 ,p_role_switch_master 0047 c024066f beq patch09_0 ,p_quit_connection_cont 0048 c0250671 beq patch09_2 ,p_prepare_tx 0049 c028867a beq patch0a_1 ,p_slave_conn_recv_packet 004a c02c866d beq patch0b_1 ,p_process_dmh 004b c053867f beq patch14_7 ,p_lpm_dispatch 004c c0568698 beq patch15_5 ,p_lpm_set_mult 004d c065b3e4 beq patch19_3 ,app_bt_start_reconnect + 3 004e c07486a9 beq patch1d_1 ,p_mouse_bb_disconnected 004f c0508087 beq patch14_1 ,p_init_param 0050 c058808c beq patch16_1 ,p_lpm_check_wake_lock 0051 c0590096 beq patch16_2 ,p_g24_dispatch 0052 c06202ae beq patch18_4 ,p_device_init 0053 c0730529 beq patch1c_6 ,p_mouse_motion 0054 c075058d beq patch1d_2 ,p_mouse_bb_event_discovery_btn 0055 c0758591 beq patch1d_3 ,p_mouse_start_discovery 0056 c0760593 beq patch1d_4 ,p_mouse_stop_discovery 0057 20202a8e branch loop pf_patch_ext: 0058 c01c859c beq patch27_1 ,p_le_slave_match 0059 c02185a4 beq patch28_3 ,p_le_next_adv_channel 005a c02505aa beq patch29_2 ,p_le_receive_skip 005b c02b85ad beq patch2a_7 ,p_le_update_param 005c c02c85af beq patch2b_1 ,p_le_update_channel_map 005d c03185b1 beq patch2c_3 ,p_le_prepare_tx 005e c03305db beq patch2c_6 ,p_le_parse 005f c03385f2 beq patch2c_7 ,p_le_parse_l2cap 0060 c0350628 beq patch2d_2 ,p_le_adv_not_match 0061 c03b8633 beq patch2e_7 ,p_le_lpm_setmult 0062 c00286ab beq patch20_5 ,p_hid_rx_process 0063 c04006ad beq patch30_0 ,p_parse_lmp_accepted 0064 c04106b7 beq patch30_2 ,p_send_lmp 0065 c04406b9 beq patch31_0 ,p_process_conn_sm 0066 c046063f beq patch31_4 ,p_twspi_reset 0067 c046864b beq patch31_5 ,p_spid_init 0068 c05004d4 beq patch34_0 ,p_vdd_calculate_by_mode 0069 c07d06dd beq patch3f_2 ,p_check_51cmd_once_continue 006a 20202a8e branch loop p_rssi_signal: 006b 1fe22200 copy pdata ,rega 006c 6808cce5 fetcht 1 ,mem_rssi_signal_index 006d 58004cec setarg mem_rssi_signal_buf 006e 98408a00 iadd temp ,contw 006f 1a227e00 copy rega ,pdata 0070 e0a08000 istore 1 ,contw 0071 18408401 increase 1 ,temp 0072 18410407 and_into rssi_buf_len_signal ,temp 0073 6008cce5 storet 1 ,mem_rssi_signal_index 0074 20600000 rtn p_soft_reset_1: 0075 d8a009ae arg mem_sp_state ,contw 0076 df20000c arg 12 ,loopcnt 0077 20407ed4 call clear_mem 0078 204003bb call p_mouse_le_txbuff_load 0079 20406a03 call rfcomm_init 007a 20405cf6 call init_lmp 007b 2455ac65 ncall lpm_disable_exen_output ,wake 007c 20407ccd call ui_init + 1 007d 2020200c branch soft_reset + 11 p_soft_reset_2: 007e 2055b2e3 call app_lpm_init ,wake 007f 2040756a call publickey_init 0080 2055ab41 call lpm_recover_clk ,wake p_sp_cal_loop: 0081 204076dc call sp_calc_sequence 0082 6800c65a fetch 1 ,mem_ssp_enable 0083 203a2012 branch main_loop ,blank 0084 6800c5b1 fetch 1 ,mem_sp_local_key_invalid 0085 203a0081 branch p_sp_cal_loop ,blank 0086 20202012 branch main_loop p_init_param: 0087 58000a06 setarg param_le_version 0088 6001c510 store 3 ,mem_lmp_version 0089 58001d87 setarg param_le_subversion 008a 60014513 store 2 ,mem_lmp_version + 3 008b 20202aa2 branch init_param + 12 p_lpm_check_wake_lock: 008c c6130000 rtnmark1 mark_24g 008d 6800c79e fetch 1 ,mem_mouse_clear_sensor_data_flag 008e c0007fef beq 0 ,disable_blank 008f 6800c7c6 fetch 1 ,mem_mouse_le_conn_param_reject 0090 c000ffef beq le_lpm_disable ,disable_blank 0091 68014248 fetch 2 ,mem_sdp_remote_cid 0092 243a7fef nbranch disable_blank ,blank 0093 6800c808 fetch 1 ,mem_mouse_wheel_trigger 0094 243a7fef nbranch disable_blank ,blank 0095 20207ff1 branch enable_blank p_g24_dispatch: 0096 c6930000 rtnmark0 mark_24g 0097 6800cd6a fetch 1 ,mem_24g_transmit_by_interrupt 0098 c00080aa beq g24_tx_timer_int_enable ,p_g24_transmit_by_interrupt p_g24_transmit_process: 0099 2040012a call p_g24_txdata_prep 009a 243400c5 nbranch p_g24_nodata_transmit ,user 009b 20400111 call p_g24_rf_sta_check p_g24_transmit_start: 009c 2040014e call p_g24_transmit_packet 009d 6800cc3a fetch 1 ,mem_24g_pairing_sm 009e c1ff8000 rtnne state_24g_pairing_success 009f 20400706 call power_ctrl_start 00a0 58017700 setarg g24_long_sleep_step1 00a1 6001cc59 store 3 ,mem_24g_enter_hibernate 00a2 704b7414 jam 20 ,mem_24g_long_sleep_param_update_timer 00a3 6800cb28 fetch 1 ,mem_mouse_multi_led_state 00a4 c00083ad beq on ,p_g24_transmit_by_interrupt_enable p_g24_short_sleep: 00a5 204000d0 call p_g24_lpm_wait 00a6 24740000 nrtn user 00a7 20400292 call p_clear_wake 00a8 5800dea8 setarg 57000 00a9 20202b93 branch lpm_dispatch_sleep p_g24_transmit_by_interrupt: 00aa 2040026b call p_g24_timer_check 00ab 24740000 nrtn user 00ac 204000bf call p_g24_interval_calibrate 00ad 68014d6b fetch 2 ,mem_24g_transmit_by_interrupt_exit_count 00ae 1fe0fe01 increase 1 ,pdata 00af 60014d6b store 2 ,mem_24g_transmit_by_interrupt_exit_count 00b0 68094d6d fetcht 2 ,mem_24g_transmit_by_interrupt_exit_count_init 00b1 98467c00 isub temp ,null 00b2 204280b4 call p_g24_transmit_by_interrupt_exit ,zero 00b3 20200099 branch p_g24_transmit_process p_g24_transmit_by_interrupt_exit: 00b4 704d6a00 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt 00b5 58000000 setarg 0 00b6 60014d6b store 2 ,mem_24g_transmit_by_interrupt_exit_count 00b7 58000019 setarg 25 00b8 60014d6d store 2 ,mem_24g_transmit_by_interrupt_exit_count_init p_g24_interval_min: 00b9 704c6500 jam 0 ,mem_24g_pac_index 00ba 6800cc50 fetch 1 ,mem_24g_interval_min p_g24_interval_store: 00bb 6000cc4f store 1 ,mem_24g_interval 00bc 20600000 rtn p_g24_interval_max: 00bd 6800cc51 fetch 1 ,mem_24g_interval_max 00be 202000bb branch p_g24_interval_store p_g24_interval_calibrate: 00bf 6800cc65 fetch 1 ,mem_24g_pac_index 00c0 1fe0fe01 increase 1 ,pdata 00c1 6000cc65 store 1 ,mem_24g_pac_index 00c2 c00200bd beq 4 ,p_g24_interval_max 00c3 c00280b9 beq 5 ,p_g24_interval_min 00c4 20600000 rtn p_g24_nodata_transmit: 00c5 6800cc56 fetch 1 ,mem_24g_abort_pac 00c6 205a00d9 call p_g24_send_abort_packet ,blank p_g24_long_sleep: 00c7 6800c6cf fetch 1 ,mem_adc_low_volatage_led_timer_count 00c8 1fe67c0a sub pdata ,10 ,null 00c9 20610000 rtn positive 00ca 204000d0 call p_g24_lpm_wait 00cb 24740000 nrtn user 00cc 6801cc59 fetch 3 ,mem_24g_enter_hibernate 00cd 20407f49 call clk2lpo 00ce 600a415b storet 4 ,mem_sleep_counter 00cf 20202b2a branch lpm_sleep p_g24_lpm_wait: 00d0 78347c00 enable user 00d1 20402afa call lpo_calibration 00d2 6801c16f fetch 3 ,mem_clks_per_lpo 00d3 203a7fe9 branch disable_user ,blank 00d4 6800c091 fetch 1 ,mem_lpm_mode 00d5 203a7fe9 branch disable_user ,blank 00d6 6800cd6a fetch 1 ,mem_24g_transmit_by_interrupt 00d7 c000ffe9 beq g24_tx_timer_int_enable ,disable_user 00d8 20200295 branch p_mouse_setgpio_lpm p_g24_send_abort_packet: 00d9 704c5601 jam 1 ,mem_24g_abort_pac 00da 704d5f00 jam 0 ,mem_24g_rf_hop_ch 00db 204000e9 call p_g24_transmit_rf_ctrl_clear 00dc 6000cbc6 store 1 ,mem_24g_txbuf 00dd 58000000 setarg 0 00de 6003cbc7 store 7 ,mem_24g_txbuf + 1 00df 68024c61 fetch 4 ,mem_24g_device_addr 00e0 60024bce store 4 ,mem_24g_txbuf + 8 00e1 704c2a0c jam 12 ,mem_24g_datalen 00e2 6800cc2b fetch 1 ,mem_24g_data_type 00e3 79207e03 set1 bit_abort ,pdata 00e4 6000cc2b store 1 ,mem_24g_data_type 00e5 2040012d call p_g24_txdata_enable_tx 00e6 2020009c branch p_g24_transmit_start p_g24_transmit_rf_sta_init: 00e7 704d6001 jam 1 ,mem_24g_rf_last_sta 00e8 704d6200 jam 0 ,mem_24g_sync_cnt p_g24_transmit_rf_ctrl_clear: 00e9 6800cc2b fetch 1 ,mem_24g_data_type 00ea 1fe17e07 and_into bits_data ,pdata 00eb 6000cc2b store 1 ,mem_24g_data_type 00ec 20600000 rtn p_g24_hop_ch_enable: 00ed 6800cc2b fetch 1 ,mem_24g_data_type 00ee 79207e04 set1 bit_hop ,pdata 00ef 6000cc2b store 1 ,mem_24g_data_type 00f0 6000cbe6 store 1 ,mem_24g_txpayload 00f1 20600000 rtn p_g24_hop_ch_disable: 00f2 6800cc2b fetch 1 ,mem_24g_data_type 00f3 793ffe04 set0 bit_hop ,pdata 00f4 6000cc2b store 1 ,mem_24g_data_type 00f5 6000cbe6 store 1 ,mem_24g_txpayload 00f6 204006fc call power_ctrl_pac_succ_decrs 00f7 202001e7 branch p_g24_ch p_g24_rf_hop_attemp_again: 00f8 6800cd5f fetch 1 ,mem_24g_rf_hop_ch 00f9 c08080e9 bne 1 ,p_g24_transmit_rf_ctrl_clear p_g24_rf_hop_fastly: 00fa 6800cd5d fetch 1 ,mem_24g_hop_fastly_cnt 00fb 1fe0fe01 increase 1 ,pdata 00fc 6000cd5d store 1 ,mem_24g_hop_fastly_cnt 00fd c0020101 beq 4 ,p_g24_rf_hop_fastly_exit 00fe 204001e7 call p_g24_ch 00ff 704c6f02 jam 2 ,mem_24g_max_retry 0100 2020014e branch p_g24_transmit_packet p_g24_rf_hop_fastly_exit: 0101 204006fc call power_ctrl_pac_succ_decrs 0102 704d5d00 jam 0 ,mem_24g_hop_fastly_cnt 0103 202000e9 branch p_g24_transmit_rf_ctrl_clear p_g24_transmit_hop_pac_succ_wo_hop: 0104 704d6202 jam 2 ,mem_24g_sync_cnt p_g24_transmit_hop_pac_succ: 0105 704d6001 jam 1 ,mem_24g_rf_last_sta 0106 704d5f00 jam 0 ,mem_24g_rf_hop_ch 0107 202000e9 branch p_g24_transmit_rf_ctrl_clear p_g24_transmit_succ_rf_config: 0108 6800cd61 fetch 1 ,mem_24g_rf_work_stage 0109 c0018105 beq 3 ,p_g24_transmit_hop_pac_succ 010a 6800cc2b fetch 1 ,mem_24g_data_type 010b 2fec0004 isolate0 bit_hop ,pdata 010c 202080e7 branch p_g24_transmit_rf_sta_init ,true 010d 6800cd61 fetch 1 ,mem_24g_rf_work_stage 010e c0008104 beq 1 ,p_g24_transmit_hop_pac_succ_wo_hop 010f c0010105 beq 2 ,p_g24_transmit_hop_pac_succ 0110 20600000 rtn p_g24_rf_sta_check: 0111 6800cc3a fetch 1 ,mem_24g_pairing_sm 0112 c1ff8000 rtnne state_24g_pairing_success 0113 20400116 call p_g24_rf_laststa_synccnt_check 0114 2456011e ncall p_g24_rf_sync_cnt_check ,user2 0115 20600000 rtn p_g24_rf_laststa_synccnt_check: 0116 78567c00 disable user2 0117 6800cd60 fetch 1 ,mem_24g_rf_last_sta 0118 c1808000 rtnne 1 0119 6800cd62 fetch 1 ,mem_24g_sync_cnt 011a c1800000 rtnne 0 011b 704d6101 jam 1 ,mem_24g_rf_work_stage 011c 704c6f04 jam 4 ,mem_24g_max_retry 011d 20207feb branch enable_user2 p_g24_rf_sync_cnt_check: 011e 6800cd62 fetch 1 ,mem_24g_sync_cnt 011f 203a0125 branch p_g24_rf_hop_attemp ,blank 0120 1fe0ffff increase -1 ,pdata 0121 6000cd62 store 1 ,mem_24g_sync_cnt 0122 704d6102 jam 2 ,mem_24g_rf_work_stage 0123 704c6f04 jam 4 ,mem_24g_max_retry 0124 202001e7 branch p_g24_ch p_g24_rf_hop_attemp: 0125 704d6103 jam 3 ,mem_24g_rf_work_stage 0126 6800cd5f fetch 1 ,mem_24g_rf_hop_ch 0127 243a00f8 nbranch p_g24_rf_hop_attemp_again ,blank 0128 704c6f02 jam 2 ,mem_24g_max_retry 0129 202001e7 branch p_g24_ch p_g24_txdata_prep: 012a 6800cc3a fetch 1 ,mem_24g_pairing_sm 012b c0ff81a0 bne state_24g_pairing_success ,p_g24_pairing_sm p_g24_txdata_prep_packeage_data: 012c 20400130 call p_g24_package_data p_g24_txdata_enable_tx: 012d 204001d5 call p_g24_transmit_prep 012e 704c2f01 jam ensure_on_24g ,mem_24g_ensure 012f 20600000 rtn p_g24_package_data: 0130 68014d5b fetch 2 ,mem_cb_24g_data 0131 20407f9c call callback_func 0132 20340136 branch p_g24_accumulate_mouse_data ,user 0133 6803cbc7 fetch 7 ,mem_24g_txbuf + 1 0134 207a0000 rtn blank 0135 20207fe7 branch enable_user p_g24_accumulate_mouse_data: 0136 20403f8d call mouse_no_data_timer_init 0137 204002e3 call p_mouse_data_xy_release 0138 704c5600 jam 0 ,mem_24g_abort_pac 0139 1a20fe01 add rega ,1 ,pdata 013a 6000cc2a store 1 ,mem_24g_datalen 013b 204000e9 call p_g24_transmit_rf_ctrl_clear 013c 6000cbc6 store 1 ,mem_24g_txbuf 013d e8a88000 ifetcht 1 ,contw 013e ea408000 ifetch 1 ,regb 013f 9841fe00 ior temp ,pdata 0140 e0a08000 istore 1 ,contw 0141 1a40a401 increase 1 ,regb 0142 ea420000 ifetch 4 ,regb 0143 e0a20000 istore 4 ,contw 0144 1a40a404 increase 4 ,regb 0145 d8a04bcc arg mem_24g_txbuf + 6 ,contw 0146 df200002 arg 2 ,loopcnt p_g24_accumulation_loop: 0147 ea408000 ifetch 1 ,regb 0148 e8a88000 ifetcht 1 ,contw 0149 9840fe00 iadd temp ,pdata 014a e0a08000 istore 1 ,contw 014b 1a40a401 increase 1 ,regb 014c c2000147 loop p_g24_accumulation_loop 014d 20600000 rtn p_g24_transmit_packet: 014e 704c3300 jam 0 ,mem_24g_retry p_g24_transmit_loop: 014f d9600d00 arg param_rx_setup ,timeup 0150 34730200 until clkn_rt ,meet 0151 20400170 call p_g24_transmit_receive_ack 0152 242c017b nbranch p_g24_retransmit ,sync 0153 2437817b nbranch p_g24_retransmit ,user3 0154 20400168 call p_g24_txbuf_clear 0155 20400199 call p_g24_ackpayload_parse 0156 204006f8 call power_ctrl_pac_succ_incrs p_g24_transmit_next_packet: 0157 704b5800 jam 0 ,mem_retry_count 0158 6800cc29 fetch 1 ,mem_24g_pid 0159 1fe0fe01 increase 1 ,pdata 015a 6000cc29 store 1 ,mem_24g_pid 015b 2040016b call p_g24_hop_enable_packet 015c 6800cc3a fetch 1 ,mem_24g_pairing_sm 015d c0ff816e bne state_24g_pairing_success ,p_g24_paring_mode_start 015e 20400108 call p_g24_transmit_succ_rf_config p_g24_transmit_abandon: 015f 6800cb5f fetch 1 ,mem_mouse_24g_pair_timer 0160 245a0396 ncall p_mouse_24g_led_off ,blank 0161 58000000 setarg 0 0162 60014c30 store 2 ,mem_24g_txfail_cnt 0163 6000cc32 store 1 ,mem_24g_get_ack_fail 0164 6000cd5e store 1 ,mem_24g_hop_pac_retry 0165 6000cb5f store 1 ,mem_mouse_24g_pair_timer 0166 704c2f00 jam ensure_off_24g ,mem_24g_ensure 0167 20600000 rtn p_g24_txbuf_clear: 0168 df200004 arg 4 ,loopcnt 0169 d8a04bc6 arg mem_24g_txbuf ,contw 016a 20207ec6 branch memset0 p_g24_hop_enable_packet: 016b 6800cc2b fetch 1 ,mem_24g_data_type 016c c28200f2 bbit1 bit_hop ,p_g24_hop_ch_disable 016d 20600000 rtn p_g24_paring_mode_start: 016e 204006f5 call power_ctrl_pac_succ_cnt_init 016f 202001a2 branch p_g24_paring_mode p_g24_transmit_receive_ack: 0170 7857fc00 disable user3 0171 2040024a call p_g24_transmit 0172 18002a00 force 0 ,radio_ctrl 0173 68024c52 fetch 4 ,mem_24g_addr 0174 98001200 iforce access 0175 68088017 fetcht 1 ,mem_last_freq 0176 2040291f call set_freq_rx 0177 20402924 call rf_rx_enable 0178 2040020a call p_g24_receive_rxon 0179 20578243 call p_g24_end_of_packet ,user3 017a 20600000 rtn p_g24_retransmit: 017b 6800cc56 fetch 1 ,mem_24g_abort_pac 017c 247a0000 nrtn blank 017d 68014c30 fetch 2 ,mem_24g_txfail_cnt 017e 1fe0fe01 increase 1 ,pdata 017f 60014c30 store 2 ,mem_24g_txfail_cnt 0180 6800cc31 fetch 1 ,mem_24g_txfail_cnt + 1 0181 c282018a bbit1 4 ,p_g24_stop_g24_mode 0182 6800cc3a fetch 1 ,mem_24g_pairing_sm 0183 c0ff8186 bne state_24g_pairing_success ,p_g24_tx_paring_retry 0184 2040018f call p_g24_tx_hop_ch_process 0185 2020014f branch p_g24_transmit_loop p_g24_tx_paring_retry: 0186 6800cc30 fetch 1 ,mem_24g_txfail_cnt 0187 c1ff8000 rtnne 0xff p_g24_tx_attempt_fail: 0188 58000000 setarg 0 0189 60014c30 store 2 ,mem_24g_txfail_cnt p_g24_stop_g24_mode: 018a 700a993a jam bt_evt_24g_attempt_fail ,mem_fifo_temp 018b 20207d86 branch ui_ipc_send_event p_g24_tx_fast_hop: 018c 20400729 call power_ctrl_txpower_incrs 018d 204006fc call power_ctrl_pac_succ_decrs 018e 202001e7 branch p_g24_ch p_g24_tx_hop_ch_process: 018f 6800cc33 fetch 1 ,mem_24g_retry 0190 1fe67c0b sub pdata ,11 ,null 0191 2421018c nbranch p_g24_tx_fast_hop ,positive 0192 1fe0fe01 increase 1 ,pdata 0193 6000cc33 store 1 ,mem_24g_retry 0194 c00100ed beq 2 ,p_g24_hop_ch_enable 0195 c00300f2 beq 6 ,p_g24_hop_ch_disable 0196 c00400ed beq 8 ,p_g24_hop_ch_enable 0197 c00600f2 beq 12 ,p_g24_hop_ch_disable 0198 20600000 rtn p_g24_ackpayload_parse: 0199 204001ba call p_g24_read_len_pid_crc 019a 6800cc28 fetch 1 ,mem_24g_rxdata_length 019b 207a0000 rtn blank 019c 98007200 iforce loopcnt 019d d8c04ba6 arg mem_24g_rxbuf + 2 ,contr 019e d8a04c08 arg mem_24g_rxpayload ,contw 019f 20207f01 branch memcpy p_g24_pairing_sm: 01a0 7011c590 jam zcode_90 ,mem_zcode_temp_param0 01a1 20200763 branch p_zcode_entrance p_g24_paring_mode: 01a2 7011c591 jam zcode_91 ,mem_zcode_temp_param0 01a3 20200763 branch p_zcode_entrance p_g24_start_24g_mode: 01a4 7011c560 jam zcode_60 ,mem_zcode_temp_param0 01a5 20200763 branch p_zcode_entrance p_g24_auto_pair_start: 01a6 7011c570 jam zcode_70 ,mem_zcode_temp_param0 01a7 20200763 branch p_zcode_entrance p_g24_tx_attemp_data_prep: 01a8 70119eff jam 0xff ,mem_24g_common_temp 01a9 6800cc2b fetch 1 ,mem_24g_data_type 01aa 6000919f store 1 ,mem_24g_common_temp + 1 01ab 68024c61 fetch 4 ,mem_24g_device_addr 01ac 600211a0 store 4 ,mem_24g_common_temp + 2 01ad d8400006 arg 6 ,temp 01ae da20119e arg mem_24g_common_temp ,rega 01af 204001b5 call p_g24_put_data_in_buff 01b0 202001d5 branch p_g24_transmit_prep p_g24_check_51cmd_stop_24g: 01b1 793f8026 set0 mark_24g ,mark 01b2 204053ce call le_disable p_mouse_disable_g24_pairing_flag: 01b3 d8e00003 arg mosue_24g_pairing_flag ,queue 01b4 202043d2 branch mouse_disable_function_flag p_g24_put_data_in_buff: 01b5 6008cc2a storet 1 ,mem_24g_datalen 01b6 18427200 copy temp ,loopcnt 01b7 d8a04bc6 arg mem_24g_txbuf ,contw 01b8 1a220c00 copy rega ,contr 01b9 20207f01 branch memcpy p_g24_read_len_pid_crc: 01ba 6800cba5 fetch 1 ,mem_24g_rxbuf + 1 01bb 1fe97e00 rshift3 pdata ,pdata 01bc 6000cc28 store 1 ,mem_24g_rxdata_length 01bd 1fe0fe01 increase 1 ,pdata 01be d8c04ba5 arg mem_24g_rxbuf + 1 ,contr 01bf 98c08c00 iadd contr ,contr 01c0 e8c18000 ifetch 3 ,contr 01c1 6001cc67 store 3 ,mem_24g_sta_crc 01c2 6800cba5 fetch 1 ,mem_24g_rxbuf + 1 01c3 1fe37e00 rshift pdata ,pdata 01c4 1fe17e03 and pdata ,0x03 ,pdata 01c5 6000cc6d store 1 ,mem_24g_sta_pid 01c6 20600000 rtn p_g24_update_addr_and_synccrc8: 01c7 60024c52 store 4 ,mem_24g_addr p_g24_syncword_crc8: 01c8 da200000 arg 0 ,rega 01c9 df200004 arg 4 ,loopcnt 01ca d8c04c52 arg mem_24g_addr ,contr p_g24_syncword_crc8_loop: 01cb e8c08000 ifetch 1 ,contr 01cc 9a20a200 iadd rega ,rega 01cd c20001cb loop p_g24_syncword_crc8_loop 01ce 1a227e00 copy rega ,pdata 01cf 60014cdb store 2 ,mem_24g_syncword 01d0 6800ccdb fetch 1 ,mem_24g_syncword 01d1 6808ccdc fetcht 1 ,mem_24g_syncword + 1 01d2 9840fe00 iadd temp ,pdata 01d3 6000ccdd store 1 ,mem_24g_syncword_crc8 01d4 20600000 rtn p_g24_transmit_prep: 01d5 6800cc2a fetch 1 ,mem_24g_datalen 01d6 1fe0fe02 increase 2 ,pdata 01d7 6000cc2c store 1 ,mem_24g_txlen 01d8 6800cc2b fetch 1 ,mem_24g_data_type 01d9 6000cbe6 store 1 ,mem_24g_txpayload 01da 6800cc2a fetch 1 ,mem_24g_datalen 01db 1fe9fe00 lshift3 pdata ,pdata 01dc 6808cc29 fetcht 1 ,mem_24g_pid 01dd 18410403 and temp ,0x03 ,temp 01de 18438400 lshift temp ,temp 01df 9841fe00 ior temp ,pdata 01e0 6808cc66 fetcht 1 ,mem_24g_no_ack 01e1 9840fe00 iadd temp ,pdata 01e2 e0a08000 istore 1 ,contw 01e3 6800cc2a fetch 1 ,mem_24g_datalen 01e4 98007200 iforce loopcnt 01e5 d8c04bc6 arg mem_24g_txbuf ,contr 01e6 20207f01 branch memcpy p_g24_ch: 01e7 6808cc35 fetcht 1 ,mem_24g_current_ch_number 01e8 204001eb call p_g24_ch_map_size 01e9 6008cc35 storet 1 ,mem_24g_current_ch_number 01ea 20600000 rtn p_g24_ch_map_size: 01eb 204001ef call p_g24_ch_calc 01ec 18408401 increase 1 ,temp 01ed 18410403 and_into 3 ,temp 01ee 20600000 rtn p_g24_ch_calc: 01ef 6800cc52 fetch 1 ,mem_24g_addr 01f0 1fe17e03 and_into 0x03 ,pdata 01f1 1fefa204 mul32 pdata ,4 ,rega 01f2 58004c3b setarg mem_24g_ch_map1 01f3 9a20fe00 iadd rega ,pdata 01f4 98408c00 iadd temp ,contr 01f5 e8c08000 ifetch 1 ,contr 01f6 6000cc34 store 1 ,mem_24g_ch 01f7 20600000 rtn p_g24_prep: 01f8 7844fc00 disable enable_crc 01f9 7843fc00 disable enable_white 01fa 58555555 setarg 0x555555 01fb 98001e00 iforce crc24_init 01fc 6800cc34 fetch 1 ,mem_24g_ch 01fd 1fed8400 reverse pdata ,temp 01fe 79200401 set1 1 ,temp 01ff 18431c00 rshift temp ,white_init 0200 20600000 rtn p_g24_receive_packet: 0201 204053c4 call le_enable 0202 68024c52 fetch 4 ,mem_24g_addr 0203 98001200 iforce access 0204 20402918 call set_sync_on 0205 6808cc34 fetcht 1 ,mem_24g_ch 0206 2040291f call set_freq_rx 0207 58000500 setarg param_pll_setup 0208 20402a8f call sleep 0209 20402924 call rf_rx_enable p_g24_receive_rxon: 020a 204001f8 call p_g24_prep 020b 7857fc00 disable user3 020c 7826fc00 enable decode_fec0 020d 7830fc00 enable is_rx 020e 78507c00 disable is_tx 020f 78287c00 enable swfine 0210 68014c2d fetch 2 ,mem_24g_rx_window 0211 98003600 iforce stop_watch 0212 37c18400 correlate null ,timeout 0213 242c0243 nbranch p_g24_sync_timeout ,sync 0214 7846fc00 disable decode_fec0 0215 7825fc00 enable decode_fec1 0216 7823fc00 enable enable_white 0217 7824fc00 enable enable_crc 0218 20400240 call p_g24_receive_byte 0219 6000ccde store 1 ,mem_24g_get_syncword_crc8 021a 6808ccdd fetcht 1 ,mem_24g_syncword_crc8 021b 98467c00 isub temp ,null 021c 24228243 nbranch p_g24_end_of_packet ,zero 021d 20400240 call p_g24_receive_byte 021e 6000cba4 store 1 ,mem_24g_rxbuf 021f 6800cba4 fetch 1 ,mem_24g_rxbuf 0220 6808cc2b fetcht 1 ,mem_24g_data_type 0221 a8400e00 icompare bits_data ,temp 0222 24208243 nbranch p_g24_end_of_packet ,true p_g24_receive_skip: 0223 20400240 call p_g24_receive_byte 0224 e0a08000 istore 1 ,contw 0225 1fe97e00 rshift3 pdata ,pdata 0226 1fe1721f and pdata ,0x1f ,loopcnt 0227 2022822b branch p_g24rx_nopayload ,zero p_g24rx_loop: 0228 20400240 call p_g24_receive_byte 0229 e0a08000 istore 1 ,contw 022a c2000228 loop p_g24rx_loop p_g24rx_nopayload: 022b 18a22200 copy contw ,rega 022c 20400240 call p_g24_receive_byte 022d 6000cd65 store 1 ,mem_rssi_hex_received 022e 1a220a00 copy rega ,contw 022f 09800018 parse demod ,bucket ,24 0230 78287c00 enable swfine 0231 db600664 arg param_sifs ,stop_watch 0232 1fef7e00 rshift32 pdata ,pdata 0233 1ff17e00 rshift16 pdata ,pdata 0234 e0a18000 istore 3 ,contw 0235 7845fc00 disable decode_fec1 0236 20230243 branch p_g24_end_of_packet ,crc_failed 0237 7837fc00 enable user3 0238 68008017 fetch 1 ,mem_last_freq 0239 1fe0a200 add pdata ,0 ,rega 023a 20402981 call rf_write_freq 023b 7846fc00 disable decode_fec0 023c 20402918 call set_sync_on 023d 6800cd65 fetch 1 ,mem_rssi_hex_received 023e 2040006b call p_rssi_signal 023f 20600000 rtn p_g24_receive_byte: 0240 09800008 parse demod ,bucket ,8 0241 19897e00 rshift3 pwindow ,pdata 0242 20600000 rtn p_g24_sync_timeout: p_g24_end_of_packet: 0243 784dfc00 disable encode_fec1 0244 7845fc00 disable decode_fec1 0245 2040264d call end_of_packet 0246 20600000 rtn p_g24_set_freq_tx: 0247 20402918 call set_sync_on 0248 6808cc34 fetcht 1 ,mem_24g_ch 0249 20202933 branch set_freq_tx p_g24_transmit: 024a 204053c4 call le_enable 024b 68024c52 fetch 4 ,mem_24g_addr 024c 98001200 iforce access 024d 204001f8 call p_g24_prep 024e 20400247 call p_g24_set_freq_tx 024f 79202a00 set1 txgfsk ,radio_ctrl 0250 782efc00 enable encode_fec0 0251 78307c00 enable is_tx 0252 7850fc00 disable is_rx 0253 19317e00 rshift16 access ,pdata 0254 1fecfe00 rshift8 pdata ,pdata 0255 1ff1fe00 rshift4 pdata ,pdata 0256 08008628 inject mod ,40 0257 784efc00 disable encode_fec0 0258 782dfc00 enable encode_fec1 0259 7823fc00 enable enable_white 025a 7824fc00 enable enable_crc 025b 6800ccdd fetch 1 ,mem_24g_syncword_crc8 025c 08008608 inject mod ,8 025d 6800cc2c fetch 1 ,mem_24g_txlen 025e 98007200 iforce loopcnt 025f d8c04be6 arg mem_24g_txpayload ,contr p_g24tr_loop: 0260 e8c08000 ifetch 1 ,contr 0261 08008608 inject mod ,8 0262 c2000260 loop p_g24tr_loop 0263 78247c00 enable enable_parity 0264 08008618 inject mod ,24 0265 78447c00 disable enable_parity 0266 37d38200 until null ,tx_clear 0267 20000064 nop 100 0268 784efc00 disable encode_fec0 0269 784dfc00 disable encode_fec1 026a 20600000 rtn p_g24_timer_check: 026b 20407fe9 call disable_user 026c 680a4c4b fetcht 4 ,mem_24g_tx_btclk 026d 1c427e00 copy clkn_bt ,pdata 026e 98467c00 isub temp ,null 026f 24412d18 ncall g24_timer_timeout ,positive 0270 1fe22400 copy pdata ,regb 0271 68024c4b fetch 4 ,mem_24g_tx_btclk 0272 6808cc4f fetcht 1 ,mem_24g_interval 0273 98408400 iadd temp ,temp 0274 1a427e00 copy regb ,pdata 0275 98467c00 isub temp ,null 0276 24610000 nrtn positive 0277 793ffe1c set0 28 ,pdata 0278 60024c4b store 4 ,mem_24g_tx_btclk 0279 20207fe7 branch enable_user p_rssi_average: 027a d8400000 arg 0 ,temp 027b df200008 arg rssi_buf_len_signal + 1 ,loopcnt 027c 1a220c00 copy rega ,contr p_rssi_average_loop: 027d e8c08000 ifetch 1 ,contr 027e 98408400 iadd temp ,temp 027f c200027d loop p_rssi_average_loop 0280 18497e00 rshift3 temp ,pdata 0281 1fe20400 copy pdata ,temp 0282 c6930000 rtnmark0 mark_24g 0283 1fe6fc0a div pdata ,10 0284 20407f86 call wait_div_end 0285 1807fe00 quotient pdata 0286 1ff27e00 lshift4 pdata ,pdata 0287 18070400 remainder temp 0288 98418400 ior temp ,temp 0289 20600000 rtn 028a 20600000 rtn p_mouse_before_lpm: 028b c6130000 rtnmark1 mark_24g 028c 204003b1 call p_mouse_le_txbuff_save 028d 20400295 call p_mouse_setgpio_lpm 028e 6800c040 fetch 1 ,mem_context 028f c3000292 bbit0 state_inconn ,p_clear_wake 0290 680080a0 fetch 1 ,mem_lpm_current_mult 0291 247a0000 nrtn blank p_clear_wake: 0292 58000000 setarg 0 0293 600400a1 store 8 ,mem_gpio_wakeup_low 0294 20600000 rtn p_mouse_setgpio_lpm: 0295 204002ab call p_mouse_set_sdio_high 0296 20400292 call p_clear_wake p_mouse_setgpio_hibernate: 0297 20403ebf call mouse_lpm_before_common 0298 20400303 call p_flash_ncs_disable 0299 68120070 hfetch 4 ,core_gpio_oe0 029a 681a0078 hfetcht 4 ,core_gpio_pu0 029b 98418400 ior temp ,temp 029c 18440400 invert temp ,temp 029d 601a007c hstoret 4 ,core_gpio_pd0 029e 6810807c hfetch 1 ,core_gpio_pd0 029f 793ffe06 set0 6 ,pdata 02a0 6010807c hstore 1 ,core_gpio_pd0 02a1 6810807c hfetch 1 ,core_gpio_pd0 02a2 79207e05 set1 5 ,pdata 02a3 6010807c hstore 1 ,core_gpio_pd0 02a4 6810807d hfetch 1 ,core_gpio_pd1 02a5 793ffe02 set0 2 ,pdata 02a6 6010807d hstore 1 ,core_gpio_pd1 02a7 6810807e hfetch 1 ,core_gpio_pd2 02a8 793ffe06 set0 6 ,pdata 02a9 6010807e hstore 1 ,core_gpio_pd2 02aa 20600000 rtn p_mouse_set_sdio_high: 02ab 6800cb00 fetch 1 ,mem_mouse_init_sensor_reset_flag 02ac 207a0000 rtn blank 02ad 20203d80 branch mouse_seting_dpi + 2 p_device_init: 02ae 2040296c call initialize_radio 02af 20403416 call app_lpm_mult_enable 02b0 204074b9 call enable_authrom 02b1 203582c4 branch p_device_wake_from_lpm ,wake p_device_wake_from_power: 02b2 20400001 call p_wake_from_power 02b3 204004bb call p_mouse_adc_read 02b4 d8400258 arg 600 ,temp 02b5 680146aa fetch 2 ,mem_mouse_no_data_timeout 02b6 98460400 isub temp ,temp 02b7 60094b5b storet 2 ,mem_mouse_no_data_led_timeout 02b8 6800c720 fetch 1 ,mem_device_flag 02b9 c00082bd beq mode_bt_device1 ,p_mouse_check_reconn_target 02ba 20404083 call mouse_check_key_gpio 02bb 1fe17e07 and pdata ,0x07 ,pdata 02bc c00282c2 beq mouse_lm_button ,p_mouse_24g_pairing_button p_mouse_check_reconn_target: 02bd 7011c530 jam zcode_30 ,mem_zcode_temp_param0 02be 20200763 branch p_zcode_entrance p_mouse_tx_power_init: 02bf 6800cce1 fetch 1 ,mem_tx_power_temp 02c0 6000c1de store 1 ,mem_tx_power 02c1 20600000 rtn p_mouse_24g_pairing_button: 02c2 7011c571 jam zcode_71 ,mem_zcode_temp_param0 02c3 20200763 branch p_zcode_entrance p_device_wake_from_lpm: p_mouse_spi_init: 02c4 70421276 jam 0x76 ,mem_spi_init_clk 02c5 20203d36 branch mouse_spi_init p_mouse_init_sunt: 02c6 204002c4 call p_mouse_spi_init 02c7 204040c0 call mouse_spi_sdio_gpio_pollup p_mouse_init_sensor: 02c8 204040d9 call mouse_read_sensor_id 02c9 c01802d2 beq p32xx_id1 ,p_mouse_init_p32xx_id2_judge 02ca c01882d6 beq p3065_id1 ,p_mouse_p3065_init_param 02cb 204040d1 call mouse_twspi_reset 02cc 200003e8 nop 1000 02cd 202002c8 branch p_mouse_init_sensor p_mouse_init_sensor_reset: 02ce 704b0001 jam 1 ,mem_mouse_init_sensor_reset_flag 02cf 2040640f call spi_ncs_enable 02d0 204002c6 call p_mouse_init_sunt 02d1 20206411 branch spi_ncs_disable p_mouse_init_p32xx_id2_judge: 02d2 204002e8 call p_mouse_sensor_poweron 02d3 6800c6de fetch 1 ,mem_sensor_id2 02d4 c02d02d8 beq ma8650_id2 ,p_mouse_mx8650_init_param 02d5 202040e1 branch mouse_init_p32xx_id2_judge + 1 p_mouse_p3065_init_param: 02d6 204002e8 call p_mouse_sensor_poweron 02d7 202040ea branch mouse_p3065_init_param p_mouse_mx8650_init_param: 02d8 7046e007 jam ma8650 ,mem_config_sensor_type 02d9 da604b7d arg mem_sensor_8650_init ,regc p_sensor_wr_seq: 02da ea610000 ifetch 2 ,regc 02db c17f8000 rtneq 0xff 02dc 20406413 call twspi_write 02dd 20002ee0 nop 12000 02de 1a60a602 increase 2 ,regc 02df 202002da branch p_sensor_wr_seq p_mouse_current_mult_update: 02e0 70417200 jam 0 ,mem_lpm_mult 02e1 704b731e jam 30 ,mem_mouse_current_mult_timer 02e2 20600000 rtn p_mouse_data_xy_release: 02e3 6800cb72 fetch 1 ,mem_mouse_long_mult_flag 02e4 c1808000 rtnne 1 02e5 58000000 setarg 0 02e6 6000cb72 store 1 ,mem_mouse_long_mult_flag 02e7 6002469b store 4 ,mem_mouse_x p_mouse_sensor_poweron: 02e8 204002c4 call p_mouse_spi_init 02e9 58008006 setarg 0x8006 02ea 20406413 call twspi_write 02eb 20002ee0 nop 12000 p_mouse_dpi_config: 02ec 6800c77a fetch 1 ,mem_mouse_dpi 02ed c0ff82f1 bne 0xff ,p_mouse_seting_dpi 02ee 6800c6e1 fetch 1 ,mem_config_sensor_motion 02ef 1fe17e0f and pdata ,0x0f ,pdata 02f0 6000c77a store 1 ,mem_mouse_dpi p_mouse_seting_dpi: p_mouse_seting_dpi_sensor_type: 02f1 6800c6e0 fetch 1 ,mem_config_sensor_type 02f2 c00382f7 beq ma8650 ,p_mouse_seting_3065xy_dpi 02f3 c00302f7 beq p3065_xy ,p_mouse_seting_3065xy_dpi 02f4 c00102f9 beq ka8 ,p_mouse_seting_ka8_dpi 02f5 c0023d96 beq p3212 ,mouse_seting_3212_dpi 02f6 20203d81 branch mouse_seting_dpi + 3 p_mouse_seting_3065xy_dpi: 02f7 6800c77a fetch 1 ,mem_mouse_dpi 02f8 202002fc branch p_mouse_dpi_store p_mouse_seting_ka8_dpi: 02f9 6800c77a fetch 1 ,mem_mouse_dpi 02fa 1fe0fe03 increase 3 ,pdata 02fb 202002fc branch p_mouse_dpi_store p_mouse_dpi_store: 02fc 6000c6b5 store 1 ,mem_mouse_cpi_count 02fd 20203dc1 branch mouse_p3205_dpi + 3 p_mouse_sensor_powerdown: 02fe 204002c4 call p_mouse_spi_init 02ff 58000806 setarg 0x0806 0300 20206413 branch twspi_write p_mouse_setting_config: 0301 7011c580 jam zcode_80 ,mem_zcode_temp_param0 0302 20200763 branch p_zcode_entrance p_flash_ncs_disable: 0303 6808cb45 fetcht 1 ,mem_flash_ncs_gpio 0304 20206825 branch gpio_out_inactive p_spid_init_flash: 0305 70808640 jam 0x40 ,core_spid_ctrl 0306 70808700 jam 0x0 ,core_spid_delay 0307 68108081 hfetch 1 ,core_gpio_sel1 0308 793ffe00 set0 0 ,pdata 0309 793ffe01 set0 1 ,pdata 030a 79207e03 set1 3 ,pdata 030b 793ffe04 set0 4 ,pdata 030c 60108081 hstore 1 ,core_gpio_sel1 030d 58000000 setarg 0 030e 600201f5 store 4 ,mem_spid_tbuf 030f 6810807f hfetch 1 ,core_gpio_pd3 0310 793ffe00 set0 0 ,pdata 0311 6010807f hstore 1 ,core_gpio_pd3 0312 20600000 rtn p_mouse_load_flash_info_check: 0313 20400363 call p_flash_release_deep_power_down 0314 20404423 call mouse_load_flash_flag 0315 68014778 fetch 2 ,mem_store_flag 0316 d840aa55 arg eeprom_init_flag ,temp 0317 98467c00 isub temp ,null 0318 20228350 branch p_mouse_load_flash_device_info ,zero 0319 60094778 storet 2 ,mem_store_flag 031a 2040441c call mouse_ble_init_address 031b 6800c6e1 fetch 1 ,mem_config_sensor_motion 031c 6000c77a store 1 ,mem_mouse_dpi 031d 68024b53 fetch 4 ,mem_mouse_24g_addr_init 031e 6002477b store 4 ,mem_mouse_24g_addr 031f 60024c52 store 4 ,mem_24g_addr 0320 20400354 call p_mouse_fast_conn_init p_mouse_store_flash_device_info: 0321 20400363 call p_flash_release_deep_power_down 0322 2040032f call p_flash_erase_sector 0323 20400347 call p_mouse_information_flash_parameters 0324 20400333 call p_spid_write_flash 0325 2040033e call p_wait_flash_done p_mouse_store_random_addr_increase_count: 0326 d8400002 arg 2 ,temp 0327 da2047c4 arg mem_random_addr_increase_count ,rega 0328 da40005f arg mouse_random_addr_count_eeprom_offset ,regb 0329 6801c700 fetch 3 ,mem_flash_base 032a 9a40fe00 iadd regb ,pdata 032b 20400333 call p_spid_write_flash 032c 2040033e call p_wait_flash_done 032d 2040035a call p_flash_deep_power_down 032e 202002c4 branch p_mouse_spi_init p_flash_erase_sector: 032f 6801c700 fetch 3 ,mem_flash_base 0330 6001c232 store 3 ,mem_spi_write_addr 0331 2040652a call flash_erase_sector + 2 0332 2020033e branch p_wait_flash_done p_spid_write_flash: 0333 1fe22600 copy pdata ,regc 0334 1a227e00 copy rega ,pdata 0335 1fe0fffc increase -4 ,pdata 0336 1fe22400 copy pdata ,regb 0337 ea420000 ifetch 4 ,regb 0338 60024b4e store 4 ,mem_write_flash_head_temp 0339 1a627e00 copy regc ,pdata 033a 20406552 call spid_write_flash 033b 68024b4e fetch 4 ,mem_write_flash_head_temp 033c e2420000 istore 4 ,regb 033d 20600000 rtn p_wait_flash_done: 033e 580186a0 setarg 100000 033f 20402a8f call sleep 0340 2040650b call spid_unlock_flash 0341 580001fa setarg mem_spid_rbuf 0342 6011008c hstore 2 ,core_spid_rxaddr 0343 58000005 setarg flash_read_satus 0344 204064f3 call spid_read_reg 0345 c280033e bbit1 flash_status_wip ,p_wait_flash_done 0346 20600000 rtn p_mouse_information_flash_parameters: 0347 5800477f setarg mem_mouse_information_end 0348 d8404720 arg mem_mouse_information_start ,temp 0349 98460400 isub temp ,temp 034a 6801c700 fetch 3 ,mem_flash_base 034b da204720 arg mem_mouse_information_start ,rega 034c 20600000 rtn p_mouse_read_flash: 034d 20400363 call p_flash_release_deep_power_down 034e 20400347 call p_mouse_information_flash_parameters 034f 20206562 branch spid_read_flash p_mouse_load_flash_device_info: 0350 7011c531 jam zcode_31 ,mem_zcode_temp_param0 0351 20200763 branch p_zcode_entrance p_mouse_le_fast_conn_disable: 0352 704b655a jam 0x5a ,mem_mouse_fast_conn_flag 0353 20600000 rtn p_mouse_fast_conn_init: 0354 704b65ff jam 0xff ,mem_mouse_fast_conn_flag 0355 70421034 jam 0x34 ,mem_xrecord_mode 0356 580f0f0f setarg 0x0f0f0f 0357 6001c4a0 store 3 ,mem_le_lap 0358 6001c4a3 store 3 ,mem_le_lap + 3 0359 20600000 rtn p_flash_deep_power_down: 035a 700aa2b9 jam flash_command_deep_power_down ,mem_temp p_spid_write_flash_cmd: 035b 20400305 call p_spid_init_flash 035c 20000064 nop 100 035d 2040650b call spid_unlock_flash 035e da204b4e arg mem_write_flash_head_temp ,rega 035f 68088aa2 fetcht 1 ,mem_temp 0360 20406556 call spid_write_flash_common 0361 20000064 nop 100 0362 20600000 rtn p_flash_release_deep_power_down: 0363 700aa2ab jam flash_command_release_deep_power_down ,mem_temp 0364 2020035b branch p_spid_write_flash_cmd p_mouse_load_random_addr_increase_count: 0365 20400363 call p_flash_release_deep_power_down 0366 d8400002 arg 2 ,temp 0367 da2047c4 arg mem_random_addr_increase_count ,rega 0368 da40005f arg mouse_random_addr_count_eeprom_offset ,regb 0369 6801c700 fetch 3 ,mem_flash_base 036a 9a40fe00 iadd regb ,pdata 036b 20206562 branch spid_read_flash p_mouse_start_24g_mode: 036c 58000000 setarg 0 036d 60014c57 store 2 ,mem_24g_check_dongle_times 036e 202001a4 branch p_g24_start_24g_mode p_mouse_24g_led_blink: 036f 6800c720 fetch 1 ,mem_device_flag 0370 c1810000 rtnne mode_24g_device 0371 6800cb5f fetch 1 ,mem_mouse_24g_pair_timer 0372 207a0000 rtn blank 0373 1fe0ffff increase -1 ,pdata 0374 6000cb5f store 1 ,mem_mouse_24g_pair_timer 0375 203a340a branch app_enter_hibernate ,blank 0376 1fe17e0f and pdata ,0x0f ,pdata 0377 c0028399 beq 0x05 ,p_mouse_24g_led_on 0378 c0050396 beq 0x0a ,p_mouse_24g_led_off 0379 20600000 rtn p_mouse_discovery_led_blink: 037a 6800c6ac fetch 1 ,mem_mouse_discovery_timer 037b 207a0000 rtn blank 037c 6800cb5e fetch 1 ,mem_mouse_discovery_blink_count 037d 1fe0fe01 increase 1 ,pdata 037e 6000cb5e store 1 ,mem_mouse_discovery_blink_count 037f c00283a6 beq 5 ,p_mouse_bt_led_off 0380 c00503a1 beq 10 ,p_mouse_bt_discovery_led_on 0381 20600000 rtn p_mouse_device_poweron_led_timer: 0382 6800cb52 fetch 1 ,mem_mouse_poweron_led_timer 0383 207a0000 rtn blank 0384 1fe0ffff increase -1 ,pdata 0385 6000cb52 store 1 ,mem_mouse_poweron_led_timer 0386 6800c720 fetch 1 ,mem_device_flag 0387 c001038d beq mode_24g_device ,p_mouse_device_poweron_g24_led 0388 6800c6ac fetch 1 ,mem_mouse_discovery_timer 0389 243a03a8 nbranch p_mouse_device_poweron_led_off ,blank 038a 6800cb52 fetch 1 ,mem_mouse_poweron_led_timer 038b c28083a2 bbit1 1 ,p_mouse_bt_led_on 038c 202003a6 branch p_mouse_bt_led_off p_mouse_device_poweron_g24_led: 038d 6800cb52 fetch 1 ,mem_mouse_poweron_led_timer 038e c2808399 bbit1 1 ,p_mouse_24g_led_on 038f 20200396 branch p_mouse_24g_led_off p_mouse_low_voltage_led_on: 0390 6800c720 fetch 1 ,mem_device_flag 0391 c0010399 beq mode_24g_device ,p_mouse_24g_led_on 0392 202003a2 branch p_mouse_bt_led_on p_mouse_low_voltage_led_off: 0393 6800c720 fetch 1 ,mem_device_flag 0394 c0010396 beq mode_24g_device ,p_mouse_24g_led_off 0395 202003a6 branch p_mouse_bt_led_off p_mouse_24g_led_off: 0396 704b4b00 jam 0 ,mem_24g_device_led_status 0397 6808cb4c fetcht 1 ,mem_device_24g_led_gpio 0398 2020057d branch p_gpio_set_input_high_impedance p_mouse_24g_led_on: 0399 704b4b01 jam 1 ,mem_24g_device_led_status 039a 6810807c hfetch 1 ,core_gpio_pd0 039b 793ffe05 set0 5 ,pdata 039c 6010807c hstore 1 ,core_gpio_pd0 039d 6808cb4c fetcht 1 ,mem_device_24g_led_gpio 039e 2040680e call gpio_config_output 039f 6808cb4c fetcht 1 ,mem_device_24g_led_gpio 03a0 20206825 branch gpio_out_inactive p_mouse_bt_discovery_led_on: 03a1 704b5e00 jam 0 ,mem_mouse_discovery_blink_count p_mouse_bt_led_on: 03a2 6808cb4d fetcht 1 ,mem_device_bt_led_gpio 03a3 2040680e call gpio_config_output 03a4 6808cb4d fetcht 1 ,mem_device_bt_led_gpio 03a5 20206829 branch gpio_out_active p_mouse_bt_led_off: 03a6 6808cb4d fetcht 1 ,mem_device_bt_led_gpio 03a7 20200588 branch p_gpio_set_input_pu p_mouse_device_poweron_led_off: 03a8 704b5200 jam 0 ,mem_mouse_poweron_led_timer 03a9 20600000 rtn p_mouse_g24_package_data: 03aa 20404401 call mouse_g24_package_data 03ab 6801469f fetch 2 ,mem_mouse_z 03ac 207a0000 rtn blank p_g24_transmit_by_interrupt_enable: 03ad 704d6a01 jam g24_tx_timer_int_enable ,mem_24g_transmit_by_interrupt 03ae 58000000 setarg 0 03af 60014d6b store 2 ,mem_24g_transmit_by_interrupt_exit_count 03b0 20600000 rtn p_mouse_le_txbuff_save: 03b1 d8c01800 arg mem_le_tx_buffer0 ,contr 03b2 d8a0480c arg mem_le_tx_buffer0_omemalloc ,contw 03b3 204003b9 call p_mouse_le_txbuff_copy 03b4 d8c01900 arg mem_le_tx_buffer1 ,contr 03b5 204003b9 call p_mouse_le_txbuff_copy 03b6 d8c01a00 arg mem_le_tx_buffer2 ,contr 03b7 204003b9 call p_mouse_le_txbuff_copy 03b8 d8c01b00 arg mem_le_tx_buffer3 ,contr p_mouse_le_txbuff_copy: 03b9 df20001b arg 27 ,loopcnt 03ba 20207f01 branch memcpy p_mouse_le_txbuff_load: 03bb d8c0480c arg mem_le_tx_buffer0_omemalloc ,contr 03bc d8a01800 arg mem_le_tx_buffer0 ,contw 03bd 204003b9 call p_mouse_le_txbuff_copy 03be d8a01900 arg mem_le_tx_buffer1 ,contw 03bf 204003b9 call p_mouse_le_txbuff_copy 03c0 d8a01a00 arg mem_le_tx_buffer2 ,contw 03c1 204003b9 call p_mouse_le_txbuff_copy 03c2 d8a01b00 arg mem_le_tx_buffer3 ,contw 03c3 202003b9 branch p_mouse_le_txbuff_copy p_mouse_le: 03c4 20405892 call le_fifo_check_nearly_full 03c5 247a0000 nrtn blank 03c6 6800cb65 fetch 1 ,mem_mouse_fast_conn_flag 03c7 c07f83cb beq 0xff ,p_mouse_le_next 03c8 6800c6c5 fetch 1 ,mem_le_connect_status_flag 03c9 1fe17e03 and pdata ,0x03 ,pdata 03ca c1818000 rtnne 0x03 p_mouse_le_next: 03cb 6800c79e fetch 1 ,mem_mouse_clear_sensor_data_flag 03cc 205a0418 call p_mouse_clear_sensor_data ,blank 03cd 680246d3 fetch mouse_flag_len ,mem_mouse_flag 03ce c282c179 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet 03cf 20403f97 call mouse_motion 03d0 24740000 nrtn user 03d1 204002e0 call p_mouse_current_mult_update 03d2 204002e3 call p_mouse_data_xy_release 03d3 204003ee call p_mouse_wheel_trigger p_mouse_data_push: 03d4 da20469a arg mem_mouse_key ,rega 03d5 20407e3d call queue_push 03d6 205403dd call p_mouse_queue_increase ,user 03d7 20600000 rtn p_mouse_data_init: 03d8 7047a207 jam 7 ,mem_mouse_data_queue 03d9 7047a304 jam 4 ,mem_mouse_data_queue + 1 03da 580047a2 setarg mem_mouse_data_queue 03db 60014218 store 2 ,mem_queue_ptr 03dc 20207e38 branch queue_init p_mouse_queue_increase: 03dd 6800c7c3 fetch 1 ,mem_mouse_data_queue_num 03de 1fe0fe01 increase 1 ,pdata 03df 6000c7c3 store 1 ,mem_mouse_data_queue_num 03e0 20600000 rtn p_mouse_data_pull: 03e1 da20469a arg mem_mouse_key ,rega 03e2 20407e54 call queue_pop 03e3 203403e5 branch p_mouse_fill_data_le ,user 03e4 20600000 rtn p_mouse_fill_data_le: 03e5 20405652 call le_clear_md 03e6 6800c7c3 fetch 1 ,mem_mouse_data_queue_num 03e7 1fe67c01 sub pdata ,1 ,null 03e8 24415650 ncall le_set_md ,positive 03e9 6800c7c3 fetch 1 ,mem_mouse_data_queue_num 03ea 207a0000 rtn blank 03eb 1fe0ffff increase -1 ,pdata 03ec 6000c7c3 store 1 ,mem_mouse_data_queue_num 03ed 20203f90 branch mouse_fill_data_le p_mouse_wheel_trigger: 03ee 6801469f fetch 2 ,mem_mouse_z 03ef 207a0000 rtn blank 03f0 70480801 jam 1 ,mem_mouse_wheel_trigger 03f1 70480902 jam 2 ,mem_mouse_wheel_trigger_timer 03f2 20600000 rtn p_mouse_bt: 03f3 20770000 rtn attempt 03f4 6800c1e2 fetch 1 ,mem_app_handshake_flag 03f5 207a0000 rtn blank 03f6 20405271 call l2cap_malloc_is_fifo_nearly_full 03f7 247a0000 nrtn blank 03f8 6800c79e fetch 1 ,mem_mouse_clear_sensor_data_flag 03f9 205a0418 call p_mouse_clear_sensor_data ,blank 03fa 680246d3 fetch mouse_flag_len ,mem_mouse_flag 03fb c282bf8a bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data 03fc c284bf8a bbit1 mouse_bt_discovery_button_long_down_flag ,mouse_send_empty_data 03fd 20403f97 call mouse_motion 03fe 24740000 nrtn user 03ff 204002e0 call p_mouse_current_mult_update 0400 204002e3 call p_mouse_data_xy_release 0401 204003ee call p_mouse_wheel_trigger 0402 6800cb05 fetch 1 ,mem_mouse_bt_boot_mode 0403 c0008407 beq 1 ,p_mouse_send_data_boot_mode 0404 6800cb0c fetch 1 ,mem_mouse_bt_send_first_package_flag 0405 207a0000 rtn blank 0406 20203f81 branch mouse_send_data p_mouse_send_data_boot_mode: 0407 6800c69a fetch 1 ,mem_mouse_key 0408 6000cb06 store 1 ,mem_mouse_bt_boot_data 0409 6800c69b fetch 1 ,mem_mouse_x 040a e0a08000 istore 1 ,contw 040b 6800c69d fetch 1 ,mem_mouse_y 040c e0a08000 istore 1 ,contw 040d 6801469f fetch 2 ,mem_mouse_z 040e e0a10000 istore 2 ,contw 040f da200007 arg 7 ,rega 0410 20404d63 call hid_malloc_tx_buff 0411 6801424e fetch 2 ,mem_hid_int_remote_cid 0412 e0a10000 istore 2 ,contw 0413 580002a1 setarg 0x02a1 0414 e0a10000 istore 2 ,contw 0415 6802cb06 fetch 5 ,mem_mouse_bt_boot_data 0416 e0a28000 istore 5 ,contw 0417 20600000 rtn p_mouse_clear_sensor_data: 0418 70479e01 jam 1 ,mem_mouse_clear_sensor_data_flag 0419 20405814 call le_set_config_more_data 041a 202002ce branch p_mouse_init_sensor_reset p_mouse_idle: 041b 20407e34 call ui_check_paring_button 041c 2040041e call p_mouse_dpi_check 041d 20203ee0 branch mouse_wheel_check p_mouse_dpi_check: 041e 704b7b05 jam 0x05 ,mem_mouse_key_temp 041f 6808c6e7 fetcht 1 ,mem_dpi_button_gpio 0420 6800cb7a fetch 1 ,mem_mouse_dpikey_press_status 0421 2040053e call p_mouse_check_key 0422 6000cb7a store 1 ,mem_mouse_dpikey_press_status 0423 6808c6e7 fetcht 1 ,mem_dpi_button_gpio 0424 20400588 call p_gpio_set_input_pu 0425 1a227e00 copy rega ,pdata 0426 c2828428 bbit1 5 ,p_mouse_dpi_down 0427 20203d62 branch mouse_dpi_up p_mouse_dpi_down: 0428 6800c6b6 fetch 1 ,mem_mouse_dpi_button_state 0429 c1000000 rtneq dpi_button_state_down 042a 7046b600 jam dpi_button_state_down ,mem_mouse_dpi_button_state 042b 6800c77a fetch 1 ,mem_mouse_dpi 042c 1fe0fe01 increase 1 ,pdata 042d 1fe17e03 and pdata ,0x03 ,pdata 042e 6000c77a store 1 ,mem_mouse_dpi 042f 20403d7e call mouse_seting_dpi 0430 20200321 branch p_mouse_store_flash_device_info p_mouse_priority_bb_event: 0431 1a627e00 copy regc ,pdata 0432 c00a0442 beq bt_evt_le_connected ,p_mouse_le_bb_event_connected 0433 c00a8444 beq bt_evt_le_disconnected ,p_mouse_le_bb_disconnected 0434 c0148446 beq bt_evt_le_enc_info ,p_mouse_le_enc_info 0435 c0190448 beq bt_evt_le_start_enc ,p_mouse_le_ll_start_encryt 0436 c020044a beq bt_evt_le_parse_conn_papa_update_rsp ,p_mouse_le_conn_param_update_rsp_recieved 0437 c002044c beq bt_evt_reconn_failed ,p_mouse_bb_event_reconn_failed 0438 c009844c beq bt_evt_reconn_page_timeout ,p_mouse_bb_event_reconn_timeout 0439 c00cb3df beq bt_evt_switch_not_accept ,app_bt_role_switch 043a c010844e beq bt_evt_sniff_not_accept ,p_mouse_sniff_not_accept 043b c0008450 beq bt_evt_bb_connected ,p_mouse_bb_event_connected 043c c0010453 beq bt_evt_bb_disconnected ,p_mouse_bb_event_disconnected 043d c0158455 beq bt_evt_switch_success_master ,p_mouse_enter_sniff_check 043e c01c8457 beq bt_evt_24g_pairing_complete ,p_mouse_24g_pairing_complete 043f c01d0459 beq bt_evt_24g_attempt_fail ,p_mouse_24g_attempt_fail 0440 c01e045b beq bt_evt_24g_attempt_success ,p_mouse_24g_attempt_success 0441 2020417d branch mouse_priority_bb_event + 1 p_mouse_le_bb_event_connected: 0442 7011c5b0 jam zcode_b0 ,mem_zcode_temp_param0 0443 20200763 branch p_zcode_entrance p_mouse_le_bb_disconnected: 0444 7011c5a2 jam zcode_a2 ,mem_zcode_temp_param0 0445 20200763 branch p_zcode_entrance p_mouse_le_enc_info: p_app_updata_le_param: 0446 700a9912 jam bt_cmd_le_update_conn ,mem_fifo_temp 0447 20207d8f branch ui_ipc_send_cmd p_mouse_le_ll_start_encryt: 0448 7011c5b3 jam zcode_b3 ,mem_zcode_temp_param0 0449 20200763 branch p_zcode_entrance p_mouse_le_conn_param_update_rsp_recieved: 044a 7011c5a1 jam zcode_a1 ,mem_zcode_temp_param0 044b 20200763 branch p_zcode_entrance p_mouse_bb_event_reconn_timeout: p_mouse_bb_event_reconn_failed: 044c 7011c5a3 jam zcode_a3 ,mem_zcode_temp_param0 044d 20200763 branch p_zcode_entrance p_mouse_sniff_not_accept: 044e 7011c5b1 jam zcode_b1 ,mem_zcode_temp_param0 044f 20200763 branch p_zcode_entrance p_mouse_bb_event_connected: 0450 70480b00 jam 0 ,mem_mouse_send_switch_req_timer 0451 204002ce call p_mouse_init_sensor_reset 0452 202042ca branch mouse_stop_discovery p_mouse_bb_event_disconnected: 0453 7011c5b4 jam zcode_b4 ,mem_zcode_temp_param0 0454 20200763 branch p_zcode_entrance p_mouse_enter_sniff_check: 0455 7011c5b2 jam zcode_b2 ,mem_zcode_temp_param0 0456 20200763 branch p_zcode_entrance p_mouse_24g_pairing_complete: 0457 7011c592 jam zcode_92 ,mem_zcode_temp_param0 0458 20200763 branch p_zcode_entrance p_mouse_24g_attempt_fail: 0459 7011c561 jam zcode_61 ,mem_zcode_temp_param0 045a 20200763 branch p_zcode_entrance p_mouse_24g_attempt_success: 045b 204002ce call p_mouse_init_sensor_reset 045c 20203f8d branch mouse_no_data_timer_init p_mouse_before_hibernate: 045d 7011c5a4 jam zcode_a4 ,mem_zcode_temp_param0 045e 20200763 branch p_zcode_entrance p_mouse_sensor_powerdown_check: 045f 6800cb00 fetch 1 ,mem_mouse_init_sensor_reset_flag 0460 207a0000 rtn blank 0461 704b0000 jam 0 ,mem_mouse_init_sensor_reset_flag 0462 202002fe branch p_mouse_sensor_powerdown p_mouse_bb_event_timer: 0463 204004bb call p_mouse_adc_read 0464 20400472 call p_mouse_low_voltage_led_timer 0465 20400498 call p_mouse_wheel_trigger_timer 0466 20404234 call mouse_check_discovery_timeout_timer 0467 2040423a call mouse_check_no_data_timeout_timer 0468 2040049d call p_mouse_current_mult_update_timer 0469 204004a3 call p_mouse_24g_long_sleep_param_update_timer 046a 20400491 call p_mouse_check_direct_timeout_timer 046b 2040048e call p_mouse_le_enable_att_list_timer 046c 20400486 call p_mouse_send_switch_req_timer 046d 20404231 call mouse_check_hid_handshake_timer 046e 20400489 call p_mouse_bt_check_sniff_req_timeout_timer 046f 2040037a call p_mouse_discovery_led_blink 0470 2040036f call p_mouse_24g_led_blink 0471 20200382 branch p_mouse_device_poweron_led_timer p_mouse_low_voltage_led_timer: 0472 680246d3 fetch mouse_flag_len ,mem_mouse_flag 0473 c4020000 rtnbit0 mouse_low_voltage_flag 0474 6800c6ae fetch 1 ,mem_mouse_direct_timer 0475 243a0393 nbranch p_mouse_low_voltage_led_off ,blank 0476 6800c6ac fetch 1 ,mem_mouse_discovery_timer 0477 243a0393 nbranch p_mouse_low_voltage_led_off ,blank 0478 6800cb52 fetch 1 ,mem_mouse_poweron_led_timer 0479 243a0393 nbranch p_mouse_low_voltage_led_off ,blank 047a 6800c6cf fetch 1 ,mem_adc_low_volatage_led_timer_count 047b 1fe0fe01 pincrease 1 047c 6000c6cf store 1 ,mem_adc_low_volatage_led_timer_count 047d 1fe67c14 sub pdata ,20 ,null 047e 24410484 ncall p_mouse_adc_low_volatage_led_timer_count_clean ,positive 047f c0010390 beq 2 ,p_mouse_low_voltage_led_on 0480 c0020393 beq 4 ,p_mouse_low_voltage_led_off 0481 c0030390 beq 6 ,p_mouse_low_voltage_led_on 0482 c0040393 beq 8 ,p_mouse_low_voltage_led_off 0483 20600000 rtn p_mouse_adc_low_volatage_led_timer_count_clean: 0484 7046cf01 jam 1 ,mem_adc_low_volatage_led_timer_count 0485 20200393 branch p_mouse_low_voltage_led_off p_mouse_send_switch_req_timer: 0486 da60480b arg mem_mouse_send_switch_req_timer ,regc 0487 da40637a arg host_create_conn_resend ,regb 0488 2020336d branch timer_single_step p_mouse_bt_check_sniff_req_timeout_timer: 0489 da604b0b arg mem_mouse_bt_send_first_package_timer ,regc 048a da40048c arg p_mouse_bt_send_first_package ,regb 048b 2020336d branch timer_single_step p_mouse_bt_send_first_package: 048c 704b0c01 jam 1 ,mem_mouse_bt_send_first_package_flag 048d 20600000 rtn p_mouse_le_enable_att_list_timer: 048e da6046c6 arg mem_le_start_encrypt_timer ,regc 048f da403d60 arg mouse_le_write_enable ,regb 0490 2020336d branch timer_single_step p_mouse_check_direct_timeout_timer: 0491 da6046ae arg mem_mouse_direct_timer ,regc 0492 da400494 arg p_mouse_check_direct_timeout ,regb 0493 20203374 branch timer_single_step_2b p_mouse_check_direct_timeout: 0494 6800cb65 fetch 1 ,mem_mouse_fast_conn_flag 0495 c07f84aa beq 0xff ,p_mouse_long_button_bt_discovery 0496 204033f6 call app_ble_stop_direct_adv 0497 20204267 branch mouse_check_direct_timeout + 1 p_mouse_wheel_trigger_timer: 0498 da604809 arg mem_mouse_wheel_trigger_timer ,regc 0499 da40049b arg p_mouse_wheel_trigger_disable ,regb 049a 2020336d branch timer_single_step p_mouse_wheel_trigger_disable: 049b 70480800 jam 0 ,mem_mouse_wheel_trigger 049c 20600000 rtn p_mouse_current_mult_update_timer: 049d da604b73 arg mem_mouse_current_mult_timer ,regc 049e da4004a0 arg p_mouse_le_current_mult_reinit ,regb 049f 2020336d branch timer_single_step p_mouse_le_current_mult_reinit: 04a0 6800c7c7 fetch 1 ,mem_lpm_mult_init 04a1 6000c172 store 1 ,mem_lpm_mult 04a2 202004a8 branch p_mouse_long_mult_flag_enable p_mouse_24g_long_sleep_param_update_timer: 04a3 da604b74 arg mem_24g_long_sleep_param_update_timer ,regc 04a4 da4004a6 arg p_mouse_24g_long_sleep_normal_param ,regb 04a5 2020336d branch timer_single_step p_mouse_24g_long_sleep_normal_param: 04a6 580ea600 setarg g24_long_sleep_step2 04a7 6001cc59 store 3 ,mem_24g_enter_hibernate p_mouse_long_mult_flag_enable: 04a8 704b7201 jam 1 ,mem_mouse_long_mult_flag 04a9 20600000 rtn p_mouse_long_button_bt_discovery: 04aa 6808c720 fetcht 1 ,mem_device_flag 04ab 6800c703 fetch 1 ,mem_24g_device_number 04ac 98467c00 isub temp ,null 04ad 20628000 rtn zero 04ae 6800c6ac fetch 1 ,mem_mouse_discovery_timer 04af 247a0000 nrtn blank 04b0 68014682 fetch 2 ,mem_ui_state_map 04b1 2feffe0b isolate1 ui_state_ble_adv ,pdata 04b2 2040c2d4 call mouse_stop_le_adv ,true 04b3 68014682 fetch 2 ,mem_ui_state_map 04b4 2feffe07 isolate1 ui_state_bt_reconnect ,pdata 04b5 2040c392 call mouse_cancel_reconnect ,true 04b6 202043b8 branch mouse_long_button_bt_discovry p_mouse_ready_switch_mode: 04b7 6008c720 storet 1 ,mem_device_flag 04b8 7041bd00 jam 0 ,mem_link_key_exists 04b9 20400321 call p_mouse_store_flash_device_info 04ba 2020437e branch mouse_set_reconnection p_mouse_adc_read: 04bb 6800c6ce fetch 1 ,mem_adc_read_timer 04bc 1fe0fe01 increase 1 ,pdata 04bd 6000c6ce store 1 ,mem_adc_read_timer 04be 1fe67c0a sub pdata ,10 ,null 04bf 204104cd call p_mouse_adc_read_gpio5 ,positive 04c0 244104d1 ncall p_mouse_adc_read_vinlpm ,positive 04c1 204068a8 call adc_init_data 04c2 204004f0 call p_adc_set_mode 04c3 20406908 call vdd_calculate_by_mode 04c4 6001470f store 2 ,mem_mouse_vdd_now_vol 04c5 da204709 arg mem_mouse_vdd_calculate_set ,rega 04c6 204004fa call p_adc_bat_percent_lowpower_out 04c7 6800c231 fetch 1 ,mem_adc_power_flag 04c8 c28104aa bbit1 2 ,p_mouse_long_button_bt_discovery 04c9 c280b40a bbit1 1 ,app_enter_hibernate 04ca c30004e8 bbit0 0 ,p_mouse_adc_no_low_voltage 04cb 704aff01 jam 1 ,mem_mouse_adc_last_low_voltage_flag 04cc 202043e7 branch mouse_adc_low_voltage p_mouse_adc_read_gpio5: 04cd 6800cb4b fetch 1 ,mem_24g_device_led_status 04ce 243a04d1 nbranch p_mouse_adc_read_vinlpm ,blank 04cf 70422d02 jam adc_config_gpio ,mem_adc_config_flag 04d0 20600000 rtn p_mouse_adc_read_vinlpm: 04d1 7046ce00 jam 0 ,mem_adc_read_timer 04d2 70422d00 jam adc_config_vinlpm ,mem_adc_config_flag 04d3 20600000 rtn p_vdd_calculate_by_mode: 04d4 6800c22d fetch 1 ,mem_adc_config_flag 04d5 c00104d7 beq adc_config_gpio ,p_vdd_calculate_io 04d6 2020690a branch vdd_calculate_by_mode + 2 p_vdd_calculate_io: 04d7 68014223 fetch 2 ,mem_1v_adc_io_data 04d8 6809421d fetcht 2 ,mem_0_5_adc_io_data 04d9 da600032 arg 50 ,regc 04da 202004db branch p_vdd_calculate p_vdd_calculate: 04db 98462200 isub temp ,rega 04dc 6801422f fetch 2 ,mem_adc_current_value 04dd 98467e00 isub temp ,pdata 04de 242104e0 nbranch p_vdd_calculate1 ,positive 04df 2020691e branch vdd_calculate + 4 p_vdd_calculate1: 04e0 18427e00 copy temp ,pdata 04e1 6809422f fetcht 2 ,mem_adc_current_value 04e2 98467e00 isub temp ,pdata 04e3 9a267c00 isub rega ,null 04e4 204104e6 call p_vdd_calculate2 ,positive 04e5 2020692a branch vdd_calculate1 + 3 p_vdd_calculate2: 04e6 1a227e00 copy rega ,pdata 04e7 20600000 rtn p_mouse_adc_no_low_voltage: 04e8 204043e9 call mouse_adc_no_low_voltage 04e9 7046cf0c jam 12 ,mem_adc_low_volatage_led_timer_count 04ea 6800caff fetch 1 ,mem_mouse_adc_last_low_voltage_flag 04eb 207a0000 rtn blank 04ec 704aff00 jam 0 ,mem_mouse_adc_last_low_voltage_flag 04ed 6800c6ef fetch 1 ,mem_config_low_voltage_alarm_gpio 04ee 6000c715 store 1 ,mem_mouse_struct_led_gpio 04ef 20204296 branch mouse_led_off p_adc_set_mode: 04f0 6800c22d fetch 1 ,mem_adc_config_flag 04f1 c00104f3 beq adc_config_gpio ,p_adc_check_gpio 04f2 202068ec branch adc_set_mode + 1 p_adc_check_gpio: 04f3 6810807c hfetch 1 ,core_gpio_pd0 04f4 793ffe05 set0 5 ,pdata 04f5 6010807c hstore 1 ,core_gpio_pd0 04f6 7089718f jam 0x8f ,rf_adc_mode 04f7 6800c22e fetch 1 ,mem_adc_channel 04f8 60108973 hstore 1 ,rf_adc_ch 04f9 202068f8 branch read_adc p_adc_bat_percent_lowpower_out: 04fa ea240000 ifetch 8 ,rega 04fb 60040a9a store 8 ,mem_pdatatemp 04fc 6800c22d fetch 1 ,mem_adc_config_flag 04fd c001050b beq adc_config_gpio ,p_adc_check_gpio5 04fe c00004ff beq adc_config_vinlpm ,p_adc_check_vinlpm p_adc_check_vinlpm: 04ff 68010aa0 fetch 2 ,mem_pdatatemp + 6 0500 68090a9c fetcht 2 ,mem_pdatatemp + 2 0501 98467c00 isub temp ,null 0502 24216944 nbranch adc_set_no_power_flag ,positive 0503 20400515 call p_adc_clear_no_power_flag 0504 68090a9e fetcht 2 ,mem_pdatatemp + 4 0505 98467c00 isub temp ,null 0506 24216940 nbranch adc_set_low_power_flag ,positive p_adc_clear_low_power_flag: 0507 6800c231 fetch 1 ,mem_adc_power_flag 0508 793ffe00 set0 0 ,pdata 0509 6000c231 store 1 ,mem_adc_power_flag 050a 20600000 rtn p_adc_check_gpio5: 050b 68094b60 fetcht 2 ,mem_mouse_vdd_0v 050c 68010aa0 fetch 2 ,mem_pdatatemp + 6 050d 98467c00 isub temp ,null 050e 24210519 nbranch p_adc_set_pb_press_flag ,positive 050f 2040051d call p_adc_clear_pb_press_flag 0510 68094b62 fetcht 2 ,mem_mouse_vdd_24g 0511 68010aa0 fetch 2 ,mem_pdatatemp + 6 0512 98467c00 isub temp ,null 0513 24210521 nbranch p_mouse_set_g24_device ,positive 0514 20200525 branch p_mouse_set_bt_device p_adc_clear_no_power_flag: 0515 6808c231 fetcht 1 ,mem_adc_power_flag 0516 793f8401 set0 1 ,temp 0517 6008c231 storet 1 ,mem_adc_power_flag 0518 20600000 rtn p_adc_set_pb_press_flag: 0519 6808c231 fetcht 1 ,mem_adc_power_flag 051a 79200402 set1 2 ,temp 051b 6008c231 storet 1 ,mem_adc_power_flag 051c 20600000 rtn p_adc_clear_pb_press_flag: 051d 6808c231 fetcht 1 ,mem_adc_power_flag 051e 793f8402 set0 2 ,temp 051f 6008c231 storet 1 ,mem_adc_power_flag 0520 20600000 rtn p_mouse_set_g24_device: 0521 6800c720 fetch 1 ,mem_device_flag 0522 c1010000 rtneq mode_24g_device 0523 d8400002 arg mode_24g_device ,temp 0524 202004b7 branch p_mouse_ready_switch_mode p_mouse_set_bt_device: 0525 6800c720 fetch 1 ,mem_device_flag 0526 c1008000 rtneq mode_bt_device1 0527 d8400001 arg mode_bt_device1 ,temp 0528 202004b7 branch p_mouse_ready_switch_mode p_mouse_motion: 0529 78547c00 disable user 052a 58000000 setarg 0 052b 6003469b store 6 ,mem_mouse_x 052c 20403fb5 call mouse_cheak_sensor_data 052d 20404079 call mouse_zwheel 052e 2040407e call mouse_t_zwheel 052f 20400533 call p_mouse_key 0530 24340784 nbranch p_drawing_optima_init ,user 0531 20400787 call p_drawing_optima 0532 20203fa0 branch mouse_motion + 9 p_mouse_key: 0533 20400535 call p_mouse_check_key_gpio 0534 2020409a branch mouse_key + 1 p_mouse_check_key_gpio: 0535 6800c69a fetch 1 ,mem_mouse_key 0536 1fe22200 copy pdata ,rega 0537 20400557 call p_mouse_check_lkey_gpio 0538 2040055d call p_mouse_check_rkey_gpio 0539 20400563 call p_mouse_check_mkey_gpio 053a 20400569 call p_mouse_check_bkkey_gpio 053b 20400570 call p_mouse_check_fwkey_gpio 053c 1a227e00 copy rega ,pdata 053d 20600000 rtn p_mouse_check_key: 053e 6000cb7c store 1 ,mem_mouse_key_status 053f 1fe3fe00 lshift pdata ,pdata 0540 1fe22400 copy pdata ,regb 0541 18422600 copy temp ,regc 0542 6800cb7b fetch 1 ,mem_mouse_key_temp 0543 1fe67c02 sub pdata ,0x02 ,null 0544 20410588 call p_gpio_set_input_pu ,positive 0545 2441057f ncall p_gpio_set_input_pd ,positive 0546 1a620400 copy regc ,temp 0547 2040681d call gpio_get_bit 0548 7920a400 setflag true ,0 ,regb 0549 20400551 call p_mouse_check_press 054a 1a417e07 and regb ,0x07 ,pdata 054b 6808cb7b fetcht 1 ,mem_mouse_key_temp 054c 18420e00 copy temp ,queue 054d 18467c02 sub temp ,0x02 ,null 054e c0038577 beq 0x07 ,p_mouse_key_press 054f c000057a beq 0x00 ,p_mouse_key_release 0550 20600000 rtn p_mouse_check_press: 0551 6808cb7c fetcht 1 ,mem_mouse_key_status 0552 18410401 and_into 0x01 ,temp 0553 1a417e01 and regb ,0x01 ,pdata 0554 98467c00 isub temp ,null 0555 242282e0 nbranch p_mouse_current_mult_update ,zero 0556 20600000 rtn p_mouse_check_lkey_gpio: 0557 704b7b00 jam 0x00 ,mem_mouse_key_temp 0558 6808c6e2 fetcht 1 ,mem_lbutton_gpio 0559 6800cb75 fetch 1 ,mem_mouse_lkey_press_status 055a 2040053e call p_mouse_check_key 055b 6000cb75 store 1 ,mem_mouse_lkey_press_status 055c 20600000 rtn p_mouse_check_rkey_gpio: 055d 704b7b01 jam 0x01 ,mem_mouse_key_temp 055e 6808c6e3 fetcht 1 ,mem_rbutton_gpio 055f 6800cb76 fetch 1 ,mem_mouse_rkey_press_status 0560 2040053e call p_mouse_check_key 0561 6000cb76 store 1 ,mem_mouse_rkey_press_status 0562 20600000 rtn p_mouse_check_mkey_gpio: 0563 704b7b02 jam 0x02 ,mem_mouse_key_temp 0564 6808c6e4 fetcht 1 ,mem_mbutton_gpio 0565 6800cb77 fetch 1 ,mem_mouse_mkey_press_status 0566 2040053e call p_mouse_check_key 0567 6000cb77 store 1 ,mem_mouse_mkey_press_status 0568 20600000 rtn p_mouse_check_bkkey_gpio: 0569 704b7b03 jam 0x03 ,mem_mouse_key_temp 056a 6808c6e5 fetcht 1 ,mem_bk_button_gpio 056b 6800cb78 fetch 1 ,mem_mouse_bkkey_press_status 056c 2040053e call p_mouse_check_key 056d 6000cb78 store 1 ,mem_mouse_bkkey_press_status 056e 6808c6e5 fetcht 1 ,mem_bk_button_gpio 056f 20200588 branch p_gpio_set_input_pu p_mouse_check_fwkey_gpio: 0570 704b7b04 jam 0x04 ,mem_mouse_key_temp 0571 6808c6e6 fetcht 1 ,mem_fw_button_gpio 0572 6800cb79 fetch 1 ,mem_mouse_fwkey_press_status 0573 2040053e call p_mouse_check_key 0574 6000cb79 store 1 ,mem_mouse_fwkey_press_status 0575 6808c6e6 fetcht 1 ,mem_fw_button_gpio 0576 20200588 branch p_gpio_set_input_pu p_mouse_key_press: 0577 2021057b branch p_qset1_rega ,positive p_qset0_rega: 0578 f93fa200 qset0 rega 0579 20600000 rtn p_mouse_key_release: 057a 20210578 branch p_qset0_rega ,positive p_qset1_rega: 057b f9202200 qset1 rega 057c 20600000 rtn p_gpio_set_input_high_impedance: 057d 793f8407 set0 gpio_active_bit ,temp 057e 20206806 branch gpio_set_high_impedance p_gpio_set_input_pd: 057f 793f8407 set0 gpio_active_bit ,temp 0580 d8a08078 arg core_gpio_pu0 ,contw 0581 20406830 call gpio_set_bit 0582 79200407 set1 gpio_active_bit ,temp p_gpio_set_input_pd4: 0583 d8a0807c arg core_gpio_pd0 ,contw 0584 20406830 call gpio_set_bit 0585 793f8407 set0 gpio_active_bit ,temp 0586 d8a08070 arg core_gpio_oe0 ,contw 0587 20206830 branch gpio_set_bit p_gpio_set_input_pu: 0588 79200407 set1 gpio_active_bit ,temp p_gpio_set_input_pu1: 0589 d8a08078 arg core_gpio_pu0 ,contw 058a 20406830 call gpio_set_bit 058b 793f8407 set0 gpio_active_bit ,temp 058c 20200583 branch p_gpio_set_input_pd4 p_mouse_bb_event_discovery_btn: 058d 704b5200 jam 0 ,mem_mouse_poweron_led_timer 058e 280ffe26 isolate1 mark_24g ,mark 058f 204081b1 call p_g24_check_51cmd_stop_24g ,true 0590 2020426d branch mouse_bb_event_discovery_btn + 1 p_mouse_start_discovery: 0591 7011c550 jam zcode_50 ,mem_zcode_temp_param0 0592 20200763 branch p_zcode_entrance p_mouse_stop_discovery: 0593 58000000 setarg 0 0594 600146ac store 2 ,mem_mouse_discovery_timer 0595 6000cb5d store 1 ,mem_mouse_dpi_blink_count 0596 6000c714 store 1 ,mem_mouse_blink_count 0597 6000cb5e store 1 ,mem_mouse_discovery_blink_count 0598 704b4905 jam 5 ,mem_mouse_bt_ble_led_timer 0599 204003a6 call p_mouse_bt_led_off 059a 204002e8 call p_mouse_sensor_poweron 059b 202042cb branch mouse_stop_discovery + 1 p_le_slave_match: 059c 6800c50f fetch 1 ,mem_le_md_count 059d 1fe0fe01 pincrease 1 059e 6000c50f store 1 ,mem_le_md_count 059f c0065395 beq le_md_max_count ,le_slave_cont 05a0 204055aa call le_acknowledge 05a1 2040561e call le_prepare_tx 05a2 20400706 call power_ctrl_start 05a3 2020538f branch le_slave_match + 7 p_le_next_adv_channel: 05a4 68008016 fetch 1 ,mem_le_ch_mapped 05a5 1fe0fe01 increase 1 ,pdata 05a6 60008016 store 1 ,mem_le_ch_mapped 05a7 c1940000 rtnne 40 05a8 70001625 jam 37 ,mem_le_ch_mapped 05a9 20600000 rtn p_le_receive_skip: 05aa 204029bb call save_rssi 05ab 2040006b call p_rssi_signal 05ac 202054a3 branch le_receive_skip + 2 p_le_update_param: 05ad 7011c540 jam zcode_40 ,mem_zcode_temp_param0 05ae 20200763 branch p_zcode_entrance p_le_update_channel_map: 05af 7011c541 jam zcode_41 ,mem_zcode_temp_param0 05b0 20200763 branch p_zcode_entrance p_le_prepare_tx: 05b1 68008456 fetch 1 ,mem_le_arq 05b2 c28285c5 bbit1 wak ,p_le_prepare_tx_wak 05b3 204006f8 call power_ctrl_pac_succ_incrs 05b4 6800c78e fetch 1 ,mem_empty_count 05b5 243a05bb nbranch p_le_send_empyt ,blank 05b6 6800843f fetch 1 ,mem_le_state 05b7 c30205bf bbit0 lestate_encryption ,p_le_tx_4 05b8 680082da fetch 1 ,mem_le_rxbuf + 1 05b9 203a05bf branch p_le_tx_4 ,blank 05ba 20205664 branch le_send_empty p_le_send_empyt: 05bb 6800c78e fetch 1 ,mem_empty_count 05bc 1fe0ffff increase -1 ,pdata 05bd 6000c78e store 1 ,mem_empty_count 05be 20205664 branch le_send_empty p_le_tx_4: 05bf 6800c4c4 fetch 1 ,mem_le_pairing_state 05c0 c08285c2 bne flag_le_pairing_after_auth ,p_in_le_tx_4 05c1 70478e03 jam 3 ,mem_empty_count p_in_le_tx_4: 05c2 20405892 call le_fifo_check_nearly_full 05c3 205a03e1 call p_mouse_data_pull ,blank 05c4 20205622 branch le_prepare_tx + 4 p_le_prepare_tx_wak: 05c5 204005c7 call p_le_check_tx_retransmit_setmd 05c6 202005d3 branch p_le_power_ctrl_pac_succ_decrs p_le_check_tx_retransmit_setmd: 05c7 6800c6c5 fetch 1 ,mem_le_connect_status_flag 05c8 1fe17e03 and pdata ,0x03 ,pdata 05c9 c1818000 rtnne 0x03 05ca 6800c7c3 fetch 1 ,mem_mouse_data_queue_num 05cb 207a0000 rtn blank 05cc 6800c3dd fetch 1 ,mem_le_txlen 05cd 207a0000 rtn blank 05ce 6800c3dc fetch 1 ,mem_le_txheader 05cf 79207e04 set1 md ,pdata 05d0 6000c3dc store 1 ,mem_le_txheader 05d1 20405650 call le_set_md 05d2 20600000 rtn p_le_power_ctrl_pac_succ_decrs: 05d3 202006fc branch power_ctrl_pac_succ_decrs p_mouse_le_reconn_write_enable_timer_reinit: 05d4 6800c7a1 fetch 1 ,mem_mouse_le_reconnect_flag 05d5 207a0000 rtn blank 05d6 6800c6c5 fetch 1 ,mem_le_connect_status_flag 05d7 1fe17e03 and pdata ,0x03 ,pdata 05d8 c1018000 rtneq 0x03 05d9 7046c601 jam 1 ,mem_le_start_encrypt_timer 05da 20600000 rtn p_le_parse: 05db c6078000 rtnmark1 mark_old_packet 05dc 20405890 call le_fifo_check_full 05dd 247a0000 nrtn blank 05de 680082d9 fetch 1 ,mem_le_rxbuf 05df 1fe17e03 and pdata ,0x3 ,pdata 05e0 6000c50c store 1 ,mem_le_packet_llid 05e1 e8c08000 ifetch 1 ,contr 05e2 1fe17e1f and pdata ,0x1f ,pdata 05e3 6000c50b store 1 ,mem_le_packet_size 05e4 207a0000 rtn blank 05e5 18c27e00 copy contr ,pdata 05e6 6001450d store 2 ,mem_le_payload_ptr 05e7 6800c50c fetch 1 ,mem_le_packet_llid 05e8 c00185ea beq llid_le_ll ,p_le_parse_ll 05e9 2020568d branch le_parse_l2cap p_le_parse_ll: 05ea 680082db fetch 1 ,mem_le_rxbuf + 2 05eb c00085ed beq ll_channel_map_req ,p_le_parse_channel_map_req 05ec 20205c65 branch le_parse_ll + 1 p_le_parse_channel_map_req: 05ed e8c28000 ifetch 5 ,contr 05ee 6002c3ce store 5 ,mem_le_new_map 05ef e8c10000 ifetch 2 ,contr 05f0 6001045f store 2 ,mem_le_instant 05f1 20205c8a branch le_parse_channel_map_req + 7 p_le_parse_l2cap: 05f2 e8c10000 ifetch 2 ,contr 05f3 c00205f6 beq le_l2cap_cid_att ,p_le_parse_att 05f4 c0030623 beq le_l2cap_cid_smp ,p_le_parse_smp 05f5 20205698 branch le_parse_l2cap + 11 p_le_parse_att: 05f6 20407ea5 call store_contr 05f7 204005d4 call p_mouse_le_reconn_write_enable_timer_reinit 05f8 20407e9f call get_contr 05f9 e8c18000 ifetch 3 ,contr 05fa 60018477 store 3 ,mem_le_att_opcode 05fb c0080605 beq attop_read_by_group_type_request ,p_le_parse_att_read_by_group_type_request 05fc 1fec8400 rshift8 pdata ,temp 05fd 18467c24 sub temp ,0x24 ,null 05fe 20210613 branch p_le_parse_att1 ,positive 05ff d84047c8 arg mem_mouse_le_uuid_sup ,temp 0600 600944bc storet 2 ,mem_ui_le_uuid_table 0601 204058ad call le_parse_att + 2 0602 58008e7a setarg 0x8e7a 0603 600144bc store 2 ,mem_ui_le_uuid_table 0604 20600000 rtn p_le_parse_att_read_by_group_type_request: 0605 204059fa call le_parse_att_read_by_group_type_request 0606 20405879 call le_fifo_get_last_tx_ptr 0607 18c08c07 increase 7 ,contr 0608 e8c08000 ifetch 1 ,contr 0609 c1888000 rtnne attop_read_by_group_type_response 060a 18c08c05 increase 5 ,contr 060b e8c10000 ifetch 2 ,contr 060c d8401812 arg uuid_service_hids ,temp 060d 98467c00 isub temp ,null 060e 24628000 nrtn zero 060f 18c08dfc increase -4 ,contr 0610 5800002b setarg 0x2b 0611 e0c10000 istore 2 ,contr 0612 20600000 rtn p_le_parse_att1: 0613 c0050615 beq attop_read_request ,p_le_parse_att_read_request 0614 202058ad branch le_parse_att + 2 p_le_parse_att_read_request: 0615 68090478 fetcht 2 ,mem_le_att_handle 0616 6800c4e9 fetch 1 ,mem_le_configuration 0617 c281861c bbit1 bit_ble_read_auth ,p_le_send_att_read_response_check_auth p_le_send_att_read_response: 0618 68010478 fetch 2 ,mem_le_att_handle 0619 c009da76 beq 0x13 ,le_send_att_error_response_notfound 061a 68090478 fetcht 2 ,mem_le_att_handle 061b 202059bf branch le_send_att_read_response p_le_send_att_read_response_check_auth: 061c 680144fa fetch 2 ,mem_le_pairing_handle 061d 98467c00 isub temp ,null 061e 24228618 nbranch p_le_send_att_read_response ,zero 061f 20405a42 call le_check_encrypt_state 0620 24340618 nbranch p_le_send_att_read_response ,user 0621 70047a05 jam att_err_insufficient_authentication ,mem_le_err_code 0622 20205a77 branch le_send_att_error_response p_le_parse_smp: 0623 e8c08000 ifetch 1 ,contr 0624 c0028626 beq smp_pairing_failed ,p_le_parse_smp_pairing_failed 0625 20205af5 branch le_parse_smp + 1 p_le_parse_smp_pairing_failed: 0626 7011c582 jam zcode_82 ,mem_zcode_temp_param0 0627 20200763 branch p_zcode_entrance p_le_adv_not_match: 0628 68008016 fetch 1 ,mem_le_ch_mapped 0629 c093d6f2 bne 39 ,le_adv_loop 062a 2040062e call p_le_adv_random_delay 062b d8e00000 arg le_adv_interval_timer ,queue 062c 68014482 fetch 2 ,mem_le_adv_interval 062d 20207f08 branch timer_init p_le_adv_random_delay: 062e 180a7e00 random pdata 062f d84001ff arg 0x1ff ,temp 0630 98417e00 iand temp ,pdata 0631 1fe0fefa add pdata ,250 ,pdata 0632 20203cbe branch delay p_le_lpm_setmult: 0633 7855fc00 disable wake 0634 20370636 branch p_le_lpm_set_mult_attempt ,attempt 0635 2436d806 nbranch le_lpm_lost ,match p_le_lpm_set_mult_attempt: 0636 20402bcb call lpm_match 0637 680140c1 fetch 2 ,mem_rx_window_sniff 0638 6001044d store 2 ,mem_le_receive_window 0639 6800c6c5 fetch 1 ,mem_le_connect_status_flag 063a 2fe00603 compare 3 ,pdata ,3 063b 2420abde nbranch lpm_mult_short ,true 063c 202057fb branch le_lpm_set_mult_attempt + 3 p_le_mouse_bb_event_connect_complete: 063d 7011c542 jam zcode_42 ,mem_zcode_temp_param0 063e 20200763 branch p_zcode_entrance p_twspi_reset: 063f 68108077 hfetch 1 ,core_gpio_out3 0640 1fe17efd and_into 0xfd ,pdata 0641 60108077 hstore 1 ,core_gpio_out3 0642 68188073 hfetcht 1 ,core_gpio_oe3 0643 18418402 or_into 0x2 ,temp 0644 60188073 hstoret 1 ,core_gpio_oe3 0645 204063ee call twspi_disable 0646 184104fd and_into 0xfd ,temp 0647 2000000d nop 13 0648 2040064c call p_twspi_enable 0649 60188073 hstoret 1 ,core_gpio_oe3 064a 20600000 rtn p_spid_init: 064b 204064dd call spid_init_common p_twspi_enable: 064c 68108081 hfetch 1 ,core_gpio_sel1 064d 79207e00 set1 0 ,pdata 064e 793ffe01 set0 1 ,pdata 064f 793ffe03 set0 3 ,pdata 0650 60108081 hstore 1 ,core_gpio_sel1 0651 20600000 rtn p_page_wait_fhs_reply_ok: 0652 7011c500 jam zcode_00 ,mem_zcode_temp_param0 0653 20200763 branch p_zcode_entrance p_role_switch_master: 0654 204021c9 call role_switch_check 0655 24740000 nrtn user p_wait_role_switch_anchor: 0656 78547c00 disable user 0657 70001120 jam param_newconnto ,mem_newconnto_counter 0658 793f800b set0 mark_fhs_already_good ,mark 0659 793f802d set0 mark_role_switch_receive_fhs ,mark p_roles_waitfhs_loop: 065a 20402a4f call rf_setup_time_master_slot 065b 204022e6 call master_recv_packet 065c c5058661 bmark1 mark_fhs_already_good ,p_roles_replyto_fhs 065d 20402455 call new_conn_timeout 065e 243a065a nbranch p_roles_waitfhs_loop ,blank 065f c5168669 bmark1 mark_role_switch_receive_fhs ,p_roles_replyto_fhs1 0660 202021ec branch role_switch_fail_master p_roles_replyto_fhs: 0661 20402a4d call rf_setup_time_slave_slot 0662 d8200010 arg type_id ,type 0663 204022dc call master_send_packet 0664 7920002d set1 mark_role_switch_receive_fhs ,mark 0665 793f800b set0 mark_fhs_already_good ,mark 0666 18000801 force 1 ,am_addr 0667 70001102 jam 2 ,mem_newconnto_counter 0668 2020065a branch p_roles_waitfhs_loop p_roles_replyto_fhs1: 0669 68020165 fetch 4 ,mem_clke_bt 066a 1fe0fe08 pincrease 8 066b 60020165 store 4 ,mem_clke_bt 066c 202021f8 branch roles_replyto_fhs + 4 p_process_dmh: 066d c516264d bmark1 mark_first_packet ,end_of_packet 066e 2020258f branch process_dmh + 1 p_quit_connection_cont: 066f 7011c543 jam zcode_43 ,mem_zcode_temp_param0 0670 20200763 branch p_zcode_entrance p_prepare_tx: 0671 68008030 fetch 1 ,mem_state 0672 2feffe00 isolate1 state_inconn ,pdata 0673 20408675 call p_bt_power_ctrl ,true 0674 2020248a branch prepare_tx + 1 p_bt_power_ctrl: 0675 68008047 fetch 1 ,mem_arq 0676 2feffe03 isolate1 wack ,pdata 0677 204086fc call power_ctrl_pac_succ_decrs ,true 0678 244086f8 ncall power_ctrl_pac_succ_incrs ,true 0679 20200706 branch power_ctrl_start p_slave_conn_recv_packet: 067a 204024f0 call slave_receive_master_slot 067b 242c28f9 nbranch shutdown_radio ,sync 067c 204029bb call save_rssi 067d 2040006b call p_rssi_signal 067e 20202518 branch slave_conn_recv_packet + 4 p_lpm_dispatch: 067f c6130000 rtnmark1 mark_24g 0680 20402afa call lpo_calibration 0681 6801c16f fetch 3 ,mem_clks_per_lpo 0682 207a0000 rtn blank 0683 6800c091 fetch 1 ,mem_lpm_mode 0684 207a0000 rtn blank 0685 6800c6cf fetch 1 ,mem_adc_low_volatage_led_timer_count 0686 1fe67c0a sub pdata ,10 ,null 0687 20610000 rtn positive 0688 6800c65a fetch 1 ,mem_ssp_enable 0689 203a068c branch p_lpm_dispatch_next ,blank 068a 6800c5b1 fetch 1 ,mem_sp_local_key_invalid 068b 207a0000 rtn blank p_lpm_dispatch_next: 068c 6800c4c0 fetch 1 ,mem_le_sc_calc 068d 247a0000 nrtn blank 068e 20402c3a call lpm_check_wake_lock 068f 247a0000 nrtn blank 0690 6800c040 fetch 1 ,mem_context 0691 2fe00e03 compare 3 ,pdata ,0x7 0692 2420ab9d nbranch lpm_dispatch_unconn ,true 0693 68014042 fetch 2 ,mem_context + coffset_tsniff 0694 d840ffff arg 0xffff ,temp 0695 98467c00 isub temp ,null 0696 20628000 rtn zero 0697 20202b7d branch lpm_dispatch_next + 9 p_lpm_set_mult: 0698 7855fc00 disable wake 0699 68008030 fetch 1 ,mem_state 069a c4008000 rtnbit0 state_insniff 069b 2436abd0 nbranch lpm_not_match ,match 069c 20402bcb call lpm_match 069d 680140c1 fetch 2 ,mem_rx_window_sniff 069e 6001003e store 2 ,mem_rx_window 069f 68008047 fetch 1 ,mem_arq 06a0 c281abde bbit1 wack ,lpm_mult_short 06a1 c586abde bmark0 mark_lpm_mult_enable ,lpm_mult_short 06a2 20405274 call l2cap_malloc_is_fifo_empty 06a3 243a2bde nbranch lpm_mult_short ,blank 06a4 205a06a6 call p_lpm_set_attemp_timeout ,blank 06a5 20202bbe branch lpm_set_mult + 13 p_lpm_set_attemp_timeout: 06a6 70008a01 jam 1 ,mem_current_sniff_attempt 06a7 70008b00 jam 0 ,mem_current_sniff_timeout 06a8 20600000 rtn p_mouse_bb_disconnected: 06a9 7011c501 jam zcode_01 ,mem_zcode_temp_param0 06aa 20200763 branch p_zcode_entrance p_hid_rx_process: 06ab 7011c502 jam zcode_02 ,mem_zcode_temp_param0 06ac 20200763 branch p_zcode_entrance p_parse_lmp_accepted: 06ad 68008552 fetch 1 ,mem_rxbuf + 1 06ae 600084c9 store 1 ,mem_lmi_accepted_opcode 06af c00986b1 beq lmp_switch_req ,p_parse_lmp_accepted_switch 06b0 20205db4 branch parse_lmp_accepted + 3 p_parse_lmp_accepted_switch: 06b1 20405dcf call parse_lmp_accepted_switch 06b2 704b0101 jam 1 ,mem_bt_rcvd_switch_req_accept 06b3 6800cb03 fetch 1 ,mem_bt_send_lmp_setup_complete 06b4 207a0000 rtn blank 06b5 704b0302 jam 2 ,mem_bt_send_lmp_setup_complete 06b6 20600000 rtn p_send_lmp: 06b7 7011c510 jam zcode_10 ,mem_zcode_temp_param0 06b8 20200763 branch p_zcode_entrance p_process_conn_sm: 06b9 204062bc call lmo_fifo_check 06ba 247a0000 nrtn blank p_process_conn_sm_continue: 06bb 68008055 fetch 1 ,mem_conn_sm 06bc 207a0000 rtn blank 06bd c00206db beq conn_sm_send_conn_req ,p_host_create_conn_send_conn_req 06be c00806c0 beq conn_sm_wait_switch_after_host_connection ,p_host_creat_conn_wait_switch 06bf 20206320 branch process_conn_sm_continue + 2 p_host_creat_conn_wait_switch: 06c0 6800c55b fetch 1 ,mem_switch_flag 06c1 c1000000 rtneq switch_flag_init 06c2 c00086c4 beq switch_flag_accept ,p_host_create_conn_switch_accept 06c3 2020635f branch host_creat_conn_wait_switch + 3 p_host_create_conn_switch_accept: 06c4 20748000 rtn master p_host_create_conn_auth_pair: 06c5 6800816d fetch 1 ,mem_connection_options 06c6 c28006c8 bbit1 connection_auth ,p_host_create_conn_auth_pair_true 06c7 20206399 branch host_create_conn_auth_pair + 1 p_host_create_conn_auth_pair_true: 06c8 6800cb03 fetch 1 ,mem_bt_send_lmp_setup_complete 06c9 c000e39d beq 1 ,host_create_conn_auth_pair_true 06ca 6800c1bd fetch 1 ,mem_link_key_exists 06cb 203a63a9 branch host_create_conn_auth_pair_nokey ,blank 06cc 680084d1 fetch 1 ,mem_lmp_conn_state 06cd c4018000 rtnbit0 sent_setup_complete 06ce c4010000 rtnbit0 received_setup_complete 06cf 6800cb02 fetch 1 ,mem_bt_send_max_slot_req_accept_after_switch 06d0 207a0000 rtn blank 06d1 704b0200 jam 0 ,mem_bt_send_max_slot_req_accept_after_switch 06d2 680204e9 fetch 4 ,mem_aurand_send_delay_time 06d3 d8400014 arg 20 ,temp 06d4 98408400 iadd temp ,temp 06d5 1c427e00 copy clkn_bt ,pdata 06d6 98467c00 isub temp ,null 06d7 242106d9 nbranch p_bt_send_max_slot_req_accept_after_switch_wait ,positive 06d8 20206349 branch host_create_conn_auth p_bt_send_max_slot_req_accept_after_switch_wait: 06d9 704b0201 jam 1 ,mem_bt_send_max_slot_req_accept_after_switch 06da 20600000 rtn p_host_create_conn_send_conn_req: 06db 70480b14 jam 20 ,mem_mouse_send_switch_req_timer 06dc 2020636f branch host_create_conn_send_conn_req p_check_51cmd_once_continue: 06dd 204062bc call lmo_fifo_check 06de 243a7ddb nbranch check_51cmd_restore ,blank 06df 68008a99 fetch 1 ,mem_fifo_temp 06e0 c584fdd6 bmark0 mark_context ,check_51cmd_check_idle 06e1 c00f86e8 beq bt_cmd_store_reconn_info_le ,p_flash_store_le_reconn_info 06e2 c01006eb beq bt_cmd_store_reconn_info_bt ,p_flash_store_bd_reconn_info 06e3 c00906e5 beq bt_cmd_le_update_conn ,p_check_51cmd_ble_update_connect_param 06e4 20207dca branch check_51cmd_once_continue + 2 p_check_51cmd_ble_update_connect_param: 06e5 20405890 call le_fifo_check_full 06e6 247a0000 nrtn blank 06e7 20205abf branch le_l2cap_tx_update_req p_flash_store_le_reconn_info: 06e8 70018534 jam rec_4_mode ,mem_record_bt_mode 06e9 6803044f fetch 6 ,mem_le_plap 06ea 202006ed branch p_flash_store_reconn_info p_flash_store_bd_reconn_info: 06eb 70018533 jam rec_3_mode ,mem_record_bt_mode 06ec 68030040 fetch 6 ,mem_plap p_flash_store_reconn_info: 06ed 60030186 store 6 ,mem_temp_lap p_mouse_store_remote_bdaddr: 06ee 680246d3 fetch mouse_flag_len ,mem_mouse_flag 06ef c4038000 rtnbit0 mouse_store_eeprom_flag 06f0 d8e00007 arg mouse_store_eeprom_flag ,queue 06f1 204043d2 call mouse_disable_function_flag 06f2 204042e8 call mouse_check_device_addr p_mouse_unplug_clean_bdaddr: 06f3 204042fb call mouse_before_store_reconn_info 06f4 20200321 branch p_mouse_store_flash_device_info power_ctrl_pac_succ_cnt_init: 06f5 704d6601 jam 1 ,mem_power_ctrl_level 06f6 704d6300 jam 0 ,mem_power_ctrl_pac_succ_cnt 06f7 20600000 rtn power_ctrl_pac_succ_incrs: 06f8 6800cd63 fetch 1 ,mem_power_ctrl_pac_succ_cnt 06f9 1fe0fe01 increase 1 ,pdata 06fa 6000cd63 store 1 ,mem_power_ctrl_pac_succ_cnt 06fb 20600000 rtn power_ctrl_pac_succ_decrs: 06fc 6800cd63 fetch 1 ,mem_power_ctrl_pac_succ_cnt 06fd 1fe67c02 sub pdata ,2 ,null 06fe 24410704 ncall power_ctrl_pac_succ_cnt_reinit ,positive 06ff 6800cd63 fetch 1 ,mem_power_ctrl_pac_succ_cnt 0700 c1000000 rtneq 0 0701 1fe0ffff increase -1 ,pdata 0702 6000cd63 store 1 ,mem_power_ctrl_pac_succ_cnt 0703 20600000 rtn power_ctrl_pac_succ_cnt_reinit: 0704 704d6303 jam 3 ,mem_power_ctrl_pac_succ_cnt 0705 20600000 rtn power_ctrl_start: 0706 68014682 fetch 2 ,mem_ui_state_map 0707 c3858000 rtnbit1 ui_state_ble_adv 0708 c3838000 rtnbit1 ui_state_bt_reconnect 0709 c3830000 rtnbit1 ui_state_bt_discovery 070a da204cec arg mem_rssi_signal_buf ,rega 070b 2040027a call p_rssi_average 070c 6008cd64 storet 1 ,mem_rssi_avg_received 070d 58000082 setarg rssi_dis_max_24g 070e c5130710 bmark1 mark_24g ,power_ctrl_start_next 070f 58000080 setarg rssi_dis_max_ble power_ctrl_start_next: 0710 98467c00 isub temp ,null 0711 24210728 nbranch power_ctrl_txpower_incrs_force ,positive 0712 6800cd63 fetch 1 ,mem_power_ctrl_pac_succ_cnt 0713 1fe67c02 sub pdata ,2 ,null 0714 24210718 nbranch power_ctrl_txpower_decrs_check ,positive 0715 6800cd63 fetch 1 ,mem_power_ctrl_pac_succ_cnt 0716 c0000729 beq 0 ,power_ctrl_txpower_incrs 0717 20600000 rtn power_ctrl_txpower_decrs_check: 0718 6800cd63 fetch 1 ,mem_power_ctrl_pac_succ_cnt 0719 c1900000 rtnne 32 071a 704d6300 jam 0 ,mem_power_ctrl_pac_succ_cnt power_ctrl_txpower_decrs: 071b 6808cd64 fetcht 1 ,mem_rssi_avg_received 071c 58000077 setarg rssi_dis_min_24g 071d c513071f bmark1 mark_24g ,power_ctrl_txpower_decrs_next 071e 58000075 setarg rssi_dis_min_ble power_ctrl_txpower_decrs_next: 071f 98467c00 isub temp ,null 0720 24610000 nrtn positive 0721 6800cd66 fetch 1 ,mem_power_ctrl_level 0722 c0000730 beq 0 ,power_ctrl_decrs_level0 0723 1fe0ffff increase -1 ,pdata 0724 6000cd66 store 1 ,mem_power_ctrl_level 0725 c0000730 beq 0 ,power_ctrl_decrs_level0 power_ctrl_decrs_level1: power_ctrl_incrs_level1: 0726 7041de00 jam tx_power_0db ,mem_tx_power 0727 20600000 rtn power_ctrl_txpower_incrs_force: 0728 704d6300 jam 0 ,mem_power_ctrl_pac_succ_cnt power_ctrl_txpower_incrs: 0729 6800cd66 fetch 1 ,mem_power_ctrl_level 072a c001072e beq 2 ,power_ctrl_incrs_level2 072b 1fe0fe01 increase 1 ,pdata 072c 6000cd66 store 1 ,mem_power_ctrl_level 072d c0008726 beq 1 ,power_ctrl_incrs_level1 power_ctrl_incrs_level2: 072e 7041de02 jam tx_power_5db ,mem_tx_power 072f 20600000 rtn power_ctrl_decrs_level0: 0730 7041de04 jam tx_power_f5db ,mem_tx_power 0731 20600000 rtn p_set_freq_tx: 0732 60088017 storet 1 ,mem_last_freq 0733 1840a200 add temp ,0 ,rega 0734 20402981 call rf_write_freq 0735 58000500 setarg param_pll_setup 0736 20402a8f call sleep p_rf_tx_enable: 0737 70890601 jam 0x1 ,rfen_adc 0738 7089003c jam 0x3c ,rfen_rx 0739 708901e0 jam 0xe0 ,rfen_tx 073a 2000000a nop 10 073b 70890201 jam 0x01 ,rfen_mdm 073c 7089023d jam 0x3d ,rfen_mdm 073d 2000000a nop 10 073e 708903b7 jam 0xb7 ,rfen_sn 073f 2000000a nop 10 0740 7089027d jam 0x7d ,rfen_mdm 0741 6800c1de fetch 1 ,mem_tx_power 0742 c001074a beq tx_power_5db ,p_set_tx_power_5db 0743 c002074f beq tx_power_f5db ,p_set_tx_power_f5db 0744 c010075e beq tx_power_pair ,p_set_tx_power_pair p_set_tx_power_0db: 0745 20400754 call p_rx_low_sens 0746 708955d0 jam 0xd0 ,0x8955 0747 708956e0 jam 0xe0 ,0x8956 0748 7089586c jam 0x6c ,0x8958 0749 2020294b branch set_tx_power_0db p_set_tx_power_5db: 074a 20400759 call p_rx_high_sens 074b 708955d0 jam 0xd0 ,0x8955 074c 708956e0 jam 0xe0 ,0x8956 074d 7089583c jam 0x3c ,0x8958 074e 20202953 branch set_tx_power_5db p_set_tx_power_f5db: 074f 20400754 call p_rx_low_sens 0750 708955d0 jam 0xd0 ,0x8955 0751 708956c0 jam 0xc0 ,0x8956 0752 7089586c jam 0x6c ,0x8958 0753 2020295b branch set_tx_power_f5db p_rx_low_sens: 0754 70894c5b jam 0x5b ,0x894c 0755 70894d96 jam 0x96 ,0x894d 0756 70894e2c jam 0x2c ,0x894e 0757 70894f46 jam 0x46 ,0x894f 0758 20600000 rtn p_rx_high_sens: 0759 70894cfb jam 0xfb ,0x894c 075a 70894def jam 0xef ,0x894d 075b 70894eec jam 0xec ,0x894e 075c 70894f5e jam 0x5e ,0x894f 075d 20600000 rtn p_set_tx_power_pair: 075e 708956c2 jam 0xc2 ,0x8956 075f 708955d0 jam 0xd0 ,0x8955 0760 20600000 rtn p_shutdown_radio: 0761 18002a08 force 8 ,radio_ctrl 0762 202028fa branch shutdown_radio + 1 p_zcode_entrance: 0763 680891c5 fetcht 1 ,mem_zcode_temp_param0 0764 18518400 rshift4 temp ,temp 0765 6800cb96 fetch 1 ,mem_zcode_current_number 0766 98467c00 isub temp ,null 0767 20228782 branch p_zcode_run ,zero 0768 6008cb96 storet 1 ,mem_zcode_current_number 0769 18408401 increase 1 ,temp 076a 58000100 setarg zcode_buff_size 076b 984f8400 imul32 temp ,temp 076c 6801cb97 fetch 3 ,mem_xip_flash_offset 076d 98467e00 isub temp ,pdata 076e 6809cb9a fetcht 3 ,mem_flash_start_addr 076f 9840fe00 iadd temp ,pdata 0770 1fe0fffb increase -5 ,pdata 0771 6001cb9d store 3 ,mem_flash_address 0772 20400363 call p_flash_release_deep_power_down p_zcode_read_loop: 0773 6801cb9d fetch 3 ,mem_flash_address 0774 d8400100 arg zcode_buff_size ,temp 0775 da201f00 arg mem_zcode_buff ,rega 0776 20406562 call spid_read_flash 0777 68021f00 fetch 4 ,mem_zcode_buff 0778 680a4ba0 fetcht 4 ,mem_zcode_head 0779 98467c00 isub temp ,null 077a 24228773 nbranch p_zcode_read_loop ,zero 077b 204002c4 call p_mouse_spi_init 077c 58001f00 setarg mem_zcode_buff 077d 60014199 store 2 ,mem_patch_ptr 077e 70419b40 jam zcode_code_size ,mem_patch_len 077f 204064ca call load_ucode 0780 58000000 setarg 0 0781 60024199 store 4 ,mem_patch_ptr p_zcode_run: 0782 680091c5 fetch 1 ,mem_zcode_temp_param0 0783 20200001 branch p_zcode p_drawing_optima_init: 0784 df200005 arg 5 ,loopcnt 0785 d8a04b0d arg mem_mouse_asm_flag ,contw 0786 20207ed4 branch clear_mem p_drawing_optima: 0787 6802469b fetch 4 ,mem_mouse_x 0788 207a0000 rtn blank 0789 204007d8 call p_data_abs_check 078a 58000006 setarg 0x06 078b 204007cb call p_data_greater_than_check 078c 58000003 setarg 0x03 078d 204007d1 call p_data_less_than_check 078e 6800cb0d fetch 1 ,mem_mouse_asm_flag 078f c0008791 beq 1 ,p_drawing_optima_modify 0790 20200784 branch p_drawing_optima_init p_drawing_optima_modify: 0791 68014b0e fetch 2 ,mem_mouse_x_pre 0792 600111be store 2 ,mem_data_pre 0793 6801469b fetch 2 ,mem_mouse_x 0794 600111c0 store 2 ,mem_data_current 0795 204007a4 call p_drawing_optima_data 0796 680111be fetch 2 ,mem_data_pre 0797 60014b0e store 2 ,mem_mouse_x_pre 0798 680111c0 fetch 2 ,mem_data_current 0799 6001469b store 2 ,mem_mouse_x 079a 68014b10 fetch 2 ,mem_mouse_y_pre 079b 600111be store 2 ,mem_data_pre 079c 6801469d fetch 2 ,mem_mouse_y 079d 600111c0 store 2 ,mem_data_current 079e 204007a4 call p_drawing_optima_data 079f 680111be fetch 2 ,mem_data_pre 07a0 60014b10 store 2 ,mem_mouse_y_pre 07a1 680111c0 fetch 2 ,mem_data_current 07a2 6001469d store 2 ,mem_mouse_y 07a3 20600000 rtn p_drawing_optima_data: 07a4 680111be fetch 2 ,mem_data_pre 07a5 680911c0 fetcht 2 ,mem_data_current 07a6 9840fe00 iadd temp ,pdata 07a7 600191c2 store 3 ,mem_data_sum 07a8 2feffe10 isolate1 16 ,pdata 07a9 202087b1 branch p_data_sum_overflow ,true 07aa 680091c3 fetch 1 ,mem_data_sum + 1 07ab c07f87b8 beq 0xff ,p_data_sum_n 07ac 680091c2 fetch 1 ,mem_data_sum p_data_store_pre: 07ad 1fe37e00 rshift pdata ,pdata 07ae 600111be store 2 ,mem_data_pre 07af 600111c0 store 2 ,mem_data_current 07b0 20600000 rtn p_data_sum_overflow: 07b1 680091c3 fetch 1 ,mem_data_sum + 1 07b2 c00007b5 beq 0 ,p_data_sum_overflow_p 07b3 680191c2 fetch 3 ,mem_data_sum 07b4 202007ad branch p_data_store_pre p_data_sum_overflow_p: 07b5 7011c400 jam 0 ,mem_data_sum + 2 07b6 680091c2 fetch 1 ,mem_data_sum 07b7 202007ad branch p_data_store_pre p_data_sum_n: 07b8 680091c2 fetch 1 ,mem_data_sum 07b9 204007c3 call p_pdata_get_half 07ba 600091be store 1 ,mem_data_pre 07bb 600091c0 store 1 ,mem_data_current 07bc 203a07c1 branch p_data_zero ,blank 07bd 580000ff setarg 0xff p_data_set_direction: 07be 600091bf store 1 ,mem_data_pre + 1 07bf 600091c1 store 1 ,mem_data_current + 1 07c0 20600000 rtn p_data_zero: 07c1 58000000 setarg 0 07c2 202007be branch p_data_set_direction p_pdata_get_half: 07c3 1fe67e00 sub pdata ,0 ,pdata 07c4 60008aae store 1 ,mem_rega 07c5 68008aae fetch 1 ,mem_rega 07c6 1fe37e00 rshift pdata ,pdata 07c7 60008aae store 1 ,mem_rega 07c8 68008aae fetch 1 ,mem_rega 07c9 1fe67e00 sub pdata ,0 ,pdata 07ca 20600000 rtn p_data_greater_than_check: 07cb 9a267c00 isub rega ,null 07cc 242107d6 nbranch p_enable_asm ,positive 07cd 9a467c00 isub regb ,null 07ce 242107d6 nbranch p_enable_asm ,positive p_disable_asm: 07cf 704b0d00 jam 0 ,mem_mouse_asm_flag 07d0 20600000 rtn p_data_less_than_check: 07d1 9a267c00 isub rega ,null 07d2 24610000 nrtn positive 07d3 9a467c00 isub regb ,null 07d4 24610000 nrtn positive 07d5 202007cf branch p_disable_asm p_enable_asm: 07d6 704b0d01 jam 1 ,mem_mouse_asm_flag 07d7 20600000 rtn p_data_abs_check: 07d8 6801469b fetch 2 ,mem_mouse_x 07d9 600111c0 store 2 ,mem_data_current 07da 204007e1 call p_data_abs 07db 1fe22200 copy pdata ,rega 07dc 6801469d fetch 2 ,mem_mouse_y 07dd 600111c0 store 2 ,mem_data_current 07de 204007e1 call p_data_abs 07df 1fe22400 copy pdata ,regb 07e0 20600000 rtn p_data_abs: 07e1 680091c1 fetch 1 ,mem_data_current + 1 07e2 c07f87e6 beq 0xff ,p_data_reversal 07e3 680091c0 fetch 1 ,mem_data_current p_data_abs_store: 07e4 1fe17eff and_into 0xff ,pdata 07e5 20600000 rtn p_data_reversal: 07e6 680111c0 fetch 2 ,mem_data_current 07e7 1fe67e00 sub pdata ,0 ,pdata 07e8 202007e4 branch p_data_abs_store org 0x2000 start: 2000 20402abc call lpmstate soft_reset: 2001 44804000 bpatch patch00_0 ,mem_patch00 2002 20800000 clear_stack 2003 2040640d call spi_ncs_gpio_init 2004 2040296c call initialize_radio 2005 204065a3 call iicd_init_12m 2006 20402a96 call init_param 2007 20404d6a call l2cap_init 2008 4480c000 bpatch patch00_1 ,mem_patch00 2009 20406a03 call rfcomm_init 200a 20405cf6 call init_lmp 200b 20407ccc call ui_init 200c 204032d8 call app_init 200d 2455e89c ncall load_chip_option ,wake 200e 44814000 bpatch patch00_2 ,mem_patch00 200f 2055b2e3 call app_lpm_init ,wake 2010 2040756a call publickey_init 2011 2055ab41 call lpm_recover_clk ,wake main_loop: 2012 4481c000 bpatch patch00_3 ,mem_patch00 2013 204076dc call sp_calc_sequence 2014 20407aaf call sp_calc_sequence_256 2015 2040756d call sp_calc_sequence_256_check 2016 2040535c call le_dispatch 2017 44824000 bpatch patch00_4 ,mem_patch00 2018 20402038 call idle_dispatch 2019 204032ed call app_process_idle 201a 2040208f call inquiry_dispatch 201b 204022f8 call inquiry_scan_dispatch 201c 2040236a call page_scan_dispatch 201d 20402021 call connection_dispatch 201e 20402b6a call lpm_dispatch 201f 20402c72 call g24_dispatch 2020 20202012 branch main_loop connection_dispatch: 2021 20402026 call connection_incontext 2022 c6848000 rtnmark0 mark_context 2023 793f8009 set0 mark_context ,mark 2024 20402223 call context_save 2025 202053ce branch le_disable connection_incontext: 2026 4482c000 bpatch patch00_5 ,mem_patch00 2027 2040225e call context_search_insniff 2028 2422a02f nbranch connection_nosniff ,zero 2029 2040220a call context_load 202a 1a208c01 add rega ,coffset_mode ,contr 202b e8c08000 ifetch 1 ,contr 202c c2805360 bbit1 mode_le ,le_conn_dispatch 202d c280a166 bbit1 mode_master ,master_dispatch 202e 202023cf branch slave_dispatch connection_nosniff: 202f 2040222b call context_get_next 2030 1f227c00 copy loopcnt ,null 2031 20628000 rtn zero 2032 2040220a call context_load 2033 68008030 fetch 1 ,mem_state 2034 c281a0d3 bbit1 state_inpage ,master_page 2035 68008031 fetch 1 ,mem_mode 2036 c280a166 bbit1 mode_master ,master_dispatch 2037 202023cf branch slave_dispatch idle_dispatch: 2038 6800c1ce fetch 1 ,mem_hci_cmd 2039 207a0000 rtn blank 203a c000a048 beq hci_cmd_inquiry ,idle_inquiry 203b c001204d beq hci_cmd_inquiry_cancel ,idle_inquiry_cancel 203c c001a050 beq hci_cmd_remote_name_req ,idle_remote_name_req 203d c002a055 beq hci_cmd_create_conn ,idle_create_conn 203e c00da045 beq hci_cmd_le_create_conn ,idle_le_create_conn 203f 20402257 call context_search_conn_handle 2040 20628000 rtn zero 2041 2040225a call context_search_plap 2042 20628000 rtn zero idle_exit: 2043 7041ce00 jam 0 ,mem_hci_cmd 2044 20600000 rtn idle_le_create_conn: 2045 70049b1b jam hci_cmd_le_create_conn ,mem_cmd_le_create_conn 2046 7041ce00 jam 0 ,mem_hci_cmd 2047 20600000 rtn idle_inquiry: 2048 7920001c set1 mark_inquiry_on ,mark 2049 793f801e set0 mark_inquiry_trainb ,mark 204a 70008fff jam param_ninquiry ,mem_ninqy_index 204b 70008d1f jam 31 ,mem_nfreq_index_inq 204c 20202043 branch idle_exit idle_inquiry_cancel: 204d 793f801c set0 mark_inquiry_on ,mark 204e 18003600 force 0 ,stop_watch 204f 20202043 branch idle_exit idle_remote_name_req: 2050 2040225a call context_search_plap 2051 20628000 rtn zero 2052 18000401 force lmp_name_req ,temp 2053 70016e05 jam 5 ,mem_nameres_cnt 2054 2020205c branch idle_start_page idle_create_conn: 2055 44834000 bpatch patch00_6 ,mem_patch00 idle_create_conn_device: 2056 680341d0 fetch 6 ,mem_hci_plap 2057 203a2043 branch idle_exit ,blank 2058 70468101 jam reconnect_hid ,memui_reconnect_mode 2059 70005503 jam conn_sm_wait_features_res ,mem_conn_sm 205a 2020205b branch idle_create_conn_cont idle_create_conn_cont: 205b 18000425 force lmp_version_req ,temp idle_start_page: 205c 4483c000 bpatch patch00_7 ,mem_patch00 205d 680080f1 fetch 1 ,mem_page_mode 205e 203a2062 branch idle_page_mode_r0 ,blank 205f 1fe9fe00 lshift3 pdata ,pdata 2060 1ff27e00 lshift4 pdata ,pdata 2061 1fe0ffff increase -1 ,pdata idle_page_mode_r0: 2062 6000c0a6 store 1 ,mem_npage 2063 600080f0 store 1 ,mem_npage_index 2064 70008e1f jam 31 ,mem_nfreq_index_page 2065 793f800c set0 mark_page_trainb ,mark 2066 2040223b call context_new 2067 2422a083 nbranch idle_page_fail ,zero 2068 20402a6f call get_free_amaddr 2069 60008077 store 1 ,mem_amaddr 206a 6008807c storet 1 ,mem_lmo_opcode2 206b 680341d0 fetch 6 ,mem_hci_plap 206c 60030040 store 6 ,mem_plap 206d 44844001 bpatch patch01_0 ,mem_patch01 206e 20407f15 call timer_reinit 206f 18007e00 force 0 ,pdata 2070 2841fe01 compare lmp_name_req ,temp ,0xff 2071 7d20fe05 nsetflag true ,state_init_seq ,pdata 2072 79207e03 set1 state_inpage ,pdata 2073 60008030 store 1 ,mem_state 2074 700a9903 jam bt_evt_reconn_started ,mem_fifo_temp 2075 20407d86 call ui_ipc_send_event 2076 18007e00 force 0 ,pdata 2077 7920fe04 setflag true ,smap_name_req ,pdata 2078 6000804c store 1 ,mem_state_map 2079 58000000 setarg 0 207a 79207e01 set1 mode_master ,pdata 207b 60008031 store 1 ,mem_mode 207c 7834fc00 enable master 207d 20402223 call context_save 207e 7854fc00 disable master 207f 18000e03 force page_length_timer ,queue 2080 680140b9 fetch 2 ,mem_page_to 2081 20407f08 call timer_init 2082 20202043 branch idle_exit idle_page_fail: 2083 4484c001 bpatch patch01_1 ,mem_patch01 2084 680341d0 fetch 6 ,mem_hci_plap 2085 60030040 store 6 ,mem_plap 2086 2841fe01 compare lmp_name_req ,temp ,0xff 2087 2020a089 branch idle_name_fail ,true 2088 20202043 branch idle_exit idle_name_fail: 2089 d8a00101 arg mem_tmp_buffer ,contw 208a df200008 arg 8 ,loopcnt 208b 20407ec6 call memset0 208c 700a9904 jam bt_evt_reconn_failed ,mem_fifo_temp 208d 20407d86 call ui_ipc_send_event 208e 20202043 branch idle_exit inquiry_dispatch: 208f c68e0000 rtnmark0 mark_inquiry_on 2090 18000e01 force inquiry_length_timer ,queue 2091 20407f16 call timer_check 2092 7d3a001c nsetflag blank ,mark_inquiry_on ,mark 2093 243a2095 nbranch inquiry_start ,blank 2094 20600000 rtn inquiry_start: 2095 44854001 bpatch patch01_2 ,mem_patch01 2096 680940bb fetcht 2 ,mem_inq_window 2097 18000e04 force 4 ,queue 2098 2040271c call sniff_check_window 2099 20740000 rtn user 209a 204028a4 call afh_clear 209b 18004800 force 0 ,freq_mode inquiry_restart: 209c 20618000 rtn timeout 209d 793f800b set0 mark_fhs_already_good ,mark 209e 793f8000 set0 mark_fhs_eir ,mark inquiry_rx_restart: 209f 1c40c201 add clkn_bt ,1 ,bt_clk 20a0 280ffe1e isolate1 mark_inquiry_trainb ,mark 20a1 7920c802 setflag true ,2 ,freq_mode 20a2 2c200400 compare 0x00 ,bt_clk ,0x02 20a3 2420a0be nbranch inquiry_receive ,true inquiry_transmit: 20a4 4485c001 bpatch patch01_3 ,mem_patch01 20a5 68008012 fetch 1 ,mem_inquiry_transmit 20a6 1fe0fe01 increase 1 ,pdata 20a7 60008012 store 1 ,mem_inquiry_transmit 20a8 204028d8 call fetch_giac 20a9 204028d2 call tx_radio_freq 20aa 204028f2 call fetch_diac 20ab 20402a51 call start_transmitter 20ac 20402a56 call start_tx_native 20ad 20402a64 call send_access_word 20ae 2040264d call end_of_packet 20af 204020b1 call inquiry_check_train 20b0 2020209c branch inquiry_restart inquiry_check_train: 20b1 44864001 bpatch patch01_4 ,mem_patch01 20b2 6800808d fetch 1 ,mem_nfreq_index_inq 20b3 1fe0ffff increase -1 ,pdata 20b4 6000808d store 1 ,mem_nfreq_index_inq 20b5 20610000 rtn positive 20b6 70008d1f jam 31 ,mem_nfreq_index_inq 20b7 6800808f fetch 1 ,mem_ninqy_index 20b8 1fe0ffff increase -1 ,pdata 20b9 6000808f store 1 ,mem_ninqy_index 20ba 20610000 rtn positive 20bb 7940001e setflip mark_inquiry_trainb ,mark 20bc 70008fff jam param_ninquiry ,mem_ninqy_index 20bd 20600000 rtn inquiry_receive: 20be 4486c001 bpatch patch01_5 ,mem_patch01 20bf 204028d8 call fetch_giac 20c0 204028cc call rx_radio_freq 20c1 204028f2 call fetch_diac 20c2 20402a5b call start_rx_native 20c3 204029eb call start_receiver 20c4 20402a0d call wait_access_clkn_rt 20c5 202c20c8 branch inquiry_sync ,sync 20c6 204020b1 call inquiry_check_train 20c7 2020209f branch inquiry_rx_restart inquiry_sync: 20c8 44874001 bpatch patch01_6 ,mem_patch01 20c9 204029bb call save_rssi 20ca 20402a6b call scan_mode_whiten 20cb 2040251e call receive_packet_whitened 20cc 793f8001 set0 mark_rxbuf_inuse ,mark 20cd c6858000 rtnmark0 mark_fhs_already_good inquiry_receive_rtn: 20ce 4487c001 bpatch patch01_7 ,mem_patch01 inquiry_receive_eir_rtn: 20cf 68008013 fetch 1 ,mem_inquiry_rcv 20d0 1fe0fe01 increase 1 ,pdata 20d1 60008013 store 1 ,mem_inquiry_rcv 20d2 20600000 rtn master_page: 20d3 44884002 bpatch patch02_0 ,mem_patch02 20d4 7834fc00 enable master 20d5 78387c00 enable clknt 20d6 680140b5 fetch 2 ,mem_page_interval 20d7 203a20db branch master_page_no_interval ,blank 20d8 18000e08 force page_interval_timer ,queue 20d9 20407f16 call timer_check 20da 247a0000 nrtn blank master_page_no_interval: 20db 4488c002 bpatch patch02_1 ,mem_patch02 20dc 680940b7 fetcht 2 ,mem_page_window 20dd 18000e28 force 40 ,queue 20de 2040271c call sniff_check_window 20df 20342114 branch page_exit ,user 20e0 18000e03 force page_length_timer ,queue 20e1 20407f16 call timer_check 20e2 243a20f0 nbranch page_start ,blank 20e3 6800804c fetch 1 ,mem_state_map 20e4 c28220e6 bbit1 smap_name_req ,master_npage_timeout 20e5 202020e9 branch master_page_timeout master_npage_timeout: 20e6 d8a00101 arg mem_tmp_buffer ,contw 20e7 df200008 arg 8 ,loopcnt 20e8 20407ec6 call memset0 master_page_timeout: 20e9 44894002 bpatch patch02_2 ,mem_patch02 20ea 70003000 jam 0 ,mem_state 20eb 20405cf7 call init_lmp_work 20ec 70468100 jam 0 ,memui_reconnect_mode 20ed 700a9913 jam bt_evt_reconn_page_timeout ,mem_fifo_temp 20ee 20407d86 call ui_ipc_send_event 20ef 20202114 branch page_exit page_start: 20f0 4489c002 bpatch patch02_3 ,mem_patch02 20f1 18001600 force 0 ,timeup 20f2 34730200 until clkn_rt ,meet 20f3 680080f2 fetch 1 ,mem_page_clk 20f4 1fe0ffff increase -1 ,pdata 20f5 9c42fe00 ixor clkn_bt ,pdata 20f6 2fe00600 compare 0 ,pdata ,3 20f7 2420a0f0 nbranch page_start ,true 20f8 18827e00 deposit am_addr 20f9 60008181 store 1 ,mem_fhs_am_addr 20fa 18004c00 force 0 ,n_tx_slot 20fb 18004800 force 0 ,freq_mode page_restart: 20fc 448a4002 bpatch patch02_4 ,mem_patch02 20fd 2021a114 branch page_exit ,timeout 20fe 204028dc call fetch_page_bt_adr 20ff d9600600 arg param_rf_setup ,timeup 2100 34730200 until clkn_rt ,meet page_rx_restart: 2101 448ac002 bpatch patch02_5 ,mem_patch02 2102 680200f2 fetch 4 ,mem_page_clk 2103 98004200 iforce bt_clk 2104 1fe0fe01 increase 1 ,pdata 2105 600200f2 store 4 ,mem_page_clk 2106 280ffe0c isolate1 mark_page_trainb ,mark 2107 7920c802 setflag true ,2 ,freq_mode 2108 2c200400 compare 0x00 ,bt_clk ,0x02 2109 2420a128 nbranch page_receive ,true 210a 6800800c fetch 1 ,mem_page_transmit 210b 1fe0fe01 increase 1 ,pdata 210c 6000800c store 1 ,mem_page_transmit 210d 204028d2 call tx_radio_freq 210e 20402a51 call start_transmitter 210f 20402a56 call start_tx_native 2110 20402a64 call send_access_word 2111 2040264d call end_of_packet 2112 2040211a call page_check_train 2113 202020fc branch page_restart page_exit: 2114 448b4002 bpatch patch02_6 ,mem_patch02 2115 7854fc00 disable master 2116 680140b5 fetch 2 ,mem_page_interval 2117 207a0000 rtn blank 2118 18000e08 force page_interval_timer ,queue 2119 20207f08 branch timer_init page_check_train: 211a 448bc002 bpatch patch02_7 ,mem_patch02 211b 6800808e fetch 1 ,mem_nfreq_index_page 211c 1fe0ffff increase -1 ,pdata 211d 6000808e store 1 ,mem_nfreq_index_page 211e 20610000 rtn positive 211f 70008e1f jam 31 ,mem_nfreq_index_page 2120 680080f0 fetch 1 ,mem_npage_index 2121 1fe0ffff increase -1 ,pdata 2122 600080f0 store 1 ,mem_npage_index 2123 20610000 rtn positive 2124 7940000c setflip mark_page_trainb ,mark 2125 6800c0a6 fetch 1 ,mem_npage 2126 600080f0 store 1 ,mem_npage_index 2127 20600000 rtn page_receive: 2128 448c4003 bpatch patch03_0 ,mem_patch03 2129 204028cc call rx_radio_freq 212a 20402a5b call start_rx_native 212b 204029eb call start_receiver 212c 20402a0d call wait_access_clkn_rt 212d 202c2130 branch page_sync ,sync 212e 2040211a call page_check_train 212f 20202101 branch page_rx_restart page_sync: 2130 2040264d call end_of_packet 2131 6800800d fetch 1 ,mem_page_rcv 2132 1fe0fe01 increase 1 ,pdata 2133 6000800d store 1 ,mem_page_rcv 2134 18003600 force 0 ,stop_watch 2135 680200f2 fetch 4 ,mem_page_clk page_send_fhs: 2136 448cc003 bpatch patch03_1 ,mem_patch03 2137 20402a4f call rf_setup_time_master_slot 2138 204028dc call fetch_page_bt_adr 2139 1cc0cc01 increase 1 ,n_tx_slot page_send_fhs_continue: 213a 1c2143fd and_into 0x1fd ,bt_clk 213b 1c8149fc and_into 0x1fc ,freq_mode 213c 204028d2 call tx_radio_freq 213d 20402a51 call start_transmitter 213e 20402a56 call start_tx_native 213f 20402a64 call send_access_word 2140 1c427e00 deposit clkn_bt 2141 60020161 store 4 ,mem_clkn_bt 2142 18000800 force 0 ,am_addr 2143 18000202 force type_fhs ,type 2144 20402a6b call scan_mode_whiten 2145 20402766 call transmit_packet_whitened page_wait_fhs_reply: 2146 448d4003 bpatch patch03_2 ,mem_patch03 2147 20402a4d call rf_setup_time_slave_slot 2148 1c21c202 or_into 0x02 ,bt_clk 2149 1c8149fc and_into 0x1fc ,freq_mode 214a 204028cc call rx_radio_freq 214b 20402a5b call start_rx_native 214c 204029eb call start_receiver 214d 20402a0d call wait_access_clkn_rt 214e 204c264d call end_of_packet ,sync 214f 202c2155 branch page_wait_fhs_reply_ok ,sync 2150 68008010 fetch 1 ,mem_fhs_wait_counter 2151 203a20fc branch page_restart ,blank 2152 1fe0ffff increase -1 ,pdata 2153 60008010 store 1 ,mem_fhs_wait_counter 2154 20202136 branch page_send_fhs page_wait_fhs_reply_ok: 2155 448dc003 bpatch patch03_3 ,mem_patch03 2156 6800800e fetch 1 ,mem_page_rcv_fhs 2157 1fe0fe01 increase 1 ,pdata 2158 6000800e store 1 ,mem_page_rcv_fhs 2159 20402435 call prepare_newconn master_newconn_loop: 215a 204022f2 call master_newconn_once 215b 202c215f branch newconn_poll_responded ,sync 215c 20402455 call new_conn_timeout 215d 243a215a nbranch master_newconn_loop ,blank 215e 202020fc branch page_restart newconn_poll_responded: 215f 448e4003 bpatch patch03_4 ,mem_patch03 2160 68008030 fetch 1 ,mem_state 2161 793ffe03 set0 state_inpage ,pdata 2162 60008030 store 1 ,mem_state 2163 20402440 call newconn_init 2164 7854fc00 disable master 2165 20600000 rtn master_dispatch: 2166 448ec003 bpatch patch03_5 ,mem_patch03 2167 7834fc00 enable master 2168 78387c00 enable clknt 2169 204021e1 call role_switch_master 216a 20740000 rtn user 216b 20402c69 call check_bt_disabled 216c 20402a4f call rf_setup_time_master_slot 216d 1c40c201 add clkn_bt ,1 ,bt_clk 216e 204028e2 call fetch_self_bt_adr 216f 18004803 force 0x03 ,freq_mode 2170 20406cc2 call scheduler_tx_l2cap_pkt 2171 20402489 call prepare_tx 2172 204028d2 call tx_radio_freq 2173 20402a51 call start_transmitter 2174 20402a56 call start_tx_native 2175 20402a64 call send_access_word 2176 20402762 call transmit_packet master_loop: 2177 448f4003 bpatch patch03_6 ,mem_patch03 2178 20405d08 call parse_lmp 2179 204022e4 call master_conn_recv_packet 217a 2436a180 nbranch master_notmatch ,match 217b 20402a88 call supervision_flush 217c 20402728 call parse_l2cap 217d 6800800f fetch 1 ,mem_master_rcvcnt 217e 1fe0fe01 increase 1 ,pdata 217f 6000800f store 1 ,mem_master_rcvcnt master_notmatch: 2180 448fc003 bpatch patch03_7 ,mem_patch03 2181 20406caa call scheduler_process 2182 2040218b call check_master_disconnect 2183 24748000 nrtn master 2184 204026f3 call check_attempt 2185 243a2188 nbranch master_attempt ,blank master_exit: 2186 7854fc00 disable master 2187 20600000 rtn master_attempt: 2188 20402489 call prepare_tx 2189 204022da call master_conn_send_packet 218a 20202177 branch master_loop check_master_disconnect: 218b 2036a18e branch check_master_match ,match 218c 20402a7f call supervision_update 218d 2021219c branch master_disconnect ,positive check_master_match: 218e 204021a7 call check_disconnect_timeout 218f 2434219c nbranch master_disconnect ,user 2190 6800804c fetch 1 ,mem_state_map 2191 c4020000 rtnbit0 smap_name_req 2192 c3818000 rtnbit1 smap_name_res 2193 6800804b fetch 1 ,mem_op 2194 c3818000 rtnbit1 op_disconn 2195 204021ae call conn_timer_expired 2196 247a0000 nrtn blank 2197 6800816e fetch 1 ,mem_nameres_cnt 2198 1fe0ffff increase -1 ,pdata 2199 6000816e store 1 ,mem_nameres_cnt 219a 247a0000 nrtn blank 219b 20206006 branch lmp_disconnect master_disconnect: 219c 44904004 bpatch patch04_0 ,mem_patch04 219d 2040245d call quit_connection 219e 7854fc00 disable master 219f 6800804c fetch 1 ,mem_state_map 21a0 c28221a2 bbit1 smap_name_req ,master_name_disconnect 21a1 20600000 rtn master_name_disconnect: 21a2 6800804c fetch 1 ,mem_state_map 21a3 c3818000 rtnbit1 smap_name_res master_name_error: 21a4 d8a00101 arg mem_tmp_buffer ,contw 21a5 df200008 arg 8 ,loopcnt 21a6 20207ec6 branch memset0 check_disconnect_timeout: 21a7 4490c004 bpatch patch04_1 ,mem_patch04 21a8 78347c00 enable user 21a9 6800804b fetch 1 ,mem_op 21aa c4018000 rtnbit0 op_disconn 21ab 204021ae call conn_timer_expired 21ac 247a0000 nrtn blank 21ad 20207fe9 branch disable_user conn_timer_expired: 21ae 68008072 fetch 1 ,mem_conn_timer 21af 1fe0ffff increase -1 ,pdata 21b0 60008072 store 1 ,mem_conn_timer 21b1 20600000 rtn linkkey_ready: 21b2 44914004 bpatch patch04_2 ,mem_patch04 21b3 68008030 fetch 1 ,mem_state 21b4 c283a1bb bbit1 state_linkkey ,linkkey_set 21b5 680089b5 fetch 1 ,mem_pairing_auth 21b6 203a21bb branch linkkey_set ,blank 21b7 7009b500 jam defalt_pairing_auth ,mem_pairing_auth 21b8 700a9918 jam bt_evt_linkkey_generate ,mem_fifo_temp 21b9 20407d86 call ui_ipc_send_event 21ba 202021bb branch linkkey_set linkkey_set: 21bb 4491c004 bpatch patch04_3 ,mem_patch04 21bc 20402254 call context_traverse_linkkey 21bd 68008030 fetch 1 ,mem_state 21be 79207e07 set1 state_linkkey ,pdata 21bf 60008030 store 1 ,mem_state 21c0 7041bd01 jam 1 ,mem_link_key_exists 21c1 68008055 fetch 1 ,mem_conn_sm 21c2 c08b21c3 bne conn_sm_pairing ,linkkey_set_continue linkkey_set_continue: 21c3 20600000 rtn generate_linkkey_continue: 21c4 7009b501 jam pairing_auth ,mem_pairing_auth clear_linkstate: 21c5 68008030 fetch 1 ,mem_state 21c6 793ffe07 set0 state_linkkey ,pdata 21c7 60008030 store 1 ,mem_state 21c8 20600000 rtn role_switch_check: 21c9 44924004 bpatch patch04_4 ,mem_patch04 21ca 78547c00 disable user 21cb 68010032 fetch 2 ,mem_tsniff 21cc d840ffff arg 0xffff ,temp 21cd 98467c00 isub temp ,null 21ce 24628000 nrtn zero 21cf 68020034 fetch 4 ,mem_sniff_anchor 21d0 203821d3 branch role_switch_clkn ,clknt 21d1 9d067e00 isub clke_bt ,pdata 21d2 202021d4 branch role_switch_clke role_switch_clkn: 21d3 9c467e00 isub clkn_bt ,pdata role_switch_clke: 21d4 1fe67c04 sub pdata ,4 ,null 21d5 24610000 nrtn positive 21d6 18007e00 force 0 ,pdata 21d7 60010032 store 2 ,mem_tsniff 21d8 20207fe7 branch enable_user role_switch_prepare: 21d9 1fe20400 copy pdata ,temp 21da 4492c004 bpatch patch04_5 ,mem_patch04 21db 600a0034 storet 4 ,mem_sniff_anchor role_switch_prepare0: 21dc 70455b01 jam switch_flag_accept ,mem_switch_flag 21dd 5800ffff setarg 0xffff 21de 60010032 store 2 ,mem_tsniff 21df 70007301 jam 1 ,mem_sniff_attempt 21e0 20600000 rtn role_switch_master: 21e1 44934004 bpatch patch04_6 ,mem_patch04 21e2 204021c9 call role_switch_check 21e3 24740000 nrtn user 21e4 78547c00 disable user 21e5 70001120 jam param_newconnto ,mem_newconnto_counter 21e6 793f800b set0 mark_fhs_already_good ,mark roles_waitfhs_loop: 21e7 20402a4f call rf_setup_time_master_slot 21e8 204022e6 call master_recv_packet 21e9 c505a1f4 bmark1 mark_fhs_already_good ,roles_replyto_fhs 21ea 20402455 call new_conn_timeout 21eb 243a21e7 nbranch roles_waitfhs_loop ,blank role_switch_fail_master: 21ec 4493c004 bpatch patch04_7 ,mem_patch04 21ed 78547c00 disable user 21ee 1c427e00 deposit clkn_bt 21ef 600240ca store 4 ,mem_next_btclk 21f0 78387c00 enable clknt 21f1 7834fc00 enable master 21f2 700a992a jam bt_evt_switch_fail_master ,mem_fifo_temp 21f3 20207d86 branch ui_ipc_send_event roles_replyto_fhs: 21f4 44944005 bpatch patch05_0 ,mem_patch05 21f5 20402a4d call rf_setup_time_slave_slot 21f6 d8200010 arg type_id ,type 21f7 204022dc call master_send_packet 21f8 78587c00 disable clknt 21f9 7854fc00 disable master 21fa 20402818 call apply_switch_clke 21fb 20402435 call prepare_newconn roles_newconns_loop: 21fc 4494c005 bpatch patch05_1 ,mem_patch05 21fd 2040247c call slave_newconn_once 21fe 2036a202 branch roles_newconns_responded ,match 21ff 20402455 call new_conn_timeout 2200 243a21fc nbranch roles_newconns_loop ,blank 2201 202021ec branch role_switch_fail_master roles_newconns_responded: 2202 68008031 fetch 1 ,mem_mode 2203 793ffe01 set0 mode_master ,pdata 2204 60008031 store 1 ,mem_mode 2205 20402a88 call supervision_flush 2206 20402841 call calc_clke_offset 2207 78347c00 enable user 2208 700a992b jam bt_evt_switch_success_master ,mem_fifo_temp 2209 20207d86 branch ui_ipc_send_event context_load: 220a 44954005 bpatch patch05_2 ,mem_patch05 220b 79200009 set1 mark_context ,mark 220c 1a227e00 deposit rega 220d 6001001e store 2 ,mem_context_ptr 220e 18007250 force context_size ,loopcnt 220f d8a0043f arg mem_le_state ,contw 2210 1a208c01 add rega ,coffset_mode ,contr 2211 e8c08000 ifetch 1 ,contr 2212 1a220c00 copy rega ,contr 2213 c2807f01 bbit1 mode_le ,memcpy 2214 d8a00030 arg mem_state ,contw 2215 20407f01 call memcpy 2216 78577c00 disable attempt 2217 68008077 fetch 1 ,mem_amaddr 2218 98000800 iforce am_addr 2219 70008a01 jam 1 ,mem_current_sniff_attempt 221a 2034a21c branch context_load_master ,master 221b 70008a01 jam 1 ,mem_current_sniff_attempt context_load_master: 221c 68008030 fetch 1 ,mem_state 221d c4008000 rtnbit0 state_insniff 221e 68008073 fetch 1 ,mem_sniff_attempt 221f 6000808a store 1 ,mem_current_sniff_attempt 2220 68008074 fetch 1 ,mem_sniff_timeout 2221 6000808b store 1 ,mem_current_sniff_timeout 2222 20600000 rtn context_save: 2223 4495c005 bpatch patch05_3 ,mem_patch05 2224 6801001e fetch 2 ,mem_context_ptr 2225 98000a00 iforce contw 2226 18007250 force context_size ,loopcnt 2227 d8c0043f arg mem_le_state ,contr 2228 203b7f01 branch memcpy ,le 2229 d8c00030 arg mem_state ,contr 222a 20207f01 branch memcpy context_get_next: 222b df200001 arg context_num ,loopcnt 222c 68088015 fetcht 1 ,mem_current_context context_get_next_loop: 222d 18408401 increase 1 ,temp 222e 2841fe01 compare context_num ,temp ,0xff 222f 2420a231 nbranch context_get_next_cont ,true 2230 d8400000 arg 0 ,temp context_get_next_cont: 2231 60088015 storet 1 ,mem_current_context 2232 184ffe50 mul32 temp ,context_size ,pdata 2233 da204040 arg mem_context ,rega 2234 9a20a200 iadd rega ,rega 2235 ea208000 ifetch 1 ,rega 2236 c280a239 bbit1 state_insniff ,context_get_next_sniff 2237 c3800000 rtnbit1 state_inconn 2238 c3818000 rtnbit1 state_inpage context_get_next_sniff: 2239 c200222d loop context_get_next_loop 223a 20600000 rtn context_new: 223b 44964005 bpatch patch05_4 ,mem_patch05 223c da60226a arg context_search_empty ,regc 223d 20402261 call context_search 223e 24628000 nrtn zero 223f 1a227e00 deposit rega 2240 6001001e store 2 ,mem_context_ptr 2241 18007c00 force 0 ,null 2242 20600000 rtn context_check_all_wack: 2243 20402725 call check_esco_amaddr 2244 2020a24b branch context_check_esco_wack ,true 2245 6801001e fetch 2 ,mem_context_ptr 2246 1fe08a17 add pdata ,coffset_arq ,contw 2247 68008047 fetch 1 ,mem_arq 2248 e0a08000 istore 1 ,contw 2249 da6022aa arg context_check_a_wack ,regc 224a 20202261 branch context_search context_check_esco_wack: 224b 68008047 fetch 1 ,mem_arq 224c 2feffe03 isolate1 wack ,pdata 224d 2020a250 branch context_esco_wack ,true 224e 18007c01 force 1 ,null 224f 20600000 rtn context_esco_wack: 2250 18007c00 force 0 ,null 2251 20600000 rtn context_check_idle: 2252 da6022a7 arg context_check_inconn ,regc 2253 20202261 branch context_search context_traverse_linkkey: 2254 6809001e fetcht 2 ,mem_context_ptr 2255 da6022cf arg context_traverse_clearkey ,regc 2256 20202261 branch context_search context_search_conn_handle: 2257 6808c1cf fetcht 1 ,mem_hci_conn_handle context_search_conn_handle2: 2258 da602275 arg context_search_handle ,regc 2259 20202261 branch context_search context_search_plap: 225a 4496c005 bpatch patch05_5 ,mem_patch05 225b 680b41d0 fetcht 6 ,mem_hci_plap context_search_plap2: 225c da60226e arg context_search_lap ,regc 225d 20202261 branch context_search context_search_insniff: 225e da60227b arg context_search_sniff ,regc 225f 20202261 branch context_search context_search_sniff_window: 2260 da6022c6 arg context_search_window ,regc context_search: 2261 44974005 bpatch patch05_6 ,mem_patch05 2262 da204040 arg mem_context ,rega 2263 df200001 arg context_num ,loopcnt context_search_loop: 2264 ea208000 ifetch 1 ,rega 2265 1a627a00 copy regc ,pc context_search_next: 2266 1a20a250 increase context_size ,rega 2267 c2002264 loop context_search_loop 2268 18007c01 force 1 ,null 2269 20600000 rtn context_search_empty: 226a c2802266 bbit1 state_inconn ,context_search_next 226b c281a266 bbit1 state_inpage ,context_search_next 226c 18007c00 force 0 ,null 226d 20600000 rtn context_search_lap: 226e c281a270 bbit1 state_inpage ,context_search_lap_cont 226f c3002266 bbit0 state_inconn ,context_search_next context_search_lap_cont: 2270 1a208c10 add rega ,coffset_plap ,contr 2271 e8c30000 ifetch 6 ,contr 2272 98467c00 isub temp ,null 2273 20628000 rtn zero 2274 20202266 branch context_search_next context_search_handle: 2275 c3002266 bbit0 state_inconn ,context_search_next 2276 1a208c16 add rega ,coffset_conn_handle ,contr 2277 e8c08000 ifetch 1 ,contr 2278 98467c00 isub temp ,null 2279 20628000 rtn zero 227a 20202266 branch context_search_next context_search_sniff: 227b c300a266 bbit0 state_insniff ,context_search_next context_search_sniff_loop: 227c 204022b3 call context_get_anchor 227d 20402297 call sign_pdata_temp 227e 98467e00 isub temp ,pdata 227f 1fe0fe01 increase 1 ,pdata 2280 20212291 branch context_search_sniff_miss ,positive 2281 18c22400 copy contr ,regb 2282 60048aa2 store 9 ,mem_temp 2283 6800c4c0 fetch 1 ,mem_le_sc_calc 2284 243a2289 nbranch context_search_sniff_sc ,blank 2285 68048aa2 fetch 9 ,mem_temp 2286 1a420c00 copy regb ,contr 2287 1fe0fe05 increase 5 ,pdata 2288 2020228c branch context_search_meet1 context_search_sniff_sc: 2289 68048aa2 fetch 9 ,mem_temp 228a 1a420c00 copy regb ,contr 228b 1fe0fe14 increase 20 ,pdata context_search_meet1: 228c 24212266 nbranch context_search_next ,positive context_search_meet: 228d 18424200 copy temp ,bt_clk 228e 204022bf call context_next_anchor 228f 18007c00 force 0 ,null 2290 20600000 rtn context_search_sniff_miss: 2291 98002400 iforce regb 2292 1a208c02 add rega ,coffset_tsniff ,contr 2293 e8c10000 ifetch 2 ,contr 2294 203a228d branch context_search_meet ,blank 2295 204022bf call context_next_anchor 2296 2020227c branch context_search_sniff_loop sign_pdata_temp: 2297 1ff11600 rshift16 pdata ,timeup 2298 196c9600 rshift8 timeup ,timeup 2299 2022a2a1 branch sign_pdata_temp_p0 ,zero 229a 29601e0f compare 0xf ,timeup ,0xf 229b 24608000 nrtn true 229c 18511600 rshift16 temp ,timeup 229d 196c9600 rshift8 timeup ,timeup 229e 24628000 nrtn zero 229f 7920041c set1 28 ,temp 22a0 20600000 rtn sign_pdata_temp_p0: 22a1 18511600 rshift16 temp ,timeup 22a2 196c9600 rshift8 timeup ,timeup 22a3 29601e0f compare 0xf ,timeup ,0xf 22a4 24608000 nrtn true 22a5 79207e1c set1 28 ,pdata 22a6 20600000 rtn context_check_inconn: 22a7 c3002266 bbit0 state_inconn ,context_search_next 22a8 18007c00 force 0 ,null 22a9 20600000 rtn context_check_a_wack: 22aa c3002266 bbit0 state_inconn ,context_search_next 22ab 1a208c01 add rega ,coffset_mode ,contr 22ac e8c08000 ifetch 1 ,contr 22ad c2802266 bbit1 mode_le ,context_search_next 22ae 1a208c17 add rega ,coffset_arq ,contr 22af e8c08000 ifetch 1 ,contr 22b0 c301a266 bbit0 wack ,context_search_next 22b1 18007c00 force 0 ,null 22b2 20600000 rtn context_get_anchor: 22b3 1a208c01 add rega ,coffset_mode ,contr 22b4 e8c88000 ifetcht 1 ,contr 22b5 1c427e00 deposit clkn_bt 22b6 284ffe01 isolate1 mode_master ,temp 22b7 1a208c04 add rega ,coffset_sniff_anchor ,contr 22b8 e8ca0000 ifetcht 4 ,contr 22b9 20608000 rtn true 22ba 1a208c08 add rega ,coffset_clk_offset ,contr 22bb e8c30000 ifetch 6 ,contr 22bc 20402854 call calc_clke2 22bd 1d027e00 deposit clke_bt 22be 20600000 rtn context_next_anchor: 22bf 1a208c02 add rega ,coffset_tsniff ,contr 22c0 1a208a04 add rega ,coffset_sniff_anchor ,contw 22c1 e8c10000 ifetch 2 ,contr 22c2 98409600 iadd temp ,timeup 22c3 19627e00 deposit timeup 22c4 e0a20000 istore 4 ,contw 22c5 20205449 branch le_context_nexthop context_search_window: 22c6 c300a266 bbit0 state_insniff ,context_search_next 22c7 204022b3 call context_get_anchor 22c8 9b60fe00 iadd stop_watch ,pdata 22c9 9b60fe00 iadd stop_watch ,pdata 22ca 98e0fe00 iadd queue ,pdata 22cb 98467c00 isub temp ,null 22cc 24212266 nbranch context_search_next ,positive 22cd 18007c00 force 0 ,null 22ce 20600000 rtn context_traverse_clearkey: 22cf c3002266 bbit0 state_inconn ,context_search_next 22d0 18427e00 deposit temp 22d1 9a267c00 isub rega ,null 22d2 203f2266 branch context_search_next ,null 22d3 1a208c01 add rega ,coffset_mode ,contr 22d4 e8c08000 ifetch 1 ,contr 22d5 c2802266 bbit1 mode_le ,context_search_next 22d6 ea208000 ifetch 1 ,rega 22d7 793ffe07 set0 state_linkkey ,pdata 22d8 e2208000 istore 1 ,rega 22d9 20202266 branch context_search_next master_conn_send_packet: 22da 4497c005 bpatch patch05_7 ,mem_patch05 22db 20402a4f call rf_setup_time_master_slot master_send_packet: 22dc 1c40c201 add clkn_bt ,1 ,bt_clk 22dd 204028e2 call fetch_self_bt_adr 22de 18004803 force 0x03 ,freq_mode 22df 204028d2 call tx_radio_freq 22e0 20402a51 call start_transmitter 22e1 20402a56 call start_tx_native 22e2 20402a64 call send_access_word 22e3 20202762 branch transmit_packet master_conn_recv_packet: 22e4 44984006 bpatch patch06_0 ,mem_patch06 22e5 20402a4d call rf_setup_time_slave_slot master_recv_packet: 22e6 1c40c201 add clkn_bt ,1 ,bt_clk 22e7 204028e2 call fetch_self_bt_adr 22e8 18004803 force 0x03 ,freq_mode 22e9 204028cc call rx_radio_freq 22ea 2040242a call init_rx_packet_flags 22eb 204029f1 call prep_crypt 22ec 20402a5b call start_rx_native 22ed 204029eb call start_receiver master_rx_conn_finish_packet: 22ee 20402a0d call wait_access_clkn_rt 22ef 246c0000 nrtn sync 22f0 204029bb call save_rssi 22f1 2020251c branch receive_packet master_newconn_once: 22f2 4498c006 bpatch patch06_1 ,mem_patch06 22f3 68008181 fetch 1 ,mem_fhs_am_addr 22f4 98000800 iforce am_addr 22f5 18000201 force type_poll ,type 22f6 204022da call master_conn_send_packet 22f7 202022e4 branch master_conn_recv_packet inquiry_scan_dispatch: 22f8 6800c093 fetch 1 ,mem_scan_mode 22f9 c4000000 rtnbit0 inq_scan_mode 22fa 18000e04 force iscan_interval_timer ,queue 22fb 20407f16 call timer_check 22fc 247a0000 nrtn blank 22fd 680940ad fetcht 2 ,mem_iscan_window 22fe 18000e04 force 4 ,queue 22ff 2040271c call sniff_check_window 2300 20740000 rtn user 2301 20402308 call inquiry_scan_start 2302 18000e04 force iscan_interval_timer ,queue 2303 680140af fetch 2 ,mem_iscan_interval 2304 242c7f08 nbranch timer_init ,sync 2305 180a7e00 random pdata 2306 9ea17e00 iand mask3ff ,pdata 2307 20207f08 branch timer_init inquiry_scan_start: 2308 44994006 bpatch patch06_2 ,mem_patch06 2309 70018100 jam 0 ,mem_fhs_am_addr 230a 78587c00 disable clknt 230b 78577c00 disable attempt 230c 204028a4 call afh_clear 230d 1c4143fc and clkn_bt ,0x1fc ,bt_clk 230e 18004801 force 0x01 ,freq_mode 230f 204028d8 call fetch_giac 2310 204028cc call rx_radio_freq 2311 7940001d setflip mark_inquiry_state ,mark 2312 68008006 fetch 1 ,mem_inquiryscan_waitcnt 2313 1fe0fe01 increase 1 ,pdata 2314 60008006 store 1 ,mem_inquiryscan_waitcnt 2315 204028f2 call fetch_diac 2316 204029eb call start_receiver 2317 20402a14 call wait_access_forever 2318 246c0000 nrtn sync 2319 4499c006 bpatch patch06_3 ,mem_patch06 231a 18003600 force 0 ,stop_watch 231b 204028f9 call shutdown_radio 231c 68008007 fetch 1 ,mem_inquiryscan_rcvcnt 231d 1fe0fe01 increase 1 ,pdata 231e 60008007 store 1 ,mem_inquiryscan_rcvcnt 231f 204028d8 call fetch_giac 2320 20402a4d call rf_setup_time_slave_slot 2321 1c21c202 or_into 0x002 ,bt_clk 2322 18004801 force 0x01 ,freq_mode 2323 204028d2 call tx_radio_freq 2324 204028f2 call fetch_diac 2325 20402a51 call start_transmitter 2326 20402a5f call start_tx_external 2327 1c427e00 deposit clkn_bt 2328 60020161 store 4 ,mem_clkn_bt 2329 20402a64 call send_access_word 232a 18000202 force type_fhs ,type 232b 18000800 force 0 ,am_addr 232c 20402a6b call scan_mode_whiten 232d 20402766 call transmit_packet_whitened 232e 20402332 call send_eir 232f 1c2143fd and_into 0x1fd ,bt_clk 2330 1cc0cc01 increase 1 ,n_tx_slot 2331 20600000 rtn send_eir: 2332 449a4006 bpatch patch06_4 ,mem_patch06 2333 6800c0d1 fetch 1 ,mem_eir_enable 2334 207a0000 rtn blank 2335 d8a0018e arg mem_eir ,contw 2336 6800c515 fetch 1 ,mem_local_name_length 2337 1fe27200 copy pdata ,loopcnt 2338 1fe0fe01 increase 1 ,pdata 2339 e0a08000 istore 1 ,contw 233a 18a20400 copy contw ,temp 233b 1fe0fe01 increase 1 ,pdata 233c 600141dc store 2 ,mem_tx_len 233d 18420a00 copy temp ,contw 233e 58000009 setarg 0x09 233f e0a08000 istore 1 ,contw 2340 d8c04516 arg mem_local_name ,contr 2341 20407f01 call memcpy 2342 da60458d arg mem_all_uuid_128bits ,regc 2343 df200004 arg 4 ,loopcnt 2344 20402354 call get_all_uuid 2345 da604577 arg mem_all_uuid_16bits ,regc 2346 df200001 arg 1 ,loopcnt 2347 20402354 call get_all_uuid 2348 1800020a force type_dm3 ,type 2349 7041db02 jam 2 ,mem_tx_lch 234a 5800018e setarg mem_eir 234b 6001016f store 2 ,mem_txptr 234c 20402a4d call rf_setup_time_slave_slot 234d 204028d2 call tx_radio_freq 234e 20402a51 call start_transmitter 234f 20402a5f call start_tx_external 2350 20402a64 call send_access_word 2351 20402a6b call scan_mode_whiten 2352 20402766 call transmit_packet_whitened 2353 20600000 rtn get_all_uuid: 2354 18a20400 copy contw ,temp 2355 1a620c00 copy regc ,contr 2356 e8c08000 ifetch 1 ,contr 2357 207a0000 rtn blank lshift_loop: 2358 1fe3fe00 lshift pdata ,pdata 2359 c2002358 loop lshift_loop 235a 1fe22200 copy pdata ,rega 235b 1fe0fe02 increase 2 ,pdata 235c 1fe20e00 copy pdata ,queue 235d 680141dc fetch 2 ,mem_tx_len 235e 98e0fe00 iadd queue ,pdata 235f 600141dc store 2 ,mem_tx_len 2360 18420a00 copy temp ,contw 2361 1a227e00 copy rega ,pdata 2362 1fe0fe01 increase 1 ,pdata 2363 e0a08000 istore 1 ,contw 2364 1a620c00 copy regc ,contr 2365 e8c08000 ifetch 1 ,contr 2366 e8c08000 ifetch 1 ,contr 2367 e0a08000 istore 1 ,contw 2368 1a227200 copy rega ,loopcnt 2369 20207f01 branch memcpy page_scan_dispatch: 236a 6800c093 fetch 1 ,mem_scan_mode 236b c4008000 rtnbit0 page_scan_mode 236c 18000e05 force pscan_interval_timer ,queue 236d 20407f16 call timer_check 236e 247a0000 nrtn blank 236f 680940b1 fetcht 2 ,mem_pscan_window 2370 18000e28 force 40 ,queue 2371 2040271c call sniff_check_window 2372 20740000 rtn user 2373 18000800 force 0 ,am_addr 2374 70001008 jam param_pagerespto ,mem_fhs_wait_counter 2375 793f800b set0 mark_fhs_already_good ,mark 2376 2040237a call page_scan_start 2377 18000e05 force pscan_interval_timer ,queue 2378 680140b3 fetch 2 ,mem_pscan_interval 2379 20207f08 branch timer_init page_scan_start: 237a 449ac006 bpatch patch06_5 ,mem_patch06 237b 78587c00 disable clknt 237c 204028a4 call afh_clear 237d 68008008 fetch 1 ,mem_pagescan_waitcnt 237e 1fe0fe01 increase 1 ,pdata 237f 60008008 store 1 ,mem_pagescan_waitcnt 2380 18004c00 force 0 ,n_tx_slot 2381 204028e2 call fetch_self_bt_adr 2382 1c40c201 add clkn_bt ,1 ,bt_clk 2383 18004802 force 0x02 ,freq_mode 2384 449b4006 bpatch patch06_6 ,mem_patch06 2385 204028cc call rx_radio_freq 2386 204029eb call start_receiver 2387 20402a14 call wait_access_forever 2388 246c0000 nrtn sync 2389 204028f9 call shutdown_radio 238a 68008009 fetch 1 ,mem_pagescan_rcvcnt 238b 1fe0fe01 increase 1 ,pdata 238c 60008009 store 1 ,mem_pagescan_rcvcnt 238d 18003600 force 0 ,stop_watch 238e 20402a4d call rf_setup_time_slave_slot 238f 1c21c202 or_into 0x002 ,bt_clk 2390 18004801 force 0x01 ,freq_mode 2391 204028d2 call tx_radio_freq 2392 20402a51 call start_transmitter 2393 20402a5f call start_tx_external 2394 20402a64 call send_access_word 2395 2040264d call end_of_packet 2396 18000800 force 0 ,am_addr 2397 d9600600 arg param_rf_setup ,timeup 2398 35330200 until clke_rt ,meet 2399 1d01d003 or_into 0x03 ,clke_bt 239a 1c2143fd and_into 0x1fd ,bt_clk page_scan_wait_fhs_restart: 239b 449bc006 bpatch patch06_7 ,mem_patch06 239c 1cc0cc01 increase 1 ,n_tx_slot 239d 204028cc call rx_radio_freq 239e 204029eb call start_receiver 239f 20402a07 call wait_access_mhalfbnd 23a0 242c23a4 nbranch page_scan_wait_fhs_again ,sync 23a1 20402a6b call scan_mode_whiten 23a2 2040251e call receive_packet_whitened 23a3 c505a3ab bmark1 mark_fhs_already_good ,page_scan_reply_to_fhs page_scan_wait_fhs_again: 23a4 449c4007 bpatch patch07_0 ,mem_patch07 23a5 68008010 fetch 1 ,mem_fhs_wait_counter 23a6 207a0000 rtn blank 23a7 1fe0ffff increase -1 ,pdata 23a8 60008010 store 1 ,mem_fhs_wait_counter 23a9 20402a4f call rf_setup_time_master_slot 23aa 2020239b branch page_scan_wait_fhs_restart page_scan_reply_to_fhs: 23ab 449cc007 bpatch patch07_1 ,mem_patch07 23ac 793fd001 set0 1 ,clke_bt 23ad 79205000 set1 0 ,clke_bt 23ae 6800800a fetch 1 ,mem_pagescan_rcvfhscnt 23af 1fe0fe01 increase 1 ,pdata 23b0 6000800a store 1 ,mem_pagescan_rcvfhscnt 23b1 20402a4d call rf_setup_time_slave_slot 23b2 1c21c202 or_into 0x02 ,bt_clk 23b3 204028d2 call tx_radio_freq 23b4 20402a51 call start_transmitter 23b5 20402a5f call start_tx_external 23b6 20402a64 call send_access_word 23b7 2040264d call end_of_packet slave_apply_clke_bt: 23b8 2d000603 compare 0x03 ,clke_bt ,0x03 23b9 2020a3bc branch slave_apply_clke_bt_now ,true 23ba 37cb8200 until null ,mhalfbnd 23bb 202023b8 branch slave_apply_clke_bt slave_apply_clke_bt_now: 23bc 68020165 fetch 4 ,mem_clke_bt 23bd 1fe1fe03 or_into 0x03 ,pdata 23be 1fe25000 icopy clke_bt start_slave_connection: 23bf 449d4007 bpatch patch07_2 ,mem_patch07 23c0 68030178 fetch 6 ,extm_lap 23c1 60030040 store 6 ,mem_plap 23c2 20402435 call prepare_newconn slave_newconn_loop: 23c3 2040247c call slave_newconn_once 23c4 2036a3c8 branch sconn_successful ,match 23c5 20402455 call new_conn_timeout 23c6 243a23c3 nbranch slave_newconn_loop ,blank 23c7 20600000 rtn sconn_successful: 23c8 449dc007 bpatch patch07_3 ,mem_patch07 23c9 20402440 call newconn_init 23ca 2040223b call context_new 23cb 24628000 nrtn zero 23cc 70003100 jam 0 ,mem_mode 23cd 20402841 call calc_clke_offset 23ce 20202223 branch context_save slave_dispatch: 23cf 449e4007 bpatch patch07_4 ,mem_patch07 23d0 20402850 call calc_clke 23d1 204023f3 call role_switch_slave 23d2 20740000 rtn user slave_loop: 23d3 449ec007 bpatch patch07_5 ,mem_patch07 23d4 20402c69 call check_bt_disabled 23d5 20406caa call scheduler_process 23d6 20402514 call slave_conn_recv_packet 23d7 2436a3e2 nbranch slave_notmatch ,match 23d8 20402a88 call supervision_flush 23d9 20406cc2 call scheduler_tx_l2cap_pkt 23da 20402489 call prepare_tx 23db 20402757 call slave_conn_send_packet 23dc 20402728 call parse_l2cap 23dd 20405d08 call parse_lmp 23de 6800800b fetch 1 ,mem_slave_rcvcnt 23df 1fe0fe01 increase 1 ,pdata 23e0 6000800b store 1 ,mem_slave_rcvcnt 23e1 20402841 call calc_clke_offset slave_notmatch: 23e2 449f4007 bpatch patch07_6 ,mem_patch07 23e3 20402bb1 call lpm_set_mult 23e4 20402a7f call supervision_update 23e5 202123eb branch slave_disconnect ,positive 23e6 204021a7 call check_disconnect_timeout 23e7 243423eb nbranch slave_disconnect ,user 23e8 204026f3 call check_attempt 23e9 243a23d3 nbranch slave_loop ,blank 23ea 20600000 rtn slave_disconnect: 23eb 449fc007 bpatch patch07_7 ,mem_patch07 23ec 70015100 jam 0 ,mem_tester_emulate 23ed 70017f00 jam 0 ,mem_debug_config 23ee 2040245d call quit_connection 23ef 793f8011 set0 mark_testmode ,mark 23f0 20407fb0 call test_enable_white 23f1 68008030 fetch 1 ,mem_state 23f2 20600000 rtn role_switch_slave: 23f3 44a04008 bpatch patch08_0 ,mem_patch08 23f4 204021c9 call role_switch_check 23f5 24740000 nrtn user 23f6 18820400 copy am_addr ,temp 23f7 20402a6f call get_free_amaddr 23f8 60008181 store 1 ,mem_fhs_am_addr 23f9 18420800 copy temp ,am_addr 23fa 70001120 jam param_newconnto ,mem_newconnto_counter roles_sendfhs_loop: 23fb 44a0c008 bpatch patch08_1 ,mem_patch08 23fc 20402a4f call rf_setup_time_master_slot 23fd 18000202 force type_fhs ,type 23fe 2040274f call slave_send_access 23ff 1c427e00 deposit clkn_bt 2400 60020161 store 4 ,mem_clkn_bt 2401 20402762 call transmit_packet 2402 20402a4d call rf_setup_time_slave_slot 2403 7837fc00 enable user3 2404 204024f6 call slave_receive_access 2405 202c240d branch roles_got_fhs_reply ,sync 2406 204028f9 call shutdown_radio 2407 20402455 call new_conn_timeout 2408 243a23fb nbranch roles_sendfhs_loop ,blank 2409 c6820000 rtnmark0 mark_accept_switch 240a 70007c34 jam lmp_slot_offset ,mem_lmo_opcode2 240b 79200003 set1 mark_switch_initiated ,mark 240c 20600000 rtn roles_got_fhs_reply: 240d 78387c00 enable clknt 240e 20402435 call prepare_newconn 240f 204028a4 call afh_clear roles_newconn_loop: 2410 44a14008 bpatch patch08_2 ,mem_patch08 2411 204022f2 call master_newconn_once 2412 202c2419 branch roles_newconn_responded ,sync 2413 20402455 call new_conn_timeout 2414 243a2410 nbranch roles_newconn_loop ,blank 2415 78587c00 disable clknt 2416 1d027e00 deposit clke_bt 2417 600240ca store 4 ,mem_next_btclk 2418 20600000 rtn roles_newconn_responded: 2419 7834fc00 enable master 241a c582241f bmark0 mark_accept_switch ,roles_newconn_nolmp 241b 793f8004 set0 mark_accept_switch ,mark 241c 70007c03 jam lmp_accepted ,mem_lmo_opcode2 241d 70007d33 jam lmp_host_connection_req ,mem_lmi_opcode2 241e 204062f8 call tid_set_reply roles_newconn_nolmp: 241f 18827e00 deposit am_addr 2420 60008077 store 1 ,mem_amaddr 2421 18007e00 force 0 ,pdata 2422 60030038 store 6 ,mem_clk_offset 2423 68008031 fetch 1 ,mem_mode 2424 79207e01 set1 mode_master ,pdata 2425 60008031 store 1 ,mem_mode 2426 20402a88 call supervision_flush 2427 7854fc00 disable master 2428 78347c00 enable user 2429 20600000 rtn init_rx_packet_flags: 242a 44a1c008 bpatch patch08_3 ,mem_patch08 242b 7856fc00 disable match 242c 793f8005 set0 mark_loopback ,mark 242d 793f800a set0 mark_am_addr_broadcast ,mark 242e 793f8010 set0 mark_longpacket ,mark 242f 793f800f set0 mark_old_packet ,mark 2430 68008047 fetch 1 ,mem_arq 2431 793ffe05 set0 arqnx ,pdata 2432 79207e04 set1 flowx ,pdata 2433 60008047 store 1 ,mem_arq 2434 20600000 rtn prepare_newconn: 2435 44a24008 bpatch patch08_4 ,mem_patch08 2436 70001120 jam param_newconnto ,mem_newconnto_counter 2437 70004750 jam param_newconn_arq ,mem_arq 2438 680140bf fetch 2 ,mem_rx_window_init 2439 6001003e store 2 ,mem_rx_window 243a 1c427e00 deposit clkn_bt 243b 600240ca store 4 ,mem_next_btclk 243c 20780000 rtn clknt 243d 1d027e00 deposit clke_bt 243e 600240ca store 4 ,mem_next_btclk 243f 20600000 rtn newconn_init: 2440 44a2c008 bpatch patch08_5 ,mem_patch08 2441 20405d04 call init_lmp_reinit 2442 20402459 call new_conn_handle 2443 60008046 store 1 ,mem_conn_handle 2444 58000000 setarg 0 2445 6001025d store 2 ,mem_l2cap_rxbuff1_len 2446 58001c80 setarg param_supervision_to 2447 60010051 store 2 ,mem_supervision_to 2448 68008030 fetch 1 ,mem_state 2449 79207e00 set1 state_inconn ,pdata 244a 60008030 store 1 ,mem_state 244b 70004b00 jam 0 ,mem_op 244c 70004c00 jam 0 ,mem_state_map 244d 7000a000 jam 0 ,mem_lpm_current_mult 244e 20202a88 branch supervision_flush clear_linkkey: 244f 44a34008 bpatch patch08_6 ,mem_patch08 2450 18007e00 force 0 ,pdata 2451 600441be store 8 ,mem_link_key 2452 e0a40000 istore 8 ,contw 2453 204021c5 call clear_linkstate 2454 20202254 branch context_traverse_linkkey new_conn_timeout: 2455 68008011 fetch 1 ,mem_newconnto_counter 2456 1fe0ffff increase -1 ,pdata 2457 60008011 store 1 ,mem_newconnto_counter 2458 20600000 rtn new_conn_handle: 2459 6800c0cf fetch 1 ,mem_handle_num 245a 1fe0fe01 increase 1 ,pdata 245b 6000c0cf store 1 ,mem_handle_num 245c 20600000 rtn quit_connection: 245d 44a3c008 bpatch patch08_7 ,mem_patch08 245e 6800c1ce fetch 1 ,mem_hci_cmd 245f c001a462 beq hci_cmd_remote_name_req ,quit_connection_name 2460 68008048 fetch 1 ,mem_lmp_to_send 2461 c080a466 bne lmp_name_req ,quit_connection_cont quit_connection_name: 2462 20404d06 call cmd_check_plap 2463 2422a466 nbranch quit_connection_cont ,zero 2464 204021a4 call master_name_error 2465 7041ce00 jam 0 ,mem_hci_cmd quit_connection_cont: 2466 44a44009 bpatch patch09_0 ,mem_patch09 2467 204033af call app_disconn_reason_collect_bt 2468 204026e9 call sniff_exit 2469 700a9902 jam bt_evt_bb_disconnected ,mem_fifo_temp 246a 20407d86 call ui_ipc_send_event 246b 20405cf7 call init_lmp_work 246c 20404d6b call l2cap_init_work 246d 2040757d call sp_initialize 246e 68008030 fetch 1 ,mem_state 246f 793ffe00 set0 state_inconn 2470 60008030 store 1 ,mem_state 2471 70468100 jam 0 ,memui_reconnect_mode 2472 6800804c fetch 1 ,mem_state_map 2473 2fe18000 compare 0x0 ,pdata ,0xc0 2474 2020a476 branch quit_connection_not_clear_mark ,true 2475 793f8001 set0 mark_rxbuf_inuse ,mark quit_connection_not_clear_mark: 2476 68008047 fetch 1 ,mem_arq 2477 c301a478 bbit0 wack ,quit_connection_not_clear_tx quit_connection_not_clear_tx: 2478 6800804b fetch 1 ,mem_op 2479 c4030000 rtnbit0 op_txl2cap 247a 793f8002 set0 mark_tx_l2cap ,mark 247b 20600000 rtn slave_newconn_once: 247c 44a4c009 bpatch patch09_1 ,mem_patch09 247d 68008174 fetch 1 ,extm_newconn_am_addr 247e 207a0000 rtn blank 247f 1fe20800 icopy am_addr 2480 20402514 call slave_conn_recv_packet 2481 24768000 nrtn match 2482 18000200 force type_null ,type 2483 20402757 call slave_conn_send_packet 2484 18827e00 deposit am_addr 2485 60008077 store 1 ,mem_amaddr 2486 18007e00 force 0 ,pdata 2487 60008174 store 1 ,extm_newconn_am_addr 2488 20600000 rtn prepare_tx: 2489 44a54009 bpatch patch09_2 ,mem_patch09 248a 68008030 fetch 1 ,mem_state 248b c3012496 bbit0 state_insco ,prepare_tx_not_sco 248c 18000207 force type_hv3 ,type 248d c583a495 bmark0 mark_esco ,prepare_tx_not_esco 248e 20402725 call check_esco_amaddr 248f 2420a496 nbranch prepare_tx_not_sco ,true 2490 20372496 branch prepare_tx_not_sco ,attempt 2491 204024c1 call set_wait_ack 2492 58000002 setarg 2 2493 600140c8 store 2 ,mem_retransmission_cnt 2494 20600000 rtn prepare_tx_not_esco: 2495 24770000 nrtn attempt prepare_tx_not_sco: 2496 44a5c009 bpatch patch09_3 ,mem_patch09 2497 20402243 call context_check_all_wack 2498 2422a4a7 nbranch prepare_tx_no_retransmit ,zero 2499 68008047 fetch 1 ,mem_arq 249a c301a4b0 bbit0 wack ,prepare_tx_pollnull prepare_tx_retransmit: 249b c502a4b4 bmark1 mark_loopback ,prepare_tx_loopback 249c 6800817f fetch 1 ,mem_debug_config 249d c28324ba bbit1 debug_tx_pattern ,prepare_tx_txpat 249e 680140c8 fetch 2 ,mem_retransmission_cnt 249f 1fe0ffff increase -1 ,pdata 24a0 600140c8 store 2 ,mem_retransmission_cnt 24a1 203a24a5 branch prepare_tx_nomore_retransmit ,blank 24a2 6800c0c5 fetch 1 ,mem_last_type 24a3 98000200 iforce type 24a4 20600000 rtn prepare_tx_nomore_retransmit: 24a5 44a64009 bpatch patch09_4 ,mem_patch09 24a6 20402687 call clear_got_tx prepare_tx_no_retransmit: 24a7 20402725 call check_esco_amaddr 24a8 2020a4b0 branch prepare_tx_pollnull ,true 24a9 2040600a call send_lmp 24aa 203424be branch prepare_tx_sendlmp ,user 24ab 6800804b fetch 1 ,mem_op 24ac c28324c0 bbit1 op_txl2cap ,prepare_tx_sendl2cap 24ad c502a4b4 bmark1 mark_loopback ,prepare_tx_loopback 24ae 6800817f fetch 1 ,mem_debug_config 24af c28324ba bbit1 debug_tx_pattern ,prepare_tx_txpat prepare_tx_pollnull: 24b0 18000201 force type_poll ,type 24b1 20748000 rtn master 24b2 18000200 force type_null ,type 24b3 20600000 rtn prepare_tx_loopback: 24b4 44a6c009 bpatch patch09_5 ,mem_patch09 24b5 68008019 fetch 1 ,mem_rx_type 24b6 98000200 iforce type 24b7 c1808000 rtnne 1 24b8 18000200 force type_null ,type 24b9 20600000 rtn prepare_tx_txpat: 24ba 68008158 fetch 1 ,test_mode_packet_type 24bb 1fe1020f and pdata ,0xf ,type 24bc 79200005 set1 mark_loopback ,mark 24bd 20600000 rtn prepare_tx_sendlmp: 24be 18000213 force type_lmp ,type 24bf 202024c1 branch set_wait_ack prepare_tx_sendl2cap: 24c0 204024ca call tx_l2cap_type set_wait_ack: 24c1 44a74009 bpatch patch09_6 ,mem_patch09 24c2 68088047 fetcht 1 ,mem_arq 24c3 79200403 set1 wack ,temp 24c4 60088047 storet 1 ,mem_arq 24c5 18227e00 deposit type 24c6 6000c0c5 store 1 ,mem_last_type 24c7 5800ffff setarg 0xffff 24c8 600140c8 store 2 ,mem_retransmission_cnt 24c9 20600000 rtn tx_l2cap_type: 24ca 44a7c009 bpatch patch09_7 ,mem_patch09 24cb 6800804c fetch 1 ,mem_state_map 24cc 2feffe05 isolate1 smap_edr ,pdata 24cd 680141dc fetch 2 ,mem_tx_len 24ce 2020a4e0 branch tx_l2cap_type_edr ,true 24cf 18000203 force type_dm1 ,type 24d0 1fe67c11 sub pdata ,17 ,null 24d1 20610000 rtn positive 24d2 18000204 force type_dh1 ,type 24d3 1fe67c1b sub pdata ,27 ,null 24d4 20610000 rtn positive 24d5 1800020a force type_dm3 ,type 24d6 1fe67c79 sub pdata ,121 ,null 24d7 20610000 rtn positive 24d8 1800020b force type_dh3 ,type 24d9 1fe67cb7 sub pdata ,183 ,null 24da 20610000 rtn positive 24db 1800020e force type_dm5 ,type 24dc 1fe67ce0 sub pdata ,224 ,null 24dd 20610000 rtn positive 24de 1800020f force type_dh5 ,type 24df 20600000 rtn tx_l2cap_type_edr: 24e0 18000203 force type_dm1 ,type 24e1 1fe67c11 sub pdata ,17 ,null 24e2 20610000 rtn positive 24e3 18000204 force type_dh1 ,type 24e4 1fe67c36 sub pdata ,54 ,null 24e5 20610000 rtn positive 24e6 1800020a force type_dm3 ,type 24e7 d840016f arg 367 ,temp 24e8 98467c00 isub temp ,null 24e9 24610000 nrtn positive 24ea 1800020e force type_dm5 ,type 24eb d84002a7 arg 679 ,temp 24ec 98467c00 isub temp ,null 24ed 24610000 nrtn positive 24ee 1800020f force type_dh5 ,type 24ef 20600000 rtn slave_receive_master_slot: 24f0 68008030 fetch 1 ,mem_state 24f1 c300a4f5 bbit0 state_insniff ,slave_receive_notsniff 24f2 68010032 fetch 2 ,mem_tsniff 24f3 203a24f5 branch slave_receive_notsniff ,blank 24f4 243724f7 nbranch slave_receive_sniff ,attempt slave_receive_notsniff: 24f5 20402a4f call rf_setup_time_master_slot slave_receive_access: 24f6 1d00c201 add clke_bt ,1 ,bt_clk slave_receive_sniff: 24f7 78287c00 enable swfine 24f8 6801003e fetch 2 ,mem_rx_window 24f9 1fe37e00 rshift pdata ,pdata 24fa d8400500 arg param_pll_setup ,temp 24fb 9840fe00 iadd temp ,pdata 24fc 20402a24 call ahead_window 24fd 204028ea call fetch_extm_bt_adr 24fe 18004803 force 0x03 ,freq_mode 24ff 204028cc call rx_radio_freq 2500 2040242a call init_rx_packet_flags 2501 204029f1 call prep_crypt 2502 44a8400a bpatch patch0a_0 ,mem_patch0a 2503 6801003e fetch 2 ,mem_rx_window 2504 1fe37e00 rshift pdata ,pdata 2505 20402a24 call ahead_window 2506 204029eb call start_receiver 2507 7826fc00 enable decode_fec0 2508 6801003e fetch 2 ,mem_rx_window 2509 d84003bb arg param_clke_cal ,temp 250a 9840b600 iadd temp ,stop_watch 250b 37c18400 correlate null ,timeout 250c 1b420400 copy clke ,temp 250d 600b009a storet 6 ,mem_sync_clke 250e 7846fc00 disable decode_fec0 250f 246c0000 nrtn sync 2510 dd2003bb arg param_clke_cal ,clke_rt 2511 1c225000 copy bt_clk ,clke_bt 2512 2035ab05 branch lpm_adjust_clk ,wake 2513 20600000 rtn slave_conn_recv_packet: 2514 44a8c00a bpatch patch0a_1 ,mem_patch0a 2515 204024f0 call slave_receive_master_slot 2516 242c28f9 nbranch shutdown_radio ,sync 2517 204029bb call save_rssi 2518 c588a51c bmark0 mark_testmode ,receive_packet 2519 680100f6 fetch 2 ,mem_tst_pktcnt_sync 251a 1fe0fe01 increase 1 ,pdata 251b 600100f6 store 2 ,mem_tst_pktcnt_sync receive_packet: 251c 1c230400 rshift bt_clk ,temp 251d 18419c40 or temp ,0x40 ,white_init receive_packet_whitened: 251e 44a9400a bpatch patch0a_2 ,mem_patch0a 251f 7823fc00 enable enable_white 2520 78257c00 enable enable_hec 2521 7825fc00 enable decode_fec1 2522 09800003 parse demod ,bucket ,3 2523 198cfe00 rshift8 pwindow ,pdata 2524 6000815d store 1 ,mem_temp_am_addr 2525 09800004 parse demod ,bucket ,4 2526 08008007 inject bucket ,7 2527 19827e00 copy pwindow ,pdata 2528 60008019 store 1 ,mem_rx_type 2529 09800003 parse demod ,bucket ,3 252a 198cfe00 rshift8 pwindow ,pdata 252b 6000815e store 1 ,mem_temp_arq 252c 68008019 fetch 1 ,mem_rx_type 252d 1fe67c03 sub pdata ,3 ,null 252e 20212533 branch receive_packet_noedr ,positive 252f c003a533 beq 7 ,receive_packet_noedr 2530 6800804c fetch 1 ,mem_state_map 2531 2feffe05 isolate1 smap_edr ,pdata 2532 7920aa01 setflag true ,psk ,radio_ctrl receive_packet_noedr: 2533 44a9c00a bpatch patch0a_3 ,mem_patch0a 2534 09800008 parse demod ,bucket ,8 2535 7845fc00 disable decode_fec1 2536 78457c00 disable enable_hec 2537 20232631 branch error_header ,crc_failed 2538 c588a53c bmark0 mark_testmode ,receive_packet_amchk 2539 680100f8 fetch 2 ,mem_tst_pktcnt_hec 253a 1fe0fe01 increase 1 ,pdata 253b 600100f8 store 2 ,mem_tst_pktcnt_hec receive_packet_amchk: 253c 44aa400a bpatch patch0a_4 ,mem_patch0a 253d 6800815d fetch 1 ,mem_temp_am_addr 253e 2fe00e00 compare 0 ,pdata ,0x07 253f 7920800a setflag true ,mark_am_addr_broadcast ,mark 2540 2020a54c branch am_addr_ok ,true 2541 a8800e00 icompare 0x07 ,am_addr 2542 2020a54b branch am_addr_match ,true 2543 c583a64d bmark0 mark_esco ,end_of_packet 2544 680880b0 fetcht 1 ,mem_saved_amaddr 2545 a8400e00 icompare 0x7 ,temp 2546 2420a64d nbranch end_of_packet ,true 2547 68008047 fetch 1 ,mem_arq 2548 793ffe05 set0 arqnx ,pdata 2549 79207e04 set1 flowx ,pdata 254a 60008047 store 1 ,mem_arq am_addr_match: 254b 7836fc00 enable match am_addr_ok: 254c 44aac00a bpatch patch0a_5 ,mem_patch0a 254d 68008019 fetch 1 ,mem_rx_type 254e 1fe20200 icopy type 254f c505255b bmark1 mark_am_addr_broadcast ,arqn_bypass 2550 6808815e fetcht 1 ,mem_temp_arq 2551 68008047 fetch 1 ,mem_arq 2552 793ffe00 set0 flow ,pdata 2553 284ffe00 isolate1 flow ,temp 2554 7920fe00 setflag true ,flow ,pdata 2555 284ffe01 isolate1 arqn ,temp 2556 7920fe01 setflag true ,arqn ,pdata 2557 60008047 store 1 ,mem_arq 2558 284c0001 isolate0 arqn ,temp 2559 2020a55b branch arqn_bypass ,true 255a 20402687 call clear_got_tx arqn_bypass: 255b 44ab400a bpatch patch0a_6 ,mem_patch0a 255c d8400000 arg 0 ,temp 255d 20402a1c call reserve_slot 255e 18217e0f and type ,0xf ,pdata 255f c000a587 beq type_poll ,process_poll 2560 c000264d beq type_null ,end_of_packet 2561 c0012659 beq type_fhs ,process_fhs 2562 6808815e fetcht 1 ,mem_temp_arq 2563 68008047 fetch 1 ,mem_arq 2564 a8400800 icompare 0x04 ,temp 2565 2420a569 nbranch rx_type_dispatch ,true 2566 c5852568 bmark0 mark_am_addr_broadcast ,failed_seqn 2567 c303a569 bbit0 bcast1 ,rx_type_dispatch failed_seqn: 2568 7920000f set1 mark_old_packet ,mark rx_type_dispatch: 2569 44abc00a bpatch patch0a_7 ,mem_patch0a 256a 18227e00 deposit type 256b c001a589 beq type_dm1 ,process_dm1 256c c002258d beq type_dh1 ,process_dh1 256d c003a578 beq type_hv3 ,process_hev 256e c004258c beq type_3dh1 ,process_3dh1 256f d8400004 arg 4 ,temp 2570 20402a1c call reserve_slot 2571 c0052588 beq type_dm3 ,process_dm3 2572 c005a58b beq type_dh3 ,process_dh3 2573 d8400008 arg 8 ,temp 2574 20402a1c call reserve_slot 2575 c0072588 beq type_dm5 ,process_dm5 2576 c007a58b beq type_dh5 ,process_dh5 2577 20600000 rtn process_hev: 2578 44ac400b bpatch patch0b_0 ,mem_patch0b 2579 7826fc00 enable decode_fec0 257a 7824fc00 enable enable_crc 257b 78277c00 enable encrypt 257c d8a000d1 arg mem_sco_ibuf ,contw 257d 1800721e force 30 ,loopcnt process_hev_loop: 257e 09800008 parse demod ,bucket ,8 257f 19897e00 rshift3 pwindow ,pdata 2580 e0a08000 istore 1 ,contw 2581 c200257e loop process_hev_loop 2582 c583a64d bmark0 mark_esco ,end_of_packet 2583 09800010 parse demod ,bucket ,16 2584 7d230008 nsetflag crc_failed ,mark_esco_rxok ,mark 2585 2023263d branch error_payload ,crc_failed 2586 20202620 branch ack_payload process_poll: 2587 2020264d branch end_of_packet process_dm3: process_dm5: 2588 79200010 set1 mark_longpacket ,mark process_dm1: 2589 78267c00 enable decode_fec2 258a 2020258e branch process_dmh process_dh3: process_dh5: 258b 79200010 set1 mark_longpacket ,mark process_3dh1: 258c 79202a02 set1 psk3m ,radio_ctrl process_dh1: 258d 7826fc00 enable decode_fec0 process_dmh: 258e 44acc00b bpatch patch0b_1 ,mem_patch0b 258f c500a64d bmark1 mark_rxbuf_inuse ,end_of_packet 2590 2aac0001 isolate0 psk ,radio_ctrl 2591 2020a59a branch process_dmh_noedr ,true 2592 7843fc00 disable enable_white 2593 7826fc00 enable decode_fec0 2594 78467c00 disable decode_fec2 2595 1c409602 add clkn_bt ,2 ,timeup 2596 34530400 correlate clkn_bt ,meet 2597 242c263d nbranch error_payload ,sync 2598 79200010 set1 mark_longpacket ,mark 2599 7823fc00 enable enable_white process_dmh_noedr: 259a 44ad400b bpatch patch0b_2 ,mem_patch0b 259b 78277c00 enable encrypt 259c 7824fc00 enable enable_crc 259d 09800003 parse demod ,bucket ,3 259e 198cfe00 rshift8 pwindow ,pdata 259f 60008180 store 1 ,mem_lch_code 25a0 09800005 parse demod ,bucket ,5 25a1 c50825a5 bmark1 mark_longpacket ,process_dmh_long 25a2 19897200 rshift3 pwindow ,loopcnt 25a3 1f297200 rshift3 loopcnt ,loopcnt 25a4 202025a8 branch process_dmh_common process_dmh_long: 25a5 09800005 parse demod ,bucket ,5 25a6 19837200 rshift pwindow ,loopcnt 25a7 09800003 parse demod ,bucket ,3 process_dmh_common: 25a8 44adc00b bpatch patch0b_3 ,mem_patch0b 25a9 1f227e00 deposit loopcnt 25aa 6001015f store 2 ,mem_len 25ab 203a25e8 branch process_dmh_data_end ,blank 25ac 9ea67c00 isub mask3ff ,null 25ad 2021263d branch error_payload ,positive 25ae 44ae400b bpatch patch0b_4 ,mem_patch0b 25af 793f8000 set0 mark_fhs_eir ,mark 25b0 68008180 fetch 1 ,mem_lch_code 25b1 1fe17e03 and_into 0x03 ,pdata 25b2 d8a00551 arg mem_rxbuf ,contw 25b3 c001a5ba beq llid_lmp ,process_lmp 25b4 c508a5e4 bmark1 mark_testmode ,process_dmh_data 25b5 68008180 fetch 1 ,mem_lch_code 25b6 1fe17e03 and_into 0x03 ,pdata 25b7 c00125bf beq llid_l2cap_start ,process_dmh_data_l2cap_start_pkt 25b8 c000a5d3 beq llid_l2cap_cont ,process_dmh_data_l2cap_continue_pkt 25b9 2020263d branch error_payload process_lmp: 25ba 6801015f fetch 2 ,mem_len 25bb 1fe67c70 sub pdata ,0x70 ,null 25bc 2421263d nbranch error_payload ,positive 25bd c507a620 bmark1 mark_old_packet ,ack_payload 25be 202025e4 branch process_dmh_data process_dmh_data_l2cap_start_pkt: 25bf 44aec00b bpatch patch0b_5 ,mem_patch0b 25c0 c507a620 bmark1 mark_old_packet ,ack_payload 25c1 6801015f fetch 2 ,mem_len 25c2 d84002e0 arg 0x2e0 ,temp 25c3 98467c00 isub temp ,null 25c4 2021263d branch error_payload ,positive 25c5 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse 25c6 c30025c9 bbit0 l2cap_inuse_buff1 ,process_dmh_data_into_buff1 25c7 c300a5ce bbit0 l2cap_inuse_buff2 ,process_dmh_data_into_buff2 25c8 2020264d branch end_of_packet process_dmh_data_into_buff1: 25c9 70026101 jam 1 ,mem_l2cap_rxbuff_new 25ca 6801025d fetch 2 ,mem_l2cap_rxbuff1_len 25cb c080264d bne 0 ,end_of_packet 25cc d8a01000 arg mem_l2cap_rxbuff1 ,contw 25cd 202025e4 branch process_dmh_data process_dmh_data_into_buff2: 25ce 70026102 jam 2 ,mem_l2cap_rxbuff_new 25cf 6801025f fetch 2 ,mem_l2cap_rxbuff2_len 25d0 c080264d bne 0 ,end_of_packet 25d1 d8a01400 arg mem_l2cap_rxbuff2 ,contw 25d2 202025e4 branch process_dmh_data process_dmh_data_l2cap_continue_pkt: 25d3 44af400b bpatch patch0b_6 ,mem_patch0b 25d4 c507a620 bmark1 mark_old_packet ,ack_payload 25d5 6801015f fetch 2 ,mem_len 25d6 d84002e0 arg 0x2e0 ,temp 25d7 98467c00 isub temp ,null 25d8 2021263d branch error_payload ,positive 25d9 68008261 fetch 1 ,mem_l2cap_rxbuff_new 25da c000a5dd beq 1 ,process_dmh_data_l2cap_continue_pkt1 25db c00125e1 beq 2 ,process_dmh_data_l2cap_continue_pkt2 25dc 2020264d branch end_of_packet process_dmh_data_l2cap_continue_pkt1: 25dd d8a01000 arg mem_l2cap_rxbuff1 ,contw 25de 6801025d fetch 2 ,mem_l2cap_rxbuff1_len 25df 98a08a00 iadd contw ,contw 25e0 202025e4 branch process_dmh_data process_dmh_data_l2cap_continue_pkt2: 25e1 d8a01400 arg mem_l2cap_rxbuff2 ,contw 25e2 6801025f fetch 2 ,mem_l2cap_rxbuff2_len 25e3 98a08a00 iadd contw ,contw process_dmh_data: 25e4 09800008 parse demod ,bucket ,8 25e5 19897e00 rshift3 pwindow ,pdata 25e6 e0a08000 istore 1 ,contw 25e7 c20025e4 loop process_dmh_data process_dmh_data_end: 25e8 44afc00b bpatch patch0b_7 ,mem_patch0b 25e9 09800010 parse demod ,bucket ,16 25ea 20232637 branch error_payload_crc ,crc_failed 25eb 6800c363 fetch 1 ,mem_l2cap_flow_ctrl_flag 25ec c000a64d beq l2cap_flow_ctrl_enable ,end_of_packet 25ed c508a60d bmark1 mark_testmode ,process_dmh_cont 25ee c507a64a bmark1 mark_old_packet ,redundant_payload 25ef 68008180 fetch 1 ,mem_lch_code 25f0 2fe00603 compare 3 ,pdata ,3 25f1 2020a60d branch process_dmh_cont ,true 25f2 6801015f fetch 2 ,mem_len 25f3 203a260d branch process_dmh_cont ,blank 25f4 44b0400c bpatch patch0c_0 ,mem_patch0c 25f5 68008261 fetch 1 ,mem_l2cap_rxbuff_new 25f6 c000a5f9 beq 1 ,process_l2cap_pass_crc_buff1 25f7 c0012603 beq 2 ,process_l2cap_pass_crc_buff2 25f8 20202a8c branch assert process_l2cap_pass_crc_buff1: 25f9 6801025d fetch 2 ,mem_l2cap_rxbuff1_len 25fa 6809015f fetcht 2 ,mem_len 25fb 9840fe00 iadd temp ,pdata 25fc 6001025d store 2 ,mem_l2cap_rxbuff1_len 25fd c0002a8c beq 0 ,assert 25fe 68091000 fetcht 2 ,mem_l2cap_rxbuff1 25ff 18408404 increase 4 ,temp 2600 98467c00 isub temp ,null 2601 2042a747 call l2cap_buff1_inuse ,zero 2602 2020260d branch process_dmh_cont process_l2cap_pass_crc_buff2: 2603 6801025f fetch 2 ,mem_l2cap_rxbuff2_len 2604 6809015f fetcht 2 ,mem_len 2605 9840fe00 iadd temp ,pdata 2606 6001025f store 2 ,mem_l2cap_rxbuff2_len 2607 c0002a8c beq 0 ,assert 2608 68091400 fetcht 2 ,mem_l2cap_rxbuff2 2609 18408404 add temp ,4 ,temp 260a 98467c00 isub temp ,null 260b 2042a74b call l2cap_buff2_inuse ,zero 260c 2020260d branch process_dmh_cont process_dmh_cont: 260d 44b0c00c bpatch patch0c_1 ,mem_patch0c 260e 6808804c fetcht 1 ,mem_state_map 260f 68008180 fetch 1 ,mem_lch_code 2610 2fe00603 compare 3 ,pdata ,0x03 2611 79208406 setflag true ,smap_rxlmp ,temp 2612 7d208407 nsetflag true ,smap_rxl2cap ,temp 2613 6008804c storet 1 ,mem_state_map 2614 2420a616 nbranch process_dmh_cont_rxbuf_not_use ,true 2615 79200001 set1 mark_rxbuf_inuse ,mark process_dmh_cont_rxbuf_not_use: 2616 c588a620 bmark0 mark_testmode ,ack_payload 2617 284ffe06 isolate1 smap_rxlmp ,temp 2618 2020a620 branch ack_payload ,true 2619 680100fa fetch 2 ,mem_tst_pktcnt_crc 261a 1fe0fe01 increase 1 ,pdata 261b 600100fa store 2 ,mem_tst_pktcnt_crc 261c 79200005 set1 mark_loopback ,mark 261d 793f8407 set0 smap_rxl2cap ,temp 261e 793f8001 set0 mark_rxbuf_inuse ,mark 261f 6008804c storet 1 ,mem_state_map ack_payload: 2620 44b1400c bpatch patch0c_2 ,mem_patch0c 2621 6808815e fetcht 1 ,mem_temp_arq 2622 68008047 fetch 1 ,mem_arq 2623 79207e05 set1 arqnx ,pdata 2624 284ffe02 isolate1 seqn ,temp 2625 7920fe02 setflag true ,seqn ,pdata 2626 280ffe0a isolate1 mark_am_addr_broadcast ,mark 2627 7920fe07 setflag true ,bcast1 ,pdata 2628 60008047 store 1 ,mem_arq 2629 6801015f fetch 2 ,mem_len 262a 243a264d nbranch end_of_packet ,blank 262b 6800804c fetch 1 ,mem_state_map 262c 793ffe07 set0 smap_rxl2cap ,pdata 262d 6000804c store 1 ,mem_state_map 262e 68008180 fetch 1 ,mem_lch_code 262f 2fe00e01 compare 0x01 ,pdata ,0x07 2630 2020264d branch end_of_packet error_header: 2631 44b1c00c bpatch patch0c_3 ,mem_patch0c 2632 7856fc00 disable match 2633 6801001a fetch 2 ,mem_rx_hec_err 2634 1fe0fe01 increase 1 ,pdata 2635 6001001a store 2 ,mem_rx_hec_err 2636 2020264d branch end_of_packet error_payload_crc: 2637 6801001c fetch 2 ,mem_rx_crc_err 2638 1fe0fe01 increase 1 ,pdata 2639 6001001c store 2 ,mem_rx_crc_err 263a 2040263e call discard_pkt 263b c588a63d bmark0 mark_testmode ,error_payload 263c 79200005 set1 mark_loopback ,mark error_payload: 263d 2020264d branch end_of_packet discard_pkt: 263e 44b2400c bpatch patch0c_4 ,mem_patch0c 263f 68008180 fetch 1 ,mem_lch_code 2640 2fe00603 compare 3 ,pdata ,0x03 2641 2420a646 nbranch discard_pkt_l2cap ,true discard_pkt_lmp: 2642 6808804c fetcht 1 ,mem_state_map 2643 793f8406 set0 smap_rxlmp ,temp 2644 6008804c storet 1 ,mem_state_map 2645 20600000 rtn discard_pkt_l2cap: 2646 6808804c fetcht 1 ,mem_state_map 2647 793f8407 set0 smap_rxl2cap ,temp 2648 6008804c storet 1 ,mem_state_map 2649 20204c0b branch h4_send_acl_trigger_clear redundant_payload: 264a 68008047 fetch 1 ,mem_arq 264b 79207e05 set1 arqnx ,pdata 264c 60008047 store 1 ,mem_arq end_of_packet: 264d 44b2c00c bpatch patch0c_5 ,mem_patch0c 264e 784efc00 disable encode_fec0 264f 784e7c00 disable encode_fec2 2650 7846fc00 disable decode_fec0 2651 78467c00 disable decode_fec2 2652 7844fc00 disable enable_crc 2653 78477c00 disable encrypt 2654 7843fc00 disable enable_white 2655 2030a8f9 branch shutdown_radio ,is_rx 2656 37d38200 until null ,tx_clear 2657 20000064 nop 100 2658 202028f9 branch shutdown_radio process_fhs: 2659 44b3400c bpatch patch0c_6 ,mem_patch0c 265a 7824fc00 enable enable_crc 265b 78267c00 enable decode_fec2 265c 09800048 parse demod ,bucket ,72 265d 2feffe3a isolate1 58 ,pdata 265e 79208000 setflag true ,mark_fhs_eir ,mark 265f 1c020400 copy bt_adr ,temp 2660 57e04000 ialigned bt_adr 2661 57e03c00 ialigned fhs0 2662 782afc00 pulse recalc 2663 380bffff setsect 2 ,0xfffff 2664 380cffff setsect 3 ,0x0ffff 2665 20000020 nop 32 2666 29a80000 iverify fhs_parity 2667 1d827e00 deposit lap 2668 60018178 store 3 ,extm_lap 2669 1da27e00 deposit uap 266a 6000817b store 1 ,extm_uap 266b 18424000 copy temp ,bt_adr 266c 2020a66e branch fhs_parity_ok ,true 266d 2020263d branch error_payload fhs_parity_ok: 266e 44b3c00c bpatch patch0c_7 ,mem_patch0c 266f 09800048 parse demod ,bucket ,72 2670 57e03e00 ialigned fhs1 2671 57e00800 ialigned am_addr 2672 57e05c00 ialigned nap 2673 57e02400 ialigned regb 2674 18007e00 force 0 ,pdata 2675 09800010 parse demod ,bucket ,16 2676 2023263d branch error_payload ,crc_failed 2677 5ffffffc setarg 0x0ffffffc 2678 9a417e00 iand regb ,pdata 2679 60020165 store 4 ,mem_clke_bt 267a 1ba27e00 deposit fhs_class 267b 60018175 store 3 ,extm_class 267c 1b827e00 deposit fhs_misc 267d 60008173 store 1 ,extm_fhs_misc 267e 18827e00 deposit am_addr 267f 60008174 store 1 ,extm_newconn_am_addr 2680 1dc27e00 deposit nap 2681 6001017c store 2 ,extm_nap 2682 1c227e00 deposit bt_clk 2683 08008220 inject rxf ,32 2684 28201e02 compare type_fhs ,type ,0x0f 2685 7920800b setflag true ,mark_fhs_already_good ,mark 2686 2020264d branch end_of_packet clear_got_tx: 2687 44b4400d bpatch patch0d_0 ,mem_patch0d 2688 68008047 fetch 1 ,mem_arq 2689 c4018000 rtnbit0 wack 268a 793ffe03 set0 wack ,pdata 268b 79407e06 setflip seqnx ,pdata 268c 60008047 store 1 ,mem_arq 268d 6800c0c5 fetch 1 ,mem_last_type 268e c009a69c beq type_lmp ,clear_got_txlmp 268f c1038000 rtneq type_hv3 2690 6800804b fetch 1 ,mem_op 2691 c4030000 rtnbit0 op_txl2cap ,pdata 2692 793ffe06 set0 op_txl2cap ,pdata 2693 79207e07 set1 op_pkt_comp ,pdata 2694 6000804b store 1 ,mem_op 2695 793f8002 set0 mark_tx_l2cap ,mark 2696 68014246 fetch 2 ,mem_l2cap_tx_multi_offset 2697 247a0000 nrtn blank 2698 6800804b fetch 1 ,mem_op 2699 793ffe07 set0 op_pkt_comp ,pdata 269a 6000804b store 1 ,mem_op 269b 2020525d branch l2cap_malloc_free clear_got_txlmp: 269c 44b4c00d bpatch patch0d_1 ,mem_patch0d 269d 680084b7 fetch 1 ,mem_lmo_header_opcode 269e 1fe37e00 rshift pdata ,pdata 269f c008a6b8 beq lmp_start_encryption_req ,start_encryption 26a0 c00926c0 beq lmp_stop_encryption_req ,stop_encryption 26a1 c00c26e9 beq lmp_unsniff_req ,sniff_exit 26a2 c03fa6a8 beq lmp_escape ,clear_lmp_escape 26a3 c1818000 rtnne lmp_accepted 26a4 680084b8 fetch 1 ,mem_lmo_payload 26a5 c015a6b0 beq lmp_sco_link_req ,sco_link_req_by_slave 26a6 c008a6ab beq lmp_start_encryption_req ,clear_send_setup_complete 26a7 20600000 rtn clear_lmp_escape: 26a8 680084b8 fetch 1 ,mem_lmo_payload 26a9 79207e07 set1 7 ,pdata 26aa 20600000 rtn clear_send_setup_complete: 26ab 20748000 rtn master 26ac 68008030 fetch 1 ,mem_state 26ad c3820000 rtnbit1 state_conn_comp 26ae 70007c31 jam lmp_setup_complete ,mem_lmo_opcode2 26af 20600000 rtn sco_link_req_by_slave: 26b0 20748000 rtn master 26b1 68008031 fetch 1 ,mem_mode 26b2 2feffe04 isolate1 send_sco_when_slave ,pdata 26b3 2020a6b5 branch clean_mem_mode ,true 26b4 20600000 rtn clean_mem_mode: 26b5 793ffe04 set0 send_sco_when_slave ,pdata 26b6 60008031 store 1 ,mem_mode 26b7 20600000 rtn start_encryption: 26b8 44b5400d bpatch patch0d_2 ,mem_patch0d 26b9 6800804c fetch 1 ,mem_state_map 26ba 79207e02 set1 smap_encryption ,pdata 26bb 6000804c store 1 ,mem_state_map 26bc 70801101 jam 1 ,core_encrypt 26bd 68008030 fetch 1 ,mem_state 26be 2feffe04 isolate1 state_conn_comp ,pdata 26bf 20600000 rtn stop_encryption: 26c0 44b5c00d bpatch patch0d_3 ,mem_patch0d 26c1 6800804c fetch 1 ,mem_state_map 26c2 793ffe02 set0 smap_encryption ,pdata 26c3 6000804c store 1 ,mem_state_map 26c4 70801100 jam 0 ,core_encrypt 26c5 20600000 rtn sniff_init: 26c6 44b6400d bpatch patch0d_4 ,mem_patch0d 26c7 1c427e00 copy clkn_bt ,pdata 26c8 6002420c store 4 ,mem_lpm_delay_after_sniff 26c9 1c40a203 add clkn_bt ,3 ,rega 26ca 2034a6cc branch sniff_init_master ,master 26cb 1d00a203 add clke_bt ,3 ,rega sniff_init_master: 26cc 68090032 fetcht 2 ,mem_tsniff 26cd 1a227e00 deposit rega 26ce 793ffe1b set0 27 ,pdata 26cf 9846fc00 idiv temp 26d0 68010075 fetch 2 ,mem_dsniff 26d1 20407f86 call wait_div_end 26d2 18072600 remainder regc 26d3 9a667e00 isub regc ,pdata 26d4 202126d6 branch sniff_init_nowrap ,positive 26d5 9840fe00 iadd temp ,pdata sniff_init_nowrap: 26d6 9a20fe00 iadd rega ,pdata 26d7 60020034 store 4 ,mem_sniff_anchor 26d8 70455b00 jam switch_flag_init ,mem_switch_flag 26d9 68008030 fetch 1 ,mem_state 26da 79207e01 set1 state_insniff ,pdata 26db 60008030 store 1 ,mem_state 26dc 68008073 fetch 1 ,mem_sniff_attempt 26dd 6000808a store 1 ,mem_current_sniff_attempt 26de 58000000 setarg 0 26df 6001c169 store 3 ,mem_sniff_rcv 26e0 6001c16c store 3 ,mem_sniff_lost 26e1 6000c159 store 1 ,mem_sniff_unint_lost 26e2 700a990b jam bt_evt_enter_sniff ,mem_fifo_temp 26e3 20407d86 call ui_ipc_send_event 26e4 680140c1 fetch 2 ,mem_rx_window_sniff 26e5 6001003e store 2 ,mem_rx_window 26e6 24748000 nrtn master 26e7 18808fff add am_addr ,-1 ,queue 26e8 20600000 rtn sniff_exit: 26e9 44b6c00d bpatch patch0d_5 ,mem_patch0d 26ea 68008030 fetch 1 ,mem_state 26eb c4008000 rtnbit0 state_insniff 26ec 793ffe01 set0 state_insniff ,pdata 26ed 60008030 store 1 ,mem_state 26ee 680140bf fetch 2 ,mem_rx_window_init 26ef 6001003e store 2 ,mem_rx_window 26f0 7855fc00 disable wake 26f1 700a990c jam bt_evt_exit_sniff ,mem_fifo_temp 26f2 20207d86 branch ui_ipc_send_event check_attempt: 26f3 44b7400d bpatch patch0d_6 ,mem_patch0d 26f4 78377c00 enable attempt 26f5 68008030 fetch 1 ,mem_state 26f6 c280a700 bbit1 state_insniff ,check_attempt_sniff 26f7 c6088000 rtnmark1 mark_testmode 26f8 68008047 fetch 1 ,mem_arq 26f9 c3818000 rtnbit1 wack 26fa 68008048 fetch 1 ,mem_lmp_to_send 26fb 247a0000 nrtn blank 26fc 6800804b fetch 1 ,mem_op 26fd c3830000 rtnbit1 op_txl2cap check_attempt_nomore: 26fe 18007e00 force 0 ,pdata 26ff 20600000 rtn check_attempt_sniff: 2700 c301270f bbit0 state_insco ,check_attempt_not_sco 2701 6800808a fetch 1 ,mem_current_sniff_attempt 2702 c0012706 beq 2 ,check_attempt_sniff_restore_sco 2703 68008047 fetch 1 ,mem_arq 2704 c281a718 bbit1 wack ,check_attempt_notimeout 2705 c5842718 bmark0 mark_esco_rxok ,check_attempt_notimeout check_attempt_sniff_restore_sco: 2706 2434a718 nbranch check_attempt_notimeout ,master 2707 68008048 fetch 1 ,mem_lmp_to_send 2708 243a2718 nbranch check_attempt_notimeout ,blank check_attempt_sco_master: 2709 680080ef fetch 1 ,mem_sco_poll 270a 1fe0ffff increase -1 ,pdata 270b 600080ef store 1 ,mem_sco_poll 270c 243a26fe nbranch check_attempt_nomore ,blank 270d 7000ef10 jam param_sco_poll ,mem_sco_poll 270e 20202718 branch check_attempt_notimeout check_attempt_not_sco: 270f 6800808a fetch 1 ,mem_current_sniff_attempt 2710 c080a718 bne 1 ,check_attempt_notimeout 2711 6800808b fetch 1 ,mem_current_sniff_timeout 2712 203a2718 branch check_attempt_notimeout ,blank 2713 1fe0ffff increase -1 ,pdata 2714 6000808b store 1 ,mem_current_sniff_timeout 2715 68008047 fetch 1 ,mem_arq 2716 c3818000 rtnbit1 wack 2717 24768000 nrtn match check_attempt_notimeout: 2718 6800808a fetch 1 ,mem_current_sniff_attempt 2719 1fe0ffff increase -1 ,pdata 271a 6000808a store 1 ,mem_current_sniff_attempt 271b 20600000 rtn sniff_check_window: 271c 44b7c00d bpatch patch0d_7 ,mem_patch0d 271d 78487c00 disable swfine 271e 18423600 copy temp ,stop_watch 271f 20402260 call context_search_sniff_window 2720 78547c00 disable user 2721 24628000 nrtn zero 2722 18003600 force 0 ,stop_watch 2723 78347c00 enable user 2724 20600000 rtn check_esco_amaddr: 2725 6800c158 fetch 1 ,mem_esco_addr 2726 a881fe00 icompare 0xff ,am_addr 2727 20600000 rtn parse_l2cap: 2728 44b8400e bpatch patch0e_0 ,mem_patch0e 2729 793f8001 set0 mark_rxbuf_inuse ,mark parse_l2cap_cont: 272a 70026a00 jam l2cap_rx_clear ,mem_l2cap_rx_done 272b 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse 272c 207a0000 rtn blank 272d 2feffe00 isolate1 l2cap_inuse_buff1 ,pdata 272e d8c01000 arg mem_l2cap_rxbuff1 ,contr 272f 2040cd79 call process_rx_l2cap_pkt ,true 2730 44b8c00e bpatch patch0e_1 ,mem_patch0e 2731 6800826a fetch 1 ,mem_l2cap_rx_done 2732 c000a73b beq l2cap_rx_done ,parse_l2cap_release_buff1 2733 70026a00 jam l2cap_rx_clear ,mem_l2cap_rx_done 2734 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse 2735 c4008000 rtnbit0 l2cap_inuse_buff2 2736 d8c01400 arg mem_l2cap_rxbuff2 ,contr 2737 20404d79 call process_rx_l2cap_pkt 2738 6800826a fetch 1 ,mem_l2cap_rx_done 2739 c000a741 beq l2cap_rx_done ,parse_l2cap_release_buff2 273a 20600000 rtn parse_l2cap_release_buff1: 273b 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse 273c 793ffe00 set0 l2cap_inuse_buff1 ,pdata 273d 60008263 store 1 ,mem_l2cap_rxbuff_inuse 273e 58000000 setarg 0 273f 6001025d store 2 ,mem_l2cap_rxbuff1_len 2740 20600000 rtn parse_l2cap_release_buff2: 2741 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse 2742 793ffe01 set0 l2cap_inuse_buff2 ,pdata 2743 60008263 store 1 ,mem_l2cap_rxbuff_inuse 2744 58000000 setarg 0 2745 6001025f store 2 ,mem_l2cap_rxbuff2_len 2746 20600000 rtn l2cap_buff1_inuse: 2747 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse 2748 79207e00 set1 l2cap_inuse_buff1 ,pdata 2749 60008263 store 1 ,mem_l2cap_rxbuff_inuse 274a 20600000 rtn l2cap_buff2_inuse: 274b 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse 274c 79207e01 set1 l2cap_inuse_buff2 ,pdata 274d 60008263 store 1 ,mem_l2cap_rxbuff_inuse 274e 20600000 rtn slave_send_access: 274f 44b9400e bpatch patch0e_2 ,mem_patch0e 2750 1d00c201 add clke_bt ,1 ,bt_clk 2751 204028ea call fetch_extm_bt_adr 2752 18004803 force 0x03 ,freq_mode 2753 204028d2 call tx_radio_freq 2754 20402a51 call start_transmitter 2755 20402a5f call start_tx_external 2756 20202a64 branch send_access_word slave_conn_send_packet: 2757 44b9c00e bpatch patch0e_3 ,mem_patch0e 2758 20402a4d call rf_setup_time_slave_slot 2759 1d027e00 deposit clke_bt 275a 680a40ca fetcht 4 ,mem_next_btclk 275b 98467e00 isub temp ,pdata 275c c1808000 rtnne 1 275d 28203e00 compare type_null ,type ,0x1f 275e 2420a761 nbranch slave_conn_send_access ,true 275f 68008019 fetch 1 ,mem_rx_type 2760 207a0000 rtn blank slave_conn_send_access: 2761 2040274f call slave_send_access transmit_packet: 2762 28203e10 compare type_id ,type ,0x1f 2763 2020a64d branch end_of_packet ,true 2764 1c230400 rshift bt_clk ,temp 2765 18419c40 or temp ,0x40 ,white_init transmit_packet_whitened: 2766 44ba400e bpatch patch0e_4 ,mem_patch0e 2767 7823fc00 enable enable_white 2768 78257c00 enable enable_hec 2769 782dfc00 enable encode_fec1 276a 793f8010 set0 mark_longpacket ,mark 276b 18827e00 deposit am_addr 276c 08008603 inject mod ,3 276d 18227e00 deposit type 276e 08008604 inject mod ,4 276f 68008047 fetch 1 ,mem_arq 2770 08008004 inject bucket ,4 2771 08008603 inject mod ,3 2772 78247c00 enable enable_parity 2773 08008608 inject mod ,8 2774 784dfc00 disable encode_fec1 2775 78447c00 disable enable_parity 2776 78457c00 disable enable_hec 2777 793faa02 set0 psk3m ,radio_ctrl 2778 d8400000 arg 0 ,temp 2779 20402a1c call reserve_slot 277a 44bac00e bpatch patch0e_5 ,mem_patch0e 277b 18217e1f and type ,0x1f ,pdata 277c c009a7b4 beq type_lmp ,transmit_lmp 277d c000264d beq type_null ,end_of_packet 277e c000a64d beq type_poll ,end_of_packet 277f c0012797 beq type_fhs ,transmit_fhs 2780 c001a7c5 beq type_dm1 ,transmit_dm1 2781 c00227cb beq type_dh1 ,transmit_dh1 2782 c003a78c beq type_hv3 ,transmit_hev 2783 c00427ca beq type_3dh1 ,transmit_3dh1 2784 d8400004 arg 4 ,temp 2785 20402a1c call reserve_slot 2786 c00527c7 beq type_dm3 ,transmit_dm3 2787 c005a7cd beq type_dh3 ,transmit_dh3 2788 d8400008 arg 8 ,temp 2789 20402a1c call reserve_slot 278a c007a7cd beq type_dh5 ,transmit_dh5 278b 202027c7 branch transmit_dm5 transmit_hev: 278c 44bb400e bpatch patch0e_6 ,mem_patch0e 278d 782efc00 enable encode_fec0 278e 7824fc00 enable enable_crc 278f 78277c00 enable encrypt 2790 1800721e force 30 ,loopcnt 2791 d8c000b3 arg mem_sco_obuf ,contr transmit_ev_loop: 2792 e8c08000 ifetch 1 ,contr 2793 08008608 inject mod ,8 2794 c2002792 loop transmit_ev_loop 2795 c503a7f7 bmark1 mark_esco ,transmit_end 2796 2020264d branch end_of_packet transmit_fhs: 2797 44bbc00e bpatch patch0e_7 ,mem_patch0e 2798 68008181 fetch 1 ,mem_fhs_am_addr 2799 1fe20800 icopy am_addr 279a 68008090 fetch 1 ,mem_fhs_misc 279b 1fe23800 icopy fhs_misc 279c 6801c0aa fetch 3 ,mem_class 279d 1fe23a00 icopy fhs_class 279e 680140a4 fetch 2 ,mem_nap 279f 1fe25c00 icopy nap 27a0 7824fc00 enable enable_crc 27a1 782e7c00 enable encode_fec2 27a2 1c022200 copy bt_adr ,rega 27a3 204028e2 call fetch_self_bt_adr 27a4 782afc00 pulse recalc 27a5 20000020 nop 32 27a6 1c221600 copy bt_clk ,timeup 27a7 68020161 fetch 4 ,mem_clkn_bt 27a8 1fe24200 icopy bt_clk 27a9 53c07e00 preload fhs0 27aa 79207e3a set1 58 ,pdata 27ab 08008648 inject mod ,72 27ac 53e07e00 preload fhs1 27ad 08008648 inject mod ,72 27ae 19624200 copy timeup ,bt_clk 27af 1a224000 copy rega ,bt_adr 27b0 78247c00 enable enable_parity 27b1 08008610 inject mod ,16 27b2 78447c00 disable enable_parity 27b3 2020264d branch end_of_packet transmit_lmp: 27b4 44bc400f bpatch patch0f_0 ,mem_patch0f 27b5 78277c00 enable encrypt 27b6 7824fc00 enable enable_crc 27b7 782e7c00 enable encode_fec2 27b8 680084b6 fetch 1 ,mem_lmo_header_length 27b9 1fe105f8 and pdata ,0x1f8 ,temp 27ba d8c004b6 arg mem_lmo_header_length ,contr 27bb 18408408 increase 8 ,temp transmit_lmp_loop: 27bc 1840a7b8 add temp ,-72 ,regc 27bd 242127c2 nbranch transmit_lmp_finish ,positive 27be e8c48000 ifetch 9 ,contr 27bf 08008648 inject mod ,72 27c0 1a620400 copy regc ,temp 27c1 202027bc branch transmit_lmp_loop transmit_lmp_finish: 27c2 e8c48000 ifetch 9 ,contr 27c3 08418600 iinject mod ,temp 27c4 202027f7 branch transmit_end transmit_dm1: 27c5 782e7c00 enable encode_fec2 27c6 202027d0 branch transmit_dmh transmit_dm3: transmit_dm5: 27c7 782e7c00 enable encode_fec2 27c8 79200010 set1 mark_longpacket ,mark 27c9 202027d0 branch transmit_dmh transmit_3dh1: 27ca 79202a02 set1 psk3m ,radio_ctrl transmit_dh1: 27cb 782efc00 enable encode_fec0 27cc 202027d0 branch transmit_dmh transmit_dh3: transmit_dh5: 27cd 79202a02 set1 psk3m ,radio_ctrl 27ce 782efc00 enable encode_fec0 27cf 79200010 set1 mark_longpacket ,mark transmit_dmh: 27d0 44bcc00f bpatch patch0f_1 ,mem_patch0f 27d1 6800804c fetch 1 ,mem_state_map 27d2 c302a7e5 bbit0 smap_edr ,transmit_noedr 27d3 18267c03 sub type ,3 ,null 27d4 202127e5 branch transmit_noedr ,positive 27d5 78477c00 disable encrypt 27d6 784e7c00 disable encode_fec2 27d7 782efc00 enable encode_fec0 27d8 7843fc00 disable enable_white 27d9 79202a01 set1 psk ,radio_ctrl 27da 2aaffe02 isolate1 psk3m ,radio_ctrl 27db 2020a7df branch transmit_edr3m ,true 27dc 580abeee setarg 0xabeee 27dd 08008614 inject mod ,20 27de 202027e3 branch transmit_edr_sync_end transmit_edr3m: 27df 585faeba setarg 0x5faeba 27e0 08008618 inject mod ,24 27e1 58000012 setarg 0x12 27e2 08008606 inject mod ,6 transmit_edr_sync_end: 27e3 7823fc00 enable enable_white 27e4 79200010 set1 mark_longpacket ,mark transmit_noedr: 27e5 78277c00 enable encrypt 27e6 7824fc00 enable enable_crc 27e7 c502a800 bmark1 mark_loopback ,transmit_loopback 27e8 6800c1db fetch 1 ,mem_tx_lch 27e9 08008603 inject mod ,3 27ea 680141dc fetch 2 ,mem_tx_len 27eb 98007200 iforce loopcnt 27ec c50827ef bmark1 mark_longpacket ,transmit_long 27ed 08008605 inject mod ,5 27ee 202027f0 branch transmit_stuff transmit_long: 27ef 0800860d inject mod ,13 transmit_stuff: 27f0 1f227e00 deposit loopcnt 27f1 203a27f7 branch transmit_end ,blank 27f2 6801016f fetch 2 ,mem_txptr 27f3 98000c00 iforce contr transmit_stuff_loop: 27f4 e8c08000 ifetch 1 ,contr 27f5 08008608 inject mod ,8 27f6 c20027f4 loop transmit_stuff_loop transmit_end: 27f7 78247c00 enable enable_parity 27f8 08008610 inject mod ,16 27f9 78447c00 disable enable_parity 27fa 204024c1 call set_wait_ack 27fb 6800804c fetch 1 ,mem_state_map 27fc c302a64d bbit0 smap_edr ,end_of_packet 27fd 18007e00 force 0 ,pdata 27fe 08008606 inject mod ,6 27ff 2020264d branch end_of_packet transmit_loopback: 2800 44bd400f bpatch patch0f_2 ,mem_patch0f 2801 c5082808 bmark1 mark_longpacket ,transmit_loopback_long transmit_loopback_short: 2802 68008180 fetch 1 ,mem_lch_code 2803 08008603 inject mod ,3 2804 6800815f fetch 1 ,mem_len 2805 98002600 iforce regc 2806 08008605 inject mod ,5 2807 2020280d branch transmit_loopback_cont transmit_loopback_long: 2808 68008180 fetch 1 ,mem_lch_code 2809 08008603 inject mod ,3 280a 6801015f fetch 2 ,mem_len 280b 98002600 iforce regc 280c 0800860d inject mod ,13 transmit_loopback_cont: 280d d8c00551 arg mem_rxbuf ,contr transmit_loopback_loop: 280e 1a627c00 copy regc ,null 280f 2022a814 branch transmit_loopback_end ,zero 2810 e8c08000 ifetch 1 ,contr 2811 08008608 inject mod ,8 2812 1a60a7ff increase -1 ,regc 2813 2020280e branch transmit_loopback_loop transmit_loopback_end: 2814 680100fc fetch 2 ,mem_tst_pktcnt_dmh 2815 1fe0fe01 increase 1 ,pdata 2816 600100fc store 2 ,mem_tst_pktcnt_dmh 2817 202027f7 branch transmit_end apply_switch_clke: 2818 68020165 fetch 4 ,mem_clke_bt 2819 1fe0a207 add pdata ,7 ,rega 281a 68010171 fetch 2 ,mem_slot_offset 281b 243a281e nbranch apply_switch_nozero ,blank 281c 1a20a3fd increase -3 ,rega 281d 20202826 branch apply_switch_wait_loop apply_switch_nozero: 281e 1feffe0c mul32 pdata ,12 ,pdata 281f 68190040 hfetcht 2 ,core_halfslot 2820 18408401 increase 1 ,temp apply_switch_loop: 2821 98467e00 isub temp ,pdata 2822 24212825 nbranch apply_switch_bt ,positive 2823 1a20a3ff increase -1 ,rega 2824 20202821 branch apply_switch_loop apply_switch_bt: 2825 1fe67e00 sub pdata ,0 ,pdata apply_switch_wait_loop: 2826 37d18200 until null ,oneslot 2827 2c400600 compare 0 ,clkn_bt ,3 2828 2420a826 nbranch apply_switch_wait_loop ,true 2829 98005200 iforce clke_rt 282a 1a225000 copy rega ,clke_bt 282b 98005200 iforce clke_rt 282c 20600000 rtn calc_slot_offset: 282d 44bdc00f bpatch patch0f_3 ,mem_patch0f 282e 37d10200 until null ,halfslot 282f 1b427e00 deposit clke 2830 98000c00 iforce contr 2831 1ff17e00 rshift16 ,pdata ,pdata 2832 9c467200 isub clkn_bt ,loopcnt 2833 1f217203 and_into 3 ,loopcnt 2834 2422a837 nbranch calc_bt_portion ,zero 2835 18007e00 force 0 ,pdata 2836 2020283b branch calc_skip_bt calc_bt_portion: 2837 d8400ea6 arg 3750 ,temp 2838 18007e00 force 0 ,pdata calc_slot_offset_loop: 2839 9840fe00 iadd temp ,pdata 283a c2002839 loop calc_slot_offset_loop calc_skip_bt: 283b 98c0fe00 iadd contr ,pdata 283c 1fe6fc0c div pdata ,12 283d 20407f86 call wait_div_end 283e 1807fe00 quotient pdata 283f 60010171 store 2 ,mem_slot_offset 2840 20600000 rtn calc_clke_offset: 2841 44be400f bpatch patch0f_4 ,mem_patch0f 2842 1b427e00 deposit clke 2843 1b220400 copy clkn ,temp 2844 98467c00 isub temp ,null 2845 7d217e2c nsetflag positive ,44 ,pdata 2846 98460400 isub temp ,temp 2847 58000ea6 setarg 3750 2848 284c000f isolate0 15 ,temp 2849 2020a84c branch calc_clke_pos ,true 284a 5fff0ea6 setarg -61786 284b 98408400 iadd temp ,temp calc_clke_pos: 284c 600b0447 storet 6 ,mem_le_clk_offset 284d 207b0000 rtn le 284e 600b0038 storet 6 ,mem_clk_offset 284f 20600000 rtn calc_clke: 2850 78587c00 disable clknt 2851 68030447 fetch 6 ,mem_le_clk_offset 2852 203b2854 branch calc_clke2 ,le 2853 68030038 fetch 6 ,mem_clk_offset calc_clke2: 2854 9b20e000 iadd clkn ,alarm 2855 1e00e00a increase 10 ,alarm 2856 58000ea6 setarg 3750 2857 9e067e00 isub alarm ,pdata 2858 2fec000f isolate0 15 ,pdata 2859 2020a85e branch calc_clke_pos_adj ,true 285a 5800f15a setarg 0xf15a 285b 9e00e000 iadd alarm ,alarm calc_clke_pos2: 285c 1e023400 copy alarm ,clke 285d 20600000 rtn calc_clke_pos_adj: 285e 18007c00 force 0 ,null 285f 2020285c branch calc_clke_pos2 calc_radio_freq: 2860 44bec00f bpatch patch0f_5 ,mem_patch0f 2861 20402918 call set_sync_on 2862 1c227e00 copy bt_clk ,pdata 2863 1fe17f80 and_into 0x180 ,pdata 2864 2c800e03 compare 3 ,freq_mode ,0x07 2865 2420a869 nbranch freq_not_connection ,true 2866 1fe97e00 rshift3 pdata ,pdata 2867 9ae0fe00 iadd freq_index ,pdata 2868 2020286a branch do_hop_mod_now freq_not_connection: 2869 1ae27e00 copy freq_index ,pdata do_hop_mod_now: 286a 1fe6fc4f div pdata ,79 286b 782afc00 pulse recalc 286c 20407f86 call wait_div_end 286d 18072200 remainder rega 286e 1a2085d8 add rega ,-40 ,temp 286f 20212872 branch odd_half ,positive 2870 1a238400 lshift rega ,temp 2871 20202874 branch freq_result odd_half: 2872 18438400 lshift temp ,temp 2873 18408401 increase 1 ,temp freq_result: 2874 44bf400f bpatch patch0f_6 ,mem_patch0f 2875 68008031 fetch 1 ,mem_mode 2876 c301a885 bbit0 afh_change ,afh_process_con afh_process_0: 2877 680240d2 fetch 4 ,mem_afh_instant 2878 9c267c00 isub bt_clk ,null 2879 20212885 branch afh_process_con ,positive 287a 204028a4 call afh_clear 287b 6800c0d9 fetch 1 ,mem_afh_new_mod 287c 207a0000 rtn blank 287d 68008031 fetch 1 ,mem_mode 287e 79207e02 set1 afh_enable ,pdata 287f 60008031 store 1 ,mem_mode 2880 6802c0e7 fetch 5 ,mem_afh_map_new 2881 6002c0da store 5 ,mem_afh_map_lo 2882 e8c28000 ifetch 5 ,contr 2883 6002c0df store 5 ,mem_afh_map_hi 2884 204028a9 call afh_process_freq_map afh_process_con: 2885 68008031 fetch 1 ,mem_mode 2886 c4010000 rtnbit0 afh_enable 2887 2c2ffe01 isolate1 1 ,bt_clk 2888 2020a8a1 branch afh_same_channel ,true 2889 18492200 rshift3 temp ,rega 288a 18410e07 and temp ,7 ,queue 288b 580040da setarg mem_afh_map_lo 288c 9a20a200 iadd rega ,rega 288d ea208000 ifetch 1 ,rega 288e afec0000 qisolate0 pdata 288f 2020a892 branch afh_process_1 ,true 2890 18427e00 deposit temp 2891 2020289e branch afh_process_end afh_process_1: 2892 6800c0e4 fetch 1 ,mem_afh_used 2893 98002400 iforce regb 2894 1c227e00 deposit bt_clk 2895 1fe17f80 and_into 0x180 ,pdata 2896 1fe97e00 rshift3 pdata ,pdata 2897 9ae0fe00 iadd freq_index ,pdata 2898 9a46fc00 idiv regb 2899 580040f2 setarg mem_afh_map 289a 20407f86 call wait_div_end 289b 18072200 remainder rega 289c 9a208c00 iadd rega ,contr 289d e8c08000 ifetch 1 ,contr afh_process_end: 289e 6000c0e5 store 1 ,mem_afh_index 289f 98000400 iforce temp 28a0 20600000 rtn afh_same_channel: 28a1 6800c0e5 fetch 1 ,mem_afh_index 28a2 98000400 iforce temp 28a3 20600000 rtn afh_clear: 28a4 68008031 fetch 1 ,mem_mode 28a5 793ffe02 set0 afh_enable ,pdata 28a6 793ffe03 set0 afh_change ,pdata 28a7 60008031 store 1 ,mem_mode 28a8 20600000 rtn afh_process_freq_map: 28a9 44bfc00f bpatch patch0f_7 ,mem_patch0f 28aa d8a040f2 arg mem_afh_map ,contw 28ab 1800720a force 10 ,loopcnt 28ac 20407ec6 call memset0 28ad d8a040f2 arg mem_afh_map ,contw 28ae 18002600 force 0 ,regc 28af 18000e02 force 2 ,queue process_freq_3: 28b0 6802c0da fetch 5 ,mem_afh_map_lo 28b1 98000400 iforce temp 28b2 28e1fe02 compare 2 ,queue ,0xff 28b3 2020a8b5 branch process_freq_1 ,true 28b4 18430400 rshift temp ,temp process_freq_1: 28b5 284c0000 isolate0 0 ,temp 28b6 2020a8b9 branch process_freq_0 ,true 28b7 1a627e00 deposit regc 28b8 e0a08000 istore 1 ,contw process_freq_0: 28b9 184b0400 rshift2 temp ,temp 28ba 1a60a602 increase 2 ,regc 28bb 2a61fc28 compare 40 ,regc ,0xfe 28bc 2420a8c2 nbranch process_freq_2 ,true 28bd 6802c0df fetch 5 ,mem_afh_map_hi 28be 98000400 iforce temp 28bf 28e1fe02 compare 2 ,queue ,0xff 28c0 2020a8c2 branch process_freq_2 ,true 28c1 18430400 rshift temp ,temp process_freq_2: 28c2 1a667c4e sub regc ,78 ,null 28c3 202128b5 branch process_freq_1 ,positive 28c4 18002601 force 1 ,regc 28c5 18e08fff increase -1 ,queue 28c6 2422a8b0 nbranch process_freq_3 ,zero 28c7 da2040f2 arg mem_afh_map ,rega 28c8 18a27e00 deposit contw 28c9 9a267e00 isub rega ,pdata 28ca 6000c0e4 store 1 ,mem_afh_used 28cb 20600000 rtn rx_radio_freq: 28cc 44c04010 bpatch patch10_0 ,mem_patch10 28cd 20402860 call calc_radio_freq 28ce 6800817f fetch 1 ,mem_debug_config 28cf c302a8d1 bbit0 debug_rx_fixed_freq ,rx_radio_freq_now 28d0 680884cc fetcht 1 ,mem_rx_fixed_freq rx_radio_freq_now: 28d1 2020291f branch set_freq_rx tx_radio_freq: 28d2 44c0c010 bpatch patch10_1 ,mem_patch10 28d3 20402860 call calc_radio_freq 28d4 6800817f fetch 1 ,mem_debug_config 28d5 c30228d7 bbit0 debug_tx_fixed_freq ,tx_radio_freq_now 28d6 680884cb fetcht 1 ,mem_tx_fixed_freq tx_radio_freq_now: 28d7 20202933 branch set_freq_tx fetch_giac: 28d8 18005a00 force 0 ,uap 28d9 6801c0a7 fetch 3 ,mem_glap 28da 98005800 iforce lap 28db 20600000 rtn fetch_page_bt_adr: 28dc 44c14010 bpatch patch10_2 ,mem_patch10 28dd 6800c1d3 fetch 1 ,mem_hci_puap 28de 1fe25a00 icopy uap 28df 6801c1d0 fetch 3 ,mem_hci_plap 28e0 1fe25800 icopy lap 28e1 20600000 rtn fetch_self_bt_adr: 28e2 44c1c010 bpatch patch10_3 ,mem_patch10 28e3 680140a4 fetch 2 ,mem_nap 28e4 1fe25c00 icopy nap 28e5 6800c0a3 fetch 1 ,mem_uap 28e6 1fe25a00 icopy uap 28e7 6801c0a0 fetch 3 ,mem_lap 28e8 1fe25800 icopy lap 28e9 20600000 rtn fetch_extm_bt_adr: 28ea 44c24010 bpatch patch10_4 ,mem_patch10 28eb 68010044 fetch 2 ,mem_pnap 28ec 1fe25c00 icopy nap 28ed 68008043 fetch 1 ,mem_puap 28ee 1fe25a00 icopy uap 28ef 68018040 fetch 3 ,mem_plap 28f0 1fe25800 icopy lap 28f1 20600000 rtn fetch_diac: 28f2 c51028f5 bmark1 mark_all_diac ,fetch_diac_do 28f3 c68e8000 rtnmark0 mark_inquiry_state 28f4 c68f8000 rtnmark0 mark_periodical_diac fetch_diac_do: 28f5 1d815900 and_into -256 ,lap 28f6 782afc00 pulse recalc 28f7 20000020 nop 32 28f8 20600000 rtn shutdown_radio: 28f9 44c2c010 bpatch patch10_5 ,mem_patch10 28fa 2030a90a branch shutdown_radio0 ,is_rx 28fb 708955d4 jam 0xd4 ,rf_tx_pa_ib 28fc 20000004 nop 4 28fd 708955d2 jam 0xd2 ,rf_tx_pa_ib 28fe 20000004 nop 4 28ff 708955d1 jam 0xd1 ,rf_tx_pa_ib 2900 20000004 nop 4 2901 6800c1de fetch 1 ,mem_tx_power 2902 c0002908 beq tx_power_0db ,shutdown_radio_0db 2903 c000a915 beq tx_power_3db ,shutdown_radio_3db 2904 c0012908 beq tx_power_5db ,shutdown_radio_5db 2905 c001a915 beq tx_power_f3db ,shutdown_radio_f3db 2906 c0022915 beq tx_power_f5db ,shutdown_radio_f5db 2907 c0102915 beq tx_power_pair ,shutdown_radio_pair shutdown_radio_5db: shutdown_radio_0db: 2908 708955d0 jam 0xd0 ,rf_tx_pa_ib 2909 708956e0 jam 0xe0 ,rf_tx_pa_gc shutdown_radio0: 290a 18002a00 force 0 ,radio_ctrl 290b 7850fc00 disable is_rx 290c 78507c00 disable is_tx 290d 782f7c00 pulse packet_end 290e 70890200 jam 0x0 ,rfen_mdm 290f 70890100 jam 0x0 ,rfen_tx 2910 70890000 jam 0x0 ,rfen_rx 2911 70890300 jam 0 ,rfen_sn 2912 70890470 jam 0x70 ,rfen_msc 2913 70890600 jam 0x0 ,rfen_adc 2914 20600000 rtn shutdown_radio_pair: shutdown_radio_f5db: shutdown_radio_f3db: shutdown_radio_3db: 2915 708955d0 jam 0xd0 ,rf_tx_pa_ib 2916 708956c0 jam 0xc0 ,rf_tx_pa_gc 2917 2020290a branch shutdown_radio0 set_sync_on: 2918 44c34010 bpatch patch10_6 ,mem_patch10 2919 70890200 jam 0x0 ,rfen_mdm 291a 70890100 jam 0x0 ,rfen_tx 291b 70890018 jam 0x18 ,rfen_rx 291c 708903a7 jam 0xa7 ,rfen_sn 291d 7089047f jam 0x7f ,rfen_msc 291e 20600000 rtn set_freq_rx: 291f 44c3c010 bpatch patch10_7 ,mem_patch10 2920 60088017 storet 1 ,mem_last_freq 2921 1840a204 add temp ,rx_freq_offset ,rega 2922 70896d07 jam 0x07 ,rf_balun_ctrim 2923 20202981 branch rf_write_freq rf_rx_enable: 2924 44c44011 bpatch patch11_0 ,mem_patch11 2925 708901cf jam 0xcf ,rfen_tx 2926 2000000a nop 10 2927 708900ff jam 0xff ,rfen_rx 2928 708903af jam 0xaf ,rfen_sn 2929 708904ff jam 0xff ,rfen_msc 292a 2000000a nop 10 292b 708902a0 jam 0xa0 ,rfen_mdm 292c 20600000 rtn set_freq_tx_offset: 292d 6800c1e0 fetch 1 ,mem_250k_freq_enable 292e 203a2931 branch set_freq_tx_2m_offset ,blank set_freq_tx_0m_offset: 292f 1840a202 add temp ,2 ,rega 2930 20600000 rtn set_freq_tx_2m_offset: 2931 1840a200 add temp ,0 ,rega 2932 20600000 rtn set_freq_tx: 2933 44c4c011 bpatch patch11_1 ,mem_patch11 2934 60088017 storet 1 ,mem_last_freq 2935 2040292d call set_freq_tx_offset 2936 20402981 call rf_write_freq 2937 58000500 setarg param_pll_setup 2938 20402a8f call sleep txon: 2939 70890601 jam 0x1 ,rfen_adc 293a 7089003c jam 0x3c ,rfen_rx 293b 708901e0 jam 0xe0 ,rfen_tx 293c 70896d12 jam 0x12 ,rf_balun_ctrim 293d 2000000a nop 10 293e 70890201 jam 0x01 ,rfen_mdm 293f 7089023d jam 0x3d ,rfen_mdm 2940 2000000a nop 10 2941 708903b7 jam 0xb7 ,rfen_sn 2942 2000000a nop 10 2943 7089027f jam 0x7f ,rfen_mdm txon_power_select: 2944 6800c1de fetch 1 ,mem_tx_power 2945 c000294b beq tx_power_0db ,set_tx_power_0db 2946 c000a94f beq tx_power_3db ,set_tx_power_3db 2947 c0012953 beq tx_power_5db ,set_tx_power_5db 2948 c001a957 beq tx_power_f3db ,set_tx_power_f3db 2949 c002295b beq tx_power_f5db ,set_tx_power_f5db 294a c010295f beq tx_power_pair ,set_tx_power_pair set_tx_power_0db: 294b 708956f0 jam 0xf0 ,rf_tx_pa_gc 294c 20402965 call txon_common 294d 708955d8 jam 0xd8 ,rf_tx_pa_ib 294e 20600000 rtn set_tx_power_3db: 294f 708956df jam 0xdf ,rf_tx_pa_gc 2950 20402965 call txon_common 2951 708955df jam 0xdf ,rf_tx_pa_ib 2952 20600000 rtn set_tx_power_5db: 2953 708956ff jam 0xff ,rf_tx_pa_gc 2954 20402965 call txon_common 2955 708955df jam 0xdf ,rf_tx_pa_ib 2956 20600000 rtn set_tx_power_f3db: 2957 708956ce jam 0xce ,rf_tx_pa_gc 2958 20402965 call txon_common 2959 708955d8 jam 0xd8 ,rf_tx_pa_ib 295a 20600000 rtn set_tx_power_f5db: 295b 708956cb jam 0xcb ,rf_tx_pa_gc 295c 20402965 call txon_common 295d 708955d8 jam 0xd8 ,rf_tx_pa_ib 295e 20600000 rtn set_tx_power_pair: 295f 708955d0 jam 0xd0 ,rf_tx_pa_ib 2960 708956c0 jam 0xc0 ,rf_tx_pa_gc 2961 7089574c jam 0x4c ,0x8957 2962 7089586c jam 0x6c ,0x8958 2963 70895950 jam 0x50 ,0x8959 2964 20600000 rtn txon_common: 2965 20000004 nop 4 2966 708955d1 jam 0xd1 ,rf_tx_pa_ib 2967 20000004 nop 4 2968 708955d2 jam 0xd2 ,rf_tx_pa_ib 2969 20000004 nop 4 296a 708955d4 jam 0xd4 ,rf_tx_pa_ib 296b 20600000 rtn initialize_radio: 296c 70804206 jam clksel_rc ,core_clksel initialize_radio_wait: 296d 680140c3 fetch 2 ,mem_rf_init_ptr 296e c307296d bbit0 14 ,initialize_radio_wait 296f 98000c00 iforce contr 2970 d8408900 arg 0x8900 ,temp initialize_radio_loop: 2971 e8c08000 ifetch 1 ,contr 2972 c07fa977 beq 0xff ,initialize_radio_cont 2973 98418a00 ior temp ,contw 2974 e8c08000 ifetch 1 ,contr 2975 e0a08000 istore 1 ,contw 2976 20202971 branch initialize_radio_loop initialize_radio_cont: 2977 44c54011 bpatch patch11_2 ,mem_patch11 2978 20402be5 call lpm_cal_xtal_startup 2979 204029c9 call switchto_dpllclk 297a 580007d0 setarg param_dpll_start_delay 297b 9c40fe00 iadd clkn_bt ,pdata 297c 60020169 store 4 ,mem_dpll_clkn 297d 79202a03 set1 reset ,radio_ctrl 297e 18002a00 force 0 ,radio_ctrl 297f 2455a998 ncall do_rccal ,wake 2980 202029ab branch set_rccal rf_write_freq: 2981 44c5c011 bpatch patch11_3 ,mem_patch11 2982 58000960 setarg 2400 2983 9a208400 iadd rega ,temp 2984 6800c0bd fetch 1 ,mem_fcomp_mul 2985 70895f04 jam 0x04 ,rf_pll_rstn 2986 984ffe00 imul32 temp ,pdata 2987 6808c0be fetcht 1 ,mem_fcomp_div 2988 9846fc00 idiv temp 2989 20407f86 call wait_div_end 298a 1807a200 quotient rega 298b 18077e00 remainder pdata 298c 1ff07e00 lshift16 pdata ,pdata 298d 1ff27e00 lshift4 pdata ,pdata 298e 9846fc00 idiv temp 298f 20407f86 call wait_div_end 2990 1807fe00 quotient pdata 2991 1fed7e00 lshift8 pdata ,pdata 2992 1fe3fe00 lshift pdata ,pdata 2993 9a21fe00 ior rega ,pdata 2994 60120960 hstore 4 ,rf_pll_intg 2995 70895f44 jam 0x44 ,rf_pll_rstn 2996 70895fc4 jam 0xc4 ,rf_pll_rstn 2997 20600000 rtn do_rccal: 2998 44c64011 bpatch patch11_4 ,mem_patch11 2999 70890602 jam 0x02 ,rfen_adc 299a 5803d090 setarg 250000 299b 20402a8f call sleep 299c 7089007f jam 0x7f ,rfen_rx 299d 20000082 nop 130 299e 70895230 jam 0x30 ,rf_rccal_ctrl 299f 708901d0 jam 0xd0 ,rfen_tx 29a0 70895270 jam 0x70 ,rf_rccal_ctrl 29a1 708952f0 jam 0xf0 ,rf_rccal_ctrl 29a2 18007232 force 50 ,loopcnt do_rccal_loop: 29a3 68108980 hfetch 1 ,rf_rccal_result 29a4 c282a9a6 bbit1 5 ,do_rccal_end 29a5 c20029a3 loop do_rccal_loop do_rccal_end: 29a6 6000c0ce store 1 ,mem_rf_rccal 29a7 70890100 jam 0 ,rfen_tx 29a8 70890000 jam 0 ,rfen_rx 29a9 70890600 jam 0x00 ,rfen_adc 29aa 20600000 rtn set_rccal: 29ab 44c6c011 bpatch patch11_5 ,mem_patch11 29ac 6800c0ce fetch 1 ,mem_rf_rccal 29ad 79207e05 set1 5 ,pdata 29ae 60108952 hstore 1 ,rf_rccal_ctrl 29af 68188950 hfetcht 1 ,rf_bpf_ctrim 29b0 18410407 and_into 7 ,temp 29b1 1fe9fe00 lshift3 pdata ,pdata 29b2 9841fe00 ior temp ,pdata 29b3 60108950 hstore 1 ,rf_bpf_ctrim 29b4 68108951 hfetch 1 ,rf_bpf_ib 29b5 793ffe00 set0 bpf_rccal ,pdata 29b6 60108951 hstore 1 ,rf_bpf_ib 29b7 68108952 hfetch 1 ,rf_adc_rccal 29b8 793ffe05 set0 adc_rccal ,pdata 29b9 60108952 hstore 1 ,rf_adc_rccal 29ba 20600000 rtn save_rssi: 29bb 44c74011 bpatch patch11_6 ,mem_patch11 29bc 68110981 hfetch 2 ,rf_afc_d2a 29bd 1ff1fe00 rshift4 pdata ,pdata 29be 1fe97e00 rshift3 pdata ,pdata 29bf 1fe67e00 sub pdata ,0 ,pdata bcd: 29c0 1fe17eff and_into 0xff ,pdata 29c1 1fe6fc0a div pdata ,10 29c2 20407f86 call wait_div_end 29c3 1807fe00 quotient pdata 29c4 1ff27e00 lshift4 pdata ,pdata 29c5 18070400 remainder temp 29c6 9841fe00 ior temp ,pdata 29c7 60008018 store 1 ,mem_rssi 29c8 20600000 rtn switchto_dpllclk: 29c9 70804206 jam clksel_rc ,core_clksel 29ca 6810896b hfetch 1 ,rf_clkpll_frac + 2 29cb 793ffe04 set0 4 ,pdata 29cc 793ffe05 set0 5 ,pdata 29cd 6010896b hstore 1 ,rf_clkpll_frac + 2 29ce 70890500 jam 0x00 ,rfen_ck 29cf 70890400 jam 0x00 ,rfen_msc 29d0 70890470 jam 0x70 ,rfen_msc 29d1 708905ff jam 0xff ,rfen_ck 29d2 6810896b hfetch 1 ,rf_clkpll_frac + 2 29d3 79207e04 set1 4 ,pdata 29d4 79207e05 set1 5 ,pdata 29d5 6010896b hstore 1 ,rf_clkpll_frac + 2 29d6 204029e9 call init_lpm_ctrl 29d7 68108968 hfetch 1 ,rf_clkpll_int 29d8 79207e07 set1 7 ,pdata 29d9 60108968 hstore 1 ,rf_clkpll_int 29da 793ffe07 set0 7 ,pdata 29db 60108968 hstore 1 ,rf_clkpll_int 29dc 79207e07 set1 7 ,pdata 29dd 60108968 hstore 1 ,rf_clkpll_int 29de 70804205 jam clksel_dpll ,core_clksel 29df 20000001 nop 1 29e0 70804204 jam clksel_xtal ,core_clksel 29e1 6810896b hfetch 1 ,rf_clkpll_frac + 2 29e2 1fe17ecf and_into 0xcf ,pdata 29e3 6010896b hstore 1 ,rf_clkpll_frac + 2 29e4 1fe1fe30 or_into 0x30 ,pdata 29e5 6010896b hstore 1 ,rf_clkpll_frac + 2 29e6 20600000 rtn xtal_fast_wake: 29e7 58000f0f setarg 0xf0f 29e8 20202c18 branch lpm_write_config init_lpm_ctrl: 29e9 5800080f setarg 0x80f 29ea 20202c18 branch lpm_write_config start_receiver: 29eb 44c7c011 bpatch patch11_7 ,mem_patch11 29ec 20402924 call rf_rx_enable 29ed 78507c00 disable is_tx 29ee 7830fc00 enable is_rx 29ef 782b7c00 pulse init_encrypt 29f0 20600000 rtn prep_crypt: 29f1 44c84012 bpatch patch12_0 ,mem_patch12 29f2 6800804c fetch 1 ,mem_state_map 29f3 2feffe02 isolate1 smap_encryption ,pdata 29f4 7920fe00 setflag true ,0 ,pdata 29f5 60108011 hstore 1 ,core_encrypt 29f6 d8c00062 arg mem_kc ,contr 29f7 e8c48000 ifetch 9 ,contr 29f8 98006400 iforce kc_ls 29f9 e8c38000 ifetch 7 ,contr 29fa 98006600 iforce kc_ms 29fb 68008054 fetch 1 ,mem_key_size 29fc 1fe0e9ff add pdata ,-1 ,g1l 29fd 782d7c00 pulse kc_p_activate 29fe 20600000 rtn wait_access_end: 29ff 1b427e00 deposit clke 2a00 6003009a store 6 ,mem_sync_clke 2a01 7846fc00 disable decode_fec0 2a02 242c28f9 nbranch shutdown_radio ,sync 2a03 dd2003bb arg param_clke_cal ,clke_rt 2a04 1d00d001 increase 1 ,clke_bt 2a05 1d0151fc and_into 0x1fc ,clke_bt 2a06 20600000 rtn wait_access_mhalfbnd: 2a07 7826fc00 enable decode_fec0 wait_access_mhalfbnd_correlate: 2a08 37cb8400 correlate null ,mhalfbnd 2a09 202c29ff branch wait_access_end ,sync 2a0a 2d000402 compare 0x02 ,clke_bt ,0x02 2a0b 2420aa08 nbranch wait_access_mhalfbnd_correlate ,true 2a0c 202029ff branch wait_access_end wait_access_clkn_rt: 2a0d 44c8c012 bpatch patch12_1 ,mem_patch12 2a0e d9600600 arg param_conn_access ,timeup 2a0f 7826fc00 enable decode_fec0 2a10 34730400 correlate clkn_rt ,meet 2a11 7846fc00 disable decode_fec0 2a12 242c28f9 nbranch shutdown_radio ,sync 2a13 20600000 rtn wait_access_forever: 2a14 44c94012 bpatch patch12_2 ,mem_patch12 2a15 7826fc00 enable decode_fec0 2a16 37c18400 correlate null ,timeout 2a17 7846fc00 disable decode_fec0 2a18 242c28f9 nbranch shutdown_radio ,sync 2a19 dd2003bb arg param_clke_cal ,clke_rt 2a1a 1d0151fc and_into 0x1fc ,clke_bt 2a1b 20600000 rtn reserve_slot: 2a1c 44c9c012 bpatch patch12_3 ,mem_patch12 2a1d 98002200 iforce rega 2a1e 1c227e00 deposit bt_clk 2a1f 98409600 iadd temp ,timeup 2a20 19627e00 copy timeup ,pdata 2a21 600240ca store 4 ,mem_next_btclk 2a22 1a227e00 deposit rega 2a23 20600000 rtn ahead_window: 2a24 1fe20400 copy pdata ,temp 2a25 44ca4012 bpatch patch12_4 ,mem_patch12 2a26 18427e00 copy temp ,pdata 2a27 20407f50 call clk2bt 2a28 1c307e00 lshift16 bt_clk ,pdata 2a29 79207e2c set1 44 ,pdata 2a2a 20407f39 call clk_diff 2a2b 793ffe2c set0 44 ,pdata 2a2c 20402a77 call get_clk 2a2d 20407f39 call clk_diff 2a2e 20740000 rtn user 2a2f 20407f43 call clk2rt 2a30 98003600 iforce stop_watch 2a31 37c18200 until null ,timeout 2a32 20600000 rtn setup_clk: 2a33 44cac012 bpatch patch12_5 ,mem_patch12 2a34 20382a38 branch setup_clkn ,clknt 2a35 35330200 until clke_rt ,meet skip_setup_clke: 2a36 1d020400 copy clke_bt ,temp 2a37 20202a3b branch setup_clknbt setup_clkn: 2a38 20372a3a branch skip_setup_clkn ,attempt 2a39 34730200 until clkn_rt ,meet skip_setup_clkn: 2a3a 1c420400 copy clkn_bt ,temp setup_clknbt: 2a3b 20342a47 branch setup_clk11 ,user 2a3c 28400601 compare 1 ,temp ,3 2a3d 2420aa33 nbranch setup_clk ,true setup_complete: 2a3e 44cb4012 bpatch patch12_6 ,mem_patch12 2a3f 68008030 fetch 1 ,mem_state 2a40 c4000000 rtnbit0 state_inconn 2a41 680240ca fetch 4 ,mem_next_btclk 2a42 98467e00 isub temp ,pdata 2a43 24610000 nrtn positive 2a44 1fe67cff sub pdata ,0xff ,null 2a45 20212a33 branch setup_clk ,positive 2a46 20600000 rtn setup_clk11: 2a47 28400603 compare 3 ,temp ,3 2a48 2420aa33 nbranch setup_clk ,true 2a49 20202a3e branch setup_complete rf_setup_time: 2a4a 44cbc012 bpatch patch12_7 ,mem_patch12 2a4b d9600600 arg param_rf_setup ,timeup 2a4c 20202a33 branch setup_clk rf_setup_time_slave_slot: 2a4d 78547c00 disable user 2a4e 20202a4a branch rf_setup_time rf_setup_time_master_slot: 2a4f 78347c00 enable user 2a50 20202a4a branch rf_setup_time start_transmitter: 2a51 44cc4013 bpatch patch13_0 ,mem_patch13 2a52 204029f1 call prep_crypt 2a53 7850fc00 disable is_rx 2a54 78307c00 enable is_tx 2a55 20600000 rtn start_tx_native: 2a56 44ccc013 bpatch patch13_1 ,mem_patch13 2a57 d9600e43 arg param_tx_setup ,timeup 2a58 34730200 until clkn_rt ,meet 2a59 782b7c00 pulse init_encrypt 2a5a 20600000 rtn start_rx_native: 2a5b 44cd4013 bpatch patch13_2 ,mem_patch13 2a5c d9600d00 arg param_rx_setup ,timeup 2a5d 34730200 until clkn_rt ,meet 2a5e 20600000 rtn start_tx_external: 2a5f 44cdc013 bpatch patch13_3 ,mem_patch13 2a60 d9600e43 arg param_tx_setup ,timeup 2a61 35330200 until clke_rt ,meet 2a62 782b7c00 pulse init_encrypt 2a63 20600000 rtn send_access_word: 2a64 44ce4013 bpatch patch13_4 ,mem_patch13 2a65 51207e00 preload access 2a66 782efc00 enable encode_fec0 2a67 79202a00 set1 txgfsk ,radio_ctrl 2a68 08008648 inject mod ,72 2a69 784efc00 disable encode_fec0 2a6a 20600000 rtn scan_mode_whiten: 2a6b 1ca20400 copy xin ,temp 2a6c 18418460 or_into 0x60 ,temp 2a6d 18421c00 copy temp ,white_init 2a6e 20600000 rtn get_free_amaddr: 2a6f 44cec013 bpatch patch13_5 ,mem_patch13 2a70 6800c090 fetch 1 ,mem_current_amaddr 2a71 1fe0fe01 increase 1 ,pdata 2a72 c083aa74 bne param_esco_addr ,get_free_amaddr_cont 2a73 18007e01 force 1 ,pdata get_free_amaddr_cont: 2a74 6000c090 store 1 ,mem_current_amaddr 2a75 98000800 iforce am_addr 2a76 20600000 rtn get_clk: 2a77 1b220400 copy clkn ,temp 2a78 20748000 rtn master 2a79 1b420400 copy clke ,temp 2a7a 20600000 rtn get_clkbt: 2a7b 1c427e00 deposit clkn_bt 2a7c 20748000 rtn master 2a7d 1d027e00 deposit clke_bt 2a7e 20600000 rtn supervision_update: 2a7f 44cf4013 bpatch patch13_6 ,mem_patch13 2a80 680a004d fetcht 4 ,mem_supervision_timer 2a81 20402a7b call get_clkbt 2a82 98461600 isub temp ,timeup 2a83 19627e00 deposit timeup 2a84 68090051 fetcht 2 ,mem_supervision_to 2a85 18438400 lshift temp ,temp 2a86 98467e00 isub temp ,pdata 2a87 20600000 rtn supervision_flush: 2a88 44cfc013 bpatch patch13_7 ,mem_patch13 2a89 20402a7b call get_clkbt 2a8a 6002004d store 4 ,mem_supervision_timer 2a8b 20600000 rtn assert: 2a8c 44d04014 bpatch patch14_0 ,mem_patch14 2a8d 20202a8c branch assert loop: 2a8e 20202a8e branch loop sleep: 2a8f 207a0000 rtn blank 2a90 1fe37e00 rshift pdata ,pdata 2a91 1fe0fffd increase -3 ,pdata sleep_loop: 2a92 1fe0ffff increase -1 ,pdata 2a93 2422aa92 nbranch sleep_loop ,zero 2a94 18007e00 force 0 ,pdata 2a95 20600000 rtn init_param: 2a96 df200010 arg 0x10 ,loopcnt 2a97 d8a00000 arg 0 ,contw 2a98 20407ec6 call memset0 2a99 d8a0043f arg mem_le_state ,contw 2a9a df20000a arg 10 ,loopcnt 2a9b 20407ec6 call memset0 2a9c 7009b200 jam 0 ,mem_sp_calc 2a9d 700a9900 jam 0 ,mem_fifo_temp 2a9e 70048c00 jam 0 ,mem_le_testtype 2a9f 70017f00 jam 0 ,mem_debug_config 2aa0 7004d100 jam 0 ,mem_lmp_conn_state 2aa1 44d0c014 bpatch patch14_1 ,mem_patch14 2aa2 70016d00 jam 0 ,mem_connection_options 2aa3 70015100 jam 0 ,mem_tester_emulate 2aa4 70015c00 jam 0 ,mem_tester_cnt 2aa5 589e8b33 setarg param_glap 2aa6 6001c0a7 store 3 ,mem_glap 2aa7 58000153 setarg param_acl_pktlen 2aa8 60010083 store 2 ,mem_acl_pktlen 2aa9 7000851e jam param_sco_pktlen ,mem_sco_pktlen 2aaa 70008601 jam param_acl_pktcnt ,mem_acl_pktcnt 2aab 70008807 jam param_sco_pktcnt ,mem_sco_pktcnt 2aac 5812e904 setarg param_hci_version 2aad 60018080 store 3 ,mem_hci_version 2aae 70009060 jam 0x60 ,mem_fhs_misc 2aaf 7040d005 jam param_max_slot ,mem_max_slot 2ab0 70001402 jam 0x02 ,mem_fw_ver 2ab1 6800c65a fetch 1 ,mem_ssp_enable 2ab2 245a74c1 ncall init_memp ,blank 2ab3 6800c4be fetch 1 ,mem_le_secure_connect_enable 2ab4 245a7518 ncall init_memp_256 ,blank 2ab5 44d14014 bpatch patch14_2 ,mem_patch14 2ab6 20758000 rtn wake 2ab7 58000000 setarg 0 2ab8 600141dc store 2 ,mem_tx_len 2ab9 1c437e00 rshift clkn_bt ,pdata 2aba 60024094 store 4 ,mem_last_clkn 2abb 20600000 rtn lpmstate: 2abc 5800ee21 setarg 0xee21 2abd 60110050 hstore 2 ,core_clkoff 2abe 6812011c hfetch 4 ,core_gpio_in 2abf 60020abe store 4 ,mem_saved_gpio_in 2ac0 6810813e hfetch 1 ,core_lpm_ldocnt 2ac1 60008abd store 1 ,mem_wakup_from_power_flag 2ac2 c301e45b bbit0 gpio_latch ,loadcode 2ac3 7835fc00 enable wake 2ac4 c303aacc bbit0 cold_wake ,lpmwake 2ac5 7855fc00 disable wake 2ac6 1ce27e00 deposit auxcnt 2ac7 243a2acc nbranch lpmwake ,blank 2ac8 6810813b hfetch 1 ,core_lpm_ctrl + 3 2ac9 c2812acc bbit1 reload_code ,lpmwake 2aca d85fffff arg param_hibernate_clks ,temp 2acb 20202b3c branch lpm_enter_sleep lpmwake: 2acc 6811813c hfetch 3 ,core_lpm_xtalcnt 2acd 6011804c hstore 3 ,core_lpm_reg 2ace e8c08000 ifetch 1 ,contr 2acf 1fe1feef or_into isogate_mask ,pdata 2ad0 e0a08000 istore 1 ,contw 2ad1 20402c23 call lpm_write_ctrl2 2ad2 6810804f hfetch 1 ,core_lpm_isogate 2ad3 79207e04 set1 enable_retmem ,pdata 2ad4 6010804f hstore 1 ,core_lpm_isogate 2ad5 20402c23 call lpm_write_ctrl2 2ad6 2055aadf call lpm_load_context ,wake 2ad7 6810804e hfetch 1 ,core_lpm_reg + 2 2ad8 793ffe03 set0 gpio_latch ,pdata 2ad9 6010804e hstore 1 ,core_lpm_reg + 2 2ada 20402c23 call lpm_write_ctrl2 2adb 2435e45b nbranch loadcode ,wake 2adc c6958000 rtnmark0 mark_otp_encrypt 2add 70800608 jam lock_otp ,core_misc_ctrl 2ade 20600000 rtn lpm_load_context: 2adf 6800c198 fetch 1 ,mem_saved_spidctrl 2ae0 60108086 hstore 1 ,core_spid_ctrl 2ae1 6801c18d fetch 3 ,mem_saved_gsel 2ae2 60118080 hstore 3 ,core_gpio_sel 2ae3 68024181 fetch 4 ,mem_saved_gpio + 4 2ae4 60120074 hstore 4 ,core_gpio_out0 2ae5 6802417d fetch 4 ,mem_saved_gpio 2ae6 60120070 hstore 4 ,core_gpio_oe0 2ae7 68044185 fetch 8 ,mem_saved_gpio + 8 2ae8 60140078 hstore 8 ,core_gpio_pu0 2ae9 68044190 fetch 8 ,mem_saved_mark 2aea 98000000 iforce mark 2aeb 68140140 hfetch 8 ,core_gpio_wakeup_low 2aec 600400a1 store 8 ,mem_gpio_wakeup_low 2aed 204064ca call load_ucode 2aee 20600000 rtn lpm_save_context: 2aef 18027e00 deposit mark 2af0 60044190 store 8 ,mem_saved_mark 2af1 68140070 hfetch 8 ,core_gpio_oe0 2af2 6004417d store 8 ,mem_saved_gpio 2af3 e8c40000 ifetch 8 ,contr 2af4 e0a40000 istore 8 ,contw 2af5 68118080 hfetch 3 ,core_gpio_sel 2af6 6001c18d store 3 ,mem_saved_gsel 2af7 68108086 hfetch 1 ,core_spid_ctrl 2af8 6000c198 store 1 ,mem_saved_spidctrl 2af9 20202c29 branch lpm_write_gpio_wakeup lpo_calibration: 2afa 68108063 hfetch 1 ,core_bist_ctrl 2afb 243a2b00 nbranch lpo_cal_inited ,blank 2afc 6801c16f fetch 3 ,mem_clks_per_lpo 2afd 247a0000 nrtn blank 2afe 708063c0 jam 0xc0 ,core_bist_ctrl 2aff 70800680 jam ccnt_start ,core_misc_ctrl lpo_cal_inited: 2b00 6810812d hfetch 1 ,core_perf_status 2b01 c4008000 rtnbit0 1 2b02 68118149 hfetch 3 ,core_clk_counter 2b03 6001c16f store 3 ,mem_clks_per_lpo 2b04 20600000 rtn lpm_adjust_clk: 2b05 44d1c014 bpatch patch14_3 ,mem_patch14 2b06 1b427e00 deposit clke 2b07 20407f37 call clk_diff_rt 2b08 680a415f fetcht 4 ,mem_sleep_counter_all 2b09 18467cff sub temp ,0xff ,null 2b0a 20610000 rtn positive 2b0b 1fed7e00 lshift8 pdata ,pdata 2b0c 1ff27e00 lshift4 pdata ,pdata 2b0d 9846fc00 idiv temp 2b0e 20407f86 call wait_div_end 2b0f 1807fe00 quotient pdata 2b10 d84000c8 arg param_lpm_adjmax ,temp 2b11 20407f91 call ceiling 2b12 60008099 store 1 ,mem_lpm_adjust 2b13 24342b15 nbranch lpm_adjust_positive ,user 2b14 1fe67e00 sub pdata ,0 ,pdata lpm_adjust_positive: 2b15 6809c16f fetcht 3 ,mem_clks_per_lpo 2b16 9840fe00 iadd temp ,pdata 2b17 6001c16f store 3 ,mem_clks_per_lpo lpm_clear_counter: 2b18 58000000 setarg 0 2b19 6002415f store 4 ,mem_sleep_counter_all 2b1a 20600000 rtn lpm_doze: 2b1b 6800c177 fetch 1 ,mem_lpm_config + 2 2b1c 79207e02 set1 reload_code ,pdata 2b1d 6000c177 store 1 ,mem_lpm_config + 2 2b1e 20202b23 branch lpm_hibernate_normal lpm_hibernate: 2b1f d85fffff arg param_hibernate_clks ,temp 2b20 6800c176 fetch 1 ,mem_lpm_config + 1 2b21 793ffe07 set0 7 ,pdata 2b22 6000c176 store 1 ,mem_lpm_config + 1 lpm_hibernate_normal: 2b23 44d24014 bpatch patch14_4 ,mem_patch14 2b24 20402c29 call lpm_write_gpio_wakeup 2b25 6800c157 fetch 1 ,mem_lpm_hibernate_switch 2b26 6000c17c store 1 ,mem_lpm_xtalcnt + 4 2b27 6800c17a fetch 1 ,mem_lpm_xtalcnt + 2 2b28 79207e07 set1 cold_wake ,pdata 2b29 6000c17a store 1 ,mem_lpm_xtalcnt + 2 lpm_sleep: 2b2a 44d2c014 bpatch patch14_5 ,mem_patch14 2b2b 204029e7 call xtal_fast_wake 2b2c 6802415f fetch 4 ,mem_sleep_counter_all 2b2d 9840fe00 iadd temp ,pdata 2b2e 6002415f store 4 ,mem_sleep_counter_all 2b2f 20402aef call lpm_save_context 2b30 6802c178 fetch 5 ,mem_lpm_xtalcnt 2b31 6012004c hstore 4 ,core_lpm_reg 2b32 1fef2200 rshift32 pdata ,rega 2b33 37d98200 until null ,lpo_edge 2b34 1b227e00 deposit clkn 2b35 60034163 store 6 ,mem_sleep_clkn 2b36 70800502 jam lpmreg_sel_ctrl2 ,core_lpm_wr 2b37 37d98200 until null ,lpo_edge 2b38 37d98200 until null ,lpo_edge 2b39 1a227e00 deposit rega 2b3a 6010804f hstore 1 ,core_lpm_isogate 2b3b 70800502 jam lpmreg_sel_ctrl2 ,core_lpm_wr lpm_enter_sleep: 2b3c 37d98200 until null ,lpo_edge 2b3d 37d98200 until null ,lpo_edge 2b3e 601a004c hstoret 4 ,core_lpm_reg 2b3f 70800510 jam lpmreg_sel_counter ,core_lpm_wr 2b40 37df8200 until null ,never lpm_recover_clk: 2b41 44d34014 bpatch patch14_6 ,mem_patch14 2b42 58000000 setarg 0 2b43 1ce27c00 copy auxcnt ,null 2b44 2022ab4c branch lpm_recover_timeout ,zero 2b45 6810813c hfetch 1 ,core_lpm_xtalcnt 2b46 6818813d hfetcht 1 ,core_lpm_buckcnt 2b47 98467c00 isub temp ,null 2b48 20212b4a branch lpm_recover_xtal ,positive 2b49 18427e00 deposit temp lpm_recover_xtal: 2b4a 9ce67e00 isub auxcnt ,pdata 2b4b 1fe0fe01 increase 1 ,pdata lpm_recover_timeout: 2b4c 1fe0fe08 increase 8 ,pdata 2b4d 37d98200 until null ,lpo_edge 2b4e 9e20fe00 iadd lpo_time ,pdata 2b4f 680a415b fetcht 4 ,mem_sleep_counter 2b50 9840fe00 iadd temp ,pdata 2b51 6809c16f fetcht 3 ,mem_clks_per_lpo 2b52 984ffe00 imul32 temp ,pdata 2b53 1fecfe00 rshift8 pdata ,pdata 2b54 1ff1fe00 rshift4 pdata ,pdata 2b55 1fe0fe6e increase param_lpm_fix ,pdata 2b56 d8400ea6 arg 3750 ,temp 2b57 9846fc00 idiv temp 2b58 20407f86 call wait_div_end 2b59 1807fe00 quotient pdata 2b5a 1ff07e00 lshift16 pdata ,pdata 2b5b 18070400 remainder temp 2b5c 9841fe00 ior temp ,pdata 2b5d 680b4163 fetcht 6 ,mem_sleep_clkn 2b5e 20407f2c call clk_add 2b5f 18423200 copy temp ,clkn 2b60 68034048 fetch 6 ,mem_context + coffset_clk_offset 2b61 20402854 call calc_clke2 2b62 1b427e00 deposit clke 2b63 60030a9a store 6 ,mem_pdatatemp 2b64 1ce27e00 deposit auxcnt 2b65 e0a08000 istore 1 ,contw 2b66 6810811d hfetch 1 ,core_gpio_in1 2b67 1fe1fef0 or_into 0xf0 ,pdata 2b68 e0a08000 istore 1 ,contw 2b69 20600000 rtn lpm_dispatch: 2b6a 44d3c014 bpatch patch14_7 ,mem_patch14 2b6b 20402afa call lpo_calibration 2b6c 6801c16f fetch 3 ,mem_clks_per_lpo 2b6d 207a0000 rtn blank 2b6e 6800c091 fetch 1 ,mem_lpm_mode 2b6f 207a0000 rtn blank 2b70 6800c65a fetch 1 ,mem_ssp_enable 2b71 203a2b74 branch lpm_dispatch_next ,blank 2b72 6800c5b1 fetch 1 ,mem_sp_local_key_invalid 2b73 207a0000 rtn blank lpm_dispatch_next: 2b74 6800c4c0 fetch 1 ,mem_le_sc_calc 2b75 247a0000 nrtn blank 2b76 20402c3a call lpm_check_wake_lock 2b77 247a0000 nrtn blank 2b78 6800c040 fetch 1 ,mem_context 2b79 2fe00e03 compare 3 ,pdata ,0x7 2b7a 2420ab9d nbranch lpm_dispatch_unconn ,true 2b7b 68014042 fetch 2 ,mem_context + coffset_tsniff 2b7c 207a0000 rtn blank 2b7d 20758000 rtn wake 2b7e 44d44015 bpatch patch15_0 ,mem_patch15 lpm_dispatch_next2: 2b7f 680880a0 fetcht 1 ,mem_lpm_current_mult 2b80 68014042 fetch 2 ,mem_context + coffset_tsniff 2b81 984ffe00 imul32 temp ,pdata 2b82 18518400 rshift4 temp ,temp 2b83 184b0400 rshift2 temp ,temp 2b84 98467e00 isub temp ,pdata 2b85 680a4044 fetcht 4 ,mem_context + coffset_sniff_anchor 2b86 9840fe00 iadd temp ,pdata 2b87 6808c156 fetcht 1 ,mem_lpm_overhead 2b88 98467e00 isub temp ,pdata 2b89 1ff06000 lshift16 pdata ,alarm 2b8a 44d4c015 bpatch patch15_1 ,mem_patch15 2b8b 6801404e fetch 2 ,mem_context + coffset_rx_window 2b8c 1fe37e00 rshift pdata ,pdata 2b8d 20407f50 call clk2bt 2b8e 1e027e00 deposit alarm 2b8f 20407f39 call clk_diff 2b90 1b420400 copy clke ,temp 2b91 20407f37 call clk_diff_rt 2b92 20740000 rtn user lpm_dispatch_sleep: 2b93 20407f49 call clk2lpo lpm_dispatch_lpo: 2b94 44d54015 bpatch patch15_2 ,mem_patch15 2b95 6800c178 fetch 1 ,mem_lpm_xtalcnt 2b96 98467c00 isub temp ,null 2b97 20212b18 branch lpm_clear_counter ,positive 2b98 600a415b storet 4 ,mem_sleep_counter 2b99 20403328 call app_will_enter_lpm 2b9a 204052fb call l2cap_lpm_save_txbuf 2b9b 680a415b fetcht 4 ,mem_sleep_counter 2b9c 20202b2a branch lpm_sleep lpm_dispatch_unconn: 2b9d 44d5c015 bpatch patch15_3 ,mem_patch15 2b9e 6800c040 fetch 1 ,mem_context 2b9f c3800000 rtnbit1 state_inconn 2ba0 c3818000 rtnbit1 state_inpage 2ba1 6800c65a fetch 1 ,mem_ssp_enable 2ba2 203a2ba5 branch lpm_unconn_nossp ,blank 2ba3 6800c5b1 fetch 1 ,mem_sp_local_key_invalid 2ba4 207a0000 rtn blank lpm_unconn_nossp: 2ba5 44d64015 bpatch patch15_4 ,mem_patch15 2ba6 6800c36e fetch 1 ,mem_le_adv_enable 2ba7 243a2baa nbranch lpm_unconn_cont ,blank 2ba8 6800c093 fetch 1 ,mem_scan_mode 2ba9 207a0000 rtn blank lpm_unconn_cont: 2baa 68014154 fetch 2 ,mem_lpm_interval 2bab 207a0000 rtn blank lpm_sleep_btclk: 2bac 6808c156 fetcht 1 ,mem_lpm_overhead 2bad 98467e00 isub temp ,pdata 2bae d8401d4c arg 7500 ,temp 2baf 984ffe00 imul32 temp ,pdata 2bb0 20202b93 branch lpm_dispatch_sleep lpm_set_mult: 2bb1 44d6c015 bpatch patch15_5 ,mem_patch15 2bb2 7855fc00 disable wake 2bb3 68008030 fetch 1 ,mem_state 2bb4 c4008000 rtnbit0 state_insniff 2bb5 2436abd0 nbranch lpm_not_match ,match 2bb6 20402bcb call lpm_match 2bb7 680140c1 fetch 2 ,mem_rx_window_sniff 2bb8 6001003e store 2 ,mem_rx_window 2bb9 68008047 fetch 1 ,mem_arq 2bba c281abde bbit1 wack ,lpm_mult_short 2bbb c586abde bmark0 mark_lpm_mult_enable ,lpm_mult_short 2bbc 20405274 call l2cap_malloc_is_fifo_empty 2bbd 243a2bde nbranch lpm_mult_short ,blank 2bbe 6800c55c fetch 1 ,mem_classic_bt_flag 2bbf c280abde bbit1 short_mult_flag ,lpm_mult_short lpm_mult_wait_timeout: 2bc0 7000a000 jam 0 ,mem_lpm_current_mult 2bc1 c586abde bmark0 mark_lpm_mult_enable ,lpm_mult_short 2bc2 6800c174 fetch 1 ,mem_lpm_mult_cnt 2bc3 203a2be2 branch lpm_mult_long ,blank 2bc4 1fe0ffff increase -1 ,pdata 2bc5 6000c174 store 1 ,mem_lpm_mult_cnt 2bc6 20600000 rtn classic_bt_set_mult_short_flag: 2bc7 d8e00001 arg short_mult_flag ,queue 2bc8 202060cd branch classic_bluetooth_set_flag classic_bt_clr_mult_short_flag: 2bc9 d8e00001 arg short_mult_flag ,queue 2bca 202060d1 branch classic_bluetooth_clr_flag lpm_match: 2bcb 70415900 jam 0 ,mem_sniff_unint_lost 2bcc 6801c169 fetch 3 ,mem_sniff_rcv 2bcd 1fe0fe01 increase 1 ,pdata 2bce 6001c169 store 3 ,mem_sniff_rcv 2bcf 20600000 rtn lpm_not_match: 2bd0 44d74015 bpatch patch15_6 ,mem_patch15 2bd1 680940c1 fetcht 2 ,mem_rx_window_sniff 2bd2 18430400 rshift temp ,temp 2bd3 6801003e fetch 2 ,mem_rx_window 2bd4 9840fe00 iadd temp ,pdata 2bd5 6001003e store 2 ,mem_rx_window lpm_lost: 2bd6 7000a000 jam 0 ,mem_lpm_current_mult 2bd7 6801c16c fetch 3 ,mem_sniff_lost 2bd8 1fe0fe01 increase 1 ,pdata 2bd9 6001c16c store 3 ,mem_sniff_lost 2bda 6800c159 fetch 1 ,mem_sniff_unint_lost 2bdb 1fe0fe01 increase 1 ,pdata 2bdc 6000c159 store 1 ,mem_sniff_unint_lost 2bdd 20600000 rtn lpm_mult_short: 2bde 7000a000 jam 0 ,mem_lpm_current_mult 2bdf 6800c173 fetch 1 ,mem_lpm_mult_timeout 2be0 6000c174 store 1 ,mem_lpm_mult_cnt 2be1 20600000 rtn lpm_mult_long: 2be2 6808c172 fetcht 1 ,mem_lpm_mult 2be3 600880a0 storet 1 ,mem_lpm_current_mult 2be4 20600000 rtn lpm_cal_xtal_startup: 2be5 44d7c015 bpatch patch15_7 ,mem_patch15 2be6 6800c178 fetch 1 ,mem_lpm_xtalcnt 2be7 247a0000 nrtn blank 2be8 70804206 jam clksel_rc ,core_clksel 2be9 58000f0c setarg 0xf0c 2bea 20402c18 call lpm_write_config 2beb 58030d40 setarg 200000 2bec 20402a8f call sleep 2bed 37d98200 until null ,lpo_edge 2bee 1e226000 copy lpo_time ,alarm 2bef 204029e7 call xtal_fast_wake 2bf0 70804204 jam clksel_xtal ,core_clksel 2bf1 2000000a nop 10 2bf2 37d98200 until null ,lpo_edge 2bf3 1e227e00 deposit lpo_time 2bf4 9e067e00 isub alarm ,pdata 2bf5 1fe0fe30 increase 0x30 ,pdata 2bf6 d84000ff arg 0xff ,temp 2bf7 20407f91 call ceiling 2bf8 6000c178 store 1 ,mem_lpm_xtalcnt 2bf9 20007530 nop 30000 2bfa 20007530 nop 30000 2bfb 20007530 nop 30000 2bfc 20600000 rtn lpm_cal_xtal_startup_by_snooze: 2bfd 6800c178 fetch 1 ,mem_lpm_xtalcnt 2bfe 247a0000 nrtn blank 2bff 708044ff jam 0xff ,core_xtal_stable_time 2c00 70804206 jam clksel_rc ,core_clksel 2c01 204029e7 call xtal_fast_wake 2c02 580003e8 setarg 1000 2c03 9e20e000 iadd lpo_time ,alarm 2c04 07e00000 snooze 2c05 1e227e00 deposit lpo_time 2c06 20002ee0 nop 12000 2c07 20002ee0 nop 12000 2c08 20002ee0 nop 12000 2c09 20002ee0 nop 12000 2c0a 20002ee0 nop 12000 2c0b 20002ee0 nop 12000 2c0c 20002ee0 nop 12000 2c0d 20002ee0 nop 12000 2c0e 20002ee0 nop 12000 2c0f 9e067e00 isub alarm ,pdata 2c10 1fe0fe30 add pdata ,0x30 ,pdata 2c11 d84000ff arg 0xff ,temp 2c12 20407f91 call ceiling 2c13 6000c178 store 1 ,mem_lpm_xtalcnt 2c14 20007530 nop 30000 2c15 20007530 nop 30000 2c16 20007530 nop 30000 2c17 20600000 rtn lpm_write_config: 2c18 d8a00fff arg 0xfff ,contw 2c19 98a10a00 iand contw ,contw 2c1a 6800c175 fetch 1 ,mem_lpm_config 2c1b 1fe17ef0 and_into 0xf0 ,pdata 2c1c 1fed7e00 lshift8 pdata ,pdata 2c1d 98a1fe00 ior contw ,pdata 2c1e 6011004c hstore 2 ,core_lpm_reg 2c1f e8c10000 ifetch 2 ,contr 2c20 e0a10000 istore 2 ,contw lpm_write_ctrl: 2c21 58000001 setarg lpmreg_sel_ctrl 2c22 20202c24 branch lpm_write lpm_write_ctrl2: 2c23 58000002 setarg lpmreg_sel_ctrl2 lpm_write: 2c24 37d98200 until null ,lpo_edge 2c25 60108005 hstore 1 ,core_lpm_wr 2c26 37d98200 until null ,lpo_edge 2c27 37d98200 until null ,lpo_edge 2c28 20600000 rtn lpm_write_gpio_wakeup: 2c29 44d84016 bpatch patch16_0 ,mem_patch16 2c2a 680200a1 fetch 4 ,mem_gpio_wakeup_low 2c2b 6012004c hstore 4 ,core_lpm_reg 2c2c 58000004 setarg lpmreg_sel_gpiolow 2c2d 20402c24 call lpm_write 2c2e 680200a5 fetch 4 ,mem_gpio_wakeup_high 2c2f 6012004c hstore 4 ,core_lpm_reg 2c30 58000008 setarg lpmreg_sel_gpiohigh 2c31 20202c24 branch lpm_write lpm_get_wake_lock: 2c32 68014152 fetch 2 ,mem_lpm_wake_lock 2c33 f9207e00 qset1 pdata 2c34 60014152 store 2 ,mem_lpm_wake_lock 2c35 20600000 rtn lpm_put_wake_lock: 2c36 68014152 fetch 2 ,mem_lpm_wake_lock 2c37 f93ffe00 qset0 pdata 2c38 60014152 store 2 ,mem_lpm_wake_lock 2c39 20600000 rtn lpm_check_wake_lock: 2c3a 44d8c016 bpatch patch16_1 ,mem_patch16 2c3b 20403326 call app_check_wake_lock 2c3c 68014152 fetch 2 ,mem_lpm_wake_lock 2c3d 1fe22200 copy pdata ,rega 2c3e 6800804c fetch 1 ,mem_state_map 2c3f 2feffe06 isolate1 smap_rxlmp ,pdata 2c40 7920a20b setflag true ,wake_lock_lmp_rx ,rega 2c41 68008078 fetch 1 ,mem_lmo_opcode1 2c42 6808807c fetcht 1 ,mem_lmo_opcode2 2c43 9840fe00 iadd temp ,pdata 2c44 68088048 fetcht 1 ,mem_lmp_to_send 2c45 9840fe00 iadd temp ,pdata 2c46 7d3a220a nsetflag blank ,wake_lock_lmp_tx ,rega 2c47 6800c4ff fetch 1 ,mem_le_tx_buff_used 2c48 7d3a2201 nsetflag blank ,wake_lock_ble_tx ,rega 2c49 6801025d fetch 2 ,mem_l2cap_rxbuff1_len 2c4a 6809025f fetcht 2 ,mem_l2cap_rxbuff2_len 2c4b 9840fe00 iadd temp ,pdata 2c4c 7d3a220d nsetflag blank ,wake_lock_l2cap_rx ,rega 2c4d 68044668 fetch util_fifo_len ,mem_ipc_fifo_bt2c51 2c4e 7d3a220f nsetflag blank ,wake_lock_ipc_bt2c51 ,rega 2c4f 68044670 fetch util_fifo_len ,mem_ipc_fifo_c512bt 2c50 7d3a220e nsetflag blank ,wake_lock_ipc_c512bt ,rega 2c51 6800c1ce fetch 1 ,mem_hci_cmd 2c52 7d3a2208 nsetflag blank ,wake_lock_cmd ,rega 2c53 6800c092 fetch 1 ,mem_device_option 2c54 2fe1fe0a compare dvc_op_module ,pdata ,0xff 2c55 2040ac5b call lpm_uart_wake_lock ,true 2c56 5ffffff8 setarg -8 2c57 9a212200 iand rega ,rega 2c58 1a227e00 copy rega ,pdata 2c59 60014152 store 2 ,mem_lpm_wake_lock 2c5a 20600000 rtn lpm_uart_wake_lock: 2c5b 68110112 hfetch 2 ,core_uart_rxitems 2c5c 7d3a2206 nsetflag blank ,wake_lock_uart_rx ,rega 2c5d 6811010e hfetch 2 ,core_uart_txitems 2c5e 7d3a2205 nsetflag blank ,wake_lock_uart_tx ,rega 2c5f 20600000 rtn lpm_shut_down: 2c60 68120138 hfetch 4 ,core_lpm_ctrl 2c61 793ffe1b set0 27 ,pdata 2c62 6012004c hstore 4 ,core_lpm_reg 2c63 20402c21 call lpm_write_ctrl 2c64 20202a8c branch assert lpm_disable_exen_output: 2c65 6812013c hfetch 4 ,core_lpm_xtalcnt 2c66 793ffe14 set0 20 ,pdata 2c67 6012004c hstore 4 ,core_lpm_reg 2c68 20202c23 branch lpm_write_ctrl2 check_bt_disabled: 2c69 68014150 fetch 2 ,mem_chip_functions 2c6a c2802a8c bbit1 bt_disabled ,assert 2c6b 20600000 rtn check_ble_disabled: 2c6c 68014150 fetch 2 ,mem_chip_functions 2c6d c280aa8c bbit1 ble_disabled ,assert 2c6e 20600000 rtn check_module_disabled: 2c6f 68014150 fetch 2 ,mem_chip_functions 2c70 c2812a8c bbit1 module_disable ,assert 2c71 20600000 rtn g24_dispatch: 2c72 44d94016 bpatch patch16_2 ,mem_patch16 2c73 20402c7a call g24_head_ptr2regc 2c74 1a60a4cd add regc ,offset_24g_mode ,regb 2c75 ea408000 ifetch 1 ,regb 2c76 c1000000 rtneq disable_24g 2c77 c000ad06 beq tx_24g ,g24_transmit_process 2c78 c0012c7f beq rx_24g ,g24_receive_process 2c79 20600000 rtn g24_head_ptr2regc: 2c7a 68094241 fetcht 2 ,mem_24g_head_ptr 2c7b 18422600 copy temp ,regc 2c7c 20600000 rtn g24_receive_process_init: 2c7d 20402f3d call g24_receive_init 2c7e 2020307d branch g24_mode_switch_init g24_receive_process: 2c7f 20403084 call g24_mode_switch 2c80 2040305a call g24_dongle_work_mode_auto 2c81 2040305e call g24_dongle_bind_mode_auto 2c82 202030a2 branch g24_dongle_search_mode_auto g24_pair_init: 2c83 20403231 call g24_set0_mem_pid 2c84 5800004e setarg g24_pair_ch 2c85 2040322f call g24_store_mem_ch 2c86 204032ba call g24_store_mem_pair_txpower 2c87 1a60a292 add regc ,offset_24g_paring_addr ,rega 2c88 ea220000 ifetch 4 ,rega 2c89 2020322c branch g24_store_mem_addr g24_ch: 2c8a 20402c7a call g24_head_ptr2regc 2c8b 1a60a491 add regc ,offset_24g_current_ch_number ,regb 2c8c ea488000 ifetcht 1 ,regb 2c8d 20402c90 call g24_ch_temp_incre_size4 2c8e 1a608a91 add regc ,offset_24g_current_ch_number ,contw 2c8f 20202e56 branch g24_contw_istoret_1byte g24_ch_temp_incre_size4: 2c90 20402c94 call g24_ch_calc 2c91 18408401 increase 1 ,temp 2c92 18410403 and_into 3 ,temp 2c93 20600000 rtn g24_ch_calc: 2c94 1a60a4ae add regc ,offset_24g_addr ,regb 2c95 ea408000 ifetch 1 ,regb 2c96 1fe17e03 and_into 0x03 ,pdata 2c97 1fefa204 mul32 pdata ,4 ,rega 2c98 1a60fe97 add regc ,offset_24g_ch_map1 ,pdata 2c99 9a20fe00 iadd rega ,pdata 2c9a 98408c00 iadd temp ,contr 2c9b e8c08000 ifetch 1 ,contr 2c9c 2020322f branch g24_store_mem_ch g24_set_device_addr: 2c9d 2040326c call g24_store_mem_tx_power_temp 2c9e 2040666a call otp_enable_chgpump 2c9f 580007e2 setarg 0x7e2 2ca0 da200aa2 arg mem_temp ,rega 2ca1 d8400004 arg 4 ,temp 2ca2 204066b3 call otpd_read_data 2ca3 2040666d call otp_disable_chgpump 2ca4 68020aa2 fetch 4 ,mem_temp 2ca5 20403227 call g24_store_mem_device_addr 2ca6 247a0000 nrtn blank 2ca7 680240a0 fetch 4 ,mem_lap 2ca8 20203227 branch g24_store_mem_device_addr g24_transmit_rf_sta_init: 2ca9 20403241 call g24_set1_mem_rf_last_sta 2caa 58000000 setarg 0 2cab 2040323f call g24_store_mem_sync_cnt g24_transmit_rf_ctrl_clear: 2cac 2040323a call g24_fetch_mem_data_type 2cad 1fe17e07 and_into bits_data ,pdata 2cae 2020323c branch g24_store_mem_data_type g24_hop_ch_enable: 2caf 2040323a call g24_fetch_mem_data_type 2cb0 79207e04 set1 bit_hop ,pdata 2cb1 2040323c call g24_store_mem_data_type 2cb2 20203235 branch g24_store_mem_txpayload g24_transmit_hop_pac_fail: 2cb3 2040325d call g24_fetch_mem_rf_work_stage 2cb4 c000acb7 beq 1 ,g24_transmit_hop_pac_fail_wo_hop 2cb5 c0012cbc beq 2 ,g24_transmit_hop_pac_fail_hop_stage2 2cb6 20600000 rtn g24_transmit_hop_pac_fail_wo_hop: 2cb7 2040323e call g24_set2_mem_sync_cnt g24_transmit_hop_pac_fail_stage1: 2cb8 1a608ad1 add regc ,offset_24g_hop_pac_retry ,contw 2cb9 204032d6 call g24_mem_set0 2cba 20403242 call g24_store_mem_rf_last_sta 2cbb 20202cac branch g24_transmit_rf_ctrl_clear g24_transmit_hop_pac_fail_hop_stage2: 2cbc 2040325a call g24_set0_mem_rf_hop_ch 2cbd 20202cb8 branch g24_transmit_hop_pac_fail_stage1 g24_transmit_pac_fail_hop_stage3: 2cbe 1a60a28c add regc ,offset_24g_txfail_cnt ,rega 2cbf ea208000 ifetch 1 ,rega 2cc0 1fe0fe01 increase 1 ,pdata 2cc1 1a608a8c add regc ,offset_24g_txfail_cnt ,contw 2cc2 e0a08000 istore 1 ,contw 2cc3 c0102dd2 beq 0x20 ,g24_tx_attempt_fail 2cc4 20403258 call g24_fetch_mem_rf_hop_ch 2cc5 c000acca beq 1 ,g24_rf_hop_fastly 2cc6 58000001 setarg 1 2cc7 2040325b call g24_store_mem_rf_hop_ch g24_rf_hop_attemp_again: 2cc8 20403258 call g24_fetch_mem_rf_hop_ch 2cc9 c080acac bne 1 ,g24_transmit_rf_ctrl_clear g24_rf_hop_fastly: 2cca 1a60a2d3 add regc ,offset_24g_hop_fastly_cnt ,rega 2ccb ea208000 ifetch 1 ,rega 2ccc 1fe0fe01 increase 1 ,pdata 2ccd 20402cd5 call g24_store_mem_hop_fastly_cnt 2cce c0022cd2 beq 4 ,g24_rf_hop_fastly_exit 2ccf 20402c8a call g24_ch 2cd0 20402d04 call g24_set2_mem_max_retry 2cd1 20202d8f branch g24_transmit_packet g24_rf_hop_fastly_exit: 2cd2 20402cd4 call g24_set0_mem_hop_fastly_cnt 2cd3 20202cac branch g24_transmit_rf_ctrl_clear g24_set0_mem_hop_fastly_cnt: 2cd4 58000000 setarg 0 g24_store_mem_hop_fastly_cnt: 2cd5 1a608ad3 add regc ,offset_24g_hop_fastly_cnt ,contw 2cd6 202032b4 branch g24_contw_istore_1byte g24_transmit_hop_pac_succ_wo_hop: 2cd7 2040323e call g24_set2_mem_sync_cnt g24_transmit_hop_pac_succ: 2cd8 2040325a call g24_set0_mem_rf_hop_ch 2cd9 20403241 call g24_set1_mem_rf_last_sta 2cda 20202cac branch g24_transmit_rf_ctrl_clear g24_transmit_succ_rf_config: 2cdb 2040325d call g24_fetch_mem_rf_work_stage 2cdc c001acd8 beq 3 ,g24_transmit_hop_pac_succ 2cdd 2040323a call g24_fetch_mem_data_type 2cde 2fec0004 isolate0 bit_hop ,pdata 2cdf 2020aca9 branch g24_transmit_rf_sta_init ,true 2ce0 2040325d call g24_fetch_mem_rf_work_stage 2ce1 c000acd7 beq 1 ,g24_transmit_hop_pac_succ_wo_hop 2ce2 c0012cd8 beq 2 ,g24_transmit_hop_pac_succ 2ce3 20600000 rtn g24_rf_sta_check: 2ce4 20403253 call g24_fetch_mem_pairing_sm 2ce5 c1ff8000 rtnne state_24g_pairing_success 2ce6 20402ce9 call g24_rf_laststa_synccnt_check 2ce7 24562cf4 ncall g24_rf_sync_cnt_check ,user2 2ce8 20600000 rtn g24_rf_laststa_synccnt_check: 2ce9 78567c00 disable user2 2cea 1a60a2ce add regc ,offset_24g_rf_last_sta ,rega 2ceb ea208000 ifetch 1 ,rega 2cec c1808000 rtnne 1 2ced 1a60a2d0 add regc ,offset_24g_sync_cnt ,rega 2cee ea208000 ifetch 1 ,rega 2cef c1800000 rtnne 0 2cf0 58000001 setarg 1 2cf1 20402cfd call g24_store_mem_rf_work_stage 2cf2 20403237 call g24_set4_mem_max_retry 2cf3 20207feb branch enable_user2 g24_rf_sync_cnt_check: 2cf4 1a60a2d0 add regc ,offset_24g_sync_cnt ,rega 2cf5 ea208000 ifetch 1 ,rega 2cf6 203a2cff branch g24_rf_hop_attemp ,blank 2cf7 1fe0ffff increase -1 ,pdata 2cf8 2040323f call g24_store_mem_sync_cnt 2cf9 58000002 setarg 2 2cfa 20402cfd call g24_store_mem_rf_work_stage 2cfb 20402c8a call g24_ch 2cfc 20203237 branch g24_set4_mem_max_retry g24_store_mem_rf_work_stage: 2cfd 1a608ad2 add regc ,offset_24g_rf_work_stage ,contw 2cfe 202032b4 branch g24_contw_istore_1byte g24_rf_hop_attemp: 2cff 58000003 setarg 3 2d00 20402cfd call g24_store_mem_rf_work_stage 2d01 20403258 call g24_fetch_mem_rf_hop_ch 2d02 243a2cc8 nbranch g24_rf_hop_attemp_again ,blank 2d03 20402c8a call g24_ch g24_set2_mem_max_retry: 2d04 58000002 setarg 2 2d05 20203238 branch g24_store_mem_max_retry g24_transmit_process: 2d06 c6930000 rtnmark0 mark_24g 2d07 79200027 set1 mark_24g_conext ,mark 2d08 44d9c016 bpatch patch16_3 ,mem_patch16 2d09 1a60a28e add regc ,offset_24g_tx_without_int ,rega 2d0a ea208000 ifetch 1 ,rega 2d0b c000ad0f beq 1 ,g24_transmit_without_int 2d0c 2040306a call g24_timer_check 2d0d 24342d16 nbranch g24_transmit_exit ,user 2d0e 20402d1b call g24_interval_calibrate g24_transmit_without_int: 2d0f 1a608a8e add regc ,offset_24g_tx_without_int ,contw 2d10 204032d6 call g24_mem_set0 2d11 20402d2c call g24_txdata_prep 2d12 24342d7d nbranch g24_enter_lpm ,user 2d13 20402ce4 call g24_rf_sta_check g24_transmit_start: 2d14 20402d8f call g24_transmit_packet 2d15 20402e7a call g24_power_ctrl g24_transmit_exit: 2d16 793f8027 set0 mark_24g_conext ,mark 2d17 20600000 rtn g24_timer_timeout: 2d18 20628000 rtn zero 2d19 79207e1c set1 28 ,pdata 2d1a 20600000 rtn g24_interval_calibrate: 2d1b 1a60a2c2 add regc ,offset_24g_pac_index ,rega 2d1c ea208000 ifetch 1 ,rega 2d1d 1fe0fe01 increase 1 ,pdata 2d1e 1a608ac2 add regc ,offset_24g_pac_index ,contw 2d1f e0a08000 istore 1 ,contw 2d20 c0022d23 beq 4 ,g24_interval_max 2d21 c002ad27 beq 5 ,g24_interval_min 2d22 20600000 rtn g24_interval_max: 2d23 1a60a2ad add regc ,offset_24g_interval_max ,rega 2d24 ea208000 ifetch 1 ,rega g24_interval_update: 2d25 1a608aab add regc ,offset_24g_interval ,contw 2d26 202032b4 branch g24_contw_istore_1byte g24_interval_min: 2d27 1a608ac2 add regc ,offset_24g_pac_index ,contw 2d28 204032d6 call g24_mem_set0 2d29 1a60a2ac add regc ,offset_24g_interval_min ,rega 2d2a ea208000 ifetch 1 ,rega 2d2b 20202d25 branch g24_interval_update g24_txdata_prep: 2d2c 20403253 call g24_fetch_mem_pairing_sm 2d2d c0ffaeb1 bne state_24g_pairing_success ,g24_pairing_sm 2d2e 44da4016 bpatch patch16_4 ,mem_patch16 2d2f 20402d3a call g24_package_data 2d30 24342d36 nbranch g24_txdata_last_pac ,user 2d31 20402d53 call g24_transmit_prep 2d32 20402e71 call g24_power_ctrl_pac_incrs g24_txdata_enable_tx: 2d33 58000001 setarg ensure_on_24g g24_store_mem_ensure: 2d34 1a608a8b add regc ,offset_24g_ensure ,contw 2d35 202032b4 branch g24_contw_istore_1byte g24_txdata_last_pac: 2d36 1a60a28b add regc ,offset_24g_ensure ,rega 2d37 ea208000 ifetch 1 ,rega 2d38 c000ffe7 beq ensure_on_24g ,enable_user 2d39 20600000 rtn g24_package_data: 2d3a 1a6084d8 add regc ,offset_24g_cb_data ,temp 2d3b e8410000 ifetch 2 ,temp 2d3c 20407f9c call callback_func 2d3d 24740000 nrtn user 2d3e 1a227e00 copy rega ,pdata 2d3f 60008aae store 1 ,mem_rega 2d40 1a608ab2 add regc ,offset_24g_abort_pac ,contw 2d41 204032d6 call g24_mem_set0 2d42 20402cac call g24_transmit_rf_ctrl_clear 2d43 6000919e store 1 ,mem_24g_common_temp 2d44 68008aae fetch 1 ,mem_rega 2d45 1fe22200 copy pdata ,rega 2d46 1a208401 add rega ,1 ,temp 2d47 d8a0119f arg mem_24g_common_temp + 1 ,contw 2d48 1a227200 copy rega ,loopcnt 2d49 1a420c00 copy regb ,contr 2d4a 20407f01 call memcpy 2d4b da20119e arg mem_24g_common_temp ,rega g24_put_data_in_buff: 2d4c c6938000 rtnmark0 mark_24g_conext 2d4d 1a608a86 add regc ,offset_24g_datalen ,contw 2d4e e0a88000 istoret 1 ,contw 2d4f 18427200 copy temp ,loopcnt 2d50 1a608a22 add regc ,offset_24g_txbuf ,contw 2d51 1a220c00 copy rega ,contr 2d52 20207f01 branch memcpy g24_transmit_prep: 2d53 1a60a286 add regc ,offset_24g_datalen ,rega 2d54 ea208000 ifetch 1 ,rega 2d55 1fe0fe02 increase 2 ,pdata 2d56 1a608a88 add regc ,offset_24g_txlen ,contw 2d57 e0a08000 istore 1 ,contw 2d58 2040323a call g24_fetch_mem_data_type 2d59 20403235 call g24_store_mem_txpayload 2d5a 1a60a286 add regc ,offset_24g_datalen ,rega 2d5b ea208000 ifetch 1 ,rega 2d5c 1fe9fe00 lshift3 pdata ,pdata 2d5d 1a60a285 add regc ,offset_24g_pid ,rega 2d5e ea288000 ifetcht 1 ,rega 2d5f 18410403 and temp ,0x03 ,temp 2d60 18438400 lshift temp ,temp 2d61 9841fe00 ior temp ,pdata 2d62 1a60a2c3 add regc ,offset_24g_no_ack ,rega 2d63 ea288000 ifetcht 1 ,rega 2d64 9840fe00 iadd temp ,pdata 2d65 e0a08000 istore 1 ,contw 2d66 1a60a286 add regc ,offset_24g_datalen ,rega 2d67 ea208000 ifetch 1 ,rega 2d68 98007200 iforce loopcnt 2d69 1a608c22 add regc ,offset_24g_txbuf ,contr 2d6a 20207f01 branch memcpy g24_send_abort_packet: 2d6b 2040324f call g24_set1_mem_abort_pac 2d6c 2040325a call g24_set0_mem_rf_hop_ch 2d6d 20402e6d call g24_power_ctrl_reinit 2d6e 20402cac call g24_transmit_rf_ctrl_clear 2d6f 6000919e store 1 ,mem_24g_common_temp 2d70 20402d77 call g24_put_data_in_buff_pre 2d71 2040323a call g24_fetch_mem_data_type 2d72 79207e03 set1 bit_abort ,pdata 2d73 2040323c call g24_store_mem_data_type 2d74 20402d53 call g24_transmit_prep 2d75 20402d33 call g24_txdata_enable_tx 2d76 20202d14 branch g24_transmit_start g24_put_data_in_buff_pre: 2d77 6000919f store 1 ,mem_24g_common_temp + 1 2d78 20403224 call g24_fetch_mem_device_addr 2d79 600211a0 store 4 ,mem_24g_common_temp + 2 2d7a d8400006 arg 6 ,temp 2d7b da20119e arg mem_24g_common_temp ,rega 2d7c 20202d4c branch g24_put_data_in_buff g24_enter_lpm: 2d7d 1a60a2b2 add regc ,offset_24g_abort_pac ,rega 2d7e ea208000 ifetch 1 ,rega 2d7f 203a2d6b branch g24_send_abort_packet ,blank g24_enter_lpm_prepare: 2d80 1a60a2da add regc ,offset_24g_cb_lpm_prepare ,rega 2d81 ea210000 ifetch 2 ,rega 2d82 20207f9c branch callback_func g24_lpm_long_sleep: 2d83 20402c7a call g24_head_ptr2regc 2d84 20402afa call lpo_calibration 2d85 6801c16f fetch 3 ,mem_clks_per_lpo 2d86 207a0000 rtn blank 2d87 1a6084dc add regc ,offset_24g_cb_lpm_before ,temp 2d88 e8410000 ifetch 2 ,temp 2d89 20407f9c call callback_func 2d8a 1a6084b6 add regc ,offset_24g_enter_hibernate ,temp 2d8b e8440000 ifetch 8 ,temp 2d8c 20407f49 call clk2lpo 2d8d 600a415b storet 4 ,mem_sleep_counter 2d8e 20202b2a branch lpm_sleep g24_transmit_packet: 2d8f 20402c7a call g24_head_ptr2regc 2d90 1a608a8f add regc ,offset_24g_retry ,contw 2d91 204032d6 call g24_mem_set0 g24_transmit_loop: 2d92 20402da4 call g24_transmit_receive_ack 2d93 242c2dae nbranch g24_retransmit ,sync 2d94 2437adae nbranch g24_retransmit ,user3 2d95 20402dd6 call g24_ackpayload_parse 2d96 20402e75 call g24_power_ctrl_ack_incrs g24_transmit_next_packet: 2d97 20402c7a call g24_head_ptr2regc 2d98 1a60a285 add regc ,offset_24g_pid ,rega 2d99 ea208000 ifetch 1 ,rega 2d9a 1fe0fe01 increase 1 ,pdata 2d9b 20403232 call g24_store_mem_pid 2d9c 20403253 call g24_fetch_mem_pairing_sm 2d9d c0ffaed0 bne state_24g_pairing_success ,g24_paring_mode 2d9e 20402cdb call g24_transmit_succ_rf_config g24_transmit_abandon: 2d9f 58000000 setarg 0 2da0 1a608a8c add regc ,offset_24g_txfail_cnt ,contw 2da1 e0a10000 istore 2 ,contw 2da2 58000000 setarg ensure_off_24g 2da3 20202d34 branch g24_store_mem_ensure g24_transmit_receive_ack: 2da4 7857fc00 disable user3 2da5 20402df7 call g24_transmit 2da6 20402c7a call g24_head_ptr2regc 2da7 1a60a2c3 add regc ,offset_24g_no_ack ,rega 2da8 ea208000 ifetch 1 ,rega 2da9 c000adac beq no_ack_24g ,g24_transmit_no_ack 2daa 20402e11 call g24_receive_packet 2dab 20202e45 branch g24_end_of_packet g24_transmit_no_ack: 2dac 20402e45 call g24_end_of_packet 2dad 20202d97 branch g24_transmit_next_packet g24_retransmit: 2dae 44dac016 bpatch patch16_5 ,mem_patch16 2daf 1a60a28d add regc ,offset_24g_get_ack_fail ,rega 2db0 ea208000 ifetch 1 ,rega 2db1 1fe0fe01 increase 1 ,pdata 2db2 1a608a8d add regc ,offset_24g_get_ack_fail ,contw 2db3 e0a08000 istore 1 ,contw 2db4 20403253 call g24_fetch_mem_pairing_sm 2db5 c0ffadcc bne state_24g_pairing_success ,g24_tx_paring_retry 2db6 1a60a28f add regc ,offset_24g_retry ,rega 2db7 ea288000 ifetcht 1 ,rega 2db8 18408401 increase 1 ,temp 2db9 1a608a8f add regc ,offset_24g_retry ,contw 2dba e0a88000 istoret 1 ,contw 2dbb 1a60a2cc add regc ,offset_24g_max_retry ,rega 2dbc ea208000 ifetch 1 ,rega 2dbd 98467e00 isub temp ,pdata 2dbe 243a2d92 nbranch g24_transmit_loop ,blank 2dbf 44db4016 bpatch patch16_6 ,mem_patch16 2dc0 2040325d call g24_fetch_mem_rf_work_stage 2dc1 c001acbe beq 3 ,g24_transmit_pac_fail_hop_stage3 2dc2 1a60a2d1 add regc ,offset_24g_hop_pac_retry ,rega 2dc3 ea208000 ifetch 1 ,rega 2dc4 1fe0fe01 increase 1 ,pdata 2dc5 1a608ad1 add regc ,offset_24g_hop_pac_retry ,contw 2dc6 e0a08000 istore 1 ,contw 2dc7 c0012cb3 beq 2 ,g24_transmit_hop_pac_fail 2dc8 20402caf call g24_hop_ch_enable 2dc9 58000001 setarg 1 2dca 20403238 call g24_store_mem_max_retry 2dcb 20202d8f branch g24_transmit_packet g24_tx_paring_retry: 2dcc 1a60a28d add regc ,offset_24g_get_ack_fail ,rega 2dcd ea208000 ifetch 1 ,rega 2dce c1ff8000 rtnne 0xff 2dcf 1a608a8d add regc ,offset_24g_get_ack_fail ,contw 2dd0 204032d6 call g24_mem_set0 2dd1 20202dd4 branch g24_stop_24g_mode g24_tx_attempt_fail: 2dd2 1a608a8c add regc ,offset_24g_txfail_cnt ,contw 2dd3 204032d6 call g24_mem_set0 g24_stop_24g_mode: 2dd4 700a993a jam bt_evt_24g_attempt_fail ,mem_fifo_temp 2dd5 20207d86 branch ui_ipc_send_event g24_ackpayload_parse: 2dd6 20402dde call g24_read_len_pid_crc 2dd7 1a60a284 add regc ,offset_24g_rxdata_length ,rega 2dd8 ea208000 ifetch 1 ,rega 2dd9 207a0000 rtn blank 2dda 98007200 iforce loopcnt 2ddb 1a608c02 add regc ,offset_24g_rxbuf_add2 ,contr 2ddc 1a608a64 add regc ,offset_24g_rxpayload ,contw 2ddd 20207f01 branch memcpy g24_read_len_pid_crc: 2dde 2040325f call g24_fetch_mem_rxbuf_add1 2ddf 1fe97e00 rshift3 pdata ,pdata 2de0 1a608a84 add regc ,offset_24g_rxdata_length ,contw 2de1 e0a08000 istore 1 ,contw 2de2 1fe0fe01 increase 1 ,pdata 2de3 1a608c01 add regc ,offset_24g_rxbuf_add1 ,contr 2de4 98c08c00 iadd contr ,contr 2de5 e8c18000 ifetch 3 ,contr 2de6 1a608ac4 add regc ,offset_24g_sta_crc ,contw 2de7 e0a18000 istore 3 ,contw 2de8 2040325f call g24_fetch_mem_rxbuf_add1 2de9 1fe37e00 rshift pdata ,pdata 2dea 1fe17e03 and pdata ,0x03 ,pdata 2deb 1a608aca add regc ,offset_24g_sta_pid ,contw 2dec e0a08000 istore 1 ,contw 2ded 20600000 rtn g24_prep: 2dee 7844fc00 disable enable_crc 2def 7843fc00 disable enable_white 2df0 58555555 setarg 0x555555 2df1 98001e00 iforce crc24_init 2df2 20600000 rtn g24_set_freq_tx: 2df3 20402918 call set_sync_on 2df4 1a60a290 add regc ,offset_24g_ch ,rega 2df5 ea288000 ifetcht 1 ,rega 2df6 20202933 branch set_freq_tx g24_transmit: 2df7 20402dee call g24_prep 2df8 20402df3 call g24_set_freq_tx 2df9 79202a00 set1 txgfsk ,radio_ctrl 2dfa 782efc00 enable encode_fec0 2dfb 78307c00 enable is_tx 2dfc 7850fc00 disable is_rx 2dfd 204053c4 call le_enable 2dfe 2040322a call g24_fetch_mem_addr 2dff 98001200 iforce access 2e00 08008620 inject mod ,32 2e01 7824fc00 enable enable_crc 2e02 1a60a288 add regc ,offset_24g_txlen ,rega 2e03 ea208000 ifetch 1 ,rega 2e04 98007200 iforce loopcnt 2e05 1a608c42 add regc ,offset_24g_txpayload ,contr g24tr_loop: 2e06 e8c08000 ifetch 1 ,contr 2e07 08008608 inject mod ,8 2e08 c2002e06 loop g24tr_loop 2e09 78247c00 enable enable_parity 2e0a 08008618 inject mod ,24 2e0b 78447c00 disable enable_parity 2e0c 37d38200 until null ,tx_clear 2e0d 44dbc016 bpatch patch16_7 ,mem_patch16 2e0e 20000064 nop 100 2e0f 784efc00 disable encode_fec0 2e10 20600000 rtn g24_receive_packet: 2e11 7857fc00 disable user3 2e12 18002a00 force 0 ,radio_ctrl 2e13 1a60a290 add regc ,offset_24g_ch ,rega 2e14 ea288000 ifetcht 1 ,rega 2e15 2040291f call set_freq_rx 2e16 20402924 call rf_rx_enable g24_receive_rxon: 2e17 20402dee call g24_prep 2e18 7826fc00 enable decode_fec0 2e19 7830fc00 enable is_rx 2e1a 78507c00 disable is_tx 2e1b 204053c4 call le_enable 2e1c 2040322a call g24_fetch_mem_addr 2e1d 98001200 iforce access 2e1e 78287c00 enable swfine 2e1f 1a60a289 add regc ,offset_24g_rx_window ,rega 2e20 ea210000 ifetch 2 ,rega 2e21 98003600 iforce stop_watch 2e22 37c18400 correlate null ,timeout 2e23 242c2e4d nbranch g24_sync_timeout ,sync 2e24 7824fc00 enable enable_crc 2e25 09800008 parse demod ,bucket ,8 2e26 19897e00 rshift3 pwindow ,pdata 2e27 1a608a00 add regc ,offset_24g_rxbuf ,contw 2e28 e0a08000 istore 1 ,contw 2e29 1a60a2cd add regc ,offset_24g_mode ,rega 2e2a ea208000 ifetch 1 ,rega 2e2b c0012e33 beq rx_24g ,g24_receive_skip 2e2c 44dc4017 bpatch patch17_0 ,mem_patch17 2e2d 1a60a200 add regc ,offset_24g_rxbuf ,rega 2e2e ea208000 ifetch 1 ,rega 2e2f 1a60a287 add regc ,offset_24g_data_type ,rega 2e30 ea288000 ifetcht 1 ,rega 2e31 a8400e00 icompare bits_data ,temp 2e32 2420ae45 nbranch g24_end_of_packet ,true g24_receive_skip: 2e33 09800008 parse demod ,bucket ,8 2e34 19897e00 rshift3 pwindow ,pdata 2e35 e0a08000 istore 1 ,contw 2e36 1fe97e00 rshift3 pdata ,pdata 2e37 1fe1721f and pdata ,0x1f ,loopcnt 2e38 2022ae3d branch g24rx_nopayload ,zero g24rx_loop: 2e39 09800008 parse demod ,bucket ,8 2e3a 19897e00 rshift3 pwindow ,pdata 2e3b e0a08000 istore 1 ,contw 2e3c c2002e39 loop g24rx_loop g24rx_nopayload: 2e3d 09800018 parse demod ,bucket ,24 2e3e 1fef7e00 rshift32 pdata ,pdata 2e3f 1ff17e00 rshift16 pdata ,pdata 2e40 e0a18000 istore 3 ,contw 2e41 20232e45 branch g24_end_of_packet ,crc_failed 2e42 7837fc00 enable user3 2e43 7846fc00 disable decode_fec0 2e44 20600000 rtn g24_end_of_packet: 2e45 784efc00 disable encode_fec0 2e46 7846fc00 disable decode_fec0 2e47 7844fc00 disable enable_crc 2e48 7843fc00 disable enable_white 2e49 2030a8f9 branch shutdown_radio ,is_rx 2e4a 37d38200 until null ,tx_clear 2e4b 20000064 nop 100 2e4c 202028f9 branch shutdown_radio g24_sync_timeout: 2e4d 20402e4f call rssi_noise 2e4e 20202e45 branch g24_end_of_packet rssi_noise: 2e4f 204029bb call save_rssi 2e50 207a0000 rtn blank 2e51 1a60a2ea add regc ,offset_rssi_noise_index ,rega 2e52 ea288000 ifetcht 1 ,rega 2e53 da200d9e arg mem_rssi_noise_buffer ,rega 2e54 20402e58 call rssi_noise_store 2e55 1a608aea add regc ,offset_rssi_noise_index ,contw g24_contw_istoret_1byte: 2e56 e0a88000 istoret 1 ,contw 2e57 20600000 rtn rssi_noise_store: 2e58 da4000ff arg rssi_buf_len_noise ,regb 2e59 20202e5a branch rssi_store rssi_store: 2e5a 1a227e00 copy rega ,pdata 2e5b 98408a00 iadd temp ,contw 2e5c 68008018 fetch 1 ,mem_rssi 2e5d e0a08000 istore 1 ,contw 2e5e 18408401 increase 1 ,temp 2e5f 1a427e00 copy regb ,pdata 2e60 98410400 iand_into temp 2e61 20600000 rtn rssi_average: 2e62 d8400000 arg 0 ,temp 2e63 1a220c00 copy rega ,contr rssi_average_loop: 2e64 e8c08000 ifetch 1 ,contr 2e65 98408400 iadd temp ,temp 2e66 c2002e64 loop rssi_average_loop 2e67 184c8400 rshift8 temp ,temp 2e68 20600000 rtn g24_power_ctrl_init: 2e69 20402c7a call g24_head_ptr2regc 2e6a 20402e9f call g24_power_ctrl_incrs_level1 2e6b 58000001 setarg 1 2e6c 20403272 call g24_store_mem_power_ctrl_level g24_power_ctrl_reinit: 2e6d 58000000 setarg 0 2e6e 20402e73 call g24_store_mem_power_ctrl_pac 2e6f e0a08000 istore 1 ,contw 2e70 20600000 rtn g24_power_ctrl_pac_incrs: 2e71 20403270 call g24_fetch_mem_power_ctrl_pac 2e72 1fe0fe01 increase 1 ,pdata g24_store_mem_power_ctrl_pac: 2e73 1a608afc add regc ,offset_power_ctrl_packet_cnt ,contw 2e74 202032b4 branch g24_contw_istore_1byte g24_power_ctrl_ack_incrs: 2e75 1a60a2fd add regc ,offset_power_ctrl_ack_cnt ,rega 2e76 ea208000 ifetch 1 ,rega 2e77 1fe0fe01 increase 1 ,pdata 2e78 1a608afd add regc ,offset_power_ctrl_ack_cnt ,contw 2e79 202032b4 branch g24_contw_istore_1byte g24_power_ctrl: 2e7a 44dcc017 bpatch patch17_1 ,mem_patch17 2e7b 20403270 call g24_fetch_mem_power_ctrl_pac 2e7c 1fe67c7c sub pdata ,power_ctrl_max_packet_cnt ,null 2e7d 20610000 rtn positive 2e7e 1a60a2fd add regc ,offset_power_ctrl_ack_cnt ,rega 2e7f ea288000 ifetcht 1 ,rega 2e80 98460400 isub temp ,temp 2e81 20402e6d call g24_power_ctrl_reinit 2e82 58000102 setarg offset_power_ctrl_threshold_up 2e83 9a60a200 iadd regc ,rega 2e84 ea208000 ifetch 1 ,rega 2e85 98467c00 isub temp ,null 2e86 24212e8d nbranch g24_power_ctrl_incrs ,positive 2e87 58000103 setarg offset_power_ctrl_threshold_down 2e88 9a60a200 iadd regc ,rega 2e89 ea208000 ifetch 1 ,rega 2e8a 98467c00 isub temp ,null 2e8b 20212e99 branch g24_power_ctrl_decrs ,positive 2e8c 20600000 rtn g24_power_ctrl_incrs: 2e8d 1a60a2fe add regc ,offset_power_ctrl_level ,rega 2e8e ea208000 ifetch 1 ,rega 2e8f c0012e93 beq 2 ,g24_power_ctrl_incrs_level2 2e90 1fe0fe01 increase 1 ,pdata 2e91 20403272 call g24_store_mem_power_ctrl_level 2e92 c000ae9f beq 1 ,g24_power_ctrl_incrs_level1 g24_power_ctrl_incrs_level2: 2e93 5800000a setarg power_ctrl_losspac_thresh_up2 2e94 204032b0 call g24_store_mem_power_ctrl_threshold_up 2e95 58000000 setarg power_ctrl_losspac_thresh_down2 2e96 204032b2 call g24_store_mem_power_ctrl_threshold_down 2e97 1a60a2ff add regc ,offset_power_ctrl_txpwr_level2 ,rega 2e98 20202ea5 branch g24_ifetch_rega_store_mem_txpower g24_power_ctrl_decrs: 2e99 1a60a2fe add regc ,offset_power_ctrl_level ,rega 2e9a ea208000 ifetch 1 ,rega 2e9b c0002ea7 beq 0 ,g24_power_ctrl_decrs_level0 2e9c 1fe0ffff increase -1 ,pdata 2e9d 20403272 call g24_store_mem_power_ctrl_level 2e9e c0002ea7 beq 0 ,g24_power_ctrl_decrs_level0 g24_power_ctrl_decrs_level1: g24_power_ctrl_incrs_level1: 2e9f 58000005 setarg power_ctrl_losspac_thresh_up1 2ea0 204032b0 call g24_store_mem_power_ctrl_threshold_up 2ea1 58000000 setarg power_ctrl_losspac_thresh_down1 2ea2 204032b2 call g24_store_mem_power_ctrl_threshold_down 2ea3 58000100 setarg offset_power_ctrl_txpwr_level1 g24_iadd_offset_mem_txpower: 2ea4 9a60a200 iadd regc ,rega g24_ifetch_rega_store_mem_txpower: 2ea5 ea208000 ifetch 1 ,rega 2ea6 2020326a branch g24_store_mem_txpower g24_power_ctrl_decrs_level0: 2ea7 58000002 setarg power_ctrl_losspac_thresh_up0 2ea8 204032b0 call g24_store_mem_power_ctrl_threshold_up 2ea9 58000000 setarg power_ctrl_losspac_thresh_down0 2eaa 204032b2 call g24_store_mem_power_ctrl_threshold_down 2eab 58000101 setarg offset_power_ctrl_txpwr_level0 2eac 20202ea4 branch g24_iadd_offset_mem_txpower g24_start_pairing_sm1: 2ead 79200026 set1 mark_24g ,mark 2eae 20402c83 call g24_pair_init g24_set_pairing_sm_1: 2eaf 58000001 setarg state_24g_pairing_1 2eb0 20203256 branch g24_store_mem_pairing_sm g24_pairing_sm: 2eb1 1a60a28b add regc ,offset_24g_ensure ,rega 2eb2 ea208000 ifetch 1 ,rega 2eb3 c000ffe7 beq ensure_on_24g ,enable_user 2eb4 20403253 call g24_fetch_mem_pairing_sm 2eb5 c000aeb9 beq state_24g_pairing_1 ,g24_pairing_sm_1 2eb6 c0012ebd beq state_24g_pairing_2 ,g24_pairing_sm_2 2eb7 c001aec1 beq state_24g_pairing_3 ,g24_pairing_sm_3 2eb8 20202a8c branch assert g24_pairing_sm_1: 2eb9 58000011 setarg state_24g_pairing_1_waiting_ack 2eba 20403256 call g24_store_mem_pairing_sm 2ebb 70119eaa jam 0xaa ,mem_24g_common_temp 2ebc 20202ec4 branch g24_pairing_sm_common g24_pairing_sm_2: 2ebd 58000012 setarg state_24g_pairing_2_waiting_ack 2ebe 20403256 call g24_store_mem_pairing_sm 2ebf 70119e55 jam 0x55 ,mem_24g_common_temp 2ec0 20202ec4 branch g24_pairing_sm_common g24_pairing_sm_3: 2ec1 58000013 setarg state_24g_pairing_3_waiting_ack 2ec2 20403256 call g24_store_mem_pairing_sm 2ec3 70119e22 jam 0x22 ,mem_24g_common_temp g24_pairing_sm_common: 2ec4 2040323a call g24_fetch_mem_data_type 2ec5 1fe17e07 and_into bits_data ,pdata 2ec6 6000919f store 1 ,mem_24g_common_temp + 1 2ec7 20403224 call g24_fetch_mem_device_addr 2ec8 600211a0 store 4 ,mem_24g_common_temp + 2 g24_put_pairing_data_in_buff: 2ec9 7011a400 jam 0 ,mem_24g_common_temp + 6 2eca da20119e arg mem_24g_common_temp ,rega 2ecb d8400007 arg 7 ,temp 2ecc 20402d4c call g24_put_data_in_buff 2ecd 20402d53 call g24_transmit_prep 2ece 20402d33 call g24_txdata_enable_tx 2ecf 20207fe7 branch enable_user g24_paring_mode: 2ed0 20403253 call g24_fetch_mem_pairing_sm 2ed1 c17f8000 rtneq state_24g_pairing_success 2ed2 c008aed6 beq state_24g_pairing_1_waiting_ack ,g24_pairing_sm_1_waiting_ack 2ed3 c0092ed9 beq state_24g_pairing_2_waiting_ack ,g24_pairing_sm_2_waiting_ack 2ed4 c009aedc beq state_24g_pairing_3_waiting_ack ,g24_pairing_sm_3_waiting_ack 2ed5 20600000 rtn g24_pairing_sm_1_waiting_ack: 2ed6 58000002 setarg state_24g_pairing_2 2ed7 20403256 call g24_store_mem_pairing_sm 2ed8 20202d9f branch g24_transmit_abandon g24_pairing_sm_2_waiting_ack: 2ed9 58000003 setarg state_24g_pairing_3 2eda 20403256 call g24_store_mem_pairing_sm 2edb 20202d9f branch g24_transmit_abandon g24_pairing_sm_3_waiting_ack: 2edc 580000ff setarg state_24g_pairing_success 2edd 20403256 call g24_store_mem_pairing_sm 2ede 700a9939 jam bt_evt_24g_pairing_complete ,mem_fifo_temp 2edf 20407d86 call ui_ipc_send_event 2ee0 1a60a266 add regc ,offset_24g_rxpayload_add2 ,rega 2ee1 ea220000 ifetch 4 ,rega 2ee2 2040322c call g24_store_mem_addr 2ee3 20202d9f branch g24_transmit_abandon g24_auto_pair_start: 2ee4 793f8026 set0 mark_24g ,mark 2ee5 20402f08 call g24_auto_pair_set_device_info 2ee6 20402f22 call g24_tx_attemp_data_prep g24_auto_pair_restart: 2ee7 20403263 call g24_set0_mem_check_dongle_times g24_auto_pair_start_loop: 2ee8 200007d0 nop 2000 2ee9 20403261 call g24_fetch_mem_check_dongle_times 2eea c07fadd4 beq 0xff ,g24_stop_24g_mode 2eeb 20402da4 call g24_transmit_receive_ack 2eec 242c2efa nbranch g24_auto_pair_retry ,sync 2eed 2437aefa nbranch g24_auto_pair_retry ,user3 2eee 20402dd6 call g24_ackpayload_parse 2eef 20402c7a call g24_head_ptr2regc 2ef0 1a60a292 add regc ,offset_24g_paring_addr ,rega 2ef1 ea2a0000 ifetcht 4 ,rega 2ef2 204030be call g24_fetch_mem_addr_isub_temp 2ef3 2022aead branch g24_start_pairing_sm1 ,zero 2ef4 20402c7a call g24_head_ptr2regc 2ef5 1a60a266 add regc ,offset_24g_rxpayload_add2 ,rega 2ef6 ea220000 ifetch 4 ,rega 2ef7 c0002ee7 beq 0 ,g24_auto_pair_restart 2ef8 2040322c call g24_store_mem_addr 2ef9 20202f1c branch g24_tx_attemp_dongle_succ g24_auto_pair_retry: 2efa 20403261 call g24_fetch_mem_check_dongle_times 2efb 1fe0fe01 increase 1 ,pdata 2efc 20403264 call g24_store_mem_check_dongle_times 2efd 20402f04 call g24_fetch_mem_auto_paring_switch 2efe 1fe0fe01 increase 1 ,pdata 2eff 1fe17e01 and_into 1 ,pdata 2f00 20402f06 call g24_store_mem_auto_paring_switch 2f01 c0002f0c beq 0 ,g24_auto_pair_device_attemp 2f02 c000af0e beq 1 ,g24_auto_pair_pair_attemp 2f03 20600000 rtn g24_fetch_mem_auto_paring_switch: 2f04 5800018b setarg offset_24g_auto_pair_switch 2f05 202032d0 branch g24_set_rega_ifetch_1byte g24_store_mem_auto_paring_switch: 2f06 da20018b arg offset_24g_auto_pair_switch ,rega 2f07 202032b3 branch g24_set_contw_with_regb_store_1byte g24_auto_pair_set_device_info: 2f08 20403267 call g24_store_mem_tx_power 2f09 20403224 call g24_fetch_mem_device_addr 2f0a 2040322c call g24_store_mem_addr 2f0b 20202c8a branch g24_ch g24_auto_pair_device_attemp: 2f0c 20402f08 call g24_auto_pair_set_device_info 2f0d 20202ee8 branch g24_auto_pair_start_loop g24_auto_pair_pair_attemp: 2f0e 20402c83 call g24_pair_init 2f0f 20202ee8 branch g24_auto_pair_start_loop g24_start_24g_mode: 2f10 793f8026 set0 mark_24g ,mark 2f11 20402c8a call g24_ch 2f12 20403253 call g24_fetch_mem_pairing_sm 2f13 c1ff8000 rtnne state_24g_pairing_success 2f14 20402f22 call g24_tx_attemp_data_prep 2f15 20403263 call g24_set0_mem_check_dongle_times g24_tx_attemp_dongle_loop: 2f16 200007d0 nop 2000 2f17 20403261 call g24_fetch_mem_check_dongle_times 2f18 c07fadd4 beq 0xff ,g24_stop_24g_mode 2f19 20402da4 call g24_transmit_receive_ack 2f1a 242c2f27 nbranch g24_attemp_txdata_retry ,sync 2f1b 2437af27 nbranch g24_attemp_txdata_retry ,user3 g24_tx_attemp_dongle_succ: 2f1c 79200026 set1 mark_24g ,mark 2f1d 20403263 call g24_set0_mem_check_dongle_times 2f1e 580000ff setarg state_24g_pairing_success 2f1f 20403256 call g24_store_mem_pairing_sm 2f20 700a993c jam bt_evt_24g_attempt_success ,mem_fifo_temp 2f21 20207d86 branch ui_ipc_send_event g24_tx_attemp_data_prep: 2f22 79200027 set1 mark_24g_conext ,mark 2f23 70119eff jam 0xff ,mem_24g_common_temp 2f24 2040323a call g24_fetch_mem_data_type 2f25 20402d77 call g24_put_data_in_buff_pre 2f26 20202d53 branch g24_transmit_prep g24_attemp_txdata_retry: 2f27 20403261 call g24_fetch_mem_check_dongle_times 2f28 1fe0fe01 increase 1 ,pdata 2f29 20403264 call g24_store_mem_check_dongle_times 2f2a 20402c8a call g24_ch 2f2b 20202f16 branch g24_tx_attemp_dongle_loop g24_check_51cmd_start_24g: 2f2c 20403267 call g24_store_mem_tx_power 2f2d 580000ff setarg state_24g_pairing_success 2f2e 20403256 call g24_store_mem_pairing_sm 2f2f 20202f10 branch g24_start_24g_mode dongle_init: 2f30 44dd4017 bpatch patch17_2 ,mem_patch17 2f31 20402c7a call g24_head_ptr2regc 2f32 580031b0 setarg dongle_rxdata_type1 2f33 1a608ade add regc ,offset_24g_cb_rxdata_type1 ,contw 2f34 e0a10000 istore 2 ,contw 2f35 20402f3d call g24_receive_init 2f36 204048ea call usb_init 2f37 204032b6 call g24_fetch_mem_pair_mode 2f38 44ddc017 bpatch patch17_3 ,mem_patch17 2f39 c0003055 beq 0x00 ,dongle_auto_bind 2f3a c000af45 beq 0x01 ,dongle_pc_bind 2f3b c007af41 beq 0x0f ,dongle_all_powerful 2f3c 20202a8c branch assert g24_receive_init: 2f3d 2040326c call g24_store_mem_tx_power_temp 2f3e df200080 arg 0x80 ,loopcnt 2f3f d8a00d9e arg mem_rssi_noise_buffer ,contw 2f40 20207ec6 branch memset0 dongle_all_powerful: 2f41 20402f4c call dongle_check_mode dongle_all_powerful_loop: 2f42 20402f4f call g24_dongle_work_mode 2f43 204048d3 call usb_isr 2f44 20202f42 branch dongle_all_powerful_loop dongle_pc_bind: 2f45 44de4017 bpatch patch17_4 ,mem_patch17 2f46 20402f4c call dongle_check_mode dongle_pc_bind_loop: 2f47 20402f4f call g24_dongle_work_mode 2f48 20402fbd call g24_dongle_bind_mode 2f49 204048d3 call usb_isr 2f4a 20403019 call dongle_usb_dispatch 2f4b 20202f47 branch dongle_pc_bind_loop dongle_check_mode: 2f4c 20403291 call g24_set_work_mem_dongle_work_mode 2f4d 20403296 call g24_set0_mem_dongle_mode_init 2f4e 20203299 branch g24_set0_mem_ackpayload_enable g24_dongle_work_mode: 2f4f 2040328f call g24_fetch_mem_dongle_work_mode 2f50 c1800000 rtnne dongle_work g24_dongle_work_mode_start: 2f51 20402f55 call g24_dongle_work_init 2f52 20402f65 call g24_ch_process 2f53 2040316b call g24_receive_packet_start 2f54 20202f96 branch g24_blank_data_process g24_dongle_work_init: 2f55 20403294 call g24_fetch_mem_dongle_mode_init 2f56 c3800000 rtnbit1 dongle_work 2f57 79207e00 set1 dongle_work ,pdata 2f58 20403297 call g24_store_mem_dongle_mode_init 2f59 20403267 call g24_store_mem_tx_power 2f5a 20403299 call g24_set0_mem_ackpayload_enable 2f5b 700d3800 jam 0 ,mem_usb_tx_enable 2f5c 2040324f call g24_set1_mem_abort_pac 2f5d 20402f61 call g24_dongle_init g24_rx_interrupt_clear: 2f5e 1a608a00 add regc ,offset_24g_rxbuf ,contw 2f5f df200042 arg 66 ,loopcnt 2f60 20207ed4 branch clear_mem g24_dongle_init: 2f61 20403231 call g24_set0_mem_pid 2f62 2040327d call g24_fetch_mem_rx_addr 2f63 2040322c call g24_store_mem_addr 2f64 20202c8a branch g24_ch g24_ch_process: 2f65 44dec017 bpatch patch17_5 ,mem_patch17 2f66 2040324c call g24_fetch_mem_abort_pac 2f67 c000af8d beq 1 ,g24_noise_rssi 2f68 20403245 call g24_fetch_mem_hop_pac 2f69 c000ac8a beq 1 ,g24_ch 2f6a 58000136 setarg offset_24g_hop_btclk 2f6b 9a60a200 iadd regc ,rega 2f6c ea2a0000 ifetcht 4 ,rega 2f6d 1c427e00 copy clkn_bt ,pdata 2f6e 98467c00 isub temp ,null 2f6f 24412d18 ncall g24_timer_timeout ,positive 2f70 1fe22400 copy pdata ,regb 2f71 58000136 setarg offset_24g_hop_btclk 2f72 9a60a200 iadd regc ,rega 2f73 ea220000 ifetch 4 ,rega 2f74 1fe20400 copy pdata ,temp 2f75 5800013a setarg offset_24g_hop_interval 2f76 9a60a200 iadd regc ,rega 2f77 18427e00 copy temp ,pdata 2f78 ea288000 ifetcht 1 ,rega 2f79 98408400 iadd temp ,temp 2f7a 1a427e00 copy regb ,pdata 2f7b 98467c00 isub temp ,null 2f7c 24610000 nrtn positive 2f7d 793ffe1c set0 28 ,pdata 2f7e 58000136 setarg offset_24g_hop_btclk 2f7f 9a608a00 iadd regc ,contw 2f80 e0a20000 istore 4 ,contw g24_ch_update: 2f81 20402c8a call g24_ch 2f82 20403278 call g24_fetch_mem_rf_laststa 2f83 1fe0fe01 increase 1 ,pdata 2f84 2040327b call g24_store_mem_rf_laststa 2f85 c1810000 rtnne 2 2f86 2040327a call g24_set0_mem_rf_laststa 2f87 2020324f branch g24_set1_mem_abort_pac g24_ch_timer_reinit: 2f88 1c427e00 copy clkn_bt ,pdata 2f89 da200136 arg offset_24g_hop_btclk ,rega 2f8a 204032bf call g24_set_contw_with_temp 2f8b e0a20000 istore 4 ,contw 2f8c 2020327a branch g24_set0_mem_rf_laststa g24_noise_rssi: 2f8d da200d9e arg mem_rssi_noise_buffer ,rega 2f8e 20402f94 call g24_noise_rssi_average 2f8f 1a608aeb add regc ,offset_rssi_noise_avg ,contw 2f90 e0a88000 istoret 1 ,contw 2f91 18467c50 sub temp ,rssi_thresh_noise ,null 2f92 24610000 nrtn positive 2f93 20202c8a branch g24_ch g24_noise_rssi_average: 2f94 df200100 arg rssi_buf_len_noise + 1 ,loopcnt 2f95 20202e62 branch rssi_average g24_blank_data_process: 2f96 20402f99 call g24_ms_blank_data 2f97 20402fa5 call g24_kb_blank_data 2f98 20202fb1 branch g24_kb_mul_blank_data g24_ms_blank_data: 2f99 58000180 setarg offset_24g_ms_blank_data_enable 2f9a 204032d0 call g24_set_rega_ifetch_1byte 2f9b 207a0000 rtn blank 2f9c d8e0000b arg timer_ms_blank ,queue 2f9d 20407f16 call timer_check 2f9e 247a0000 nrtn blank 2f9f 204032a7 call g24_set0_mem_ms_blank_data_enable g24_ms_blank_data_2usb: 2fa0 58000001 setarg ms_report_id 2fa1 60008d54 store 1 ,mem_usb_mouse_data 2fa2 58000000 setarg 0 2fa3 e0a38000 istore 7 ,contw 2fa4 202031b8 branch g24_data_type1_usbtx_enable g24_kb_blank_data: 2fa5 5800017e setarg offset_24g_kb_blank_data_enable 2fa6 204032d0 call g24_set_rega_ifetch_1byte 2fa7 207a0000 rtn blank 2fa8 d8e0000e arg timer_kb_blank ,queue 2fa9 20407f16 call timer_check 2faa 247a0000 nrtn blank 2fab 204032aa call g24_set0_mem_kb_blank_data_enable g24_kb_blank_data_2usb: 2fac d8a00d64 arg mem_usb_kb_data ,contw 2fad df200002 arg 2 ,loopcnt 2fae 20407ec6 call memset0 2faf 700d6400 jam kb_normal_report_id ,mem_usb_kb_data 2fb0 202031ed branch g24_kb_data_into_ep1_fifo g24_kb_mul_blank_data: 2fb1 5800017f setarg offset_24g_kb_mul_blank_data_enable 2fb2 204032d0 call g24_set_rega_ifetch_1byte 2fb3 207a0000 rtn blank 2fb4 d8e0000c arg timer_kb_mul_blank ,queue 2fb5 20407f16 call timer_check 2fb6 247a0000 nrtn blank 2fb7 204032ad call g24_set0_mem_kb_mul_blank_data_enable g24_kb_mul_blank_data_2usb: 2fb8 d8a00d74 arg mem_usb_kb_multikey ,contw 2fb9 df200002 arg 2 ,loopcnt 2fba 20407ec6 call memset0 2fbb 700d7403 jam kb_multikey_report_id ,mem_usb_kb_multikey 2fbc 20203207 branch g24_kb_mul_data_into_ep2_fifo g24_dongle_bind_mode: 2fbd 2040328f call g24_fetch_mem_dongle_work_mode 2fbe c1808000 rtnne dongle_bind 2fbf 20402fc1 call g24_dongle_bind_init 2fc0 20202fcb branch g24_dongle_bind_data_process g24_dongle_bind_init: 2fc1 20403294 call g24_fetch_mem_dongle_mode_init 2fc2 c3808000 rtnbit1 dongle_bind 2fc3 79207e01 set1 dongle_bind ,pdata 2fc4 20403297 call g24_store_mem_dongle_mode_init 2fc5 2040329c call g24_set1_mem_ackpayload_enable 2fc6 20402c83 call g24_pair_init 2fc7 58000000 setarg 0 2fc8 da200106 arg offset_dongle_ms_bind_step ,rega 2fc9 204032bf call g24_set_contw_with_temp 2fca 202032c5 branch g24_contw_istore_3byte g24_dongle_bind_data_process: 2fcb 2040316e call g24_receive_transmit_ack 2fcc 2437af5e nbranch g24_rx_interrupt_clear ,user3 2fcd 1a608c00 add regc ,offset_24g_rxbuf ,contr 2fce 58000109 setarg offset_24g_rxdata_temp 2fcf 9a608a00 iadd regc ,contw 2fd0 df200008 arg 8 ,loopcnt 2fd1 20407f01 call memcpy 2fd2 5800010b setarg offset_24g_rxdata_temp_add2 2fd3 204032d0 call g24_set_rega_ifetch_1byte 2fd4 c0552fd9 beq datatype_bind ,g24_dongle_bind_first_step 2fd5 c02aafed beq datatype_config ,g24_dongle_bind_second_step 2fd6 c0113001 beq datatype_ok ,g24_dongle_bind_third_step 2fd7 c07fb212 beq 0xff ,g24_data_attemp 2fd8 20202f5e branch g24_rx_interrupt_clear g24_dongle_bind_first_step: 2fd9 204032bd call g24_fetch_mem_rxdata_temp_add3_1byte 2fda c000afdd beq bind_mouse ,g24_dongle_bind_first_step_mouse 2fdb c0012fe8 beq bind_keyboard ,g24_dongle_bind_first_step_keyboard 2fdc 20600000 rtn g24_dongle_bind_first_step_mouse: 2fdd 58000001 setarg 1 2fde 20402ff7 call g24_store_mem_ms_bind_step g24_dongle_bind_ms_payload_cfg: 2fdf 58000001 setarg datatype_mouse 2fe0 20403289 call g24_store_mem_bind_payload g24_dongle_bind_payload_cfg: 2fe1 58000080 setarg 0x80 2fe2 da200130 arg offset_24g_bind_payload_add1 ,rega 2fe3 204032b3 call g24_set_contw_with_regb_store_1byte 2fe4 2040327d call g24_fetch_mem_rx_addr 2fe5 da200131 arg offset_24g_bind_payload_add2 ,rega 2fe6 204032bf call g24_set_contw_with_temp 2fe7 2020322d branch g24_contw_istore_4byte g24_dongle_bind_first_step_keyboard: 2fe8 58000001 setarg 1 2fe9 20402fff call g24_store_mem_kb_bind_step g24_dongle_bind_kb_payload_cfg: 2fea 58000002 setarg datatype_keyboard 2feb 20403289 call g24_store_mem_bind_payload 2fec 20202fe1 branch g24_dongle_bind_payload_cfg g24_dongle_bind_second_step: 2fed 204032bd call g24_fetch_mem_rxdata_temp_add3_1byte 2fee c000aff1 beq bind_mouse ,g24_dongle_bind_second_step_mouse 2fef c0012ff9 beq bind_keyboard ,g24_dongle_bind_second_step_keyboard 2ff0 20600000 rtn g24_dongle_bind_second_step_mouse: 2ff1 20402fdf call g24_dongle_bind_ms_payload_cfg 2ff2 58000106 setarg offset_dongle_ms_bind_step 2ff3 204032d0 call g24_set_rega_ifetch_1byte 2ff4 c000aff6 beq 1 ,g24_dongle_ms_bind_step_set2 2ff5 20600000 rtn g24_dongle_ms_bind_step_set2: 2ff6 58000002 setarg 2 g24_store_mem_ms_bind_step: 2ff7 da200106 arg offset_dongle_ms_bind_step ,rega 2ff8 202032b3 branch g24_set_contw_with_regb_store_1byte g24_dongle_bind_second_step_keyboard: 2ff9 20402fea call g24_dongle_bind_kb_payload_cfg 2ffa 58000107 setarg offset_dongle_kb_bind_step 2ffb 204032d0 call g24_set_rega_ifetch_1byte 2ffc c000affe beq 1 ,g24_dongle_kb_bind_step_set2 2ffd 20600000 rtn g24_dongle_kb_bind_step_set2: 2ffe 58000002 setarg 2 g24_store_mem_kb_bind_step: 2fff da200107 arg offset_dongle_kb_bind_step ,rega 3000 202032b3 branch g24_set_contw_with_regb_store_1byte g24_dongle_bind_third_step: 3001 204032bd call g24_fetch_mem_rxdata_temp_add3_1byte 3002 c000b005 beq bind_mouse ,g24_dongle_bind_third_step_mouse 3003 c0013011 beq bind_keyboard ,g24_dongle_bind_third_step_keyboard 3004 20600000 rtn g24_dongle_bind_third_step_mouse: 3005 58000106 setarg offset_dongle_ms_bind_step 3006 204032d0 call g24_set_rega_ifetch_1byte 3007 c0013009 beq 2 ,g24_dongle_ms_bind_step_success 3008 20600000 rtn g24_dongle_ms_bind_step_success: 3009 2040328b call g24_fetch_mem_bind_device_status 300a 1fe1fe01 or_into 0x01 ,pdata 300b 2040328d call g24_store_mem_bind_device_status g24_dongle_bind_exit: 300c 58000000 setarg 0 300d 58000106 setarg offset_dongle_ms_bind_step 300e 9a608a00 iadd regc ,contw 300f e0a10000 istore 2 ,contw 3010 20202f5e branch g24_rx_interrupt_clear g24_dongle_bind_third_step_keyboard: 3011 58000107 setarg offset_dongle_kb_bind_step 3012 204032d0 call g24_set_rega_ifetch_1byte 3013 c0803015 bne 0 ,g24_dongle_kb_bind_step_success 3014 20600000 rtn g24_dongle_kb_bind_step_success: 3015 2040328b call g24_fetch_mem_bind_device_status 3016 1fe1fe02 or_into 0x02 ,pdata 3017 2040328d call g24_store_mem_bind_device_status 3018 2020300c branch g24_dongle_bind_exit dongle_usb_dispatch: 3019 68008d50 fetch 1 ,mem_usb0_get_set_report 301a 207a0000 rtn blank 301b 700d5000 jam 0 ,mem_usb0_get_set_report 301c 68010d4e fetch 2 ,mem_usb_setup_bvalue_temp 301d d84002ba arg pc_set_report ,temp 301e 98467c00 isub temp ,null 301f 24628000 nrtn zero 3020 68008cb6 fetch 1 ,mem_usb0_set_report_data 3021 c1dd0000 rtnne pc_report_id 3022 68008cb7 fetch 1 ,mem_usb0_set_report_data + 1 3023 44df4017 bpatch patch17_6 ,mem_patch17 3024 c050303b beq command_mode ,dongle_dispose_cmd_mode 3025 c050b02c beq command_bind ,dongle_dispose_cmd_bind 3026 c0533041 beq command_current_project ,dongle_dispose_cmd_current_project 3027 c053b043 beq command_current_mode ,dongle_dispose_cmd_current_mode 3028 c054b049 beq command_current_fw_version ,dongle_dispose_cmd_current_fw_version 3029 c058304d beq command_user_defined ,dongle_dispose_cmd_user_defined usb0_data_ready_report_set0: 302a 700d4200 jam 0 ,mem_usb0_data_ready_report 302b 20600000 rtn dongle_dispose_cmd_bind: 302c 68008cb8 fetch 1 ,mem_usb0_set_report_data + 2 302d c000b031 beq com_bind_get ,dongle_dispose_cmd_get_bind 302e c0423034 beq com_bind_exit ,dongle_dispose_cmd_exit_bind 302f c053b039 beq com_read_mode ,dongle_dispose_cmd_read_mode 3030 2020302a branch usb0_data_ready_report_set0 dongle_dispose_cmd_get_bind: 3031 2040328b call g24_fetch_mem_bind_device_status 3032 60008cf7 store 1 ,mem_usb0_get_report_data + 1 3033 2020303f branch usb0_data_ready_report_set1 dongle_dispose_cmd_exit_bind: 3034 20403291 call g24_set_work_mem_dongle_work_mode 3035 20403296 call g24_set0_mem_dongle_mode_init 3036 2040328b call g24_fetch_mem_bind_device_status 3037 60008cf7 store 1 ,mem_usb0_get_report_data + 1 3038 2020303f branch usb0_data_ready_report_set1 dongle_dispose_cmd_read_mode: dongle_dispose_in_bind_mode: 3039 700cf7a1 jam command_bind ,mem_usb0_get_report_data + 1 303a 2020303f branch usb0_data_ready_report_set1 dongle_dispose_cmd_mode: 303b 68008cb8 fetch 1 ,mem_usb0_set_report_data + 2 303c c040b03e beq com_mode_bind ,dongle_enter_bind_mode 303d 2020302a branch usb0_data_ready_report_set0 dongle_enter_bind_mode: 303e 20403090 call g24_bind_mode_enable usb0_data_ready_report_set1: 303f 700d4201 jam 1 ,mem_usb0_data_ready_report 3040 20600000 rtn dongle_dispose_cmd_current_project: 3041 700cf715 jam product_id ,mem_usb0_get_report_data + 1 3042 2020303f branch usb0_data_ready_report_set1 dongle_dispose_cmd_current_mode: 3043 2040328f call g24_fetch_mem_dongle_work_mode 3044 c0003047 beq dongle_work ,dongle_dispose_in_work_mode 3045 c000b039 beq dongle_bind ,dongle_dispose_in_bind_mode 3046 20600000 rtn dongle_dispose_in_work_mode: 3047 700cf7a0 jam command_mode ,mem_usb0_get_report_data + 1 3048 2020303f branch usb0_data_ready_report_set1 dongle_dispose_cmd_current_fw_version: 3049 700cf700 jam fw_version0 ,mem_usb0_get_report_data + 1 304a 700cf800 jam fw_version1 ,mem_usb0_get_report_data + 2 304b 700cf901 jam fw_version2 ,mem_usb0_get_report_data + 3 304c 2020303f branch usb0_data_ready_report_set1 dongle_dispose_cmd_user_defined: 304d 2040329c call g24_set1_mem_ackpayload_enable 304e 68008cb8 fetch 1 ,mem_usb0_set_report_data + 2 304f 1fe0fe02 increase 2 ,pdata 3050 1fe27200 copy pdata ,loopcnt 3051 d8c00cb6 arg mem_usb0_set_report_data ,contr 3052 5800013c setarg offset_24g_ackpayload 3053 9a608a00 iadd regc ,contw 3054 20207f01 branch memcpy dongle_auto_bind: 3055 44dfc017 bpatch patch17_7 ,mem_patch17 3056 2040307d call g24_mode_switch_init dongle_auto_bind_loop: 3057 20402c7f call g24_receive_process 3058 204048d3 call usb_isr 3059 20203057 branch dongle_auto_bind_loop g24_dongle_work_mode_auto: 305a 2040328f call g24_fetch_mem_dongle_work_mode 305b c1800000 rtnne dongle_work 305c 20402f51 call g24_dongle_work_mode_start 305d 20203098 branch g24_rx_nodata_process g24_dongle_bind_mode_auto: 305e 2040328f call g24_fetch_mem_dongle_work_mode 305f c1808000 rtnne dongle_bind 3060 20402fc1 call g24_dongle_bind_init 3061 20402fcb call g24_dongle_bind_data_process 3062 2040328b call g24_fetch_mem_bind_device_status 3063 207a0000 rtn blank 3064 20403286 call g24_set0_mem_mode_switch 3065 20402f4c call dongle_check_mode 3066 20403093 call g24_enable_nodata_timer g24_timer_init: 3067 58000000 setarg 0 3068 1a608aa7 add regc ,offset_24g_tx_btclk ,contw 3069 2020322d branch g24_contw_istore_4byte g24_timer_check: 306a 20407fe9 call disable_user 306b 1a60a2a7 add regc ,offset_24g_tx_btclk ,rega 306c ea2a0000 ifetcht 4 ,rega 306d 1c427e00 copy clkn_bt ,pdata 306e 98467c00 isub temp ,null 306f 24412d18 ncall g24_timer_timeout ,positive 3070 1fe22400 copy pdata ,regb 3071 1a60a2a7 add regc ,offset_24g_tx_btclk ,rega 3072 ea220000 ifetch 4 ,rega 3073 1a60a2ab add regc ,offset_24g_interval ,rega 3074 ea288000 ifetcht 1 ,rega 3075 98408400 iadd temp ,temp 3076 1a427e00 copy regb ,pdata 3077 98467c00 isub temp ,null 3078 24610000 nrtn positive 3079 793ffe1c set0 28 ,pdata 307a 1a608aa7 add regc ,offset_24g_tx_btclk ,contw 307b e0a20000 istore 4 ,contw 307c 20207fe7 branch enable_user g24_mode_switch_init: 307d 58000001 setarg 1 307e 20403287 call g24_store_mem_mode_switch 307f 20403283 call g24_set0_mem_time_slice 3080 580000ff setarg 0xff 3081 1a608aab add regc ,offset_24g_interval ,contw 3082 e0a08000 istore 1 ,contw 3083 20203067 branch g24_timer_init g24_mode_switch: 3084 5800015c setarg offset_24g_mode_switch 3085 204032d0 call g24_set_rega_ifetch_1byte 3086 207a0000 rtn blank 3087 2040306a call g24_timer_check 3088 24740000 nrtn user 3089 20403281 call g24_fetch_mem_time_slice 308a 1fe0fe01 increase 1 ,pdata 308b 1fe17e01 and_into 1 ,pdata 308c 20403284 call g24_store_mem_time_slice 308d c0002f4c beq 0 ,dongle_check_mode 308e c000b090 beq 1 ,g24_bind_mode_enable 308f 20600000 rtn g24_bind_mode_enable: 3090 58000001 setarg dongle_bind 3091 20403292 call g24_store_mem_dongle_work_mode 3092 20203296 branch g24_set0_mem_dongle_mode_init g24_enable_nodata_timer: 3093 58000001 setarg 1 3094 204032a5 call g24_store_mem_nodata_timer_enable g24_enable_nodata_timer_init: 3095 58000280 setarg timer_nodata_delay 3096 d8e00008 arg timer_nodata ,queue 3097 20207f08 branch timer_init g24_rx_nodata_process: 3098 204032a2 call g24_fetch_mem_nodata_timer_enable 3099 207a0000 rtn blank 309a d8e00008 arg timer_nodata ,queue 309b 20407f16 call timer_check 309c 247a0000 nrtn blank 309d 204032a4 call g24_set0_mem_nodata_timer_enable 309e 58000007 setarg dongle_search 309f 20403292 call g24_store_mem_dongle_work_mode 30a0 20403296 call g24_set0_mem_dongle_mode_init 30a1 20202f5e branch g24_rx_interrupt_clear g24_dongle_search_mode_auto: 30a2 44e04018 bpatch patch18_0 ,mem_patch18 30a3 2040328f call g24_fetch_mem_dongle_work_mode 30a4 c1838000 rtnne dongle_search 30a5 204030cb call g24_dongle_search_mode_init 30a6 204030e0 call g24_rx_auto_addr_ch_search 30a7 2040316e call g24_receive_transmit_ack 30a8 2437af5e nbranch g24_rx_interrupt_clear ,user3 30a9 204030bc call g24_dongle_search_addr_check 30aa 2042b172 call g24_receive_packet_parse ,zero 30ab 20402f4c call dongle_check_mode 30ac 20403294 call g24_fetch_mem_dongle_mode_init 30ad 79207e00 set1 dongle_work ,pdata 30ae 20403297 call g24_store_mem_dongle_mode_init 30af 20402f5e call g24_rx_interrupt_clear 30b0 20403093 call g24_enable_nodata_timer 30b1 204030bc call g24_dongle_search_addr_check 30b2 2022b0c1 branch g24_dg_ch_num_reinit ,zero 30b3 58000164 setarg offset_24g_kb_addr 30b4 204032d3 call g24_set_rega_ifetcht_4byte 30b5 204030be call g24_fetch_mem_addr_isub_temp 30b6 2022b0c5 branch g24_kb_ch_num_reinit ,zero 30b7 58000160 setarg offset_24g_mouse_addr 30b8 204032d3 call g24_set_rega_ifetcht_4byte 30b9 204030be call g24_fetch_mem_addr_isub_temp 30ba 2022b0c8 branch g24_ms_ch_num_reinit ,zero 30bb 20600000 rtn g24_dongle_search_addr_check: 30bc 5800012b setarg offset_24g_rx_addr 30bd 204032d3 call g24_set_rega_ifetcht_4byte g24_fetch_mem_addr_isub_temp: 30be 2040322a call g24_fetch_mem_addr 30bf 98467c00 isub temp ,null 30c0 20600000 rtn g24_dg_ch_num_reinit: 30c1 58000182 setarg offset_24g_dg_ch_number 30c2 204032d0 call g24_set_rega_ifetch_1byte g24_current_ch_num_reinit: 30c3 1a608a91 add regc ,offset_24g_current_ch_number ,contw 30c4 202032b4 branch g24_contw_istore_1byte g24_kb_ch_num_reinit: 30c5 58000185 setarg offset_24g_kb_ch_number 30c6 204032d0 call g24_set_rega_ifetch_1byte 30c7 202030c3 branch g24_current_ch_num_reinit g24_ms_ch_num_reinit: 30c8 58000188 setarg offset_24g_ms_ch_number 30c9 204032d0 call g24_set_rega_ifetch_1byte 30ca 202030c3 branch g24_current_ch_num_reinit g24_dongle_search_mode_init: 30cb 20403294 call g24_fetch_mem_dongle_mode_init 30cc c3838000 rtnbit1 dongle_search 30cd 79207e07 set1 dongle_search ,pdata 30ce 20403297 call g24_store_mem_dongle_mode_init 30cf 20403283 call g24_set0_mem_time_slice 30d0 2040329c call g24_set1_mem_ackpayload_enable 30d1 58000000 setarg 0 30d2 1a608af5 add regc ,offset_rssi_noise_dg_index ,contw 30d3 e0a18000 istore 3 ,contw 30d4 da200183 arg offset_24g_dg_config_ch_once ,rega 30d5 204032bf call g24_set_contw_with_temp 30d6 e0a38000 istore 7 ,contw 30d7 204030bc call g24_dongle_search_addr_check 30d8 24628000 nrtn zero 30d9 1a60a291 add regc ,offset_24g_current_ch_number ,rega 30da ea208000 ifetch 1 ,rega 30db da200182 arg offset_24g_dg_ch_number ,rega 30dc 204032b3 call g24_set_contw_with_regb_store_1byte 30dd 1a60a290 add regc ,offset_24g_ch ,rega 30de ea208000 ifetch 1 ,rega 30df 2020314a branch g24_store_mem_dg_last_ch g24_rx_auto_addr_ch_search: 30e0 44e0c018 bpatch patch18_1 ,mem_patch18 30e1 20403281 call g24_fetch_mem_time_slice 30e2 1fe0fe01 increase 1 ,pdata 30e3 1fe17e03 and_into 3 ,pdata 30e4 20403284 call g24_store_mem_time_slice 30e5 c000310e beq 0 ,g24_rx_auto_bind_config_kb 30e6 c000b132 beq 1 ,g24_rx_auto_bind_config_dongle 30e7 c00130ea beq 2 ,g24_rx_auto_bind_config_mouse 30e8 c001b132 beq 3 ,g24_rx_auto_bind_config_dongle 30e9 20600000 rtn g24_rx_auto_bind_config_mouse: 30ea 20402fdf call g24_dongle_bind_ms_payload_cfg 30eb 58000160 setarg offset_24g_mouse_addr 30ec 2040327e call g24_set_rega_ifetch_4byte 30ed 203a30e0 branch g24_rx_auto_addr_ch_search ,blank 30ee 2040322c call g24_store_mem_addr 30ef 58000189 setarg offset_24g_ms_config_ch_once 30f0 204032d0 call g24_set_rega_ifetch_1byte 30f1 205a3108 call g24_ms_config_ch_once ,blank 30f2 58000187 setarg offset_24g_ms_last_ch 30f3 204032d0 call g24_set_rega_ifetch_1byte 30f4 2040322f call g24_store_mem_ch 30f5 1a60a2f7 add regc ,offset_rssi_noise_ms_index ,rega 30f6 ea288000 ifetcht 1 ,rega 30f7 da200f9e arg mem_rssi_noise_ms_buffer ,rega 30f8 20402e58 call rssi_noise_store 30f9 1a608af7 add regc ,offset_rssi_noise_ms_index ,contw 30fa e0a88000 istoret 1 ,contw 30fb 20402f94 call g24_noise_rssi_average 30fc 1a608afa add regc ,offset_rssi_noise_ms_avg ,contw 30fd e0a88000 istoret 1 ,contw 30fe 18467c50 sub temp ,rssi_thresh_noise ,null 30ff 24610000 nrtn positive 3100 58000188 setarg offset_24g_ms_ch_number 3101 20403275 call g24_set_rega_ifetcht_1byte 3102 20402c90 call g24_ch_temp_incre_size4 3103 da200188 arg offset_24g_ms_ch_number ,rega 3104 204032c8 call g24_set_contw_with_regb2 3105 e0a88000 istoret 1 ,contw g24_store_mem_ms_last_ch: 3106 da200187 arg offset_24g_ms_last_ch ,rega 3107 202032b3 branch g24_set_contw_with_regb_store_1byte g24_ms_config_ch_once: 3108 58000001 setarg 1 3109 da200189 arg offset_24g_ms_config_ch_once ,rega 310a 204032b3 call g24_set_contw_with_regb_store_1byte 310b d8400000 arg 0 ,temp 310c 20402c94 call g24_ch_calc 310d 20203106 branch g24_store_mem_ms_last_ch g24_rx_auto_bind_config_kb: 310e 20402fea call g24_dongle_bind_kb_payload_cfg 310f 58000164 setarg offset_24g_kb_addr 3110 2040327e call g24_set_rega_ifetch_4byte 3111 203a30e0 branch g24_rx_auto_addr_ch_search ,blank 3112 2040322c call g24_store_mem_addr 3113 58000186 setarg offset_24g_kb_config_ch_once 3114 204032d0 call g24_set_rega_ifetch_1byte 3115 205a312c call g24_kb_config_ch_once ,blank 3116 58000184 setarg offset_24g_kb_last_ch 3117 204032d0 call g24_set_rega_ifetch_1byte 3118 2040322f call g24_store_mem_ch 3119 1a60a2f6 add regc ,offset_rssi_noise_kb_index ,rega 311a ea288000 ifetcht 1 ,rega 311b da20109e arg mem_rssi_noise_kb_buffer ,rega 311c 20402e58 call rssi_noise_store 311d 1a608af6 add regc ,offset_rssi_noise_kb_index ,contw 311e e0a88000 istoret 1 ,contw 311f 20402f94 call g24_noise_rssi_average 3120 1a608af9 add regc ,offset_rssi_noise_kb_avg ,contw 3121 e0a88000 istoret 1 ,contw 3122 18467c50 sub temp ,rssi_thresh_noise ,null 3123 24610000 nrtn positive 3124 58000185 setarg offset_24g_kb_ch_number 3125 20403275 call g24_set_rega_ifetcht_1byte 3126 20402c90 call g24_ch_temp_incre_size4 3127 da200185 arg offset_24g_kb_ch_number ,rega 3128 204032c8 call g24_set_contw_with_regb2 3129 e0a88000 istoret 1 ,contw g24_store_mem_kb_last_ch: 312a da200184 arg offset_24g_kb_last_ch ,rega 312b 202032b3 branch g24_set_contw_with_regb_store_1byte g24_kb_config_ch_once: 312c 58000001 setarg 1 312d da200186 arg offset_24g_kb_config_ch_once ,rega 312e 204032b3 call g24_set_contw_with_regb_store_1byte 312f d8400000 arg 0 ,temp 3130 20402c94 call g24_ch_calc 3131 2020312a branch g24_store_mem_kb_last_ch g24_rx_auto_bind_config_dongle: 3132 20402fdf call g24_dongle_bind_ms_payload_cfg 3133 2040327d call g24_fetch_mem_rx_addr 3134 2040322c call g24_store_mem_addr 3135 58000183 setarg offset_24g_dg_config_ch_once 3136 204032d0 call g24_set_rega_ifetch_1byte 3137 205a314c call g24_dg_config_ch_once ,blank 3138 2040314f call g24_dg_store_config_ch 3139 1a60a2f5 add regc ,offset_rssi_noise_dg_index ,rega 313a ea288000 ifetcht 1 ,rega 313b da200e9e arg mem_rssi_noise_dg_buffer ,rega 313c 20402e58 call rssi_noise_store 313d 1a608af5 add regc ,offset_rssi_noise_dg_index ,contw 313e e0a88000 istoret 1 ,contw 313f 20402f94 call g24_noise_rssi_average 3140 1a608af8 add regc ,offset_rssi_noise_dg_avg ,contw 3141 e0a88000 istoret 1 ,contw 3142 18467c50 sub temp ,rssi_thresh_noise ,null 3143 24610000 nrtn positive 3144 58000182 setarg offset_24g_dg_ch_number 3145 20403275 call g24_set_rega_ifetcht_1byte 3146 20402c90 call g24_ch_temp_incre_size4 3147 da200182 arg offset_24g_dg_ch_number ,rega 3148 204032c8 call g24_set_contw_with_regb2 3149 e0a88000 istoret 1 ,contw g24_store_mem_dg_last_ch: 314a da200181 arg offset_24g_dg_last_ch ,rega 314b 202032b3 branch g24_set_contw_with_regb_store_1byte g24_dg_config_ch_once: 314c 58000001 setarg 1 314d da200183 arg offset_24g_dg_config_ch_once ,rega 314e 204032b3 call g24_set_contw_with_regb_store_1byte g24_dg_store_config_ch: 314f 58000181 setarg offset_24g_dg_last_ch 3150 204032d0 call g24_set_rega_ifetch_1byte 3151 2020322f branch g24_store_mem_ch g24_transmit_ack: 3152 1a60a200 add regc ,offset_24g_rxbuf ,rega 3153 ea208000 ifetch 1 ,rega 3154 2040323c call g24_store_mem_data_type 3155 20402dde call g24_read_len_pid_crc 3156 2040325f call g24_fetch_mem_rxbuf_add1 3157 2feffe00 isolate1 bit_ack_24g ,pdata 3158 2020b15c branch g24tx_no_ack ,true g24tx_with_ack: 3159 2040315d call g24_ackpayload_prep 315a 20402d53 call g24_transmit_prep 315b 20402df7 call g24_transmit g24tx_no_ack: 315c 20202e45 branch g24_end_of_packet g24_ackpayload_prep: 315d 44e14018 bpatch patch18_2 ,mem_patch18 315e 1a608a86 add regc ,offset_24g_datalen ,contw 315f 204032d6 call g24_mem_set0 3160 5800013b setarg offset_24g_ackpayload_enable 3161 204032d0 call g24_set_rega_ifetch_1byte 3162 207a0000 rtn blank 3163 58000006 setarg 0x06 3164 1a608a86 add regc ,offset_24g_datalen ,contw 3165 e0a08000 istore 1 ,contw 3166 df200006 arg 0x06 ,loopcnt 3167 5800012f setarg offset_24g_bind_payload 3168 9a608c00 iadd regc ,contr 3169 1a608a22 add regc ,offset_24g_txbuf ,contw 316a 20207f01 branch memcpy g24_receive_packet_start: 316b 2040316e call g24_receive_transmit_ack 316c 2437af5e nbranch g24_rx_interrupt_clear ,user3 316d 20203172 branch g24_receive_packet_parse g24_receive_transmit_ack: 316e 20402f5e call g24_rx_interrupt_clear 316f 20402e11 call g24_receive_packet 3170 24778000 nrtn user3 3171 20203152 branch g24_transmit_ack g24_receive_packet_parse: 3172 44e1c018 bpatch patch18_3 ,mem_patch18 3173 20403188 call g24_receive_packet_parse_pid_crc 3174 24342f5e nbranch g24_rx_interrupt_clear ,user 3175 1a60a284 add regc ,offset_24g_rxdata_length ,rega 3176 ea208000 ifetch 1 ,rega 3177 203a2f5e branch g24_rx_interrupt_clear ,blank 3178 1fe0fe02 increase 2 ,pdata 3179 98007200 iforce loopcnt 317a 1a608c00 add regc ,offset_24g_rxbuf ,contr 317b 58000109 setarg offset_24g_rxdata_temp 317c 9a608a00 iadd regc ,contw 317d 20407f01 call memcpy 317e 20403286 call g24_set0_mem_mode_switch 317f 204032b6 call g24_fetch_mem_pair_mode 3180 205a3093 call g24_enable_nodata_timer ,blank 3181 5800010b setarg offset_24g_rxdata_temp_add2 3182 204032d0 call g24_set_rega_ifetch_1byte 3183 c000b19e beq 0x01 ,g24_data_type1 3184 c00131c6 beq 0x02 ,g24_data_type2 3185 c001b1f2 beq 0x03 ,g24_data_type3 3186 c07fb212 beq 0xff ,g24_data_attemp 3187 20202f5e branch g24_rx_interrupt_clear g24_receive_packet_parse_pid_crc: 3188 20402c7a call g24_head_ptr2regc 3189 20407fe9 call disable_user 318a 1a60a2ca add regc ,offset_24g_sta_pid ,rega 318b ea208000 ifetch 1 ,rega 318c 1a60a2cb add regc ,offset_24g_last_pid ,rega 318d ea288000 ifetcht 1 ,rega 318e 98467c00 isub temp ,null 318f 2442ffe7 ncall enable_user ,zero 3190 1a60a2ca add regc ,offset_24g_sta_pid ,rega 3191 ea208000 ifetch 1 ,rega 3192 1a608acb add regc ,offset_24g_last_pid ,contw 3193 e0a08000 istore 1 ,contw 3194 1a60a2c4 add regc ,offset_24g_sta_crc ,rega 3195 ea218000 ifetch 3 ,rega 3196 1a60a2c7 add regc ,offset_24g_last_crc ,rega 3197 ea298000 ifetcht 3 ,rega 3198 98467c00 isub temp ,null 3199 2442ffe7 ncall enable_user ,zero 319a 1a60a2c4 add regc ,offset_24g_sta_crc ,rega 319b ea218000 ifetch 3 ,rega 319c 1a608ac7 add regc ,offset_24g_last_crc ,contw 319d 202032c5 branch g24_contw_istore_3byte g24_data_type1: 319e 20402f88 call g24_ch_timer_reinit 319f 2040324c call g24_fetch_mem_abort_pac 31a0 60008aa2 store 1 ,mem_temp 31a1 20403274 call g24_fetcht_mem_rxdata_temp 31a2 68008aa2 fetch 1 ,mem_temp 31a3 284ffe03 isolate1 bit_abort ,temp 31a4 7920fe00 setflag true ,0 ,pdata 31a5 1a608ab2 add regc ,offset_24g_abort_pac ,contw 31a6 e0a08000 istore 1 ,contw 31a7 c000b216 beq 1 ,g24_data_attemp_mouse 31a8 20403245 call g24_fetch_mem_hop_pac 31a9 20403274 call g24_fetcht_mem_rxdata_temp 31aa 284ffe04 isolate1 bit_hop ,temp 31ab 7920fe00 setflag true ,0 ,pdata 31ac 20403249 call g24_store_mem_hop_pac 31ad 1a60a2de add regc ,offset_24g_cb_rxdata_type1 ,rega 31ae ea210000 ifetch 2 ,rega 31af 20207f9c branch callback_func dongle_rxdata_type1: 31b0 58000001 setarg ms_report_id 31b1 60008d54 store 1 ,mem_usb_mouse_data 31b2 2040329e call g24_fetch_mem_rxdata_temp_add3_7byte 31b3 e0a38000 istore 7 ,contw 31b4 2040329e call g24_fetch_mem_rxdata_temp_add3_7byte 31b5 245a31bd ncall g24_ms_enable_blank_data_forcibly ,blank 31b6 2040329e call g24_fetch_mem_rxdata_temp_add3_7byte 31b7 205a31c2 call g24_ms_disable_blank_data_forcibly ,blank g24_data_type1_usbtx_enable: 31b8 700d5220 jam usb_ep2_ms ,mem_usb_ep2_data g24_data_type1_usbtx_enable_ep2: 31b9 68008d38 fetch 1 ,mem_usb_tx_enable 31ba 79207e02 set1 2 ,pdata 31bb 60008d38 store 1 ,mem_usb_tx_enable 31bc 20600000 rtn g24_ms_enable_blank_data_forcibly: 31bd 58000001 setarg 1 31be 204032a8 call g24_store_mem_ms_blank_data_enable g24_ms_enable_blank_data_timer: 31bf 58000140 setarg timer_ms_blank_delay 31c0 d8e0000b arg timer_ms_blank ,queue 31c1 20207f08 branch timer_init g24_ms_disable_blank_data_forcibly: 31c2 204032a7 call g24_set0_mem_ms_blank_data_enable g24_ms_disable_blank_data_timer: 31c3 58000000 setarg 0 31c4 d8e0000b arg timer_ms_blank ,queue 31c5 20207f08 branch timer_init g24_data_type2: 31c6 20403274 call g24_fetcht_mem_rxdata_temp 31c7 284ffe03 isolate1 bit_abort ,temp 31c8 2020b21b branch g24_data_attemp_kbd ,true 31c9 d8a00d64 arg mem_usb_kb_data ,contw 31ca 204031e0 call g24_data_type2_reverse_data 31cb 68040d64 fetch 8 ,mem_usb_kb_data 31cc 245a31e4 ncall g24_kb_enable_blank_data_forcibly ,blank 31cd 68040d64 fetch 8 ,mem_usb_kb_data 31ce 205a31e9 call g24_kb_disable_blank_data_forcibly ,blank 31cf 20402c7a call g24_head_ptr2regc 31d0 68040d64 fetch 8 ,mem_usb_kb_data 31d1 da200168 arg offset_24g_kb_data_sta_data ,rega 31d2 204032bf call g24_set_contw_with_temp 31d3 e0a40000 istore 8 ,contw 31d4 58000170 setarg offset_24g_kb_data_last_data 31d5 9a60a200 iadd regc ,rega 31d6 ea2c0000 ifetcht 8 ,rega 31d7 98467c00 isub temp ,null 31d8 2442b1ed ncall g24_kb_data_dispose ,zero 31d9 58000168 setarg offset_24g_kb_data_sta_data 31da 9a60a200 iadd regc ,rega 31db ea240000 ifetch 8 ,rega 31dc da200170 arg offset_24g_kb_data_last_data ,rega 31dd 204032bf call g24_set_contw_with_temp 31de e0a40000 istore 8 ,contw 31df 20202f5e branch g24_rx_interrupt_clear g24_data_type2_reverse_data: 31e0 5800010b setarg offset_24g_rxdata_temp_add2 31e1 9a608c00 iadd regc ,contr 31e2 df200009 arg 9 ,loopcnt 31e3 20207ff3 branch reverse_byte g24_kb_enable_blank_data_forcibly: 31e4 58000001 setarg 1 31e5 204032ab call g24_store_mem_kb_blank_data_enable g24_kb_enable_blank_data_timer: 31e6 58000140 setarg timer_kb_blank_delay 31e7 d8e0000e arg timer_kb_blank ,queue 31e8 20207f08 branch timer_init g24_kb_disable_blank_data_forcibly: 31e9 204032aa call g24_set0_mem_kb_blank_data_enable g24_kb_disable_blank_data_timer: 31ea 58000000 setarg 0 31eb d8e0000e arg timer_kb_blank ,queue 31ec 20207f08 branch timer_init g24_kb_data_dispose: g24_kb_data_into_ep1_fifo: 31ed 700d5110 jam usb_ep1_kb ,mem_usb_ep1_data 31ee 68008d38 fetch 1 ,mem_usb_tx_enable 31ef 79207e01 set1 1 ,pdata 31f0 60008d38 store 1 ,mem_usb_tx_enable 31f1 20600000 rtn g24_data_type3: 31f2 d8a00d74 arg mem_usb_kb_multikey ,contw 31f3 204031e0 call g24_data_type2_reverse_data 31f4 68010d75 fetch 2 ,mem_usb_kb_multikey + 1 31f5 245a3209 ncall g24_kb_mul_enable_blank_data_forcibly ,blank 31f6 68010d75 fetch 2 ,mem_usb_kb_multikey + 1 31f7 205a320e call g24_kb_mul_disable_blank_data_forcibly ,blank 31f8 20402c7a call g24_head_ptr2regc 31f9 68018d74 fetch 3 ,mem_usb_kb_multikey 31fa da200178 arg offset_24g_kb_multikey_sta_data ,rega 31fb 204032c4 call g24_set_contw_with_temp_store_3byte 31fc 5800017b setarg offset_24g_kb_multikey_last_data 31fd 9a60a200 iadd regc ,rega 31fe ea298000 ifetcht 3 ,rega 31ff 98467c00 isub temp ,null 3200 2442b207 ncall g24_kb_mul_data_into_ep2_fifo ,zero 3201 58000178 setarg offset_24g_kb_multikey_sta_data 3202 9a60a200 iadd regc ,rega 3203 ea218000 ifetch 3 ,rega 3204 da20017b arg offset_24g_kb_multikey_last_data ,rega 3205 204032c4 call g24_set_contw_with_temp_store_3byte 3206 20202f5e branch g24_rx_interrupt_clear g24_kb_mul_data_into_ep2_fifo: 3207 700d5221 jam usb_ep2_multikey ,mem_usb_ep2_data 3208 202031b9 branch g24_data_type1_usbtx_enable_ep2 g24_kb_mul_enable_blank_data_forcibly: 3209 58000001 setarg 1 320a 204032ae call g24_store_mem_kb_mul_blank_data_enable g24_kb_mul_enable_blank_data_timer: 320b 58000140 setarg timer_kb_mul_blank_delay 320c d8e0000c arg timer_kb_mul_blank ,queue 320d 20207f08 branch timer_init g24_kb_mul_disable_blank_data_forcibly: 320e 204032ad call g24_set0_mem_kb_mul_blank_data_enable g24_kb_mul_disable_blank_data_timer: 320f 58000000 setarg 0 3210 d8e0000c arg timer_kb_mul_blank ,queue 3211 20207f08 branch timer_init g24_data_attemp: 3212 204032bd call g24_fetch_mem_rxdata_temp_add3_1byte 3213 c000b216 beq datatype_mouse ,g24_data_attemp_mouse 3214 c001321b beq datatype_keyboard ,g24_data_attemp_kbd 3215 20600000 rtn g24_data_attemp_mouse: 3216 5800010d setarg offset_24g_rxdata_temp_add4 3217 2040327e call g24_set_rega_ifetch_4byte 3218 da200160 arg offset_24g_mouse_addr ,rega 3219 204032bf call g24_set_contw_with_temp 321a 2020322d branch g24_contw_istore_4byte g24_data_attemp_kbd: 321b 5800010d setarg offset_24g_rxdata_temp_add4 321c 2040327e call g24_set_rega_ifetch_4byte 321d da200164 arg offset_24g_kb_addr ,rega 321e 204032bf call g24_set_contw_with_temp 321f 2020322d branch g24_contw_istore_4byte g24_store_mem_24g_mode: 3220 20402c7a call g24_head_ptr2regc 3221 1a608acd add regc ,offset_24g_mode ,contw 3222 e0a08000 istore 1 ,contw 3223 20600000 rtn g24_fetch_mem_device_addr: 3224 20402c7a call g24_head_ptr2regc 3225 1a60a2be add regc ,offset_24g_device_addr ,rega 3226 2020327f branch g24_rega_ifetch_4byte g24_store_mem_device_addr: 3227 20402c7a call g24_head_ptr2regc 3228 1a608abe add regc ,offset_24g_device_addr ,contw 3229 2020322d branch g24_contw_istore_4byte g24_fetch_mem_addr: 322a 1a60a2ae add regc ,offset_24g_addr ,rega 322b 2020327f branch g24_rega_ifetch_4byte g24_store_mem_addr: 322c 1a608aae add regc ,offset_24g_addr ,contw g24_contw_istore_4byte: 322d e0a20000 istore 4 ,contw 322e 20600000 rtn g24_store_mem_ch: 322f 1a608a90 add regc ,offset_24g_ch ,contw 3230 202032b4 branch g24_contw_istore_1byte g24_set0_mem_pid: 3231 58000000 setarg 0 g24_store_mem_pid: 3232 20402c7a call g24_head_ptr2regc 3233 1a608a85 add regc ,offset_24g_pid ,contw 3234 202032b4 branch g24_contw_istore_1byte g24_store_mem_txpayload: 3235 1a608a42 add regc ,offset_24g_txpayload ,contw 3236 202032b4 branch g24_contw_istore_1byte g24_set4_mem_max_retry: 3237 58000004 setarg 4 g24_store_mem_max_retry: 3238 1a608acc add regc ,offset_24g_max_retry ,contw 3239 202032b4 branch g24_contw_istore_1byte g24_fetch_mem_data_type: 323a 1a60a287 add regc ,offset_24g_data_type ,rega 323b 202032d1 branch g24_rega_ifetch_1byte g24_store_mem_data_type: 323c 1a608a87 add regc ,offset_24g_data_type ,contw 323d 202032b4 branch g24_contw_istore_1byte g24_set2_mem_sync_cnt: 323e 58000002 setarg 2 g24_store_mem_sync_cnt: 323f 1a608ad0 add regc ,offset_24g_sync_cnt ,contw 3240 202032b4 branch g24_contw_istore_1byte g24_set1_mem_rf_last_sta: 3241 58000001 setarg 1 g24_store_mem_rf_last_sta: 3242 20402c7a call g24_head_ptr2regc 3243 1a608ace add regc ,offset_24g_rf_last_sta ,contw 3244 202032b4 branch g24_contw_istore_1byte g24_fetch_mem_hop_pac: 3245 20402c7a call g24_head_ptr2regc 3246 1a60a2b4 add regc ,offset_24g_hop_pac ,rega 3247 202032d1 branch g24_rega_ifetch_1byte g24_set1_mem_hop_pac: 3248 58000001 setarg 1 g24_store_mem_hop_pac: 3249 20402c7a call g24_head_ptr2regc 324a 1a608ab4 add regc ,offset_24g_hop_pac ,contw 324b 202032b4 branch g24_contw_istore_1byte g24_fetch_mem_abort_pac: 324c 20402c7a call g24_head_ptr2regc 324d 1a60a2b2 add regc ,offset_24g_abort_pac ,rega 324e 202032d1 branch g24_rega_ifetch_1byte g24_set1_mem_abort_pac: 324f 58000001 setarg 1 g24_store_mem_abort_pac: 3250 20402c7a call g24_head_ptr2regc 3251 1a608ab2 add regc ,offset_24g_abort_pac ,contw 3252 202032b4 branch g24_contw_istore_1byte g24_fetch_mem_pairing_sm: 3253 20402c7a call g24_head_ptr2regc 3254 1a60a296 add regc ,offset_24g_pairing_sm ,rega 3255 202032d1 branch g24_rega_ifetch_1byte g24_store_mem_pairing_sm: 3256 1a608a96 add regc ,offset_24g_pairing_sm ,contw 3257 202032b4 branch g24_contw_istore_1byte g24_fetch_mem_rf_hop_ch: 3258 1a60a2cf add regc ,offset_24g_rf_hop_ch ,rega 3259 202032d1 branch g24_rega_ifetch_1byte g24_set0_mem_rf_hop_ch: 325a 58000000 setarg 0 g24_store_mem_rf_hop_ch: 325b 1a608acf add regc ,offset_24g_rf_hop_ch ,contw 325c 202032b4 branch g24_contw_istore_1byte g24_fetch_mem_rf_work_stage: 325d 1a60a2d2 add regc ,offset_24g_rf_work_stage ,rega 325e 202032d1 branch g24_rega_ifetch_1byte g24_fetch_mem_rxbuf_add1: 325f 1a60a201 add regc ,offset_24g_rxbuf_add1 ,rega 3260 202032d1 branch g24_rega_ifetch_1byte g24_fetch_mem_check_dongle_times: 3261 1a60a2b5 add regc ,offset_24g_check_dongle_times ,rega 3262 202032d1 branch g24_rega_ifetch_1byte g24_set0_mem_check_dongle_times: 3263 58000000 setarg 0 g24_store_mem_check_dongle_times: 3264 20402c7a call g24_head_ptr2regc 3265 1a608ab5 add regc ,offset_24g_check_dongle_times ,contw 3266 202032b4 branch g24_contw_istore_1byte g24_store_mem_tx_power: 3267 20402c7a call g24_head_ptr2regc 3268 1a60a2fb add regc ,offset_tx_power_temp ,rega 3269 ea208000 ifetch 1 ,rega g24_store_mem_txpower: 326a 6000c1de store 1 ,mem_tx_power 326b 20600000 rtn g24_store_mem_tx_power_temp: 326c 20402c7a call g24_head_ptr2regc 326d 6800c1de fetch 1 ,mem_tx_power 326e 1a608afb add regc ,offset_tx_power_temp ,contw 326f 202032b4 branch g24_contw_istore_1byte g24_fetch_mem_power_ctrl_pac: 3270 1a60a2fc add regc ,offset_power_ctrl_packet_cnt ,rega 3271 202032d1 branch g24_rega_ifetch_1byte g24_store_mem_power_ctrl_level: 3272 1a608afe add regc ,offset_power_ctrl_level ,contw 3273 202032b4 branch g24_contw_istore_1byte g24_fetcht_mem_rxdata_temp: 3274 58000109 setarg offset_24g_rxdata_temp g24_set_rega_ifetcht_1byte: 3275 9a60a200 iadd regc ,rega 3276 ea288000 ifetcht 1 ,rega 3277 20600000 rtn g24_fetch_mem_rf_laststa: 3278 58000135 setarg offset_24g_rf_laststa 3279 202032d0 branch g24_set_rega_ifetch_1byte g24_set0_mem_rf_laststa: 327a 58000000 setarg 0 g24_store_mem_rf_laststa: 327b da200135 arg offset_24g_rf_laststa ,rega 327c 202032b3 branch g24_set_contw_with_regb_store_1byte g24_fetch_mem_rx_addr: 327d 5800012b setarg offset_24g_rx_addr g24_set_rega_ifetch_4byte: 327e 204032cd call g24_set_rega g24_rega_ifetch_4byte: 327f ea220000 ifetch 4 ,rega 3280 20600000 rtn g24_fetch_mem_time_slice: 3281 5800015f setarg offset_24g_time_slice 3282 202032d0 branch g24_set_rega_ifetch_1byte g24_set0_mem_time_slice: 3283 58000000 setarg 0 g24_store_mem_time_slice: 3284 da20015f arg offset_24g_time_slice ,rega 3285 202032b3 branch g24_set_contw_with_regb_store_1byte g24_set0_mem_mode_switch: 3286 58000000 setarg 0 g24_store_mem_mode_switch: 3287 da20015c arg offset_24g_mode_switch ,rega 3288 202032b3 branch g24_set_contw_with_regb_store_1byte g24_store_mem_bind_payload: 3289 da20012f arg offset_24g_bind_payload ,rega 328a 202032b3 branch g24_set_contw_with_regb_store_1byte g24_fetch_mem_bind_device_status: 328b 58000108 setarg offset_dongle_bind_device_status 328c 202032d0 branch g24_set_rega_ifetch_1byte g24_store_mem_bind_device_status: 328d da200108 arg offset_dongle_bind_device_status ,rega 328e 202032b3 branch g24_set_contw_with_regb_store_1byte g24_fetch_mem_dongle_work_mode: 328f 58000105 setarg offset_dongle_work_mode 3290 202032d0 branch g24_set_rega_ifetch_1byte g24_set_work_mem_dongle_work_mode: 3291 58000000 setarg dongle_work g24_store_mem_dongle_work_mode: 3292 da200105 arg offset_dongle_work_mode ,rega 3293 202032b3 branch g24_set_contw_with_regb_store_1byte g24_fetch_mem_dongle_mode_init: 3294 58000104 setarg offset_dongle_mode_init 3295 202032d0 branch g24_set_rega_ifetch_1byte g24_set0_mem_dongle_mode_init: 3296 58000000 setarg clear_init g24_store_mem_dongle_mode_init: 3297 da200104 arg offset_dongle_mode_init ,rega 3298 202032b3 branch g24_set_contw_with_regb_store_1byte g24_set0_mem_ackpayload_enable: 3299 58000000 setarg 0 g24_store_mem_ackpayload_enable: 329a da20013b arg offset_24g_ackpayload_enable ,rega 329b 202032b3 branch g24_set_contw_with_regb_store_1byte g24_set1_mem_ackpayload_enable: 329c 58000001 setarg 1 329d 2020329a branch g24_store_mem_ackpayload_enable g24_fetch_mem_rxdata_temp_add3_7byte: 329e 5800010c setarg offset_24g_rxdata_temp_add3 329f 204032cd call g24_set_rega 32a0 ea238000 ifetch 7 ,rega 32a1 20600000 rtn g24_fetch_mem_nodata_timer_enable: 32a2 5800015e setarg offset_24g_nodata_timer_enable 32a3 202032d0 branch g24_set_rega_ifetch_1byte g24_set0_mem_nodata_timer_enable: 32a4 58000000 setarg 0 g24_store_mem_nodata_timer_enable: 32a5 da20015e arg offset_24g_nodata_timer_enable ,rega 32a6 202032b3 branch g24_set_contw_with_regb_store_1byte g24_set0_mem_ms_blank_data_enable: 32a7 58000000 setarg 0 g24_store_mem_ms_blank_data_enable: 32a8 da200180 arg offset_24g_ms_blank_data_enable ,rega 32a9 202032b3 branch g24_set_contw_with_regb_store_1byte g24_set0_mem_kb_blank_data_enable: 32aa 58000000 setarg 0 g24_store_mem_kb_blank_data_enable: 32ab da20017e arg offset_24g_kb_blank_data_enable ,rega 32ac 202032b3 branch g24_set_contw_with_regb_store_1byte g24_set0_mem_kb_mul_blank_data_enable: 32ad 58000000 setarg 0 g24_store_mem_kb_mul_blank_data_enable: 32ae da20017f arg offset_24g_kb_mul_blank_data_enable ,rega 32af 202032b3 branch g24_set_contw_with_regb_store_1byte g24_store_mem_power_ctrl_threshold_up: 32b0 da200102 arg offset_power_ctrl_threshold_up ,rega 32b1 202032b3 branch g24_set_contw_with_regb_store_1byte g24_store_mem_power_ctrl_threshold_down: 32b2 da200103 arg offset_power_ctrl_threshold_down ,rega g24_set_contw_with_regb_store_1byte: 32b3 204032c7 call g24_set_contw_with_regb g24_contw_istore_1byte: 32b4 e0a08000 istore 1 ,contw 32b5 20600000 rtn g24_fetch_mem_pair_mode: 32b6 5800015d setarg offset_24g_pair_mode 32b7 202032d0 branch g24_set_rega_ifetch_1byte g24_store_mem_pair_mode: 32b8 da20015d arg offset_24g_pair_mode ,rega 32b9 202032b3 branch g24_set_contw_with_regb_store_1byte g24_store_mem_pair_txpower: 32ba 5800018a setarg offset_24g_pair_txpower 32bb 204032d0 call g24_set_rega_ifetch_1byte 32bc 2020326a branch g24_store_mem_txpower g24_fetch_mem_rxdata_temp_add3_1byte: 32bd 5800010c setarg offset_24g_rxdata_temp_add3 32be 202032d0 branch g24_set_rega_ifetch_1byte g24_set_contw_with_temp: 32bf 1fe20400 copy pdata ,temp 32c0 1a227e00 copy rega ,pdata 32c1 9a608a00 iadd regc ,contw 32c2 18427e00 copy temp ,pdata 32c3 20600000 rtn g24_set_contw_with_temp_store_3byte: 32c4 204032bf call g24_set_contw_with_temp g24_contw_istore_3byte: 32c5 e0a18000 istore 3 ,contw 32c6 20600000 rtn g24_set_contw_with_regb: 32c7 20402c7a call g24_head_ptr2regc g24_set_contw_with_regb2: 32c8 1fe22400 copy pdata ,regb 32c9 1a227e00 copy rega ,pdata 32ca 9a608a00 iadd regc ,contw 32cb 1a427e00 copy regb ,pdata 32cc 20600000 rtn g24_set_rega: 32cd 20402c7a call g24_head_ptr2regc 32ce 9a60a200 iadd regc ,rega 32cf 20600000 rtn g24_set_rega_ifetch_1byte: 32d0 204032cd call g24_set_rega g24_rega_ifetch_1byte: 32d1 ea208000 ifetch 1 ,rega 32d2 20600000 rtn g24_set_rega_ifetcht_4byte: 32d3 204032cd call g24_set_rega 32d4 ea2a0000 ifetcht 4 ,rega 32d5 20600000 rtn g24_mem_set0: 32d6 58000000 setarg 0 32d7 202032b4 branch g24_contw_istore_1byte app_init: 32d8 44e24018 bpatch patch18_4 ,mem_patch18 32d9 6800c092 fetch 1 ,mem_device_option 32da 203a32d8 branch app_init ,blank 32db c0022f30 beq dvc_op_dongle ,dongle_init 32dc c007b436 beq dvc_op_antilost ,antilost_init 32dd c004c5de beq dvc_op_shutter ,shutter_init 32de c005392a beq dvc_op_module ,module_init 32df c00735bf beq dvc_op_car ,car_init 32e0 c00844a4 beq dvc_op_remote_car ,remote_car_init 32e1 c2833d00 bbit1 dvc_op_mouse ,mouse_init 32e2 20600000 rtn app_lpm_init: 32e3 44e2c018 bpatch patch18_5 ,mem_patch18 32e4 70015100 jam 0 ,mem_tester_emulate 32e5 70017f00 jam 0 ,mem_debug_config 32e6 70018000 jam 0 ,mem_lch_code 32e7 58000000 setarg 0 32e8 600289ae store 5 ,mem_sp_state_start 32e9 6800c092 fetch 1 ,mem_device_option 32ea 203a32e3 branch app_lpm_init ,blank 32eb c0053962 beq dvc_op_module ,module_lpm_init app_lpm_init0: 32ec 20600000 rtn app_process_idle: 32ed 20407cd1 call ui_dispatch 32ee 20407d9c call check_51cmd 32ef 204032f6 call app_process_bb_event 32f0 680141f3 fetch 2 ,mem_cb_idle_process 32f1 20207f9c branch callback_func app_process_bt: 32f2 680141f1 fetch 2 ,mem_cb_bt_process 32f3 20207f9c branch callback_func app_process_ble: 32f4 680141ef fetch 2 ,mem_cb_le_process 32f5 20207f9c branch callback_func app_process_bb_event: 32f6 44e34018 bpatch patch18_6 ,mem_patch18 32f7 da204668 arg mem_ipc_fifo_bt2c51 ,rega 32f8 20407fc4 call fifo_out 32f9 207a0000 rtn blank 32fa 1fe22600 copy pdata ,regc 32fb 204032ff call app_event_normal_process 32fc 20203324 branch app_process_bb_event_priority app_discard_event: 32fd da600000 arg 0 ,regc 32fe 20600000 rtn app_event_normal_process: 32ff c000b311 beq bt_evt_bb_connected ,app_evt_bt_conn 3300 c0083357 beq bt_evt_button_long_pressed ,app_evt_button_long_pressed 3301 c002b335 beq bt_evt_setup_complete ,app_evt_setup_complete 3302 c009333c beq bt_evt_hid_handshake ,app_evt_hid_handshake 3303 c0033353 beq bt_evt_hid_connected ,app_bb_event_hid_connected 3304 c0023394 beq bt_evt_reconn_failed ,app_bb_event_reconn_failed 3305 c0013399 beq bt_evt_bb_disconnected ,app_bb_event_bb_disconn 3306 c009b394 beq bt_evt_reconn_page_timeout ,app_bb_event_reconn_failed 3307 c00a334b beq bt_evt_le_connected ,app_le_event_bb_connected 3308 c00ab34f beq bt_evt_le_disconnected ,app_le_event_bb_disconn 3309 c001b32e beq bt_evt_reconn_started ,app_event_reconn_start 330a c005b340 beq bt_evt_enter_sniff ,app_event_enter_sniff 330b c0063347 beq bt_evt_exit_sniff ,app_event_exit_sniff 330c c00b335b beq bt_evt_ml2cap_conn_refused ,app_event_ml2cap_conn_refused 330d c00c332a beq bt_evt_linkkey_generate ,app_event_linkkey_generate 330e c015331a beq bt_evt_switch_fail_master ,app_event_switch_fail_master 330f c015b318 beq bt_evt_switch_success_master ,app_event_switch_success 3310 20600000 rtn app_evt_bt_conn: 3311 68014682 fetch 2 ,mem_ui_state_map 3312 79207e00 set1 ui_state_bt_connected ,pdata 3313 60014682 store 2 ,mem_ui_state_map 3314 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 3315 793ffe00 set0 app_disc_by_button ,pdata 3316 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 3317 20600000 rtn app_event_switch_success: 3318 70022900 jam 0 ,mem_switch_fail_master_count 3319 20600000 rtn app_event_switch_fail_master: 331a 68008229 fetch 1 ,mem_switch_fail_master_count 331b 1fe0fe01 increase 1 ,pdata 331c 60008229 store 1 ,mem_switch_fail_master_count 331d 1fe67c01 sub pdata ,1 ,null 331e 202133df branch app_bt_role_switch ,positive 331f 70022900 jam 0 ,mem_switch_fail_master_count 3320 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 3321 79207e09 set1 app_disc_switch_fail ,pdata 3322 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 3323 202033e9 branch app_bt_disconnect app_process_bb_event_priority: 3324 680141f5 fetch 2 ,mem_cb_bb_event_process 3325 20207f9c branch callback_func app_check_wake_lock: 3326 680141e9 fetch 2 ,mem_cb_check_wakelock 3327 20207f9c branch callback_func app_will_enter_lpm: 3328 680141ed fetch 2 ,mem_cb_before_lpm 3329 20207f9c branch callback_func app_event_linkkey_generate: 332a 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 332b 79207e01 set1 app_disc_after_pairing ,pdata 332c 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 332d 20203412 branch app_bt_store_reconn_info app_event_reconn_start: 332e 68014682 fetch 2 ,mem_ui_state_map 332f 79207e07 set1 ui_state_bt_reconnect ,pdata 3330 60014682 store 2 ,mem_ui_state_map 3331 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 3332 79207e02 set1 app_disc_after_reconn ,pdata 3333 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 3334 20600000 rtn app_evt_setup_complete: 3335 68014682 fetch 2 ,mem_ui_state_map 3336 79207e01 set1 ui_state_bt_setup_complete ,pdata 3337 60014682 store 2 ,mem_ui_state_map 3338 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 3339 79207e04 set1 app_disc_after_setup_done ,pdata 333a 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 333b 20600000 rtn app_evt_hid_handshake: 333c 68014682 fetch 2 ,mem_ui_state_map 333d 79207e03 set1 ui_state_bt_hid_handshake ,pdata 333e 60014682 store 2 ,mem_ui_state_map 333f 20600000 rtn app_event_enter_sniff: 3340 68014682 fetch 2 ,mem_ui_state_map 3341 79207e05 set1 ui_state_bt_sniff ,pdata 3342 60014682 store 2 ,mem_ui_state_map 3343 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 3344 79207e03 set1 app_disc_after_sniff ,pdata 3345 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 3346 20600000 rtn app_event_exit_sniff: 3347 68014682 fetch 2 ,mem_ui_state_map 3348 793ffe05 set0 ui_state_bt_sniff ,pdata 3349 60014682 store 2 ,mem_ui_state_map 334a 20600000 rtn app_le_event_bb_connected: 334b 68014682 fetch 2 ,mem_ui_state_map 334c 79207e09 set1 ui_state_ble_connected ,pdata 334d 60014682 store 2 ,mem_ui_state_map 334e 20600000 rtn app_le_event_bb_disconn: 334f 68014682 fetch 2 ,mem_ui_state_map 3350 793ffe09 set0 ui_state_ble_connected ,pdata 3351 60014682 store 2 ,mem_ui_state_map 3352 20203418 branch app_lpm_mult_disable app_bb_event_hid_connected: 3353 68014682 fetch 2 ,mem_ui_state_map 3354 79207e02 set1 ui_state_bt_hid_conn ,pdata 3355 60014682 store 2 ,mem_ui_state_map 3356 20600000 rtn app_evt_button_long_pressed: 3357 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 3358 79207e00 set1 app_disc_by_button ,pdata 3359 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 335a 20600000 rtn app_event_ml2cap_conn_refused: 335b 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 335c 79207e08 set1 app_disc_l2cap_refused ,pdata 335d 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 335e 202033e9 branch app_bt_disconnect app_evt_timer: 335f 44e3c018 bpatch patch18_7 ,mem_patch18 3360 6000822a store 1 ,mem_app_evt_timer_count app_evt_100ms_loop: 3361 6800822a fetch 1 ,mem_app_evt_timer_count 3362 207a0000 rtn blank 3363 1fe0ffff increase -1 ,pdata 3364 6000822a store 1 ,mem_app_evt_timer_count 3365 20407cdd call ui_button_polling 3366 204033d6 call app_lpm_wake_auto_lock_timer 3367 20403387 call app_unsniff_delay_timer 3368 2040338d call app_discovery_timer 3369 2040651b call flash_write_spi_sm_timer 336a 680141fd fetch 2 ,mem_cb_event_timer 336b 20407f9c call callback_func 336c 20203361 branch app_evt_100ms_loop timer_single_step: 336d ea608000 ifetch 1 ,regc 336e 207a0000 rtn blank 336f 1fe0ffff pincrease -1 3370 e2608000 istore 1 ,regc 3371 247a0000 nrtn blank 3372 1a427e00 copy regb ,pdata 3373 20207f9c branch callback_func timer_single_step_2b: 3374 ea610000 ifetch 2 ,regc 3375 207a0000 rtn blank 3376 1fe0ffff pincrease -1 3377 e2610000 istore 2 ,regc 3378 247a0000 nrtn blank 3379 1a427e00 copy regb ,pdata 337a 20207f9c branch callback_func app_power_timer: 337b 6809423f fetcht 2 ,mem_power_param_ptr 337c 1840a601 add temp ,power_timer_offset ,regc 337d da40337f arg app_power_timer_timeout ,regb 337e 2020336d branch timer_single_step app_power_timer_timeout: 337f 2040342d call app_got_power_state_common 3380 c000b382 beq power_starting ,app_enter_power_stanby_state app_enter_power_off_state: 3381 2020340a branch app_enter_hibernate app_enter_power_stanby_state: 3382 58000002 setarg power_standby 3383 e2608000 istore 1 ,regc 3384 1840a408 add temp ,power_standby_cb_offset ,regb app_power_cb_common: 3385 ea410000 ifetch 2 ,regb 3386 20207f9c branch callback_func app_unsniff_delay_timer: 3387 da604205 arg mem_unsniff2sniff_timer_count ,regc 3388 da40338a arg app_unsniff_delay_timeout ,regb 3389 2020336d branch timer_single_step app_unsniff_delay_timeout: 338a 20402252 call context_check_idle 338b 2022b40e branch app_bt_enter_sniff ,zero 338c 20600000 rtn app_discovery_timer: 338d da60467e arg mem_discovery_timeout_timer_count ,regc 338e da403390 arg app_discovery_timeout ,regb 338f 20203374 branch timer_single_step_2b app_discovery_timeout: 3390 204033f0 call app_bt_stop_discovery 3391 20403408 call app_led_off 3392 680141f7 fetch 2 ,mem_cb_discovry_timeout 3393 20207f9c branch callback_func app_bb_event_reconn_failed: 3394 204033ac call app_disconn_reason_flag_clear app_clear_reconnect_flag: 3395 68014682 fetch 2 ,mem_ui_state_map 3396 793ffe07 set0 ui_state_bt_reconnect ,pdata 3397 60014682 store 2 ,mem_ui_state_map 3398 20600000 rtn app_bb_event_bb_disconn: 3399 70420500 jam 0 ,mem_unsniff2sniff_timer_count 339a 68014682 fetch 2 ,mem_ui_state_map 339b c283b39e bbit1 ui_state_bt_reconnect ,app_bb_event_bb_reconn_disconn 339c 2fec0001 isolate0 ui_state_bt_setup_complete ,pdata 339d 2040b2fd call app_discard_event ,true app_bb_event_bb_reconn_disconn: 339e 44e44019 bpatch patch19_0 ,mem_patch19 339f 68014682 fetch 2 ,mem_ui_state_map 33a0 793ffe00 set0 ui_state_bt_connected ,pdata 33a1 793ffe01 set0 ui_state_bt_setup_complete ,pdata 33a2 793ffe02 set0 ui_state_bt_hid_conn ,pdata 33a3 793ffe03 set0 ui_state_bt_hid_handshake ,pdata 33a4 793ffe07 set0 ui_state_bt_reconnect ,pdata 33a5 60014682 store 2 ,mem_ui_state_map 33a6 20203418 branch app_lpm_mult_disable app_bb_hibernate: 33a7 204033a9 call app_disconn_reason_clear 33a8 2020340a branch app_enter_hibernate app_disconn_reason_clear: 33a9 58000000 setarg 0 33aa 60014208 store app_disc_rsn_size ,mem_app_disconn_reason 33ab 20600000 rtn app_disconn_reason_flag_clear: 33ac 58000000 setarg 0 33ad 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 33ae 20600000 rtn app_disconn_reason_collect_bt: 33af 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 33b0 60014208 store app_disc_rsn_size ,mem_app_disconn_reason 33b1 58000000 setarg 0 33b2 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 33b3 20600000 rtn app_disconn_reason_collect_ble: 33b4 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 33b5 79207e07 set1 app_disc_ble ,pdata 33b6 60014208 store app_disc_rsn_size ,mem_app_disconn_reason 33b7 58000000 setarg 0 33b8 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 33b9 20600000 rtn app_check_sniff: 33ba 6800c682 fetch 1 ,mem_ui_state_map 33bb 2feffe05 isolate1 ui_state_bt_sniff ,pdata 33bc 20600000 rtn app_initflag_store: 33bd 5800aa55 setarg eeprom_init_flag app_flag_store: 33be 60010aaa store 2 ,mem_timeup 33bf 44e4c019 bpatch patch19_1 ,mem_patch19 33c0 d8400002 arg 2 ,temp 33c1 da200aaa arg mem_timeup ,rega 33c2 da4000c3 arg eeprom_module_init_flag ,regb 33c3 20206606 branch iicd_write_eep_data app_initflag_check: 33c4 44e54019 bpatch patch19_2 ,mem_patch19 33c5 d8400002 arg 2 ,temp 33c6 da200a9a arg mem_pdatatemp ,rega 33c7 da4000c3 arg eeprom_module_init_flag ,regb 33c8 204065df call iicd_read_eep_data 33c9 68010a9a fetch 2 ,mem_pdatatemp 33ca d840aa55 arg eeprom_init_flag ,temp 33cb 98467c00 isub temp ,null 33cc 20600000 rtn app_start_auto_sniff: 33cd 6800c55a fetch 1 ,mem_unsniff2sniff_timer 33ce 6000c205 store 1 ,mem_unsniff2sniff_timer_count 33cf 20600000 rtn app_get_lpm_wake_lock: 33d0 d8e00009 arg wake_lock_app ,queue 33d1 20202c32 branch lpm_get_wake_lock app_put_lpm_wake_lock: 33d2 d8e00009 arg wake_lock_app ,queue 33d3 20202c36 branch lpm_put_wake_lock app_lpm_wake_auto_lock: 33d4 70420605 jam lpm_wake_up_delay_timer ,mem_wake_up_delay_timer 33d5 202033d0 branch app_get_lpm_wake_lock app_lpm_wake_auto_lock_timer: 33d6 da604206 arg mem_wake_up_delay_timer ,regc 33d7 da4033d2 arg app_put_lpm_wake_lock ,regb 33d8 2020336d branch timer_single_step app_l2cap_flow_control_enable: 33d9 70436301 jam l2cap_flow_ctrl_enable ,mem_l2cap_flow_ctrl_flag 33da 20600000 rtn app_l2cap_flow_control_disable: 33db 70436300 jam l2cap_flow_ctrl_disable ,mem_l2cap_flow_ctrl_flag 33dc 20600000 rtn app_bt_set_pincode: 33dd 700a990a jam bt_cmd_set_pin_code ,mem_fifo_temp 33de 20207d8f branch ui_ipc_send_cmd app_bt_role_switch: 33df 700a991d jam bt_cmd_role_switch ,mem_fifo_temp 33e0 20207d8f branch ui_ipc_send_cmd app_bt_start_reconnect: 33e1 44e5c019 bpatch patch19_3 ,mem_patch19 33e2 6800c207 fetch 1 ,mem_app_connection_options 33e3 6000816d store 1 ,mem_connection_options 33e4 70022801 jam app_flag_reconnect ,mem_reconnect_flag 33e5 700a9903 jam bt_cmd_reconnect ,mem_fifo_temp 33e6 20207d8f branch ui_ipc_send_cmd app_bt_reconnect_cancel: 33e7 700a991e jam bt_cmd_bb_reconn_cancel ,mem_fifo_temp 33e8 20207d8f branch ui_ipc_send_cmd app_bt_disconnect: 33e9 700a9904 jam bt_cmd_disconnect ,mem_fifo_temp 33ea 20207d8f branch ui_ipc_send_cmd app_bt_start_discovery_short: 33eb 68014687 fetch 2 ,mem_discovery_timeout 33ec 6001467e store 2 ,mem_discovery_timeout_timer_count app_bt_start_discovery_led_blink: 33ed 20403404 call app_led_start_blink app_bt_start_discovery: 33ee 700a9901 jam bt_cmd_start_discovery ,mem_fifo_temp 33ef 20207d8f branch ui_ipc_send_cmd app_bt_stop_discovery: 33f0 58000000 setarg 0 33f1 6001467e store 2 ,mem_discovery_timeout_timer_count 33f2 700a9902 jam bt_cmd_stop_discovery ,mem_fifo_temp 33f3 20207d8f branch ui_ipc_send_cmd app_ble_start_direct_adv: 33f4 700a990f jam bt_cmd_start_direct_adv ,mem_fifo_temp 33f5 20207d8f branch ui_ipc_send_cmd app_ble_stop_direct_adv: 33f6 700a9910 jam bt_cmd_stop_direct_adv ,mem_fifo_temp 33f7 20207d8f branch ui_ipc_send_cmd app_ble_stop_adv: 33f8 700a990e jam bt_cmd_stop_adv ,mem_fifo_temp 33f9 20207d8f branch ui_ipc_send_cmd app_ble_start_adv: 33fa 700a990d jam bt_cmd_start_adv ,mem_fifo_temp 33fb 20207d8f branch ui_ipc_send_cmd app_ble_start_scan: 33fc 700a9917 jam bt_cmd_le_start_scan ,mem_fifo_temp 33fd 20207d8f branch ui_ipc_send_cmd app_ble_stop_scan: 33fe 700a9918 jam bt_cmd_le_stop_scan ,mem_fifo_temp 33ff 20207d8f branch ui_ipc_send_cmd app_ble_start_conn: 3400 700a9916 jam bt_cmd_le_start_conn ,mem_fifo_temp 3401 20207d8f branch ui_ipc_send_cmd app_ble_disconnect: 3402 700a9911 jam bt_cmd_le_disconnect ,mem_fifo_temp 3403 20207d8f branch ui_ipc_send_cmd app_led_start_blink: 3404 700a9915 jam bt_cmd_led_blink ,mem_fifo_temp 3405 20207d8f branch ui_ipc_send_cmd app_led_on: 3406 700a9914 jam bt_cmd_led_on ,mem_fifo_temp 3407 20207d8f branch ui_ipc_send_cmd app_led_stop_blink: app_led_off: 3408 700a9913 jam bt_cmd_led_off ,mem_fifo_temp 3409 20207d8f branch ui_ipc_send_cmd app_enter_hibernate: 340a 700a9919 jam bt_cmd_enter_hibernate ,mem_fifo_temp 340b 20207d8f branch ui_ipc_send_cmd app_bt_sniff_exit: 340c 700a9906 jam bt_cmd_exit_sniff ,mem_fifo_temp 340d 20207d8f branch ui_ipc_send_cmd app_bt_enter_sniff: 340e 700a9905 jam bt_cmd_enter_sniff ,mem_fifo_temp 340f 20207d8f branch ui_ipc_send_cmd app_ble_store_reconn_info: 3410 700a991f jam bt_cmd_store_reconn_info_le ,mem_fifo_temp 3411 20207d8f branch ui_ipc_send_cmd app_bt_store_reconn_info: 3412 700a9920 jam bt_cmd_store_reconn_info_bt ,mem_fifo_temp 3413 20207d8f branch ui_ipc_send_cmd app_store_reconn_info: 3414 700a9925 jam bt_cmd_store_reconn_info ,mem_fifo_temp 3415 20207d8f branch ui_ipc_send_cmd app_lpm_mult_enable: 3416 7920000d set1 mark_lpm_mult_enable ,mark 3417 20600000 rtn app_lpm_mult_disable: 3418 793f800d set0 mark_lpm_mult_enable ,mark 3419 20600000 rtn app_button_long_pressed: 341a 2040342d call app_got_power_state_common 341b c0013424 beq power_standby ,app_power_shutting_down app_power_starting: 341c 58000001 setarg power_starting 341d e2608000 istore 1 ,regc 341e 1840a203 add temp ,power_starting_timeout_offset ,rega 341f 1840a406 add temp ,power_starting_cb_offset ,regb app_power_common: 3420 ea288000 ifetcht 1 ,rega 3421 1a60a601 increase 1 ,regc 3422 e2688000 istoret 1 ,regc 3423 20203385 branch app_power_cb_common app_power_shutting_down: 3424 58000000 setarg power_off 3425 e2608000 istore 1 ,regc 3426 68014682 fetch 2 ,mem_ui_state_map 3427 c304b429 bbit0 ui_state_ble_connected ,app_power_off_end 3428 20403402 call app_ble_disconnect app_power_off_end: 3429 6809423f fetcht 2 ,mem_power_param_ptr 342a 1840a202 add temp ,power_off_timeout_offset ,rega 342b 1840a404 add temp ,power_off_cb_offset ,regb 342c 20203420 branch app_power_common app_got_power_state_common: 342d 6809423f fetcht 2 ,mem_power_param_ptr 342e 1840a600 add temp ,power_state_offset ,regc 342f ea608000 ifetch 1 ,regc 3430 20600000 rtn app_event_button_up: 3431 2040342d call app_got_power_state_common 3432 c0803434 bne power_off ,app_power_release 3433 2020340a branch app_enter_hibernate app_power_release: 3434 1840a40a add temp ,ui_butten_up_cb_offset ,regb 3435 20203385 branch app_power_cb_common antilost_init: 3436 20758000 rtn wake 3437 70808100 jam 0x00 ,core_gpio_sel1 3438 58003463 setarg antilost_le_before_hibernate 3439 600141eb store 2 ,mem_cb_before_hibernate 343a 5800696c setarg keyscan_process_lpm_before 343b 600141ed store 2 ,mem_cb_before_lpm 343c 580034f5 setarg antilost_idle_process 343d 600141f3 store 2 ,mem_cb_idle_process 343e 580034f4 setarg antilost_le_conn_process 343f 600141ef store 2 ,mem_cb_le_process 3440 5800347e setarg antilost_bb_event_process 3441 600141f5 store 2 ,mem_cb_bb_event_process 3442 580034b2 setarg antilost_le_bb_event_timer 3443 600141fd store 2 ,mem_cb_event_timer 3444 58003465 setarg antilost_le_notification 3445 600141fb store 2 ,mem_cb_ble_transmit 3446 58003470 setarg antilost_lpm_lock_process 3447 600141e9 store 2 ,mem_cb_check_wakelock 3448 58003501 setarg antilost_le_receive_data_process 3449 600141f9 store 2 ,mem_cb_att_write 344a 44e64019 bpatch patch19_4 ,mem_patch19 344b 2040359b call antilost_buzzer_pwm_init 344c 20406948 call keyscan_key_init 344d 204035ad call antilost_adc_init 344e 20407d08 call ui_led_init_global 344f 20407cd3 call ui_button_init 3450 5800350b setarg antilost_key_up_down 3451 60014766 store 2 ,mem_cb_antl_key 3452 580034fc setarg antilost_power_off_cb 3453 6001475d store 2 ,mem_antl_power_off_cb 3454 580034f8 setarg antilost_power_starting_cb 3455 6001475f store 2 ,mem_antl_power_starting_cb 3456 5800346c setarg antilost_power_standby_cb 3457 60014761 store 2 ,mem_antl_power_standby_cb 3458 580035a2 setarg antilost_led_on_cb 3459 600146a9 store 2 ,mem_antl_led_cb_on 345a 580035a4 setarg antilost_led_off_cb 345b 600146ab store 2 ,mem_antl_led_cb_off 345c 580035a9 setarg antilost_buzzer_on 345d 600146b4 store 2 ,mem_antl_buzzer_cb_on 345e 580035a6 setarg antilost_buzzer_off 345f 600146b6 store 2 ,mem_antl_buzzer_cb_off 3460 68014682 fetch 2 ,mem_ui_state_map 3461 c3860000 rtnbit1 ui_state_btn_down 3462 2020340a branch app_enter_hibernate antilost_le_before_hibernate: 3463 20403586 call antilost_led_buzzer_stop_blink 3464 2020340a branch app_enter_hibernate antilost_le_notification: 3465 20405892 call le_fifo_check_nearly_full 3466 247a0000 nrtn blank 3467 da200b06 arg mem_temp_block5 ,rega 3468 20407e54 call queue_pop 3469 24740000 nrtn user 346a d8c00b06 arg mem_temp_block5 ,contr 346b 20204746 branch le_send_notify_from_list antilost_power_standby_cb: 346c 68014797 fetch 2 ,mem_antl_le_sleep_timeout 346d 60014791 store 2 ,mem_antl_le_sleep_timer 346e 70475301 jam 1 ,mem_antl_key_scan_enable 346f 2020358f branch antilost_fast_adv_start antilost_lpm_lock_process: 3470 6800c79d fetch 1 ,mem_antl_key_state 3471 c000b479 beq 1 ,antilost_lpm_ctrl_for_led_buzzer 3472 68014682 fetch 2 ,mem_ui_state_map 3473 c304b479 bbit0 ui_state_ble_connected ,antilost_lpm_ctrl_for_led_buzzer 3474 6800c79e fetch 1 ,mem_antl_lost_mode 3475 c000b3d0 beq 1 ,app_get_lpm_wake_lock 3476 6800c700 fetch 1 ,mem_antl_queue_curr_num 3477 243a33d0 nbranch app_get_lpm_wake_lock ,blank 3478 202033d2 branch app_put_lpm_wake_lock antilost_lpm_ctrl_for_led_buzzer: 3479 6800c79b fetch 1 ,mem_antl_led_state 347a 6808c79c fetcht 1 ,mem_antl_buzzer_state 347b 9841fe00 ior temp ,pdata 347c c000b3d0 beq 1 ,app_get_lpm_wake_lock 347d 202033d2 branch app_put_lpm_wake_lock antilost_bb_event_process: 347e 1a627e00 copy regc ,pdata 347f c016b431 beq bt_evt_button_up ,app_event_button_up 3480 c008341a beq bt_evt_button_long_pressed ,app_button_long_pressed 3481 c00a34df beq bt_evt_le_connected ,antilost_le_process_conn 3482 c00ab4e8 beq bt_evt_le_disconnected ,antilost_le_process_discon 3483 c0203485 beq bt_evt_le_parse_conn_papa_update_rsp ,antilost_le_conn_param_update_rsp_recieved 3484 20600000 rtn antilost_le_conn_param_update_rsp_recieved: 3485 68014509 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result 3486 c000b48c beq ble_signaling_connect_parameter_update_rejected ,antilost_le_conn_param_rejected antilost_le_conn_param_accepted: 3487 680143d8 fetch 2 ,mem_le_new_connslavelatency 3488 203a34a2 branch antilost_master_nonsupport_latency ,blank antilost_le_conn_param_updata_procedure_sucsess: 3489 70478a02 jam conn_param_updata_procedure_complete ,mem_antl_conn_updata_procedure_state 348a 70478f3c jam 60 ,mem_antl_conn_update_timer 348b 20600000 rtn antilost_le_conn_param_rejected: 348c 6801449a fetch 2 ,mem_le_latency 348d 203a34a0 branch antilost_conn_param_updata_procedure_faild ,blank antilost_conn_param_retransimiting: 348e 70478a01 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state 348f 680947b4 fetcht 2 ,mem_interval_increment 3490 68014496 fetch 2 ,mem_le_interval_min 3491 9840fe00 iadd temp ,pdata 3492 60014496 store 2 ,mem_le_interval_min 3493 1fe22200 copy pdata ,rega 3494 68014498 fetch 2 ,mem_le_interval_max 3495 9840fe00 iadd temp ,pdata 3496 60014498 store 2 ,mem_le_interval_max 3497 9a20fe00 iadd rega ,pdata 3498 1fe30400 rshift pdata ,temp 3499 680147c0 fetch 2 ,mem_antl_le_unnormal_interval_max 349a 9846fc00 idiv temp 349b 20407f86 call wait_div_end 349c 1807fe00 quotient pdata 349d 6001449a store 2 ,mem_le_latency 349e 70479001 jam 1 ,mem_antl_send_updata_le_param_timer 349f 20600000 rtn antilost_conn_param_updata_procedure_faild: 34a0 70478a03 jam conn_param_updata_procedure_faild ,mem_antl_conn_updata_procedure_state 34a1 20600000 rtn antilost_master_nonsupport_latency: 34a2 70417200 jam 0 ,mem_lpm_mult 34a3 70479000 jam 0 ,mem_antl_send_updata_le_param_timer 34a4 680143d6 fetch 2 ,mem_le_new_conninterval 34a5 680947be fetcht 2 ,mem_antl_le_unnormal_interval_min 34a6 98467c00 isub temp ,null 34a7 79212200 setflag positive ,0 ,rega 34a8 680147c0 fetch 2 ,mem_antl_le_unnormal_interval_max 34a9 680943d6 fetcht 2 ,mem_le_new_conninterval 34aa 98467e00 isub temp ,pdata 34ab 79212201 setflag positive ,1 ,rega 34ac 2a200603 compare 0x03 ,rega ,0x03 34ad 20608000 rtn true 34ae 680447be fetch 8 ,mem_antl_le_unnormal_interval_min 34af 60044496 store 8 ,mem_le_interval_min 34b0 70479001 jam 1 ,mem_antl_send_updata_le_param_timer 34b1 20600000 rtn antilost_le_bb_event_timer: 34b2 2040337b call app_power_timer 34b3 204034b9 call antilost_double_click_timer 34b4 204034be call antilost_le_fast_adv_timer 34b5 204034d5 call antilost_le_sleep_timer 34b6 204034ca call antilost_app_updata_le_param_timer 34b7 204034c4 call antilost_conn_update_timer 34b8 202034d9 branch antilost_adc_check_timer antilost_double_click_timer: 34b9 da604799 arg mem_double_click_timer ,regc 34ba da4034bc arg antilost_double_click_timeout ,regb 34bb 2020336d branch timer_single_step antilost_double_click_timeout: 34bc 70479a00 jam 0 ,mem_butten_click_cnt 34bd 20600000 rtn antilost_le_fast_adv_timer: 34be da604793 arg mem_antl_fast_adv_timer ,regc 34bf da4034c1 arg antilost_le_fast_adv_timeout ,regb 34c0 20203374 branch timer_single_step_2b antilost_le_fast_adv_timeout: 34c1 da6046bf arg mem_antl_slow_adv_led_style ,regc 34c2 da40469e arg mem_antl_slow_adv_lpm_interval ,regb 34c3 20203591 branch antilost_adv_start_common antilost_conn_update_timer: 34c4 da60478f arg mem_antl_conn_update_timer ,regc 34c5 da4034c7 arg antilost_conn_update_timer_time_out ,regb 34c6 2020336d branch timer_single_step antilost_conn_update_timer_time_out: 34c7 6801449a fetch 2 ,mem_le_latency 34c8 6000c172 store 1 ,mem_lpm_mult 34c9 20600000 rtn antilost_app_updata_le_param_timer: 34ca da604790 arg mem_antl_send_updata_le_param_timer ,regc 34cb da4034cd arg antilost_app_updata_le_param_timeout ,regb 34cc 2020336d branch timer_single_step antilost_app_updata_le_param_timeout: 34cd 6800843f fetch 1 ,mem_le_state 34ce 2fe0c000 compare 0 ,pdata ,0x60 34cf 2420b4d3 nbranch antilost_wait_for_updata_param_instant_expire ,true 34d0 70478a01 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state 34d1 20403416 call app_lpm_mult_enable 34d2 20205abf branch le_l2cap_tx_update_req antilost_wait_for_updata_param_instant_expire: 34d3 70479001 jam 1 ,mem_antl_send_updata_le_param_timer 34d4 20600000 rtn antilost_le_sleep_timer: 34d5 da604791 arg mem_antl_le_sleep_timer ,regc 34d6 da4034d8 arg antilost_le_sleep_timer_timeout ,regb 34d7 20203374 branch timer_single_step_2b antilost_le_sleep_timer_timeout: 34d8 2020341a branch app_button_long_pressed antilost_adc_check_timer: 34d9 da60478d arg mem_adc_timer ,regc 34da da4034dc arg antilost_adc_check_timer_timeout ,regb 34db 20203374 branch timer_single_step_2b antilost_adc_check_timer_timeout: 34dc 680147a7 fetch 2 ,mem_adc_timeout 34dd 6001478d store 2 ,mem_adc_timer 34de 202035af branch antilost_battery_process antilost_le_process_conn: 34df 680147a7 fetch 2 ,mem_adc_timeout 34e0 6001478d store 2 ,mem_adc_timer 34e1 58000000 setarg 0 34e2 60014793 store 2 ,mem_antl_fast_adv_timer 34e3 60014791 store 2 ,mem_antl_le_sleep_timer 34e4 2040355c call antilost_alert_off 34e5 20403586 call antilost_led_buzzer_stop_blink 34e6 70417200 jam 0 ,mem_lpm_mult 34e7 202033f8 branch app_ble_stop_adv antilost_le_process_discon: 34e8 58000000 setarg 0 34e9 6002478d store 4 ,mem_adc_timer 34ea 6001c78a store 3 ,mem_antl_conn_updata_procedure_state 34eb 60014509 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result 34ec 7047a001 jam 1 ,mem_alarm_config_notfy_cnt 34ed 68014797 fetch 2 ,mem_antl_le_sleep_timeout 34ee 60014791 store 2 ,mem_antl_le_sleep_timer 34ef 20407e38 call queue_init 34f0 6800c759 fetch 1 ,mem_antl_power_state 34f1 c1000000 rtneq power_off 34f2 2040358f call antilost_fast_adv_start 34f3 2020356e branch antilost_on_off_alarm_after_disconn antilost_le_conn_process: 34f4 20203508 branch antilost_key_process antilost_idle_process: 34f5 6800c759 fetch 1 ,mem_antl_power_state 34f6 c1810000 rtnne power_standby 34f7 20203508 branch antilost_key_process antilost_power_starting_cb: 34f8 da6046cd arg mem_antl_power_starting_buzzer_style ,regc 34f9 20403582 call antilost_buzzer_configuration 34fa da6046c6 arg mem_antl_power_starting_led_style ,regc antilost_power_common: 34fb 20203584 branch antilost_led_configuration antilost_power_off_cb: 34fc 70436e00 jam off ,mem_le_adv_enable 34fd da6046db arg mem_antl_power_off_buzzer_style ,regc 34fe 20403582 call antilost_buzzer_configuration 34ff da6046d4 arg mem_antl_power_off_led_style ,regc 3500 202034fb branch antilost_power_common antilost_le_receive_data_process: 3501 68008477 fetch 1 ,mem_le_att_opcode 3502 c0093504 beq attop_write_request ,antilost_le_parse_att_write_request 3503 20600000 rtn antilost_le_parse_att_write_request: 3504 68010478 fetch 2 ,mem_le_att_handle 3505 c006b536 beq new_spec_write_handle ,antilost_cmd_parse_for_application 3506 c005b571 beq new_spec_notification_enable_handle ,antilost_notify_alarm_config_first_time 3507 20600000 rtn antilost_key_process: 3508 6800c753 fetch 1 ,mem_antl_key_scan_enable 3509 207a0000 rtn blank 350a 20206978 branch keyscan_key_process antilost_key_up_down: 350b 1a227e00 copy rega ,pdata 350c 203a3510 branch antilost_key_is_up ,blank antilost_key_is_down: 350d 18e27e00 copy queue ,pdata 350e c0003513 beq 0 ,antilost_key0_down 350f 20600000 rtn antilost_key_is_up: 3510 18e27e00 copy queue ,pdata 3511 c000351b beq 0 ,antilost_key0_up 3512 20600000 rtn antilost_key0_down: 3513 70479d01 jam 1 ,mem_antl_key_state 3514 da6046f7 arg mem_antl_key_buzzer_style ,regc 3515 20403582 call antilost_buzzer_configuration 3516 da6046f0 arg mem_antl_key_led_style ,regc 3517 20403584 call antilost_led_configuration 3518 68014682 fetch 2 ,mem_ui_state_map 3519 c304b532 bbit0 ui_state_ble_connected ,antilost_butten_down_while_disconn 351a 20203521 branch antilost_butten_down_after_conn antilost_key0_up: 351b 70479d00 jam 0 ,mem_antl_key_state 351c 2020351d branch antilost_double_click_timer_init antilost_double_click_timer_init: 351d 6800c79a fetch 1 ,mem_butten_click_cnt 351e c1808000 rtnne 1 351f 70479905 jam 5 ,mem_double_click_timer 3520 20600000 rtn antilost_butten_down_after_conn: 3521 6800c79a fetch 1 ,mem_butten_click_cnt 3522 1fe0fe01 pincrease 1 3523 6000c79a store 1 ,mem_butten_click_cnt 3524 c000b527 beq 1 ,antilost_click_once 3525 c001352b beq 2 ,antilost_click_twice 3526 20600000 rtn antilost_click_once: 3527 2040355c call antilost_alert_off 3528 70477101 jam opcode1_butten_click_once ,mem_antl_key0_press + 5 3529 da60476c arg mem_antl_key0_press ,regc 352a 20203544 branch antilost_prepare_data_and_send antilost_click_twice: 352b 70479a00 jam 0 ,mem_butten_click_cnt 352c 70477102 jam opcode2_butten_double_click ,mem_antl_key0_press + 5 352d da60476c arg mem_antl_key0_press ,regc 352e 20403544 call antilost_prepare_data_and_send 352f 6800c79e fetch 1 ,mem_antl_lost_mode 3530 c000b551 beq 1 ,antilost_alert_on 3531 20600000 rtn antilost_butten_down_while_disconn: 3532 68014797 fetch 2 ,mem_antl_le_sleep_timeout 3533 60014791 store 2 ,mem_antl_le_sleep_timer 3534 2040355c call antilost_alert_off 3535 2020358f branch antilost_fast_adv_start antilost_cmd_parse_for_application: 3536 44e6c019 bpatch patch19_5 ,mem_patch19 3537 204036fc call le_app_receive_data 3538 ea208000 ifetch 1 ,rega 3539 c001b53c beq opcode3_antl_start_alram ,antilost_on_of_alram 353a c003b540 beq opcode7_antl_config_alram ,antilost_configuration_for_alram 353b 20600000 rtn antilost_on_of_alram: 353c 6800c79e fetch 1 ,mem_antl_lost_mode 353d c0003551 beq anti_le_alarm_off ,antilost_alert_on 353e c000b55c beq anti_le_alarm_on ,antilost_alert_off 353f 20600000 rtn antilost_configuration_for_alram: 3540 ea408000 ifetch 1 ,regb 3541 c000b564 beq 1 ,antilost_set_start_alarm_after_disconn 3542 c0003569 beq 0 ,antilost_set_no_alarm_after_disconn 3543 20600000 rtn antilost_prepare_data_and_send: 3544 44e74019 bpatch patch19_6 ,mem_patch19 3545 6800c78b fetch 1 ,mem_client_characteristic_configuration_descriptor 3546 2feffe00 isolate1 notification_enable_bit ,pdata 3547 24608000 nrtn true 3548 1a608c06 add regc ,6 ,contr 3549 e8c10000 ifetch 2 ,contr 354a 1ff0fe00 byteswap pdata ,pdata 354b 1fe0f205 add pdata ,5 ,loopcnt 354c 1a608c03 add regc ,3 ,contr 354d 204036f0 call calc_check_sum_start 354e e0c08000 istore 1 ,contr 354f 1a622200 copy regc ,rega 3550 20207e3d branch queue_push antilost_alert_on: 3551 6800c759 fetch 1 ,mem_antl_power_state 3552 207a0000 rtn blank 3553 70479e01 jam 1 ,mem_antl_lost_mode 3554 da6046e9 arg mem_antl_alert_buzzer_stlye ,regc 3555 20403582 call antilost_buzzer_configuration 3556 da6046e2 arg mem_antl_alert_led_stlye ,regc 3557 20403584 call antilost_led_configuration 3558 70478004 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 3559 70478301 jam 1 ,mem_antl_key0_release + 8 355a da60477b arg mem_antl_key0_release ,regc 355b 20203544 branch antilost_prepare_data_and_send antilost_alert_off: 355c 6800c79e fetch 1 ,mem_antl_lost_mode 355d 207a0000 rtn blank 355e 70479e00 jam 0 ,mem_antl_lost_mode 355f 20403586 call antilost_led_buzzer_stop_blink 3560 70478004 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 3561 70478300 jam 0 ,mem_antl_key0_release + 8 3562 da60477b arg mem_antl_key0_release ,regc 3563 20203544 branch antilost_prepare_data_and_send antilost_set_start_alarm_after_disconn: 3564 70479f01 jam 1 ,mem_alarm_config 3565 70478007 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 3566 70478301 jam 1 ,mem_antl_key0_release + 8 3567 da60477b arg mem_antl_key0_release ,regc 3568 20203544 branch antilost_prepare_data_and_send antilost_set_no_alarm_after_disconn: 3569 70479f00 jam 0 ,mem_alarm_config 356a 70478007 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 356b 70478300 jam 0 ,mem_antl_key0_release + 8 356c da60477b arg mem_antl_key0_release ,regc 356d 20203544 branch antilost_prepare_data_and_send antilost_on_off_alarm_after_disconn: 356e 6800c79f fetch 1 ,mem_alarm_config 356f 207a0000 rtn blank 3570 20203551 branch antilost_alert_on antilost_notify_alarm_config_first_time: 3571 ea210000 ifetch 2 ,rega 3572 6001478b store 2 ,mem_client_characteristic_configuration_descriptor 3573 2feffe00 isolate1 notification_enable_bit ,pdata 3574 24608000 nrtn true 3575 6800c7a0 fetch 1 ,mem_alarm_config_notfy_cnt 3576 207a0000 rtn blank 3577 7047a000 jam 0 ,mem_alarm_config_notfy_cnt 3578 680447b6 fetch 8 ,mem_antl_le_interval_min 3579 60044496 store 8 ,mem_le_interval_min 357a 70479002 jam 2 ,mem_antl_send_updata_le_param_timer 357b 204035af call antilost_battery_process 357c 204035b9 call antilost_battery_calculate_end 357d 70478007 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 357e 6800c79f fetch 1 ,mem_alarm_config 357f 6000c783 store 1 ,mem_antl_key0_release + 8 3580 da60477b arg mem_antl_key0_release ,regc 3581 20203544 branch antilost_prepare_data_and_send antilost_buzzer_configuration: 3582 da200001 arg 1 ,rega 3583 20203585 branch antilost_configuration_common antilost_led_configuration: 3584 da200000 arg 0 ,rega antilost_configuration_common: 3585 2020358c branch antilost_led_buzzer_style_configuration antilost_led_buzzer_stop_blink: 3586 da200000 arg 0 ,rega 3587 20407d19 call ui_led_blink_stop_global 3588 da200001 arg 1 ,rega 3589 20407d19 call ui_led_blink_stop_global 358a 6800c7a1 fetch 1 ,mem_buzzer_pwm_conf 358b 202069d7 branch pwm_disable antilost_led_buzzer_style_configuration: 358c 20407d04 call calc_curr_struct_prt 358d df200007 arg 7 ,loopcnt 358e 20207d26 branch ui_led_set_style_global + 2 antilost_fast_adv_start: 358f da6046b8 arg mem_antl_fast_adv_led_style ,regc 3590 da40469a arg mem_antl_lpm_interval ,regb antilost_adv_start_common: 3591 20403596 call antilost_adv_interval_lpm_interval_set 3592 20403584 call antilost_led_configuration 3593 68014795 fetch 2 ,mem_antl_fast_adv_timeout 3594 60014793 store 2 ,mem_antl_fast_adv_timer 3595 202033fa branch app_ble_start_adv antilost_adv_interval_lpm_interval_set: 3596 ea410000 ifetch 2 ,regb 3597 60014154 store 2 ,mem_lpm_interval 3598 e8c10000 ifetch 2 ,contr 3599 60014482 store 2 ,mem_le_adv_interval 359a 20600000 rtn antilost_buzzer_pwm_init: 359b da200000 arg 0 ,rega 359c 204069a6 call pwm_init 359d 680347a1 fetch 6 ,mem_buzzer_pwm_conf 359e 60030a9a store 6 ,mem_pdatatemp 359f 204069ae call pwm_out_set 35a0 6800c7a1 fetch 1 ,mem_buzzer_pwm_conf 35a1 202069d7 branch pwm_disable antilost_led_on_cb: 35a2 70479b01 jam 1 ,mem_antl_led_state 35a3 20600000 rtn antilost_led_off_cb: 35a4 70479b00 jam 0 ,mem_antl_led_state 35a5 20600000 rtn antilost_buzzer_off: 35a6 70479c00 jam 0 ,mem_antl_buzzer_state 35a7 6800c7a1 fetch 1 ,mem_buzzer_pwm_conf 35a8 202069d7 branch pwm_disable antilost_buzzer_on: 35a9 70479c01 jam 1 ,mem_antl_buzzer_state 35aa 680347a1 fetch 6 ,mem_buzzer_pwm_conf 35ab 60030a9a store 6 ,mem_pdatatemp 35ac 202069ae branch pwm_out_set antilost_adc_init: 35ad 70422d00 jam 0 ,mem_adc_config_flag 35ae 202068a8 branch adc_init_data antilost_battery_process: 35af 204068eb call adc_set_mode 35b0 20406908 call vdd_calculate_by_mode 35b1 600147b0 store 2 ,mem_battery_current_voltage 35b2 da2047aa arg mem_battery_calculate_set ,rega 35b3 20406930 call adc_bat_percent_lowpower_out 35b4 6000c7a9 store 1 ,mem_voltage_remain_percent 35b5 c00035be beq 0 ,antilost_low_battery 35b6 1fe67c64 sub pdata ,0x64 ,null 35b7 242135bc nbranch antilost_full_battery ,positive 35b8 6000c783 store 1 ,mem_antl_key0_release + 8 antilost_battery_calculate_end: 35b9 70478005 jam opcode5_batter_information ,mem_antl_key0_release + 5 35ba da60477b arg mem_antl_key0_release ,regc 35bb 20203544 branch antilost_prepare_data_and_send antilost_full_battery: 35bc 70478364 jam 100 ,mem_antl_key0_release + 8 35bd 202035b9 branch antilost_battery_calculate_end antilost_low_battery: 35be 2020341a branch app_button_long_pressed car_init: 35bf 20758000 rtn wake 35c0 68108081 hfetch 1 ,core_gpio_sel1 35c1 1fe17ef0 and_into 0xf0 ,pdata 35c2 60108081 hstore 1 ,core_gpio_sel1 35c3 58003631 setarg car_le_before_hibernate 35c4 600141eb store 2 ,mem_cb_before_hibernate 35c5 58003633 setarg car_le_process_lpm_before 35c6 600141ed store 2 ,mem_cb_before_lpm 35c7 5800340a setarg app_enter_hibernate 35c8 600141f7 store 2 ,mem_cb_discovry_timeout 35c9 58003635 setarg car_scale_process_idle 35ca 600141f3 store 2 ,mem_cb_idle_process 35cb 5800364b setarg car_scale_process_bb_event 35cc 600141f5 store 2 ,mem_cb_bb_event_process 35cd 580033d0 setarg app_get_lpm_wake_lock 35ce 600141e9 store 2 ,mem_cb_check_wakelock 35cf 580036f6 setarg car_le_receive_data 35d0 600141f9 store 2 ,mem_cb_att_write 35d1 5800367a setarg car_le_bb_event_timer 35d2 600141fd store 2 ,mem_cb_event_timer 35d3 20402c7a call g24_head_ptr2regc 35d4 58003722 setarg car_24g_receive_data 35d5 1a608ade add regc ,offset_24g_cb_rxdata_type1 ,contw 35d6 e0a10000 istore 2 ,contw 35d7 580035ed setarg car_power_off_signal 35d8 6001475b store 2 ,mem_remote_car_power_off_cb 35d9 580035ef setarg car_soft_switch_power_on_signal 35da 6001475f store 2 ,mem_remote_car_power_standby_cb 35db 44e7c019 bpatch patch19_7 ,mem_patch19 35dc 20403628 call car_init_environment 35dd 20407e38 call queue_init 35de 70417202 jam 2 ,mem_lpm_mult 35df 7049f600 jam power_on ,mem_car_24g_received_pac 35e0 6800c7cb fetch 1 ,mem_car_config_soft_switch_enable 35e1 6000c69a store 1 ,mem_car_hard_soft_switch 35e2 c00035ee beq hard_switch ,car_hard_switch_power_on_signal 35e3 6800c7cc fetch 1 ,mem_car_config_soft_switch_gpio 35e4 6000c686 store 1 ,mem_ui_button_gpio 35e5 70436e00 jam off ,mem_le_adv_enable car_soft_switch_power_on_init: 35e6 2040360f call car_ui_led_init 35e7 20407cd3 call ui_button_init 35e8 20407cdd call ui_button_polling 35e9 7047f301 jam power_starting ,mem_car_power_state 35ea 68014682 fetch 2 ,mem_ui_state_map 35eb c3860000 rtnbit1 ui_state_btn_down 35ec 2020340a branch app_enter_hibernate car_power_off_signal: 35ed 2020360f branch car_ui_led_init car_hard_switch_power_on_signal: 35ee 7047f302 jam power_standby ,mem_car_power_state car_soft_switch_power_on_signal: 35ef 70436e01 jam on ,mem_le_adv_enable 35f0 2040360f call car_ui_led_init 35f1 da200000 arg 0 ,rega 35f2 20407d1e call ui_led_blink_start_global 35f3 58000020 setarg fast_adv_interval_value_car 35f4 204046f0 call shutter_ble_adv_interval_set car_le_modified_name_adv: 35f5 d8a043b7 arg mem_le_name + 7 ,contw 35f6 6800c4a0 fetch 1 ,mem_le_lap car_name_loop: 35f7 1fe104f0 and pdata ,0xF0 ,temp 35f8 18518400 rshift4 temp ,temp 35f9 20403609 call car_hex_to_ascii 35fa e0a88000 istoret 1 ,contw 35fb 1fe1040f and pdata ,0x0F ,temp 35fc 20403609 call car_hex_to_ascii 35fd e0a88000 istoret 1 ,contw 35fe 204057a6 call le_modified_name_att_list 35ff 6808c3af fetcht 1 ,mem_le_name_len 3600 18427200 copy temp ,loopcnt 3601 d8a04372 arg mem_le_adv_data + 2 ,contw 3602 d8c043b0 arg mem_le_name ,contr 3603 20407f01 call memcpy car_le_modified_name_scan: 3604 6808c3af fetcht 1 ,mem_le_name_len 3605 18427200 copy temp ,loopcnt 3606 d8a04392 arg mem_le_scan_data + 2 ,contw 3607 d8c043b0 arg mem_le_name ,contr 3608 20207f01 branch memcpy car_hex_to_ascii: 3609 18467c09 sub temp ,9 ,null 360a 2021360d branch car_hex_num ,positive 360b 18408437 add temp ,55 ,temp 360c 20600000 rtn car_hex_num: 360d 18408430 add temp ,48 ,temp 360e 20600000 rtn car_ui_led_init: 360f 6800c7c0 fetch 1 ,mem_car_config_blood_led1_gpio 3610 c0ffb621 bne invalid_pin_num ,car_blood_led_gpio_set car_ui_led_init_1: 3611 6800c7be fetch 1 ,mem_car_config_pairing_led_gpio 3612 c0ffb624 bne invalid_pin_num ,car_pairing_led_gpio_set car_ui_led_init_2: 3613 6800c7c9 fetch 1 ,mem_car_config_low_voltage_led_gpio 3614 c0ffb626 bne invalid_pin_num ,car_low_voltage_led_gpio_set car_ui_led_init_3: 3615 6800c72c fetch 1 ,mem_car_led_num 3616 1fe27200 copy pdata ,loopcnt 3617 5800472d setarg mem_car_led_map 3618 1fe22200 copy pdata ,rega car_in_lp1: 3619 1a220c00 copy rega ,contr 361a e8c08000 ifetch 1 ,contr 361b 18c22200 copy contr ,rega 361c c07fb61f beq invalid_pin_num ,car_in_lp1_end 361d 1fe20400 copy pdata ,temp 361e 2040680e call gpio_config_output car_in_lp1_end: 361f c2003619 loop car_in_lp1 car_ui_led_init_end: 3620 20600000 rtn car_blood_led_gpio_set: 3621 680447c0 fetch 8 ,mem_car_config_blood_led1_gpio 3622 6004472f store 8 ,mem_car_led_map + 2 3623 20203611 branch car_ui_led_init_1 car_pairing_led_gpio_set: 3624 6000c72d store 1 ,mem_car_led_map 3625 20203613 branch car_ui_led_init_2 car_low_voltage_led_gpio_set: 3626 6000c72e store 1 ,mem_car_led_map + 1 3627 20203615 branch car_ui_led_init_3 car_init_environment: 3628 da200000 arg 0 ,rega 3629 204069a6 call pwm_init 362a 204037e4 call car_ir_rx_init 362b 20402c7d call g24_receive_process_init 362c 2020362d branch car_init_adc_hvin car_init_adc_hvin: 362d 7047cf64 jam 100 ,mem_car_notify_vdd_value_last 362e 6800c7c9 fetch 1 ,mem_car_config_low_voltage_led_gpio 362f 6000c744 store 1 ,mem_car_style2_struct_led_gpio 3630 202068a8 branch adc_init_data car_le_before_hibernate: 3631 20406835 call gpio_set_before_lpm_common 3632 2020696c branch keyscan_process_lpm_before car_le_process_lpm_before: 3633 2020696c branch keyscan_process_lpm_before car_key_scan_process: 3634 20206978 branch keyscan_key_process car_scale_process_idle: 3635 20403642 call car_le_send_packet 3636 204037ee call car_ir_receive_process 3637 20403639 call car_g24_status_process 3638 20203634 branch car_key_scan_process car_g24_status_process: 3639 68014682 fetch 2 ,mem_ui_state_map 363a c3848000 rtnbit1 ui_state_ble_connected 363b 6800c9f6 fetch 1 ,mem_car_24g_received_pac 363c c000b63e beq work_paired ,car_g24_connected_event 363d 20600000 rtn car_g24_connected_event: 363e 6800c7ea fetch 1 ,mem_car_24g_status 363f c1008000 rtneq work_paired 3640 7047ea01 jam work_paired ,mem_car_24g_status 3641 20203654 branch car_g24_connected car_le_send_packet: 3642 68014682 fetch 2 ,mem_ui_state_map 3643 c4048000 rtnbit0 ui_state_ble_connected 3644 20405892 call le_fifo_check_nearly_full 3645 247a0000 nrtn blank 3646 da204718 arg mem_car_pop_queue_buff ,rega 3647 20407e54 call queue_pop 3648 24740000 nrtn user 3649 d8c04718 arg mem_car_pop_queue_buff ,contr 364a 20204746 branch le_send_notify_from_list car_scale_process_bb_event: 364b 1a627e00 copy regc ,pdata 364c c016b431 beq bt_evt_button_up ,app_event_button_up 364d c008341a beq bt_evt_button_long_pressed ,app_button_long_pressed 364e c00a3651 beq bt_evt_le_connected ,car_scale_event_le_conn 364f c00ab660 beq bt_evt_le_disconnected ,car_scale_event_le_discon 3650 20600000 rtn car_scale_event_le_conn: 3651 58000000 setarg disable_24g 3652 20403220 call g24_store_mem_24g_mode 3653 20203656 branch car_scale_process_conn car_g24_connected: 3654 680147eb fetch 2 ,mem_car_24g_no_data_timeout_count 3655 600147ed store 2 ,mem_car_24g_no_data_timeout_timer car_scale_process_conn: 3656 7047ce14 jam 0x14 ,mem_car_notify_vdd_timer 3657 70409100 jam 0 ,mem_lpm_mode 3658 204033f8 call app_ble_stop_adv 3659 20403416 call app_lpm_mult_enable 365a 6800c7bd fetch 1 ,mem_car_config_pairing_led_conn_status 365b c000b65e beq 0x01 ,car_pairing_led_conn_status_setting car_scale_process_conn_next: 365c da200000 arg 0 ,rega 365d 20207d14 branch ui_led_on_global car_pairing_led_conn_status_setting: 365e da200000 arg 0 ,rega 365f 20207d19 branch ui_led_blink_stop_global car_scale_event_le_discon: 3660 58000002 setarg rx_24g 3661 20403220 call g24_store_mem_24g_mode car_g24_disconnect: 3662 58000000 setarg 0 3663 6002c79c store 5 ,mem_car_led_control 3664 58000004 setarg 4 3665 204069d7 call pwm_disable 3666 58000005 setarg 5 3667 204069d7 call pwm_disable 3668 58000014 setarg 20 3669 204069d7 call pwm_disable 366a 58000015 setarg 21 366b 204069d7 call pwm_disable 366c 58000016 setarg 22 366d 204069d7 call pwm_disable 366e 58000007 setarg 7 366f 204069d7 call pwm_disable 3670 20407e38 call queue_init 3671 70475e0a jam 10 ,mem_motor1_speed 3672 7047600a jam 10 ,mem_motor2_speed 3673 7047620a jam 10 ,mem_motor3_speed 3674 70417202 jam 2 ,mem_lpm_mult 3675 da200000 arg 0 ,rega 3676 20407d1e call ui_led_blink_start_global 3677 58000020 setarg fast_adv_interval_value_car 3678 204046f0 call shutter_ble_adv_interval_set 3679 202033fa branch app_ble_start_adv car_le_bb_event_timer: 367a 2040373b call car_moto1_blank_data_timer 367b 2040373e call car_moto2_blank_data_timer 367c 20403741 call car_moto3_blank_data_timer 367d 2040337b call app_power_timer 367e 204036c8 call car_led_control_timer 367f 204036a1 call car_notify_vdd_timer 3680 2040368a call car_24g_no_data_timeout_timer 3681 20403683 call car_ir_breakdown_timer 3682 2020368f branch car_attack_shake_timer car_ir_breakdown_timer: 3683 da60479a arg mem_car_ir_breakdown_check_timer ,regc 3684 da403686 arg car_ir_breakdown_timeout ,regb 3685 2020336d branch timer_single_step car_ir_breakdown_timeout: 3686 20403847 call car_ir_gpio_get_status 3687 24608000 nrtn true 3688 70479b01 jam 1 ,mem_car_ir_breakdown_flag 3689 20600000 rtn car_24g_no_data_timeout_timer: 368a da6047ed arg mem_car_24g_no_data_timeout_timer ,regc 368b da40368d arg car_24g_no_data_timer_timeout ,regb 368c 20203374 branch timer_single_step_2b car_24g_no_data_timer_timeout: 368d 7047ea02 jam work_search ,mem_car_24g_status 368e 20203662 branch car_g24_disconnect car_attack_shake_timer: 368f da6047f1 arg mem_car_attack_shake_timer ,regc 3690 da403692 arg car_attack_shake ,regb 3691 2020336d branch timer_single_step car_attack_shake: 3692 6800c7f2 fetch 1 ,mem_car_attack_shake_flag 3693 203a369e branch car_attack_shake_stop ,blank 3694 7047f102 jam 2 ,mem_car_attack_shake_timer 3695 7047f200 jam 0 ,mem_car_attack_shake_flag 3696 58000a02 setarg 0x0a02 3697 60014752 store 2 ,mem_le_receive_payload 3698 6800c7b9 fetch 1 ,mem_car_config_device_select 3699 c001b69b beq device_battle_tank ,car_attack_shake_front_battle_tank car_attack_shake_front_battle_car: 369a 20203762 branch car_motor_control car_attack_shake_front_battle_tank: 369b 58000a02 setarg 0x0a02 369c 60014754 store 2 ,mem_le_receive_payload + 2 369d 20203762 branch car_motor_control car_attack_shake_stop: 369e 58000000 setarg 0 369f 60024752 store 4 ,mem_le_receive_payload 36a0 20203762 branch car_motor_control car_notify_vdd_timer: 36a1 6800c7c8 fetch 1 ,mem_car_config_bat_notify_enable 36a2 207a0000 rtn blank 36a3 68014682 fetch 2 ,mem_ui_state_map 36a4 c304b6c6 bbit0 ui_state_ble_connected ,car_low_bat_led_off 36a5 da6047ce arg mem_car_notify_vdd_timer ,regc 36a6 da4036a8 arg car_notify_vdd ,regb 36a7 2020336d branch timer_single_step car_notify_vdd: 36a8 6800c7cd fetch 1 ,mem_car_notify_vdd_count 36a9 6000c7ce store 1 ,mem_car_notify_vdd_timer 36aa 6800c7d1 fetch 1 ,mem_car_working_flag 36ab 247a0000 nrtn blank car_read_hvin: 36ac 204068eb call adc_set_mode 36ad 20406908 call vdd_calculate_by_mode 36ae 600147e8 store 2 ,mem_vdd_now_vol 36af da2047e2 arg mem_vdd_calculate_set ,rega 36b0 20406930 call adc_bat_percent_lowpower_out 36b1 6808c7cf fetcht 1 ,mem_car_notify_vdd_value_last 36b2 98467c00 isub temp ,null 36b3 202136b6 branch car_notify_vdd_next2 ,positive 36b4 6000c7cf store 1 ,mem_car_notify_vdd_value_last 36b5 1fe20400 copy pdata ,temp car_notify_vdd_next2: 36b6 6008c7d0 storet 1 ,mem_car_notify_vdd_percent 36b7 6800c7ca fetch 1 ,mem_car_config_low_voltage_percent 36b8 98467c00 isub temp ,null 36b9 204136c1 call car_enter_low_bat ,positive 36ba 6008c7db storet 1 ,mem_notify_bat_payload 36bb df200006 arg 6 ,loopcnt 36bc d8c047d6 arg mem_notify_bat_head ,contr 36bd 204036f0 call calc_check_sum_start 36be 6000c7dc store 1 ,mem_notify_bat_check_sum 36bf da2047d3 arg mem_notify_bat_packet ,rega 36c0 20207e3d branch queue_push car_enter_low_bat: 36c1 6800c7d2 fetch 1 ,mem_low_bat_flag 36c2 247a0000 nrtn blank 36c3 7047d201 jam 1 ,mem_low_bat_flag 36c4 da200001 arg 1 ,rega 36c5 20207d1e branch ui_led_blink_start_global car_low_bat_led_off: 36c6 da200001 arg 1 ,rega 36c7 20207d19 branch ui_led_blink_stop_global car_led_control_timer: 36c8 da6047a4 arg mem_car_led_control_timer ,regc 36c9 da4036cb arg car_led_control ,regb 36ca 2020336d branch timer_single_step car_led_control: 36cb 7047a405 jam 5 ,mem_car_led_control_timer 36cc 7047a600 jam 0 ,mem_car_led_no 36cd 6800c7a5 fetch 1 ,mem_car_led_blink_status 36ce c000b6ee beq led_on ,car_led_control_blink_off 36cf c00036ec beq led_off ,car_led_control_blink_on car_led_control_set: 36d0 d8c0479c arg mem_car_led_control ,contr 36d1 18c22200 copy contr ,rega 36d2 df200008 arg 8 ,loopcnt car_led_control_timer_next: 36d3 1a220c00 copy rega ,contr 36d4 e8c08000 ifetch 1 ,contr 36d5 18c22200 copy contr ,rega 36d6 c00036e3 beq led_off ,car_led_control_off 36d7 c000b6e6 beq led_on ,car_led_control_on 36d8 c00136e9 beq led_blink ,car_led_control_blink car_led_control_timer_next_2: 36d9 6800c7a6 fetch 1 ,mem_car_led_no 36da 1fe0fe01 increase 1 ,pdata 36db 6000c7a6 store 1 ,mem_car_led_no 36dc c20036d3 loop car_led_control_timer_next 36dd 20600000 rtn car_led_switch: 36de 6800c7a6 fetch 1 ,mem_car_led_no 36df da4047c0 arg mem_car_config_blood_led_gpio ,regb 36e0 9a40a400 iadd regb ,regb 36e1 ea488000 ifetcht 1 ,regb 36e2 20600000 rtn car_led_control_off: 36e3 204036de call car_led_switch 36e4 20406825 call gpio_out_inactive 36e5 202036d9 branch car_led_control_timer_next_2 car_led_control_on: 36e6 204036de call car_led_switch 36e7 20406829 call gpio_out_active 36e8 202036d9 branch car_led_control_timer_next_2 car_led_control_blink: 36e9 6800c7a5 fetch 1 ,mem_car_led_blink_status 36ea c000b6e3 beq led_on ,car_led_control_off 36eb 202036e6 branch car_led_control_on car_led_control_blink_on: 36ec 7047a501 jam led_on ,mem_car_led_blink_status 36ed 202036d0 branch car_led_control_set car_led_control_blink_off: 36ee 7047a500 jam led_off ,mem_car_led_blink_status 36ef 202036d0 branch car_led_control_set calc_check_sum_start: 36f0 da200000 arg 0 ,rega calc_check_sum_loop: 36f1 e8c08000 ifetch 1 ,contr 36f2 9a20a200 iadd rega ,rega 36f3 c20036f1 loop calc_check_sum_loop calc_check_sum_and: 36f4 1a217eff and rega ,0xff ,pdata 36f5 20600000 rtn car_le_receive_data: 36f6 68008477 fetch 1 ,mem_le_att_opcode 36f7 c00936f9 beq attop_write_request ,car_le_parse_att_write_request 36f8 20600000 rtn car_le_parse_att_write_request: 36f9 68010478 fetch 2 ,mem_le_att_handle 36fa c00a3710 beq att_car_control_handle ,car_control_le_receive 36fb 20600000 rtn le_app_receive_data: 36fc 44e8401a bpatch patch1a_0 ,mem_patch1a 36fd ea228000 ifetch 5 ,rega 36fe 60028b12 store 5 ,mem_app_receive_temp 36ff 68010b12 fetch 2 ,mem_app_receive_temp 3700 d8406b5a arg le_receive_packet_head ,temp 3701 98467c00 isub temp ,null 3702 24628000 nrtn zero 3703 68010b15 fetch 2 ,mem_app_receive_temp + 3 3704 1ff0fe00 byteswap pdata ,pdata 3705 60010b15 store 2 ,mem_app_receive_temp + 3 3706 1fe27200 copy pdata ,loopcnt 3707 1a20a205 increase 5 ,rega 3708 1a220c00 copy rega ,contr 3709 d8a00b17 arg mem_app_receive_temp + 5 ,contw 370a 20407f01 call memcpy 370b e8c08000 ifetch 1 ,contr 370c 60008b21 store 1 ,mem_app_receive_temp + 15 370d da200b14 arg mem_app_receive_temp + 2 ,rega 370e da400b17 arg mem_app_receive_temp + 5 ,regb 370f 20600000 rtn car_control_le_receive: 3710 58000000 setarg 0 3711 6002c752 store 5 ,mem_le_receive_payload 3712 6002c757 store 5 ,mem_le_receive_payload + 5 3713 204036fc call le_app_receive_data 3714 1a420c00 copy regb ,contr 3715 d8a04752 arg mem_le_receive_payload ,contw 3716 df20000a arg 10 ,loopcnt 3717 20407f01 call memcpy car_receive_cmd_select: 3718 44e8c01a bpatch patch1a_1 ,mem_patch1a 3719 ea208000 ifetch 1 ,rega 371a c001374a beq car_cmd_old_car_control ,car_drive_old 371b c001b75c beq car_cmd_old_speed_control ,car_speed_set_old 371c c0023762 beq car_cmd_l_r_motor_control ,car_motor_control 371d c002b762 beq car_cmd_f_b_motor_control ,car_motor_control 371e c00337b1 beq car_cmd_ir_control ,car_ir_data_rx_from_app 371f c003b849 beq car_cmd_led_control ,car_led_control_receive 3720 c004384c beq car_cmd_device_info ,car_info_request 3721 20600000 rtn car_24g_receive_data: 3722 68014682 fetch 2 ,mem_ui_state_map 3723 c3848000 rtnbit1 ui_state_ble_connected 3724 680147eb fetch 2 ,mem_car_24g_no_data_timeout_count 3725 600147ed store 2 ,mem_car_24g_no_data_timeout_timer 3726 7049f601 jam work_paired ,mem_car_24g_received_pac 3727 5800010c setarg offset_24g_rxdata_temp_add3 3728 204032cd call g24_set_rega 3729 20403710 call car_control_le_receive 372a 68008b14 fetch 1 ,mem_app_receive_temp + 2 372b c002372e beq car_cmd_l_r_motor_control ,car_24g_receive_data_next 372c c002b72e beq car_cmd_f_b_motor_control ,car_24g_receive_data_next 372d 20600000 rtn car_24g_receive_data_next: 372e 6800c752 fetch 1 ,mem_le_receive_payload 372f 245a3735 ncall car_moto1_enable_blank_data_timer ,blank 3730 6800c754 fetch 1 ,mem_le_receive_payload + 2 3731 245a3737 ncall car_moto2_enable_blank_data_timer ,blank 3732 6800c756 fetch 1 ,mem_le_receive_payload + 4 3733 245a3739 ncall car_moto3_enable_blank_data_timer ,blank 3734 20600000 rtn car_moto1_enable_blank_data_timer: 3735 7049f305 jam 5 ,mem_car_moto1_blank_timer 3736 20600000 rtn car_moto2_enable_blank_data_timer: 3737 7049f405 jam 5 ,mem_car_moto2_blank_timer 3738 20600000 rtn car_moto3_enable_blank_data_timer: 3739 7049f505 jam 5 ,mem_car_moto3_blank_timer 373a 20600000 rtn car_moto1_blank_data_timer: 373b da6049f3 arg mem_car_moto1_blank_timer ,regc 373c da403744 arg car_moto1_blank_data ,regb 373d 2020336d branch timer_single_step car_moto2_blank_data_timer: 373e da6049f4 arg mem_car_moto2_blank_timer ,regc 373f da403746 arg car_moto2_blank_data ,regb 3740 2020336d branch timer_single_step car_moto3_blank_data_timer: 3741 da6049f5 arg mem_car_moto3_blank_timer ,regc 3742 da403748 arg car_moto3_blank_data ,regb 3743 2020336d branch timer_single_step car_moto1_blank_data: 3744 70475200 jam 0 ,mem_le_receive_payload 3745 20203762 branch car_motor_control car_moto2_blank_data: 3746 70475400 jam 0 ,mem_le_receive_payload + 2 3747 20203762 branch car_motor_control car_moto3_blank_data: 3748 70475600 jam 0 ,mem_le_receive_payload + 4 3749 20203762 branch car_motor_control car_drive_old: 374a 2040374c call car_left_right_control_old 374b 2020374f branch car_front_back_control_old car_left_right_control_old: 374c 6800c752 fetch 1 ,mem_le_receive_payload 374d 6000c75f store 1 ,mem_motor2_status 374e 20203773 branch car_motor2_control car_front_back_control_old: 374f 6800c75e fetch 1 ,mem_motor1_speed 3750 20403754 call car_reset_old_speed 3751 6800c753 fetch 1 ,mem_le_receive_payload + 1 3752 6000c75d store 1 ,mem_motor1_status 3753 20203770 branch car_motor1_control car_reset_old_speed: 3754 c0013758 beq speed_level_2 ,car_reset_old_speed2 3755 c001b75a beq speed_level_3 ,car_reset_old_speed3 3756 6000c75e store 1 ,mem_motor1_speed 3757 20600000 rtn car_reset_old_speed2: 3758 70475e05 jam speed_level_5 ,mem_motor1_speed 3759 20600000 rtn car_reset_old_speed3: 375a 70475e0a jam speed_level_10 ,mem_motor1_speed 375b 20600000 rtn car_speed_set_old: 375c 6800c752 fetch 1 ,mem_le_receive_payload 375d 20403754 call car_reset_old_speed 375e 6800c75e fetch 1 ,mem_motor1_speed 375f 2040379e call car_motor_speed_duty_setting 3760 204037a1 call car_motor_speed_duty_transform 3761 202069c4 branch pwm_pwm0_duty_set car_motor_control: 3762 6800c7f0 fetch 1 ,mem_car_24g_go_die_flag 3763 247a0000 nrtn blank 3764 68034752 fetch 6 ,mem_le_receive_payload 3765 6003475d store 6 ,mem_motor1_status 3766 6800c75e fetch 1 ,mem_motor1_speed 3767 6808c760 fetcht 1 ,mem_motor2_speed 3768 98417e00 iand temp ,pdata 3769 6808c762 fetcht 1 ,mem_motor3_speed 376a 98417e00 iand temp ,pdata 376b 205a3779 call car_motor_working_flag ,blank 376c 44e9401a bpatch patch1a_2 ,mem_patch1a 376d 20403770 call car_motor1_control 376e 20403773 call car_motor2_control 376f 20203776 branch car_motor3_control car_motor1_control: 3770 da404763 arg mem_motor1_pwm_set ,regb 3771 d8c0475d arg mem_motor1_status ,contr 3772 2020377b branch car_motor_status_select car_motor2_control: 3773 da40476b arg mem_motor2_pwm_set ,regb 3774 d8c0475f arg mem_motor2_status ,contr 3775 2020377b branch car_motor_status_select car_motor3_control: 3776 da404773 arg mem_motor3_pwm_set ,regb 3777 d8c04761 arg mem_motor3_status ,contr 3778 2020377b branch car_motor_status_select car_motor_working_flag: 3779 7047d100 jam 0 ,mem_car_working_flag 377a 20600000 rtn car_motor_status_select: 377b e8c08000 ifetch 1 ,contr 377c c0003787 beq motor_stop ,car_motor_stop 377d c000b780 beq go_front ,car_motor_positive 377e c0013782 beq go_back ,car_motor_negative 377f 20600000 rtn car_motor_positive: 3780 70477b00 jam 0 ,mem_motor_select_p_n 3781 20203783 branch car_motor_negative + 1 car_motor_negative: 3782 70477b01 jam 1 ,mem_motor_select_p_n 3783 e8c08000 ifetch 1 ,contr 3784 6000c77d store 1 ,mem_car_motor_speed 3785 ea440000 ifetch 8 ,regb 3786 2020378c branch car_motor_work car_motor_stop: 3787 ea408000 ifetch 1 ,regb 3788 204069d7 call pwm_disable 3789 1a40a401 increase 1 ,regb 378a ea408000 ifetch 1 ,regb 378b 202069d7 branch pwm_disable car_motor_work: 378c 6004477e store 8 ,mem_motor_pwm_pin1_set 378d 7047d101 jam 1 ,mem_car_working_flag 378e 6800c77b fetch 1 ,mem_motor_select_p_n 378f c000379a beq 0 ,car_motor_select_positive car_motor_select_negative: 3790 6800c77f fetch 1 ,mem_motor_pwm_pin2_set 3791 6000c780 store 1 ,mem_motor_pwm_pin_set 3792 6800c77e fetch 1 ,mem_motor_pwm_pin1_set car_motor_work_next: 3793 204069d7 call pwm_disable 3794 6800c77d fetch 1 ,mem_car_motor_speed 3795 2040379e call car_motor_speed_duty_setting 3796 6000c785 store 1 ,mem_motor_pwm_dute_set 3797 68034780 fetch 6 ,mem_motor_pwm_pin_set 3798 60030a9a store 6 ,mem_pdatatemp 3799 202069ae branch pwm_out_set car_motor_select_positive: 379a 6800c77e fetch 1 ,mem_motor_pwm_pin1_set 379b 6000c780 store 1 ,mem_motor_pwm_pin_set 379c 6800c77f fetch 1 ,mem_motor_pwm_pin2_set 379d 20203793 branch car_motor_work_next car_motor_speed_duty_setting: 379e 1feffe05 mul32 pdata ,5 ,pdata 379f 1fe0fe32 add pdata ,50 ,pdata 37a0 20600000 rtn car_motor_speed_duty_transform: 37a1 d8402ee0 arg 12000 ,temp 37a2 984ffe00 imul32 temp ,pdata 37a3 1fe6fc64 div pdata ,100 37a4 20407f86 call wait_div_end 37a5 18078400 quotient temp 37a6 18422200 copy temp ,rega 37a7 58002ee0 setarg 12000 37a8 98462400 isub temp ,regb 37a9 20600000 rtn car_ir_init: 37aa 68108082 hfetch 1 ,core_gpio_sel2 37ab 79207e02 set1 2 ,pdata 37ac 60108082 hstore 1 ,core_gpio_sel2 37ad 5800009e setarg 158 37ae 60110068 hstore 2 ,core_pwm_pcnt4 37af 6011006a hstore 2 ,core_pwm_ncnt4 37b0 20600000 rtn car_ir_data_rx_from_app: 37b1 6800c7f0 fetch 1 ,mem_car_24g_go_die_flag 37b2 247a0000 nrtn blank 37b3 68014752 fetch 2 ,mem_le_receive_payload 37b4 60014787 store 2 ,mem_ir_data 37b5 6800c7ea fetch 1 ,mem_car_24g_status 37b6 c080b7b9 bne work_paired ,car_ir_data_tx 37b7 680144a0 fetch 2 ,mem_le_lap 37b8 60014787 store 2 ,mem_ir_data car_ir_data_tx: 37b9 44e9c01a bpatch patch1a_3 ,mem_patch1a 37ba 204037aa call car_ir_init 37bb 204037dc call car_ir_enable 37bc 5800bb80 setarg 48000 37bd 20402a8f call sleep 37be 204037e0 call car_ir_disable 37bf 58001c20 setarg 7200 37c0 20402a8f call sleep 37c1 df200010 arg 16 ,loopcnt car_ir_send_loop: 37c2 204037dc call car_ir_enable 37c3 68014787 fetch 2 ,mem_ir_data 37c4 c28037c9 bbit1 0 ,car_ir_is_bit1 37c5 58001c20 setarg 7200 37c6 20402a8f call sleep 37c7 204037e0 call car_ir_disable 37c8 202037cc branch car_ir_wait_finish car_ir_is_bit1: 37c9 58003840 setarg 14400 37ca 20402a8f call sleep 37cb 204037e0 call car_ir_disable car_ir_wait_finish: 37cc 58001c20 setarg 7200 37cd 20402a8f call sleep 37ce 68014787 fetch 2 ,mem_ir_data 37cf 1fe37e00 rshift pdata ,pdata 37d0 60014787 store 2 ,mem_ir_data 37d1 c20037c2 loop car_ir_send_loop 37d2 7047f102 jam 2 ,mem_car_attack_shake_timer 37d3 7047f201 jam 1 ,mem_car_attack_shake_flag 37d4 58000a01 setarg 0x0a01 37d5 60014752 store 2 ,mem_le_receive_payload 37d6 6800c7b9 fetch 1 ,mem_car_config_device_select 37d7 c001b7d9 beq device_battle_tank ,car_attack_shake_back_battle_tank car_attack_shake_back_battle_car: 37d8 20203762 branch car_motor_control car_attack_shake_back_battle_tank: 37d9 58000a01 setarg 0x0a01 37da 60014754 store 2 ,mem_le_receive_payload + 2 37db 20203762 branch car_motor_control car_ir_enable: 37dc 68108085 hfetch 1 ,core_gpio_key2 37dd 1fe1fe40 or_into 0x40 ,pdata 37de 60108085 hstore 1 ,core_gpio_key2 37df 20600000 rtn car_ir_disable: 37e0 68108085 hfetch 1 ,core_gpio_key2 37e1 1fe17ebf and_into 0xbf ,pdata 37e2 60108085 hstore 1 ,core_gpio_key2 37e3 20600000 rtn car_ir_rx_init: 37e4 6800c7bb fetch 1 ,mem_car_config_ir_enable 37e5 c1000000 rtneq 0x00 37e6 20402c65 call lpm_disable_exen_output 37e7 6808c7bc fetcht 1 ,mem_car_config_ir_rx_gpio 37e8 6008c786 storet 1 ,mem_ir_rx_gpio 37e9 204067fb call gpio_config_input 37ea 20403847 call car_ir_gpio_get_status 37eb 24608000 nrtn true 37ec 70479a01 jam 1 ,mem_car_ir_breakdown_check_timer 37ed 20600000 rtn car_ir_receive_process: 37ee 6800c7bb fetch 1 ,mem_car_config_ir_enable 37ef c1000000 rtneq flag_ir_disable 37f0 6800c79b fetch 1 ,mem_car_ir_breakdown_flag 37f1 247a0000 nrtn blank 37f2 68014682 fetch 2 ,mem_ui_state_map 37f3 c284b7f6 bbit1 ui_state_ble_connected ,car_ir_receive_process_next 37f4 6800c7ea fetch 1 ,mem_car_24g_status 37f5 c1808000 rtnne work_paired car_ir_receive_process_next: 37f6 44ea401a bpatch patch1a_4 ,mem_patch1a 37f7 20403847 call car_ir_gpio_get_status 37f8 24608000 nrtn true 37f9 58008ca0 setarg 36000 37fa 20402a8f call sleep 37fb 20403847 call car_ir_gpio_get_status 37fc 24608000 nrtn true 37fd 2040383f call car_ir_clk_get car_ir_packet_head_wait_end: 37fe 20403842 call car_ir_clk_check 37ff 24610000 nrtn positive 3800 20403847 call car_ir_gpio_get_status 3801 2020b7fe branch car_ir_packet_head_wait_end ,true 3802 da200000 arg 0 ,rega 3803 df200010 arg 16 ,loopcnt 3804 2040383f call car_ir_clk_get car_ir_receive_process_loop: 3805 20403842 call car_ir_clk_check 3806 24610000 nrtn positive 3807 20403847 call car_ir_gpio_get_status 3808 2420b805 nbranch car_ir_receive_process_loop ,true 3809 58002a30 setarg 10800 380a 20402a8f call sleep 380b 20403847 call car_ir_gpio_get_status 380c 2020b812 branch car_ir_get_bit1 ,true car_ir_get_bit0: 380d 58000000 setarg 0 380e 1a232200 rshift rega ,rega 380f 9a21a200 ior rega ,rega 3810 c2003805 loop car_ir_receive_process_loop 3811 2020381b branch car_ir_receive_process_end car_ir_get_bit1: 3812 58008000 setarg 0x8000 3813 1a232200 rshift rega ,rega 3814 9a21a200 ior rega ,rega 3815 2040383f call car_ir_clk_get car_ir_get_bit1_wait_low_end: 3816 20403842 call car_ir_clk_check 3817 24610000 nrtn positive 3818 20403847 call car_ir_gpio_get_status 3819 2020b816 branch car_ir_get_bit1_wait_low_end ,true 381a c2003805 loop car_ir_receive_process_loop car_ir_receive_process_end: 381b 44eac01a bpatch patch1a_5 ,mem_patch1a 381c 1a227e00 copy rega ,pdata 381d 60014789 store 2 ,mem_ir_rx_buf 381e 60014797 store 2 ,mem_ir_notify_data + 8 381f 6800c7ea fetch 1 ,mem_car_24g_status 3820 c000b827 beq work_paired ,car_ir_24g_receive_attack car_ir_data_notify: 3821 df200007 arg 0x07 ,loopcnt 3822 d8c04792 arg mem_ir_notify_data_head ,contr 3823 204036f0 call calc_check_sum_start 3824 6000c799 store 1 ,mem_ir_notify_data_check_sum 3825 da20478f arg mem_ir_notify_data ,rega 3826 20207e3d branch queue_push car_ir_24g_receive_attack: 3827 6800c7ef fetch 1 ,mem_car_24g_ir_receive_attack_count 3828 1fe0fe01 increase 1 ,pdata 3829 6000c7ef store 1 ,mem_car_24g_ir_receive_attack_count 382a 1fe6fc02 div pdata ,2 382b 20407f86 call wait_div_end 382c 18078400 quotient temp 382d 18077e00 remainder pdata 382e 243a3838 nbranch car_ir_24g_receive_attack_blink ,blank car_ir_24g_receive_attack_off: 382f 6800c7bf fetch 1 ,mem_car_config_led_num 3830 98467c00 isub temp ,null 3831 2042b83d call car_ir_24g_go_die ,zero 3832 dfe0479c arg mem_car_led_control ,pdata 3833 184085ff increase -1 ,temp 3834 9840a200 iadd temp ,rega 3835 dfe00000 arg 0 ,pdata 3836 e2208000 istore 1 ,rega 3837 20600000 rtn car_ir_24g_receive_attack_blink: 3838 dfe0479c arg mem_car_led_control ,pdata 3839 9840a200 iadd temp ,rega 383a dfe00002 arg 2 ,pdata 383b e2208000 istore 1 ,rega 383c 20600000 rtn car_ir_24g_go_die: 383d 7047f001 jam 1 ,mem_car_24g_go_die_flag 383e 20600000 rtn car_ir_clk_get: 383f 1c427e00 copy clkn_bt ,pdata 3840 6002478b store 4 ,mem_ir_receive_clkn 3841 20600000 rtn car_ir_clk_check: 3842 1c427e00 copy clkn_bt ,pdata 3843 680a478b fetcht 4 ,mem_ir_receive_clkn 3844 98467e00 isub temp ,pdata 3845 1fe67cc8 sub pdata ,200 ,null 3846 20600000 rtn car_ir_gpio_get_status: 3847 6808c786 fetcht 1 ,mem_ir_rx_gpio 3848 2020681d branch gpio_get_bit car_led_control_receive: 3849 68044752 fetch 8 ,mem_le_receive_payload 384a 6004479c store 8 ,mem_car_led_control 384b 20600000 rtn car_info_request: 384c 6800c7b9 fetch 1 ,mem_car_config_device_select 384d 6000c7af store 1 ,mem_car_info_request_payload 384e 6800c7ba fetch 1 ,mem_car_config_motor_layout 384f 6000c7b0 store 1 ,mem_car_info_request_payload + 1 3850 6800c7bb fetch 1 ,mem_car_config_ir_enable 3851 6000c7b1 store 1 ,mem_car_info_request_payload + 2 3852 df20000d arg 13 ,loopcnt 3853 d8c047aa arg mem_car_info_request_head ,contr 3854 204036f0 call calc_check_sum_start 3855 6000c7b7 store 1 ,mem_car_info_request_checksum 3856 da2047a7 arg mem_car_info_request ,rega 3857 20207e3d branch queue_push light_init: 3858 204065c2 call clear_eeprom_size_2k 3859 7046f67a jam 0x7a ,mem_curr_packet_num 385a 2040386d call light_load_controler_list 385b 20403867 call light_init_crr_cmd_count 385c 58003860 setarg light_pairing_timer 385d 600141fd store 2 ,mem_cb_event_timer 385e da200000 arg 0 ,rega 385f 202069a6 branch pwm_init light_pairing_timer: 3860 680146a1 fetch 2 ,mem_light_pairing_timer 3861 207a0000 rtn blank 3862 1fe0ffff increase -1 ,pdata 3863 600146a1 store 2 ,mem_light_pairing_timer 3864 c1800000 rtnne 0 3865 7046a000 jam 0 ,mem_light_pairing_enable 3866 20600000 rtn light_init_crr_cmd_count: 3867 44eb401a bpatch patch1a_6 ,mem_patch1a 3868 6800c6a4 fetch 1 ,mem_light_next_record 3869 1fe67c28 sub pdata ,40 ,null 386a 20610000 rtn positive 386b 7046a400 jam 0 ,mem_light_next_record 386c 20600000 rtn light_load_controler_list: 386d da2046a4 arg mem_light_next_record ,rega 386e da400000 arg 0 ,regb 386f d8400051 arg 81 ,temp 3870 202065df branch iicd_read_eep_data light_find_controler_pairing: 3871 78547c00 disable user 3872 6800c6a3 fetch 1 ,mem_light_cnum 3873 1fe27200 copy pdata ,loopcnt 3874 da2046a5 arg mem_light_clist ,rega 3875 1a622400 copy regc ,regb light_find_controler_pairing_loop: 3876 44ebc01a bpatch patch1a_7 ,mem_patch1a 3877 2040387c call light_compare_addr_record 3878 2022ffe7 branch enable_user ,zero light_find_single_pairing_diff: 3879 1a20a204 increase 4 ,rega 387a c2003876 loop light_find_controler_pairing_loop 387b 20600000 rtn light_compare_addr_record: 387c 44ec401b bpatch patch1b_0 ,mem_patch1b 387d ea218000 ifetch 3 ,rega 387e ea498000 ifetcht 3 ,regb 387f 98467c00 isub temp ,null 3880 20600000 rtn light_compare_single_record: 3881 44ecc01b bpatch patch1b_1 ,mem_patch1b 3882 ea218000 ifetch 3 ,rega 3883 ea498000 ifetcht 3 ,regb 3884 98467c00 isub temp ,null 3885 24628000 nrtn zero 3886 e8c08000 ifetch 1 ,contr 3887 1fe67c00 sub pdata ,0 ,null 3888 20628000 rtn zero 3889 1a208c03 add rega ,3 ,contr 388a e8c88000 ifetcht 1 ,contr 388b 98467c00 isub temp ,null 388c 20600000 rtn light_find_controler_cmd: 388d 44ed401b bpatch patch1b_2 ,mem_patch1b 388e 78547c00 disable user 388f 6800c6a3 fetch 1 ,mem_light_cnum 3890 1fe27200 copy pdata ,loopcnt 3891 da2046a5 arg mem_light_clist ,rega 3892 1a622400 copy regc ,regb light_find_controler_cmd_loop: 3893 20403881 call light_compare_single_record 3894 2022ffe7 branch enable_user ,zero 3895 1a20a204 increase 4 ,rega 3896 c2003893 loop light_find_controler_cmd_loop 3897 20600000 rtn light_recv_adv: 3898 68008004 fetch 1 ,mem_le_scanrsp_rcv 3899 1fe0fe01 increase 1 ,pdata 389a 60008004 store 1 ,mem_le_scanrsp_rcv 389b da6002e5 arg mem_le_rxbuf + 12 ,regc light_anylize_command: 389c ea610000 ifetch 2 ,regc 389d d84055aa arg 0x55aa ,temp 389e 98467c00 isub temp ,null 389f 24628000 nrtn zero 38a0 18c22600 copy contr ,regc 38a1 ea698000 ifetcht 3 ,regc 38a2 58ffffff setarg 0xffffff 38a3 98467c00 isub temp ,null 38a4 2022b8a8 branch light_parse_cmd ,zero 38a5 2040388d call light_find_controler_cmd 38a6 203438a8 branch light_parse_cmd ,user 38a7 20600000 rtn light_parse_cmd: 38a8 44edc01b bpatch patch1b_3 ,mem_patch1b 38a9 1a60a604 increase 4 ,regc 38aa ea608000 ifetch 1 ,regc 38ab 6808c6f6 fetcht 1 ,mem_curr_packet_num 38ac 98467c00 isub temp ,null 38ad 20628000 rtn zero 38ae 6000c6f6 store 1 ,mem_curr_packet_num 38af 68008003 fetch 1 ,mem_le_req_rcv 38b0 1fe0fe01 increase 1 ,pdata 38b1 60008003 store 1 ,mem_le_req_rcv 38b2 1a60a601 increase 1 ,regc 38b3 ea608000 ifetch 1 ,regc 38b4 6000c6f5 store 1 ,mem_light_crr_cmd_count 38b5 1fe27200 copy pdata ,loopcnt 38b6 207a0000 rtn blank light_parse_cmd_loop: 38b7 e8c08000 ifetch 1 ,contr 38b8 c00038c2 beq light_cmd_pwm0 ,light_parse_cmd_pwm0 38b9 c000b8cf beq light_cmd_pwm1 ,light_parse_cmd_pwm1 38ba c00138d4 beq light_cmd_pwm2 ,light_parse_cmd_pwm2 38bb c001b8d9 beq light_cmd_pwm3 ,light_parse_cmd_pwm3 38bc c00238de beq light_cmd_pwm4 ,light_parse_cmd_pwm4 38bd c002b8e3 beq light_cmd_pwm5 ,light_parse_cmd_pwm5 38be c00338e8 beq light_cmd_auto_mode ,light_parse_auto_mode 38bf c07fb8ea beq light_cmd_pairing ,light_parse_pairing 38c0 c20038b7 loop light_parse_cmd_loop 38c1 20600000 rtn light_parse_cmd_pwm0: 38c2 18c22600 copy contr ,regc 38c3 6800c69a fetch 1 ,mem_light_pwm0 38c4 60008a9a store 1 ,mem_pdatatemp 38c5 d8400000 arg 0 ,temp light_parse_cmd_pwm_common: 38c6 60088a9b storet 1 ,mem_pdatatemp + 1 38c7 58002710 setarg 10000 38c8 60018a9c store 3 ,mem_pdatatemp + 2 38c9 ea608000 ifetch 1 ,regc 38ca 60008a9f store 1 ,mem_pdatatemp + 5 38cb 204069ae call pwm_out_set 38cc 1a610c01 and regc ,1 ,contr 38cd c20038b7 loop light_parse_cmd_loop 38ce 20600000 rtn light_parse_cmd_pwm1: 38cf 1a620c00 copy regc ,contr 38d0 6800c69b fetch 1 ,mem_light_pwm1 38d1 60008a9a store 1 ,mem_pdatatemp 38d2 d8400001 arg 1 ,temp 38d3 202038c6 branch light_parse_cmd_pwm_common light_parse_cmd_pwm2: 38d4 1a620c00 copy regc ,contr 38d5 6800c69c fetch 1 ,mem_light_pwm2 38d6 60008a9a store 1 ,mem_pdatatemp 38d7 d8400002 arg 2 ,temp 38d8 202038c6 branch light_parse_cmd_pwm_common light_parse_cmd_pwm3: 38d9 1a620c00 copy regc ,contr 38da 6800c69d fetch 1 ,mem_light_pwm3 38db 60008a9a store 1 ,mem_pdatatemp 38dc d8400003 arg 3 ,temp 38dd 202038c6 branch light_parse_cmd_pwm_common light_parse_cmd_pwm4: 38de 1a620c00 copy regc ,contr 38df 6800c69e fetch 1 ,mem_light_pwm4 38e0 60008a9a store 1 ,mem_pdatatemp 38e1 d8400004 arg 4 ,temp 38e2 202038c6 branch light_parse_cmd_pwm_common light_parse_cmd_pwm5: 38e3 1a620c00 copy regc ,contr 38e4 6800c69f fetch 1 ,mem_light_pwm5 38e5 60008a9a store 1 ,mem_pdatatemp 38e6 d8400005 arg 5 ,temp 38e7 202038c6 branch light_parse_cmd_pwm_common light_parse_auto_mode: 38e8 e8c08000 ifetch 1 ,contr 38e9 20600000 rtn light_parse_pairing: 38ea 18c22600 copy contr ,regc 38eb 6800c6a0 fetch 1 ,mem_light_pairing_enable 38ec c080b8ee bne 1 ,light_parse_pairing_abandon 38ed 204038f0 call update_controler_list light_parse_pairing_abandon: 38ee 1a610c04 and regc ,4 ,contr 38ef 20600000 rtn update_controler_list: 38f0 44ee401b bpatch patch1b_4 ,mem_patch1b 38f1 20403871 call light_find_controler_pairing 38f2 203438fe branch update_conrtoler_list_found ,user 38f3 6800c6a4 fetch 1 ,mem_light_next_record 38f4 1fe20400 copy pdata ,temp 38f5 1fe0fe01 increase 1 ,pdata 38f6 6000c6a4 store 1 ,mem_light_next_record 38f7 20403867 call light_init_crr_cmd_count 38f8 184b8400 lshift2 temp ,temp 38f9 580046a5 setarg mem_light_clist 38fa 98408a00 iadd temp ,contw 38fb ea620000 ifetch 4 ,regc 38fc e0a20000 istore 4 ,contw 38fd 20203903 branch update_conrtoler_store_list update_conrtoler_list_found: 38fe 1a608c03 add regc ,3 ,contr 38ff e8c08000 ifetch 1 ,contr 3900 207a0000 rtn blank 3901 ea620000 ifetch 4 ,regc 3902 e2220000 istore 4 ,rega update_conrtoler_store_list: 3903 da2046a4 arg mem_light_next_record ,rega 3904 da400000 arg 0 ,regb 3905 d8400051 arg 81 ,temp 3906 20206606 branch iicd_write_eep_data lightc_init: 3907 6808c69a fetcht 1 ,mem_lightc_led_gpio 3908 20406825 call gpio_out_inactive 3909 20600000 rtn lightc_dispatch: 390a 6808c69a fetcht 1 ,mem_lightc_led_gpio 390b 20406829 call gpio_out_active 390c 6808c69a fetcht 1 ,mem_lightc_led_gpio 390d 20406825 call gpio_out_inactive 390e 2040391d call lightc_start_adv 390f 6800c6a7 fetch 1 ,mem_adv_time 3910 247a0000 nrtn blank 3911 20402c29 call lpm_write_gpio_wakeup 3912 68120138 hfetch 4 ,core_lpm_ctrl 3913 793ffe0f set0 15 ,pdata 3914 6012004c hstore 4 ,core_lpm_reg 3915 20402c21 call lpm_write_ctrl 3916 d85fffff arg param_hibernate_clks ,temp 3917 20202b2a branch lpm_sleep lightc_adv: 3918 6800c6a7 fetch 1 ,mem_adv_time 3919 203a56f9 branch le_adv_loop_tx ,blank 391a 1fe0ffff increase -1 ,pdata 391b 6000c6a7 store 1 ,mem_adv_time 391c 202056f9 branch le_adv_loop_tx lightc_start_adv: 391d 1feffe14 mul32 pdata ,20 ,pdata 391e d8c046a8 arg mem_cmd0_string ,contr 391f 98c08c00 iadd contr ,contr 3920 e8c08000 ifetch 1 ,contr 3921 207a0000 rtn blank 3922 1fe22200 copy pdata ,rega 3923 1a227200 copy rega ,loopcnt 3924 d8a04372 arg mem_le_adv_data + 2 ,contw 3925 20407f01 call memcpy 3926 1a227e00 copy rega ,pdata 3927 1fe0fe02 increase 2 ,pdata 3928 6000c36f store 1 ,mem_le_adv_data_len 3929 20600000 rtn module_init: 392a 20758000 rtn wake 392b 204057a3 call le_modified_name 392c 204068a8 call adc_init_data 392d 58003982 setarg module_process_idle 392e 600141f3 store 2 ,mem_cb_idle_process 392f 5800396e setarg module_bt_conn_process 3930 600141f1 store 2 ,mem_cb_bt_process 3931 58003986 setarg module_process_bb_event 3932 600141f5 store 2 ,mem_cb_bb_event_process 3933 5800396d setarg module_le_conn_process 3934 600141ef store 2 ,mem_cb_le_process 3935 58003969 setarg module_lpm_lock 3936 600141e9 store 2 ,mem_cb_check_wakelock 3937 58003ab7 setarg module_hci_cmd_transmit_le_notify 3938 600141fb store 2 ,mem_cb_ble_transmit 3939 58003c32 setarg module_hci_event_receive_spp_data 393a 6001456f store 2 ,mem_cb_receive_spp_data 393b 58003cc2 setarg module_le_receive_data 393c 600141f9 store 2 ,mem_cb_att_write 393d 58003cd7 setarg module_bb_event_timer 393e 600141fd store 2 ,mem_cb_event_timer 393f 2040397f call module_spp_clear_last_transmite_clock 3940 44eec01b bpatch patch1b_5 ,mem_patch1b 3941 20403945 call module_lpm_uart_init 3942 20403964 call module_gpio_init 3943 20402c6f call check_module_disabled 3944 20203c48 branch module_hci_event_enter_standby_mode module_lpm_uart_init: 3945 680246aa fetch 4 ,mem_module_uart_rx_buffer 3946 60120054 hstore 4 ,core_uart_rsaddr 3947 680246ae fetch 4 ,mem_module_uart_tx_buffer 3948 6012005a hstore 4 ,core_uart_tsaddr 3949 68108081 hfetch 1 ,core_gpio_sel1 394a 1fe1fe04 or_into 0x04 ,pdata 394b 1fe17efc and_into 0xfc ,pdata 394c 60108081 hstore 1 ,core_gpio_sel1 394d 70806200 jam 0x00 ,core_uart_ctrl 394e 680146aa fetch 2 ,mem_module_uart_rx_buffer 394f 60110058 hstore 2 ,core_uart_rrptr 3950 680146ae fetch 2 ,mem_module_uart_tx_buffer 3951 6011005e hstore 2 ,core_uart_twptr 3952 60110060 hstore 2 ,core_uart_trptrp 3953 68120078 hfetch 4 ,core_gpio_pu0 3954 79207e07 set1 7 ,pdata 3955 60120078 hstore 4 ,core_gpio_pu0 3956 68110050 hfetch 2 ,core_clkoff 3957 793ffe0f set0 clock_off_uart ,pdata 3958 60110050 hstore 2 ,core_clkoff 3959 204066ce call uart_set_baud_by_mem 395a 70804300 jam uartclk_crystal ,core_uart_clksel 395b 70806281 jam uart_ctrl_h4 ,core_uart_ctrl 395c 6800c6bf fetch 1 ,mem_module_flag 395d 2feffe00 isolate1 module_flag_uart_flow_control ,pdata 395e 68188062 hfetcht 1 ,core_uart_ctrl 395f 79208404 setflag true ,4 ,temp 3960 60188062 hstoret 1 ,core_uart_ctrl 3961 20600000 rtn module_lpm_init: 3962 2040397f call module_spp_clear_last_transmite_clock 3963 20203945 branch module_lpm_uart_init module_gpio_init: 3964 6808c69e fetcht 1 ,mem_module_connect_state_gpio 3965 2040680e call gpio_config_output 3966 204039e6 call module_set_conn_pin_low 3967 6808c69c fetcht 1 ,mem_module_wake_up_gpio 3968 202067fb branch gpio_config_input module_lpm_lock: 3969 6808c69c fetcht 1 ,mem_module_wake_up_gpio 396a 2040681d call gpio_get_bit 396b 2420b3d2 nbranch app_put_lpm_wake_lock ,true 396c 202033d0 branch app_get_lpm_wake_lock module_le_conn_process: 396d 20600000 rtn module_bt_conn_process: 396e 20403970 call module_spp_enter_sniff 396f 20203ce9 branch module_control_air_flow module_spp_enter_sniff: 3970 6800c682 fetch 1 ,mem_ui_state_map 3971 c302397f bbit0 ui_state_bt_spp_conn ,module_spp_clear_last_transmite_clock 3972 44ef401b bpatch patch1b_6 ,mem_patch1b 3973 58003eff setarg 0x3eff 3974 680a46c5 fetcht 4 ,mem_last_transmite_clock 3975 98408400 iadd temp ,temp 3976 1c427e00 copy clkn_bt ,pdata 3977 98467c00 isub temp ,null 3978 24610000 nrtn positive 3979 68014682 fetch 2 ,mem_ui_state_map 397a c282b97f bbit1 ui_state_bt_sniff ,module_spp_clear_last_transmite_clock 397b 6800c6bf fetch 1 ,mem_module_flag 397c c3830000 rtnbit1 moudle_task_sniff 397d 20403cec call module_set_sniff_task_flag 397e 2040340e call app_bt_enter_sniff module_spp_clear_last_transmite_clock: 397f 1c427e00 copy clkn_bt ,pdata 3980 600246c5 store 4 ,mem_last_transmite_clock 3981 20600000 rtn module_process_idle: 3982 20403ce9 call module_control_air_flow 3983 2040526e call l2cap_malloc_is_fifo_full 3984 247a0000 nrtn blank 3985 202039eb branch module_process module_process_bb_event: 3986 1a627e00 copy regc ,pdata 3987 c000b9d4 beq bt_evt_bb_connected ,module_process_bb_conn 3988 c00139a3 beq bt_evt_bb_disconnected ,module_process_bb_event_disconned 3989 c00239d7 beq bt_evt_reconn_failed ,module_process_reconn_fail 398a c002b9c4 beq bt_evt_setup_complete ,module_process_setup_complete 398b c00439aa beq bt_evt_spp_connected ,module_process_spp_connected 398c c004b9b1 beq bt_evt_spp_disconnected ,module_process_spp_disconnected 398d c00539c9 beq bt_evt_pincode_req ,module_process_evt_pincode_req 398e c005b9b6 beq bt_evt_enter_sniff ,module_process_enter_sniff 398f c00639c2 beq bt_evt_exit_sniff ,module_process_exit_sniff 3990 c009b9d7 beq bt_evt_reconn_page_timeout ,module_process_page_time_out 3991 c00a39cf beq bt_evt_le_connected ,module_process_le_conn 3992 c00ab9c6 beq bt_evt_le_disconnected ,module_process_bb_even_le_disconn 3993 c010b9ca beq bt_evt_sniff_not_accept ,module_process_sniff_not_accept 3994 c011b9cb beq bt_evt_unsniff_accept ,module_process_unsniff_accept 3995 c01239ce beq bt_evt_unsniff_not_accept ,module_process_unsniff_not_accept 3996 c0183c8a beq bt_evt_le_pairing_fail ,module_hci_event_le_pairing_fail 3997 c018bc8c beq bt_evt_le_pairing_success ,module_hci_event_le_pairing_success 3998 c0193c9a beq bt_evt_le_start_enc ,module_hci_event_start_enc 3999 c019bc98 beq bt_evt_le_pause_enc ,module_hci_event_pause_enc 399a c01a3c84 beq bt_evt_le_tk_generate ,module_hci_event_le_tk 399b c01abc73 beq bt_evt_bt_gkey_generate ,module_hci_event_gkey_generate 399c c01b3c82 beq bt_evt_bt_get_passkey ,module_hci_event_passkey_entry_mode 399d c01bbc8e beq bt_evt_bt_pairing_fail ,module_hci_event_bt_pairing_fail 399e c01c3c90 beq bt_evt_bt_pairing_success ,module_hci_event_bt_pairing_success 399f c01dbca1 beq bt_evt_le_gkey_generate ,module_hci_event_le_gkey 39a0 c01ebc6a beq bt_evt_store_nvram ,module_hci_event_store_device 39a1 c020b9d9 beq bt_evt_le_ltk_lost ,module_process_ble_ltk_lost 39a2 20600000 rtn module_process_bb_event_disconned: 39a3 2040397f call module_spp_clear_last_transmite_clock 39a4 6800c665 fetch 1 ,mem_flag_pairing_state 39a5 245a3c8e ncall module_hci_event_bt_pairing_fail ,blank 39a6 204039d7 call module_disconn_start 39a7 68014682 fetch 2 ,mem_ui_state_map 39a8 c4020000 rtnbit0 ui_state_bt_spp_conn 39a9 202039b1 branch module_spp_disconnected module_process_spp_connected: 39aa 68014682 fetch 2 ,mem_ui_state_map 39ab 79207e04 set1 ui_state_bt_spp_conn ,pdata 39ac 60014682 store 2 ,mem_ui_state_map 39ad 6800c6a7 fetch 1 ,mem_module_spp_lpm_mult 39ae 6000c172 store 1 ,mem_lpm_mult 39af 204039e6 call module_set_conn_pin_low 39b0 20203c1d branch module_hci_event_spp_connect module_process_spp_disconnected: module_spp_disconnected: 39b1 68014682 fetch 2 ,mem_ui_state_map 39b2 c4020000 rtnbit0 ui_state_bt_spp_conn 39b3 793ffe04 set0 ui_state_bt_spp_conn ,pdata 39b4 60014682 store 2 ,mem_ui_state_map 39b5 20203c21 branch module_hci_event_spp_disconnect module_process_enter_sniff: module_sniff_param_check: 39b6 2040397f call module_spp_clear_last_transmite_clock 39b7 68014042 fetch 2 ,mem_context + coffset_tsniff 39b8 1fe37e00 rshift pdata ,pdata 39b9 680941e3 fetcht 2 ,mem_sniff_param_interval 39ba 98467c00 isub temp ,null 39bb 2422b9bd nbranch module_sniff_param_check_unsniff ,zero 39bc 20203416 branch app_lpm_mult_enable module_sniff_param_check_unsniff: 39bd 6800c6bf fetch 1 ,mem_module_flag 39be c3828000 rtnbit1 moudle_task_unsniff 39bf 68110112 hfetch 2 ,core_uart_rxitems 39c0 245a3cf0 ncall module_set_unsniff_task_flag ,blank 39c1 2020340c branch app_bt_sniff_exit module_process_exit_sniff: 39c2 20403cee call module_clear_sniff_task_flag 39c3 20203418 branch app_lpm_mult_disable module_process_setup_complete: 39c4 2040397f call module_spp_clear_last_transmite_clock 39c5 202039dd branch module_conn_start module_process_bb_even_le_disconn: 39c6 20405816 call le_clr_config_more_data 39c7 204039d7 call module_disconn_start 39c8 20203c23 branch module_hci_event_le_disconnect module_process_evt_pincode_req: 39c9 202033dd branch app_bt_set_pincode module_process_sniff_not_accept: 39ca 20203cee branch module_clear_sniff_task_flag module_process_unsniff_accept: 39cb 6800c6bf fetch 1 ,mem_module_flag 39cc c302b40e bbit0 moudle_task_unsniff ,app_bt_enter_sniff 39cd 20203cf2 branch module_clear_unsniff_task_flag module_process_unsniff_not_accept: 39ce 20203cf2 branch module_clear_unsniff_task_flag module_process_le_conn: 39cf 204058ba call le_send_att_exchange_mtu_requset 39d0 204039dd call module_conn_start 39d1 6800c6a8 fetch 1 ,mem_module_le_lpm_mult 39d2 6000c172 store 1 ,mem_lpm_mult 39d3 20203c1f branch module_hci_event_le_connect module_process_bb_conn: 39d4 70466100 jam 0 ,mem_flag_mode_ssp_pin 39d5 20403cee call module_clear_sniff_task_flag 39d6 20203cf2 branch module_clear_unsniff_task_flag module_process_page_time_out: module_process_reconn_fail: module_disconn_start: 39d7 20403a52 call module_start_adv_discovery_by_command 39d8 202039db branch module_set_conn_pin_high module_process_ble_ltk_lost: 39d9 20405cc9 call le_send_reject_ind 39da 20205b02 branch le_send_smp_security_request module_set_conn_pin_high: 39db 6808c69e fetcht 1 ,mem_module_connect_state_gpio 39dc 20206829 branch gpio_out_active module_conn_start: 39dd 204039df call module_stop_adv_discovery 39de 202039e6 branch module_set_conn_pin_low module_stop_adv_discovery: 39df 6800c6a1 fetch 1 ,mem_module_state 39e0 2feffe00 isolate1 moudle_state_bt_bit ,pdata 39e1 2040b3f0 call app_bt_stop_discovery ,true 39e2 6800c6a1 fetch 1 ,mem_module_state 39e3 2feffe01 isolate1 moudle_state_ble_bit ,pdata 39e4 2040b3f8 call app_ble_stop_adv ,true 39e5 20600000 rtn module_set_conn_pin_low: 39e6 6808c69e fetcht 1 ,mem_module_connect_state_gpio 39e7 20206825 branch gpio_out_inactive module_process_with_credit: 39e8 6800c56b fetch 1 ,mem_credit_flag 39e9 c1000000 rtneq credit_disable 39ea 20206c28 branch rfcomm_send_uih_without_payload module_process: 39eb 6810810c hfetch 1 ,core_uart_status 39ec c281b9e8 bbit1 uart_status_rx_fifo_empty ,module_process_with_credit 39ed 204066cb call uartd_prepare_rx 39ee e8608000 ifetch 1 ,contru 39ef c080ba01 bne 0x01 ,module_hci_in_excp 39f0 68110112 hfetch 2 ,core_uart_rxitems 39f1 1fe67c02 sub pdata ,2 ,null 39f2 20610000 rtn positive 39f3 e8608000 ifetch 1 ,contru 39f4 60008b03 store 1 ,mem_module_uart_opcode 39f5 e8688000 ifetcht 1 ,contru 39f6 18622200 copy contru ,rega 39f7 60088b04 storet 1 ,mem_module_uart_len 39f8 18408403 add temp ,3 ,temp 39f9 68110112 hfetch 2 ,core_uart_rxitems 39fa 98460400 isub temp ,temp 39fb 24610000 nrtn positive 39fc 700b0501 jam hci_discard_packet ,mem_module_temp_nl_discard_packet 39fd 20403a17 call module_hci_cmd_control 39fe 68008b05 fetch 1 ,mem_module_temp_nl_discard_packet 39ff c1000000 rtneq hci_not_discard_packet 3a00 20203a12 branch module_hci_dicard_packet module_hci_in_excp: 3a01 20407ec1 call delay_10ms 3a02 20403c79 call module_hci_event_invalid_packet 3a03 20203a04 branch module_hci_release_except module_hci_release_except: 3a04 44efc01b bpatch patch1b_7 ,mem_patch1b 3a05 68110112 hfetch 2 ,core_uart_rxitems 3a06 207a0000 rtn blank 3a07 204066cb call uartd_prepare_rx 3a08 e8608000 ifetch 1 ,contru 3a09 1fe67c01 sub pdata ,0x01 ,null 3a0a 2442ba16 ncall module_hci_dicard_bytes ,zero 3a0b 2422ba04 nbranch module_hci_release_except ,zero 3a0c e8608000 ifetch 1 ,contru 3a0d c1028000 rtneq hci_cmd_spp_data_req 3a0e c1148000 rtneq hci_cmd_set_credit_given 3a0f 186087ff increase -1 ,contru 3a10 20403a16 call module_hci_dicard_bytes 3a11 20203a04 branch module_hci_release_except module_hci_dicard_packet: 3a12 204066cb call uartd_prepare_rx 3a13 18608602 increase 2 ,contru 3a14 e8608000 ifetch 1 ,contru 3a15 98608600 iadd contru ,contru module_hci_dicard_bytes: 3a16 202066c8 branch uartd_rxdone module_hci_cmd_control: 3a17 44f0401c bpatch patch1c_0 ,mem_patch1c 3a18 68008b03 fetch 1 ,mem_module_uart_opcode 3a19 c0003a3f beq hci_cmd_set_bt_addr_req ,module_hci_cmd_set_bt_addr 3a1a c000ba44 beq hci_cmd_set_le_addr_req ,module_hci_cmd_set_le_addr 3a1b c0013a49 beq hci_cmd_set_visibility_req ,module_hci_cmd_set_visibility 3a1c c001ba5f beq hci_cmd_set_bt_name_req ,module_hci_cmd_set_bt_name 3a1d c0023a6b beq hci_cmd_set_le_name_req ,module_hci_cmd_set_le_name 3a1e c002ba75 beq hci_cmd_spp_data_req ,module_hci_cmd_receive_spp_data 3a1f c004ba9a beq hci_cmd_le_data_req ,module_hci_cmd_receive_le_data 3a20 c005bad7 beq hci_cmd_status_irq ,module_hci_cmd_inquire_status 3a21 c0063ad8 beq hci_cmd_set_pairing_req ,module_hci_cmd_set_pairing_mode 3a22 c006baec beq hci_cmd_set_pincode_req ,module_hci_cmd_set_pincode 3a23 c0073af4 beq hci_cmd_set_uartcontrol_req ,module_hci_cmd_set_uart_control_mode 3a24 c007bafa beq hci_cmd_set_uart_baud_req ,module_hci_cmd_set_uart_baud 3a25 c0083b06 beq hci_cmd_version_req ,module_hci_cmd_version_request 3a26 c008bb0e beq hci_cmd_bt_disconnect ,module_hci_cmd_bt_disconnect 3a27 c0093b12 beq hci_cmd_ble_disconnect ,module_hci_cmd_ble_disconnect 3a28 c0133b16 beq hci_cmd_set_nvram_req ,module_hci_cmd_set_nvram 3a29 c0143b1d beq hci_cmd_confirm_gkey ,module_hci_cmd_confirm_gkey 3a2a c014bb2d beq hci_cmd_set_credit_given ,module_hci_cmd_set_credit_given 3a2b c0153b36 beq hci_cmd_auto_adv_scan ,module_hci_cmd_auto_adv 3a2c c015bb69 beq hci_cmd_power_req ,module_hci_cmd_power_request 3a2d c0163b6f beq hci_cmd_power_set ,module_hci_cmd_power_set 3a2e c0183b76 beq hci_cmd_passkey_entry ,module_hci_cmd_passkey_entry 3a2f c018bb7c beq hci_cmd_set_gpio ,module_hci_cmd_set_gpio 3a30 c0193b90 beq hci_cmd_read_gpio ,module_hci_cmd_read_gpio 3a31 c019bb98 beq hci_cmd_le_set_pairing ,module_hci_cmd_le_set_pairing_mode 3a32 c01a3bbb beq hci_cmd_le_set_adv_data ,module_hci_cmd_le_set_adv_data 3a33 c01abbc4 beq hci_cmd_le_set_scan_data ,module_hci_cmd_le_set_scan_data 3a34 c01b3bcd beq hci_cmd_le_send_conn_update_req ,module_hci_cmd_le_send_conn_update_req 3a35 c01bbbd7 beq hci_cmd_le_set_adv_parm ,module_hci_cmd_set_le_adv_parameter 3a36 c01c3bda beq hci_cmd_le_start_pairing ,module_hci_cmd_le_start_pairing 3a37 c0203be2 beq hci_cmd_set_wake_gpio ,module_hci_cmd_set_wake_gpio 3a38 c0213bec beq hci_cmd_set_tx_power ,module_hci_cmd_set_tx_power 3a39 c0243bf1 beq hci_cmd_le_confirm_gkey ,module_hci_cmd_le_confirm_gkey 3a3a c024bbfc beq hci_cmd_reject_justwork ,module_hci_cmd_set_reject_justwork_flag 3a3b c028bc02 beq hci_cmd_reset_chip_req ,module_hci_cmd_reset_chip 3a3c c030bc06 beq hci_cmd_le_set_fixed_passkey ,module_hci_cmd_le_set_fixed_passkey 3a3d c07fbc15 beq hci_test_cmd_close_lpm ,module_hci_test_cmde_close_lpm 3a3e 20203c17 branch module_hci_event_receive_invalid_cmd module_hci_cmd_set_bt_addr: 3a3f 68008b04 fetch 1 ,mem_module_uart_len 3a40 c0833c17 bne 6 ,module_hci_event_receive_invalid_cmd 3a41 e8630000 ifetch 6 ,contru 3a42 600340a0 store 6 ,mem_lap 3a43 20203c1a branch module_hci_event_receive_valid_cmd module_hci_cmd_set_le_addr: 3a44 68008b04 fetch 1 ,mem_module_uart_len 3a45 c0833c17 bne 6 ,module_hci_event_receive_invalid_cmd 3a46 e8630000 ifetch 6 ,contru 3a47 600344a0 store 6 ,mem_le_lap 3a48 20203c1a branch module_hci_event_receive_valid_cmd module_hci_cmd_set_visibility: 3a49 68008b04 fetch 1 ,mem_module_uart_len 3a4a c080bc17 bne 1 ,module_hci_event_receive_invalid_cmd 3a4b 1a220600 copy rega ,contru 3a4c 20403c1a call module_hci_event_receive_valid_cmd 3a4d e8688000 ifetcht 1 ,contru 3a4e 6008c6a9 storet 1 ,mem_module_bluetooth_stauts_by_command 3a4f 68014682 fetch 2 ,mem_ui_state_map 3a50 c3848000 rtnbit1 ui_state_ble_connected 3a51 c3800000 rtnbit1 ui_state_bt_connected module_start_adv_discovery_by_command: 3a52 6800c6a1 fetch 1 ,mem_module_state 3a53 2feffe00 isolate1 moudle_state_bt_bit ,pdata 3a54 2420ba58 nbranch moudle_start_adv_by_command ,true 3a55 6808c6a9 fetcht 1 ,mem_module_bluetooth_stauts_by_command 3a56 18417e03 and temp ,0x03 ,pdata 3a57 6000c093 store 1 ,mem_scan_mode moudle_start_adv_by_command: 3a58 6800c6a1 fetch 1 ,mem_module_state 3a59 2feffe01 isolate1 moudle_state_ble_bit ,pdata 3a5a 24608000 nrtn true 3a5b 6808c6a9 fetcht 1 ,mem_module_bluetooth_stauts_by_command 3a5c 284ffe02 isolate1 2 ,temp 3a5d 2020b3fa branch app_ble_start_adv ,true 3a5e 202033f8 branch app_ble_stop_adv module_hci_cmd_set_bt_name: 3a5f 68008b04 fetch 1 ,mem_module_uart_len 3a60 1fe67c43 sub pdata ,67 ,null 3a61 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive 3a62 6000c515 store 1 ,mem_local_name_length 3a63 df200008 arg 8 ,loopcnt 3a64 20407ec6 call memset0 3a65 68008b04 fetch 1 ,mem_module_uart_len 3a66 1fe27200 copy pdata ,loopcnt 3a67 1a220600 copy rega ,contru 3a68 d8a04516 arg mem_local_name ,contw 3a69 204066ea call uart_copy_rx_bytes_fast 3a6a 20203c1a branch module_hci_event_receive_valid_cmd module_hci_cmd_set_le_name: 3a6b 68008b04 fetch 1 ,mem_module_uart_len 3a6c 1fe67c1d sub pdata ,29 ,null 3a6d 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive 3a6e 6000c3af store 1 ,mem_le_name_len 3a6f 1fe27200 copy pdata ,loopcnt 3a70 1a220600 copy rega ,contru 3a71 d8a043b0 arg mem_le_name ,contw 3a72 204066ea call uart_copy_rx_bytes_fast 3a73 204057a3 call le_modified_name 3a74 20203c1a branch module_hci_event_receive_valid_cmd module_hci_cmd_receive_spp_data: 3a75 6800c682 fetch 1 ,mem_ui_state_map 3a76 c3023c17 bbit0 ui_state_bt_spp_conn ,module_hci_event_receive_invalid_cmd 3a77 204033ba call app_check_sniff 3a78 2020ba86 branch module_hci_cmd_spp_exit_sniff ,true 3a79 700b0500 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet 3a7a 2040397f call module_spp_clear_last_transmite_clock 3a7b 6800c568 fetch 1 ,mem_remote_credits 3a7c 207a0000 rtn blank 3a7d 68014573 fetch 2 ,mem_nl_rx_len_all 3a7e c0803a84 bne 0 ,module_hci_cmd_pass_init_ng_rx_len_all 3a7f 68008b04 fetch 1 ,mem_module_uart_len 3a80 60014573 store 2 ,mem_nl_rx_len_all 3a81 1a220600 copy rega ,contru 3a82 18627e00 copy contru ,pdata 3a83 60014571 store 2 ,mem_nl_rx_data_src module_hci_cmd_pass_init_ng_rx_len_all: 3a84 20403a88 call module_hci_cmd_get_current_packet_len_and_remain_len 3a85 20206c4d branch spp_tx_rfcomm_packet module_hci_cmd_spp_exit_sniff: 3a86 700b0500 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet 3a87 20203cd1 branch module_exit_sniff module_hci_cmd_get_current_packet_len_and_remain_len: 3a88 20403a8e call module_hci_cmd_get_current_patcket_len 3a89 68014573 fetch 2 ,mem_nl_rx_len_all 3a8a 6809469f fetcht 2 ,mem_current_packet_length 3a8b 98467e00 isub temp ,pdata 3a8c 60014573 store 2 ,mem_nl_rx_len_all 3a8d 20600000 rtn module_hci_cmd_get_current_patcket_len: 3a8e 68014573 fetch 2 ,mem_nl_rx_len_all 3a8f d840006e arg dm_refcom_buff_len ,temp 3a90 20407fdd call not_greater_than 3a91 6809456c fetcht 2 ,mem_rfcomm_max_frame_size 3a92 20407fdd call not_greater_than 3a93 6809455e fetcht 2 ,mem_pn_max_frame_size 3a94 20407fdd call not_greater_than 3a95 6001469f store 2 ,mem_current_packet_length 3a96 20600000 rtn module_hci_command_tx_spp_tx_complete: 3a97 700b0501 jam hci_discard_packet ,mem_module_temp_nl_discard_packet 3a98 700b0305 jam hci_cmd_spp_data_req ,mem_module_uart_opcode 3a99 20203c1a branch module_hci_event_receive_valid_cmd module_hci_cmd_receive_le_data: 3a9a 68014682 fetch 2 ,mem_ui_state_map 3a9b c304bc17 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd 3a9c 20403ad4 call module_check_ble_encrypt_state 3a9d 20343c17 branch module_hci_event_receive_invalid_cmd ,user 3a9e 700b0500 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet 3a9f 6800c6bf fetch 1 ,mem_module_flag 3aa0 c2823ab4 bbit1 module_flag_ble_data_finish ,module_hci_cmd_receive_le_data_finish 3aa1 6800c6c0 fetch 1 ,mem_module_hci_notify_len 3aa2 247a0000 nrtn blank 3aa3 700b0501 jam hci_discard_packet ,mem_module_temp_nl_discard_packet 3aa4 e8610000 ifetch 2 ,contru 3aa5 600146c1 store 2 ,mem_module_hci_notify_handle 3aa6 18627e00 copy contru ,pdata 3aa7 600146c3 store 2 ,mem_module_hci_nofiy_addr 3aa8 68008b04 fetch 1 ,mem_module_uart_len 3aa9 1fe0fffe pincrease -2 3aaa 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive 3aab 2022bc17 branch module_hci_event_receive_invalid_cmd ,zero 3aac 6000c6c0 store 1 ,mem_module_hci_notify_len 3aad 700b0500 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet 3aae 20405814 call le_set_config_more_data 3aaf 20403ab7 call module_hci_cmd_transmit_le_notify 3ab0 20403ab7 call module_hci_cmd_transmit_le_notify 3ab1 20403ab7 call module_hci_cmd_transmit_le_notify 3ab2 6800c6bf fetch 1 ,mem_module_flag 3ab3 c4020000 rtnbit0 module_flag_ble_data_finish module_hci_cmd_receive_le_data_finish: 3ab4 700b0501 jam hci_discard_packet ,mem_module_temp_nl_discard_packet 3ab5 20403cf6 call module_clear_le_tx_data_flag 3ab6 20203c1a branch module_hci_event_receive_valid_cmd module_hci_cmd_transmit_le_notify: 3ab7 6800c6c0 fetch 1 ,mem_module_hci_notify_len 3ab8 207a0000 rtn blank 3ab9 20405892 call le_fifo_check_nearly_full 3aba 247a0000 nrtn blank 3abb 20403acf call module_get_le_remote_mtu 3abc 44f0c01c bpatch patch1c_1 ,mem_patch1c 3abd 1840fffd add temp ,-3 ,pdata 3abe 6808c6c0 fetcht 1 ,mem_module_hci_notify_len 3abf 20407fdd call not_greater_than 3ac0 1fe22200 copy pdata ,rega 3ac1 18427e00 copy temp ,pdata 3ac2 9a267e00 isub rega ,pdata 3ac3 6000c6c0 store 1 ,mem_module_hci_notify_len 3ac4 680946c1 fetcht 2 ,mem_module_hci_notify_handle 3ac5 20405a64 call le_att_malloc_tx_notify 3ac6 680146c3 fetch 2 ,mem_module_hci_nofiy_addr 3ac7 1fe20600 copy pdata ,contru 3ac8 1a227200 copy rega ,loopcnt 3ac9 204066ea call uart_copy_rx_bytes_fast 3aca 18627e00 copy contru ,pdata 3acb 600146c3 store 2 ,mem_module_hci_nofiy_addr 3acc 6800c6c0 fetch 1 ,mem_module_hci_notify_len 3acd 247a0000 nrtn blank 3ace 20203cf4 branch module_set_le_tx_data_flag module_get_le_remote_mtu: 3acf d8400017 arg 0x17 ,temp 3ad0 6800c6bf fetch 1 ,mem_module_flag 3ad1 c3808000 rtnbit1 module_flag_ble_send_mtu23 3ad2 680944a8 fetcht 2 ,mem_le_remote_mtu 3ad3 20600000 rtn module_check_ble_encrypt_state: 3ad4 6800c6bf fetch 1 ,mem_module_flag 3ad5 c2815a42 bbit1 module_flag_ble_data_encrypt ,le_check_encrypt_state 3ad6 20207fe9 branch disable_user module_hci_cmd_inquire_status: 3ad7 20203c4c branch module_hci_event_status_res module_hci_cmd_set_pairing_mode: 3ad8 1a220600 copy rega ,contru 3ad9 e8608000 ifetch 1 ,contru 3ada c0003adf beq pairing_pincode ,module_hci_pairing_pincode_mode 3adb c000bae2 beq pairing_justwork ,module_hci_pairing_just_work_mode 3adc c0013ae8 beq pairing_passkey ,module_hci_pairing_passkey 3add c001baea beq pairing_confirm ,module_hci_pairing_numeric_comparison 3ade 20203c17 branch module_hci_event_receive_invalid_cmd module_hci_pairing_pincode_mode: 3adf 2040612b call ssp_disable 3ae0 70465a00 jam 0 ,mem_ssp_enable 3ae1 20203c1a branch module_hci_event_receive_valid_cmd module_hci_pairing_just_work_mode: 3ae2 58040003 setarg ssp_mode_just_work_io_cap_data module_hci_sspairing_mode: 3ae3 6001c65b store 3 ,mem_sp_iocap_local 3ae4 6000c662 store 1 ,mem_ssp_mode_flag 3ae5 20406124 call ssp_enable 3ae6 70465a01 jam 1 ,mem_ssp_enable 3ae7 20203c1a branch module_hci_event_receive_valid_cmd module_hci_pairing_passkey: 3ae8 58040002 setarg ssp_mode_passkey_io_cap_data 3ae9 20203ae3 branch module_hci_sspairing_mode module_hci_pairing_numeric_comparison: 3aea 58040001 setarg ssp_mode_ssp_pin_io_cap_data 3aeb 20203ae3 branch module_hci_sspairing_mode module_hci_cmd_set_pincode: 3aec 68008b04 fetch 1 ,mem_module_uart_len 3aed 1fe67c10 sub pdata ,16 ,null 3aee 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive 3aef 6000c689 store 1 ,mem_pin_length 3af0 1fe27200 copy pdata ,loopcnt 3af1 d8a0468a arg mem_pin ,contw 3af2 204066fd call uart_copy_rx_bytes 3af3 20203c1a branch module_hci_event_receive_valid_cmd module_hci_cmd_set_uart_control_mode: 3af4 1a220600 copy rega ,contru 3af5 e8608000 ifetch 1 ,contru 3af6 68188062 hfetcht 1 ,core_uart_ctrl 3af7 7d3a0404 nsetflag blank ,4 ,temp 3af8 60188062 hstoret 1 ,core_uart_ctrl 3af9 20203c1a branch module_hci_event_receive_valid_cmd module_hci_cmd_set_uart_baud: 3afa 68008b04 fetch 1 ,mem_module_uart_len 3afb 1fe27200 copy pdata ,loopcnt 3afc 1a220600 copy rega ,contru 3afd 20407f58 call string2dec_from_uart 3afe 596e3600 setarg uart_clk_24 3aff 9846fc00 idiv temp 3b00 20407f86 call wait_div_end 3b01 1807fe00 quotient pdata module_hci_cmd_set_uart_baud_ok: 3b02 60014243 store uart_baud_len ,mem_baud 3b03 20403c1a call module_hci_event_receive_valid_cmd 3b04 20407f9e call wait_uarttx 3b05 202066ce branch uart_set_baud_by_mem module_hci_cmd_version_request: 3b06 da200002 arg 2 ,rega 3b07 da40469a arg mem_soft_version_num ,regb 3b08 d8400000 arg 0 ,temp 3b09 20203c25 branch module_hci_event_set_cmd module_hci_event_set_cmd_send_response: 3b0a 60010ac2 store 2 ,mem_event_cmd_response_content 3b0b da400ac2 arg mem_event_cmd_response_content ,regb 3b0c d8400000 arg 0 ,temp 3b0d 20203c25 branch module_hci_event_set_cmd module_hci_cmd_bt_disconnect: 3b0e 68014682 fetch 2 ,mem_ui_state_map 3b0f c3003c17 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd module_hci_cmd_bt_disconnect_doing: 3b10 20403c1a call module_hci_event_receive_valid_cmd 3b11 202033e9 branch app_bt_disconnect module_hci_cmd_ble_disconnect: 3b12 68014682 fetch 2 ,mem_ui_state_map 3b13 c304bc17 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd module_hci_cmd_ble_disconnect_doing: 3b14 20403c1a call module_hci_event_receive_valid_cmd 3b15 20203402 branch app_ble_disconnect module_hci_cmd_set_nvram: 3b16 68008b04 fetch 1 ,mem_module_uart_len 3b17 1fe27200 copy pdata ,loopcnt 3b18 1a220600 copy rega ,contru 3b19 68014215 fetch 2 ,mem_nv_data_ptr 3b1a 1fe20a00 icopy contw 3b1b 204066ea call uart_copy_rx_bytes_fast 3b1c 20203c1a branch module_hci_event_receive_valid_cmd module_hci_cmd_confirm_gkey: 3b1d 6800c682 fetch 1 ,mem_ui_state_map 3b1e c3003c17 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd 3b1f e8608000 ifetch 1 ,contru 3b20 6808c661 fetcht 1 ,mem_flag_mode_ssp_pin 3b21 793a0400 setflag blank ,flag_mode_ssp_pin_comparison_result_bit ,temp 3b22 79200407 set1 flag_mode_ssp_pin_reviceve_comparison_bit ,temp 3b23 6008c661 storet 1 ,mem_flag_mode_ssp_pin 3b24 20403c1a call module_hci_event_receive_valid_cmd 3b25 6800c661 fetch 1 ,mem_flag_mode_ssp_pin 3b26 c2833b2b bbit1 flag_mode_ssp_pin_recieve_dhkey_bit ,module_hci_cmd_spp_number_comparison_result_is1 3b27 20600000 rtn dhkey_not_accept: 3b28 70466100 jam 0 ,mem_flag_mode_ssp_pin 3b29 700a9921 jam bt_cmd_dhkey_not_accept ,mem_fifo_temp 3b2a 20207d8f branch ui_ipc_send_cmd module_hci_cmd_spp_number_comparison_result_is1: 3b2b c2805f95 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed 3b2c 20203b28 branch dhkey_not_accept module_hci_cmd_set_credit_given: 3b2d 6800c682 fetch 1 ,mem_ui_state_map 3b2e c4020000 rtnbit0 ui_state_bt_spp_conn 3b2f 6800c56b fetch 1 ,mem_credit_flag 3b30 c1000000 rtneq credit_disable 3b31 e8608000 ifetch 1 ,contru 3b32 6808c569 fetcht 1 ,mem_credit_given 3b33 98408400 iadd temp ,temp 3b34 6008c569 storet 1 ,mem_credit_given 3b35 20600000 rtn module_hci_cmd_auto_adv: 3b36 df200040 arg 0x40 ,loopcnt 3b37 d8a0436f arg mem_le_adv_data_len ,contw 3b38 20407ed4 call clear_mem 3b39 58000000 setarg 0 3b3a 60008ab2 store 1 ,mem_regb 3b3b 1a220600 copy rega ,contru module_hci_cmd_auto_adv_loop: 3b3c 18627e00 copy contru ,pdata 3b3d 60010ab6 store 2 ,mem_regc 3b3e 20403b64 call module_hci_cmd_auto_adv_adv_analys 3b3f 68008ab2 fetch 1 ,mem_regb 3b40 68088aa2 fetcht 1 ,mem_temp 3b41 18408401 increase 1 ,temp 3b42 9840fe00 iadd temp ,pdata 3b43 60008ab2 store 1 ,mem_regb 3b44 1fe67c1f sub pdata ,31 ,null 3b45 24213b50 nbranch module_hci_cmd_auto_adv_store_scan ,positive module_hci_cmd_auto_adv_store_adv: 3b46 6808c36f fetcht 1 ,mem_le_adv_data_len 3b47 58004370 setarg mem_le_adv_data 3b48 9840fe00 iadd temp ,pdata 3b49 60010abb store 2 ,mem_contw 3b4a 68088aa2 fetcht 1 ,mem_temp 3b4b 18408401 increase 1 ,temp 3b4c 6800c36f fetch 1 ,mem_le_adv_data_len 3b4d 9840fe00 iadd temp ,pdata 3b4e 6000c36f store 1 ,mem_le_adv_data_len 3b4f 20203b59 branch module_hci_cmd_auto_adv_store_common module_hci_cmd_auto_adv_store_scan: 3b50 6808c38f fetcht 1 ,mem_le_scan_data_len 3b51 58004390 setarg mem_le_scan_data 3b52 9840fe00 iadd temp ,pdata 3b53 60010abb store 2 ,mem_contw 3b54 68088aa2 fetcht 1 ,mem_temp 3b55 18408401 increase 1 ,temp 3b56 6800c38f fetch 1 ,mem_le_scan_data_len 3b57 9840fe00 iadd temp ,pdata 3b58 6000c38f store 1 ,mem_le_scan_data_len module_hci_cmd_auto_adv_store_common: 3b59 68010abb fetch 2 ,mem_contw 3b5a 1fe20a00 copy pdata ,contw 3b5b 68010ab6 fetch 2 ,mem_regc 3b5c 1fe20600 copy pdata ,contru 3b5d 18427200 copy temp ,loopcnt 3b5e 204066ea call uart_copy_rx_bytes_fast 3b5f 68008b04 fetch 1 ,mem_module_uart_len 3b60 68088ab2 fetcht 1 ,mem_regb 3b61 98467c00 isub temp ,null 3b62 2422bb3c nbranch module_hci_cmd_auto_adv_loop ,zero 3b63 20203c1a branch module_hci_event_receive_valid_cmd module_hci_cmd_auto_adv_adv_analys: 3b64 e8608000 ifetch 1 ,contru 3b65 60008aa2 store 1 ,mem_temp 3b66 e8608000 ifetch 1 ,contru 3b67 60008aae store 1 ,mem_rega 3b68 20600000 rtn module_hci_cmd_power_request: 3b69 d8400000 arg 0 ,temp 3b6a da200002 arg 2 ,rega 3b6b 680146b4 fetch 2 ,mem_module_vdd_quotient 3b6c 60010ac2 store 2 ,mem_event_cmd_response_content 3b6d da400ac2 arg mem_event_cmd_response_content ,regb 3b6e 20203c25 branch module_hci_event_set_cmd module_hci_cmd_power_set: 3b6f 68008b04 fetch 1 ,mem_module_uart_len 3b70 c080bc17 bne 1 ,module_hci_event_receive_invalid_cmd 3b71 e8608000 ifetch 1 ,contru 3b72 6000c6b2 store 1 ,mem_module_read_vdd_flag 3b73 58000000 setarg 0x00 3b74 600146b4 store 2 ,mem_module_vdd_quotient 3b75 20203c1a branch module_hci_event_receive_valid_cmd module_hci_cmd_passkey_entry: 3b76 e8620000 ifetch 4 ,contru 3b77 6002468a store 4 ,mem_pin 3b78 70468904 jam 4 ,mem_pin_length 3b79 70466300 jam 0 ,mem_authentication_passkey_times 3b7a 20403c1a call module_hci_event_receive_valid_cmd 3b7b 20205f31 branch authentication_passkey module_hci_cmd_set_gpio: 3b7c 68008b04 fetch 1 ,mem_module_uart_len 3b7d c081bc17 bne 3 ,module_hci_event_receive_invalid_cmd 3b7e e8608000 ifetch 1 ,contru 3b7f c0003b82 beq hci_cmd_config_gpio_input ,module_set_gpio_input 3b80 c000bb8a beq hci_cmd_config_gpio_output ,module_set_gpio_output 3b81 20203c17 branch module_hci_event_receive_invalid_cmd module_set_gpio_input: 3b82 e8688000 ifetcht 1 ,contru 3b83 e8608000 ifetch 1 ,contru 3b84 c0013b88 beq gpio_input_high_impedance ,module_set_gpio_high_impedance 3b85 7d3a0407 nsetflag blank ,7 ,temp 3b86 204067fb call gpio_config_input 3b87 20203c1a branch module_hci_event_receive_valid_cmd module_set_gpio_high_impedance: 3b88 20406806 call gpio_set_high_impedance 3b89 20203c1a branch module_hci_event_receive_valid_cmd module_set_gpio_output: 3b8a e8688000 ifetcht 1 ,contru 3b8b 20406812 call gpio_config_output0 3b8c e8608000 ifetch 1 ,contru 3b8d 2feffe00 isolate1 0 ,pdata 3b8e 2040682c call gpio_out_flag 3b8f 20203c1a branch module_hci_event_receive_valid_cmd module_hci_cmd_read_gpio: 3b90 68008b04 fetch 1 ,mem_module_uart_len 3b91 c080bc17 bne 1 ,module_hci_event_receive_invalid_cmd 3b92 e8688000 ifetcht 1 ,contru 3b93 2040681d call gpio_get_bit 3b94 58000000 setarg 0x0 3b95 7d20fe00 nsetflag true ,0 ,pdata 3b96 da200001 arg 1 ,rega 3b97 20203b0a branch module_hci_event_set_cmd_send_response module_hci_cmd_le_set_pairing_mode: 3b98 1a220600 copy rega ,contru 3b99 e8608000 ifetch 1 ,contru 3b9a 1fe20400 copy pdata ,temp 3b9b c040bba3 beq le_pairing_mode_secure_connect_justwork ,module_le_set_pairing_mode_secure_justwork 3b9c c0413ba8 beq le_pairing_mode_secure_connect_numeric ,module_le_set_pairing_mode_secure_numeric 3b9d c041bbae beq le_pairing_mode_secure_connect_passkey ,module_le_set_pairing_mode_secure_passkey 3b9e 6000c4c6 store 1 ,mem_le_pairing_mode 3b9f c0003bb3 beq le_pairing_mode_none ,module_le_set_no_pairing 3ba0 c000bbb6 beq le_pairing_mode_lagacy_justwork ,module_le_set_pairing_mode_lagacy_just_work 3ba1 c0013bb8 beq le_pairing_mode_lagacy_passkey ,module_le_set_pairing_mode_lagacy_passkey 3ba2 20203c17 branch module_hci_event_receive_invalid_cmd module_le_set_pairing_mode_secure_justwork: 3ba3 6800c4be fetch 1 ,mem_le_secure_connect_enable 3ba4 203a3c17 branch module_hci_event_receive_invalid_cmd ,blank 3ba5 6008c4c6 storet 1 ,mem_le_pairing_mode 3ba6 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 3ba7 20203bb4 branch module_le_set_noinputnooutput module_le_set_pairing_mode_secure_numeric: 3ba8 6800c4be fetch 1 ,mem_le_secure_connect_enable 3ba9 203a3c17 branch module_hci_event_receive_invalid_cmd ,blank 3baa 6008c4c6 storet 1 ,mem_le_pairing_mode 3bab 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 3bac 70445401 jam flag_iocap_displayyesno ,mem_le_pres_iocap 3bad 20203c1a branch module_hci_event_receive_valid_cmd module_le_set_pairing_mode_secure_passkey: 3bae 6800c4be fetch 1 ,mem_le_secure_connect_enable 3baf 203a3c17 branch module_hci_event_receive_invalid_cmd ,blank 3bb0 6008c4c6 storet 1 ,mem_le_pairing_mode 3bb1 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 3bb2 20203bb9 branch module_le_set_displayonly module_le_set_no_pairing: 3bb3 70445600 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth module_le_set_noinputnooutput: 3bb4 70445403 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap 3bb5 20203c1a branch module_hci_event_receive_valid_cmd module_le_set_pairing_mode_lagacy_just_work: 3bb6 70445605 jam flag_le_bonding_mitm ,mem_le_pres_auth 3bb7 20203bb4 branch module_le_set_noinputnooutput module_le_set_pairing_mode_lagacy_passkey: 3bb8 70445605 jam flag_le_bonding_mitm ,mem_le_pres_auth module_le_set_displayonly: 3bb9 70445400 jam flag_iocap_displayonly ,mem_le_pres_iocap 3bba 20203c1a branch module_hci_event_receive_valid_cmd module_hci_cmd_le_set_adv_data: 3bbb 68008b04 fetch 1 ,mem_module_uart_len 3bbc 1fe67c1f sub pdata ,31 ,null 3bbd 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive 3bbe 6000c36f store 1 ,mem_le_adv_data_len 3bbf 1fe27200 copy pdata ,loopcnt 3bc0 1a220600 copy rega ,contru 3bc1 d8a04370 arg mem_le_adv_data ,contw 3bc2 204066ea call uart_copy_rx_bytes_fast 3bc3 20203c1a branch module_hci_event_receive_valid_cmd module_hci_cmd_le_set_scan_data: 3bc4 68008b04 fetch 1 ,mem_module_uart_len 3bc5 1fe67c1f sub pdata ,31 ,null 3bc6 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive 3bc7 6000c38f store 1 ,mem_le_scan_data_len 3bc8 1fe27200 copy pdata ,loopcnt 3bc9 1a220600 copy rega ,contru 3bca d8a04390 arg mem_le_scan_data ,contw 3bcb 204066ea call uart_copy_rx_bytes_fast 3bcc 20203c1a branch module_hci_event_receive_valid_cmd module_hci_cmd_le_send_conn_update_req: 3bcd 68014682 fetch 2 ,mem_ui_state_map 3bce c304bc17 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd 3bcf 68008b04 fetch 1 ,mem_module_uart_len 3bd0 c0843c17 bne 0x08 ,module_hci_event_receive_invalid_cmd 3bd1 1a220600 copy rega ,contru 3bd2 e8640000 ifetch 8 ,contru 3bd3 60044496 store 8 ,mem_le_interval_min 3bd4 700a9912 jam bt_cmd_le_update_conn ,mem_fifo_temp 3bd5 20407d8f call ui_ipc_send_cmd 3bd6 20203c1a branch module_hci_event_receive_valid_cmd module_hci_cmd_set_le_adv_parameter: 3bd7 e8610000 ifetch 2 ,contru 3bd8 60014482 store 2 ,mem_le_adv_interval 3bd9 20203c1a branch module_hci_event_receive_valid_cmd module_hci_cmd_le_start_pairing: 3bda 6800c4c6 fetch 1 ,mem_le_pairing_mode 3bdb 203a3c17 branch module_hci_event_receive_invalid_cmd ,blank 3bdc 6800c4c4 fetch 1 ,mem_le_pairing_state 3bdd c0803c17 bne flag_le_pairing_null ,module_hci_event_receive_invalid_cmd 3bde 6800c4c5 fetch 1 ,mem_le_enc_state 3bdf c0803c17 bne flag_le_enc_null ,module_hci_event_receive_invalid_cmd 3be0 20407e25 call check_51cmd_le_smp_sec_req 3be1 20203c1a branch module_hci_event_receive_valid_cmd module_hci_cmd_set_wake_gpio: 3be2 68008b04 fetch 1 ,mem_module_uart_len 3be3 c082bc17 bne 5 ,module_hci_event_receive_invalid_cmd 3be4 e8608000 ifetch 1 ,contru 3be5 6000c6a2 store 1 ,mem_module_mcu_wake_pin 3be6 e8620000 ifetch 4 ,contru 3be7 600246a3 store 4 ,mem_module_mcu_wake_delay_us 3be8 6808c6a2 fetcht 1 ,mem_module_mcu_wake_pin 3be9 2040680e call gpio_config_output 3bea 20403cbc call module_set_mcu_wake_pin_low 3beb 20203c1a branch module_hci_event_receive_valid_cmd module_hci_cmd_set_tx_power: 3bec 68008b04 fetch 1 ,mem_module_uart_len 3bed c080bc17 bne 0x01 ,module_hci_event_receive_invalid_cmd 3bee e8608000 ifetch 1 ,contru 3bef 6000c1de store 1 ,mem_tx_power 3bf0 20203c1a branch module_hci_event_receive_valid_cmd module_hci_cmd_le_confirm_gkey: 3bf1 e8608000 ifetch 1 ,contru 3bf2 c000bbfa beq 0x01 ,module_hci_cmd_le_confirm_gkey_fail 3bf3 6800c4c1 fetch 1 ,mem_le_secure_connect_state 3bf4 c001bbf8 beq le_sc_stat_send_public_key ,module_hci_cmd_le_confirm_gkey_ok 3bf5 c0033bf8 beq le_sc_stat_receive_dhkey ,module_hci_cmd_le_confirm_gkey_ok 3bf6 c003bbf8 beq le_sc_stat_wait_confirm_gkey ,module_hci_cmd_le_confirm_gkey_ok 3bf7 20203c17 branch module_hci_event_receive_invalid_cmd module_hci_cmd_le_confirm_gkey_ok: 3bf8 7044c201 jam flag_le_sc_confrim_gkey_ok ,mem_le_sc_confirm_gkey_flag 3bf9 20203c1a branch module_hci_event_receive_valid_cmd module_hci_cmd_le_confirm_gkey_fail: 3bfa 20405b53 call le_send_pairing_confirm_value_failed 3bfb 20203c1a branch module_hci_event_receive_valid_cmd module_hci_cmd_set_reject_justwork_flag: 3bfc 68008b04 fetch 1 ,mem_module_uart_len 3bfd c080bc17 bne 0x01 ,module_hci_event_receive_invalid_cmd 3bfe 20403c1a call module_hci_event_receive_valid_cmd 3bff e8608000 ifetch 1 ,contru 3c00 203a60cb branch classic_bt_clr_reject_justwork_flag ,blank 3c01 202060c9 branch classic_bt_set_reject_justwork_flag module_hci_cmd_reset_chip: 3c02 20403c1a call module_hci_event_receive_valid_cmd 3c03 20407f9e call wait_uarttx 3c04 70801001 jam 0x01 ,core_reset 3c05 20202a8e branch loop module_hci_cmd_le_set_fixed_passkey: 3c06 68008b04 fetch 1 ,mem_module_uart_len 3c07 c0003c17 beq 0 ,module_hci_event_receive_invalid_cmd 3c08 e8608000 ifetch 1 ,contru 3c09 203a3c13 branch module_hci_cmd_le_set_random_passkey ,blank 3c0a 68008b04 fetch 1 ,mem_module_uart_len 3c0b c082bc17 bne 5 ,module_hci_event_receive_invalid_cmd 3c0c e8620000 ifetch 4 ,contru 3c0d d84f4240 arg 1000000 ,temp 3c0e 98467c00 isub temp ,null 3c0f 20213c17 branch module_hci_event_receive_invalid_cmd ,positive 3c10 600244c7 store 4 ,mem_le_tk 3c11 2040580c call le_set_config_fixed_tk 3c12 20203c1a branch module_hci_event_receive_valid_cmd module_hci_cmd_le_set_random_passkey: 3c13 2040580e call le_clr_config_fixed_tk 3c14 20203c1a branch module_hci_event_receive_valid_cmd module_hci_test_cmde_close_lpm: 3c15 70409100 jam 0 ,mem_lpm_mode 3c16 20203c1a branch module_hci_event_receive_valid_cmd module_hci_event_receive_invalid_cmd: 3c17 d8400001 arg 1 ,temp 3c18 da200000 arg 0 ,rega 3c19 20203c25 branch module_hci_event_set_cmd module_hci_event_receive_valid_cmd: 3c1a d8400000 arg 0 ,temp 3c1b da200000 arg 0 ,rega 3c1c 20203c25 branch module_hci_event_set_cmd module_hci_event_spp_connect: 3c1d 700b0300 jam hci_event_spp_conn_rep ,mem_module_uart_opcode 3c1e 20203c49 branch module_hci_event_enter_standby_mode_len0 module_hci_event_le_connect: 3c1f 700b0302 jam hci_event_le_conn_rep ,mem_module_uart_opcode 3c20 20203c49 branch module_hci_event_enter_standby_mode_len0 module_hci_event_spp_disconnect: 3c21 700b0303 jam hci_event_spp_dis_rep ,mem_module_uart_opcode 3c22 20203c49 branch module_hci_event_enter_standby_mode_len0 module_hci_event_le_disconnect: 3c23 700b0305 jam hci_event_le_dis_rep ,mem_module_uart_opcode 3c24 20203c49 branch module_hci_event_enter_standby_mode_len0 module_hci_event_set_cmd: 3c25 68008b03 fetch 1 ,mem_module_uart_opcode 3c26 1fe22600 copy pdata ,regc 3c27 700b0306 jam hci_event_cmd_res ,mem_module_uart_opcode 3c28 58000002 setarg 2 3c29 9a20fe00 iadd rega ,pdata 3c2a 20403ca7 call module_hci_prepare_tx 3c2b 1a627e00 copy regc ,pdata 3c2c e1408000 istore 1 ,contwu 3c2d e1488000 istoret 1 ,contwu 3c2e 1a227200 copy rega ,loopcnt 3c2f 1a420c00 copy regb ,contr 3c30 204066e4 call uart_copy_tx_bytes 3c31 202066c5 branch uartd_send module_hci_event_receive_spp_data: 3c32 2040397f call module_spp_clear_last_transmite_clock 3c33 700b0307 jam hci_event_spp_data_rep ,mem_module_uart_opcode 3c34 680084ff fetch 1 ,mem_current_length 3c35 207a0000 rtn blank 3c36 20403ca7 call module_hci_prepare_tx 3c37 680084ff fetch 1 ,mem_current_length 3c38 1fe27200 copy pdata ,loopcnt 3c39 68010501 fetch 2 ,mem_rfcomm_uih_payload_ptr 3c3a 1fe20c00 copy pdata ,contr 3c3b 204066d1 call uart_copy_tx_bytes_fast 3c3c 202066c5 branch uartd_send module_hci_event_receive_le_data: 3c3d 700b0308 jam hci_event_le_data_rep ,mem_module_uart_opcode 3c3e 6800c6b6 fetch 1 ,mem_module_le_rx_data_len 3c3f 1fe27200 icopy loopcnt 3c40 1fe0fe02 increase 2 ,pdata 3c41 20403ca7 call module_hci_prepare_tx 3c42 680146b9 fetch 2 ,mem_module_le_rx_data_handle 3c43 e1410000 istore 2 ,contwu 3c44 680146b7 fetch 2 ,mem_module_le_rx_data_address 3c45 1fe20c00 icopy contr 3c46 204066d1 call uart_copy_tx_bytes_fast 3c47 202066c5 branch uartd_send module_hci_event_enter_standby_mode: 3c48 700b0309 jam hci_event_standby_rep ,mem_module_uart_opcode module_hci_event_enter_standby_mode_len0: 3c49 58000000 setarg 0 3c4a 20403ca7 call module_hci_prepare_tx 3c4b 202066c5 branch uartd_send module_hci_event_status_res: 3c4c 700b030a jam hci_event_status_res ,mem_module_uart_opcode 3c4d 58000001 setarg 1 3c4e 20403ca7 call module_hci_prepare_tx 3c4f 20403c5d call module_hci_read_bt_status 3c50 68014682 fetch 2 ,mem_ui_state_map 3c51 d8e00002 arg ui_state_bt_hid_conn ,queue 3c52 afefffff qisolate1 pdata 3c53 79208403 setflag true ,3 ,temp 3c54 d8e00009 arg ui_state_ble_connected ,queue 3c55 afefffff qisolate1 pdata 3c56 79208405 setflag true ,5 ,temp 3c57 6800c682 fetch 1 ,mem_ui_state_map 3c58 d8e00004 arg ui_state_bt_spp_conn ,queue 3c59 afefffff qisolate1 pdata 3c5a 79208404 setflag true ,4 ,temp 3c5b e1488000 istoret 1 ,contwu 3c5c 202066c5 branch uartd_send module_hci_read_bt_status: 3c5d d8400000 arg 0 ,temp 3c5e 6800c093 fetch 1 ,mem_scan_mode 3c5f d8e00000 arg inq_scan_mode ,queue 3c60 afefffff qisolate1 pdata 3c61 79208400 setflag true ,0 ,temp 3c62 d8e00001 arg page_scan_mode ,queue 3c63 afefffff qisolate1 pdata 3c64 79208401 setflag true ,1 ,temp 3c65 6800c36e fetch 1 ,mem_le_adv_enable 3c66 d8e00000 arg 0 ,queue 3c67 afefffff qisolate1 pdata 3c68 79208402 setflag true ,2 ,temp 3c69 20600000 rtn module_hci_event_store_device: 3c6a 700b030d jam hci_event_nvram_rep ,mem_module_uart_opcode 3c6b 6800c217 fetch 1 ,mem_nv_data_number 3c6c 1feffe22 mul32 pdata ,34 ,pdata 3c6d 1fe27200 icopy loopcnt 3c6e 20403ca7 call module_hci_prepare_tx 3c6f 68014215 fetch 2 ,mem_nv_data_ptr 3c70 1fe20c00 icopy contr 3c71 204066d1 call uart_copy_tx_bytes_fast 3c72 202066c5 branch uartd_send module_hci_event_gkey_generate: 3c73 700b030e jam hci_event_gkey ,mem_module_uart_opcode 3c74 58000004 setarg 4 3c75 20403ca7 call module_hci_prepare_tx 3c76 680209ba fetch 4 ,mem_gkey 3c77 e1420000 istore 4 ,contwu 3c78 202066c5 branch uartd_send module_hci_event_invalid_packet: 3c79 700b030f jam hci_event_invalid_packet ,mem_module_uart_opcode 3c7a 68110112 hfetch 2 ,core_uart_rxitems 3c7b d84000ff arg 0xff ,temp 3c7c 20407fdd call not_greater_than 3c7d 1fe27200 copy pdata ,loopcnt 3c7e 20403ca7 call module_hci_prepare_tx 3c7f 204066cb call uartd_prepare_rx 3c80 20406703 call uart_copy_rx2tx 3c81 202066c5 branch uartd_send module_hci_event_passkey_entry_mode: 3c82 700b0310 jam hci_event_get_passkey ,mem_module_uart_opcode 3c83 20203c49 branch module_hci_event_enter_standby_mode_len0 module_hci_event_le_tk: 3c84 700b0311 jam hci_event_le_tk ,mem_module_uart_opcode 3c85 58000004 setarg 4 3c86 20403ca7 call module_hci_prepare_tx 3c87 680244c7 fetch 4 ,mem_le_tk 3c88 e1420000 istore 4 ,contwu 3c89 202066c5 branch uartd_send module_hci_event_le_pairing_fail: 3c8a da200180 arg flag_ble_pairing_fail ,rega 3c8b 20203c91 branch module_hci_event_pairing_completed module_hci_event_le_pairing_success: 3c8c da200080 arg flag_ble_pairing_success ,rega 3c8d 20203c91 branch module_hci_event_pairing_completed module_hci_event_bt_pairing_fail: 3c8e da200101 arg flag_bt_pairing_fail ,rega 3c8f 20203c91 branch module_hci_event_pairing_completed module_hci_event_bt_pairing_success: 3c90 da200001 arg flag_bt_pairing_success ,rega module_hci_event_pairing_completed: 3c91 70466100 jam 0 ,mem_flag_mode_ssp_pin 3c92 700b0314 jam hci_event_le_pairing_state ,mem_module_uart_opcode 3c93 58000002 setarg 2 3c94 20403ca7 call module_hci_prepare_tx 3c95 1a227e00 copy rega ,pdata 3c96 e1410000 istore 2 ,contwu 3c97 202066c5 branch uartd_send module_hci_event_pause_enc: 3c98 da600000 arg flag_event_pause_enc ,regc 3c99 20203c9b branch module_hci_event_enc module_hci_event_start_enc: 3c9a da600001 arg flag_event_start_enc ,regc module_hci_event_enc: 3c9b 700b0315 jam hci_event_le_encryption_state ,mem_module_uart_opcode 3c9c 58000001 setarg 1 3c9d 20403ca7 call module_hci_prepare_tx 3c9e 1a627e00 copy regc ,pdata 3c9f e1408000 istore 1 ,contwu 3ca0 202066c5 branch uartd_send module_hci_event_le_gkey: 3ca1 700b031d jam hci_event_le_gkey ,mem_module_uart_opcode 3ca2 58000004 setarg 4 3ca3 20403ca7 call module_hci_prepare_tx 3ca4 680209ba fetch 4 ,mem_gkey 3ca5 e1420000 istore 4 ,contwu 3ca6 202066c5 branch uartd_send module_hci_prepare_tx: 3ca7 700b0202 jam 0x02 ,mem_module_uart_cmd 3ca8 60008b04 store 1 ,mem_module_uart_len 3ca9 600c0aa2 storet 8 ,mem_temp 3caa 44f1401c bpatch patch1c_2 ,mem_patch1c 3cab 20403cb1 call module_set_mcu_wake_pin_high_delay 3cac 680c0aa2 fetcht 8 ,mem_temp 3cad 204066c2 call uartd_prepare_tx 3cae 68018b02 fetch 3 ,mem_module_uart_cmd 3caf e1418000 istore 3 ,contwu 3cb0 20600000 rtn module_set_mcu_wake_pin_high_delay: 3cb1 20403cba call module_check_mcu_wake_pin_high 3cb2 20608000 rtn true module_set_mcu_wake_pin_h_delay: 3cb3 20403cb8 call module_set_mcu_wake_pin_high 3cb4 680246a3 fetch 4 ,mem_module_mcu_wake_delay_us 3cb5 1feb7e00 rshift2 pdata ,pdata 3cb6 207a0000 rtn blank 3cb7 20203cbe branch delay module_set_mcu_wake_pin_high: 3cb8 6808c6a2 fetcht 1 ,mem_module_mcu_wake_pin 3cb9 20206829 branch gpio_out_active module_check_mcu_wake_pin_high: 3cba 6808c6a2 fetcht 1 ,mem_module_mcu_wake_pin 3cbb 2020681b branch gpio_check_active module_set_mcu_wake_pin_low: 3cbc 6808c6a2 fetcht 1 ,mem_module_mcu_wake_pin 3cbd 20206825 branch gpio_out_inactive delay: 3cbe 1fe0ffff increase -1 ,pdata 3cbf 20000026 nop 38 3cc0 243a3cbe nbranch delay ,blank 3cc1 20600000 rtn module_le_receive_data: 3cc2 20403ad4 call module_check_ble_encrypt_state 3cc3 20740000 rtn user 3cc4 1a227e00 copy rega ,pdata 3cc5 600146b7 store 2 ,mem_module_le_rx_data_address 3cc6 1a427e00 copy regb ,pdata 3cc7 6000c6b6 store 1 ,mem_module_le_rx_data_len 3cc8 68010478 fetch 2 ,mem_le_att_handle 3cc9 680946bb fetcht 2 ,mem_module_data_write_handle 3cca 98467c00 isub temp ,null 3ccb 2022bccf branch module_le_receive_data_ok ,zero 3ccc 680946bd fetcht 2 ,mem_module_data_write_handle2 3ccd 98467c00 isub temp ,null 3cce 24628000 nrtn zero module_le_receive_data_ok: 3ccf 600146b9 store 2 ,mem_module_le_rx_data_handle 3cd0 20203c3d branch module_hci_event_receive_le_data module_exit_sniff: 3cd1 6800c6bf fetch 1 ,mem_module_flag 3cd2 c3828000 rtnbit1 moudle_task_unsniff 3cd3 20403cf0 call module_set_unsniff_task_flag 3cd4 2020340c branch app_bt_sniff_exit module_set_lpm_mult_2: 3cd5 70417202 jam 2 ,mem_lpm_mult 3cd6 20600000 rtn module_bb_event_timer: 3cd7 20203cd8 branch module_read_vdd_timer module_read_vdd_timer: 3cd8 6800c6b2 fetch 1 ,mem_module_read_vdd_flag 3cd9 207a0000 rtn blank 3cda 6800c6b3 fetch 1 ,mem_module_read_vdd_count 3cdb 207a0000 rtn blank 3cdc 1fe0ffff increase -1 ,pdata 3cdd 6000c6b3 store 1 ,mem_module_read_vdd_count 3cde 247a0000 nrtn blank 3cdf 7046b30a jam flag_module_read_vdd_count ,mem_module_read_vdd_count 3ce0 204068eb call adc_set_mode 3ce1 20406908 call vdd_calculate_by_mode 3ce2 1fe6fc64 div pdata ,0x64 3ce3 20407f86 call wait_div_end 3ce4 1807fe00 quotient pdata 3ce5 18070400 remainder temp 3ce6 6000c6b4 store 1 ,mem_module_vdd_quotient 3ce7 6008c6b5 storet 1 ,mem_module_vdd_remainder 3ce8 20600000 rtn module_control_air_flow: 3ce9 20407fb4 call check_uart_tx_buff 3cea 202133d9 branch app_l2cap_flow_control_enable ,positive 3ceb 202033db branch app_l2cap_flow_control_disable module_set_sniff_task_flag: 3cec d8e00006 arg moudle_task_sniff ,queue 3ced 20203cfc branch module_set_state module_clear_sniff_task_flag: 3cee d8e00006 arg moudle_task_sniff ,queue 3cef 20203cf8 branch module_clr_state module_set_unsniff_task_flag: 3cf0 d8e00005 arg moudle_task_unsniff ,queue 3cf1 20203cfc branch module_set_state module_clear_unsniff_task_flag: 3cf2 d8e00005 arg moudle_task_unsniff ,queue 3cf3 20203cf8 branch module_clr_state module_set_le_tx_data_flag: 3cf4 d8e00004 arg module_flag_ble_data_finish ,queue 3cf5 20203cfc branch module_set_state module_clear_le_tx_data_flag: 3cf6 d8e00004 arg module_flag_ble_data_finish ,queue 3cf7 20203cf8 branch module_clr_state module_clr_state: 3cf8 6800c6bf fetch 1 ,mem_module_flag 3cf9 f93ffe00 qset0 pdata 3cfa 6000c6bf store 1 ,mem_module_flag 3cfb 20600000 rtn module_set_state: 3cfc 6800c6bf fetch 1 ,mem_module_flag 3cfd f9207e00 qset1 pdata 3cfe 6000c6bf store 1 ,mem_module_flag 3cff 20600000 rtn mouse_init: 3d00 20403d39 call mouse_setting_config 3d01 2040640f call spi_ncs_enable 3d02 204040c6 call mouse_init_sunt 3d03 20403d66 call mouse_dpi_config 3d04 20406411 call spi_ncs_disable 3d05 20758000 rtn wake 3d06 20403d16 call mouse_cheak_enable_usb 3d07 20403d19 call mouse_cb_fuction 3d08 680246d3 fetch mouse_flag_len ,mem_mouse_flag 3d09 c3880000 rtnbit1 mouse_enable_usb 3d0a 20403d4e call mouse_wakeup_from_power 3d0b c6130000 rtnmark1 mark_24g 3d0c 68014682 fetch 2 ,mem_ui_state_map 3d0d c28642b0 bbit1 ui_state_btn_down ,mouse_start_discovery 3d0e 202042a2 branch mouse_check_reconn_target mouse_delay_4s: 3d0f 680246d3 fetch mouse_flag_len ,mem_mouse_flag 3d10 c40d8000 rtnbit0 mouse_enable_init_delay 3d11 df200014 arg 20 ,loopcnt mouse_delay_20ms: 3d12 58030d40 setarg 200000 3d13 20402a8f call sleep 3d14 c2007ec1 loop delay_10ms 3d15 20600000 rtn mouse_cheak_enable_usb: 3d16 680246d3 fetch mouse_flag_len ,mem_mouse_flag 3d17 c4080000 rtnbit0 mouse_enable_usb 3d18 202048ea branch usb_init mouse_cb_fuction: 3d19 5800416d setarg mouse_le 3d1a 600141ef store 2 ,mem_cb_le_process 3d1b 58003f77 setarg mouse_send_process 3d1c 600141f1 store 2 ,mem_cb_bt_process 3d1d 58003ebb setarg mouse_process_lpm_before 3d1e 600141ed store 2 ,mem_cb_before_lpm 3d1f 5800417c setarg mouse_priority_bb_event 3d20 600141f5 store 2 ,mem_cb_bb_event_process 3d21 58003de3 setarg mouse_idle 3d22 600141f3 store 2 ,mem_cb_idle_process 3d23 58003eb3 setarg mouse_before_hibernate 3d24 600141eb store 2 ,mem_cb_before_hibernate 3d25 58003d5b setarg le_mouse_bb_event_connect_complete 3d26 600141f9 store 2 ,mem_cb_att_write 3d27 20402c7a call g24_head_ptr2regc 3d28 58004401 setarg mouse_g24_package_data 3d29 1a608ad8 add regc ,offset_24g_cb_data ,contw 3d2a e0a10000 istore 2 ,contw 3d2b 58004406 setarg mouse_g24_enter_lpm 3d2c 1a608ada add regc ,offset_24g_cb_lpm_prepare ,contw 3d2d e0a10000 istore 2 ,contw 3d2e 58003ebf setarg mouse_lpm_before_common 3d2f 1a608adc add regc ,offset_24g_cb_lpm_before ,contw 3d30 e0a10000 istore 2 ,contw 3d31 580041f9 setarg mouse_bb_event_timer 3d32 600141fd store 2 ,mem_cb_event_timer 3d33 58003d36 setarg mouse_spi_write_flash_cb 3d34 60014201 store 2 ,mem_cb_spi_flash_write_complate 3d35 20600000 rtn mouse_spi_write_flash_cb: mouse_spi_init: 3d36 680246d3 fetch mouse_flag_len ,mem_mouse_flag 3d37 c30964d7 bbit0 mouse_enable_spi2 ,spid_init 3d38 202064da branch spid_init2 mouse_setting_config: 3d39 20758000 rtn wake 3d3a 20402c9d call g24_set_device_addr 3d3b 20403e6e call mouse_gpio_init 3d3c 20403e1e call mouse_param_init 3d3d 20403e54 call mouse_adc_init 3d3e 20405810 call le_set_config_fixed_ltk 3d3f 20405839 call le_set_justwork 3d40 2040582c call le_set_fixed_ltk 3d41 20405818 call le_set_config_read_authentication 3d42 680246d3 fetch mouse_flag_len ,mem_mouse_flag 3d43 c28a3d46 bbit1 mouse_enable_eeprom ,mouse_init_iic 3d44 c289c414 bbit1 mouse_enable_flash ,mouse_load_flash_info_cheak 3d45 20600000 rtn mouse_init_iic: 3d46 2040659c call iic_init_390k 3d47 680246d3 fetch mouse_flag_len ,mem_mouse_flag 3d48 2feffe19 isolate1 mouse_enable_2k_eeprom ,pdata 3d49 2440e5c2 ncall clear_eeprom_size_2k ,true 3d4a 2040443f call mouse_load_eeprom_dpi 3d4b 20403dc9 call mouse_init_environment 3d4c 204041aa call mouse_set_24g_addr_eeprom 3d4d 202065df branch iicd_read_eep_data mouse_wakeup_from_power: 3d4e 680246d3 fetch mouse_flag_len ,mem_mouse_flag 3d4f c30f3d53 bbit0 mouse_enable_wakeup_from_power ,mouse_wakeup_no_from_power 3d50 68008abd fetch 1 ,mem_wakup_from_power_flag 3d51 2fec0003 isolate0 gpio_latch ,pdata 3d52 24608000 nrtn true mouse_wakeup_no_from_power: 3d53 6800c71f fetch 1 ,mem_reconn_times_init 3d54 6000c71e store 1 ,mem_reconn_times 3d55 6800c6f5 fetch 1 ,mem_config_function_enable 3d56 c3830000 rtnbit1 enable_select_device_by_switch mouse_start_24g_mode: 3d57 680246d3 fetch mouse_flag_len ,mem_mouse_flag 3d58 c4088000 rtnbit0 mouse_enable_24g 3d59 c28eaee4 bbit1 mouse_enable_auto_24g_paring ,g24_auto_pair_start 3d5a 20202f2c branch g24_check_51cmd_start_24g le_mouse_bb_event_connect_complete: 3d5b 68008478 fetch 1 ,mem_le_att_handle 3d5c 1fe67e1a sub pdata ,26 ,pdata 3d5d 24628000 nrtn zero 3d5e 700a9912 jam bt_cmd_le_update_conn ,mem_fifo_temp 3d5f 20407d8f call ui_ipc_send_cmd mouse_le_write_enable: 3d60 d8e00000 arg write_req_enable_flag ,queue 3d61 202041b9 branch mouse_le_enable_connect_flag mouse_dpi_up: 3d62 6800c6b6 fetch 1 ,mem_mouse_dpi_button_state 3d63 c1008000 rtneq dpi_button_state_up 3d64 7046b601 jam dpi_button_state_up ,mem_mouse_dpi_button_state 3d65 20600000 rtn mouse_dpi_config: 3d66 6800c6e1 fetch 1 ,mem_config_sensor_motion 3d67 1fe17e0f and pdata ,0x0f ,pdata 3d68 6000c77a store 1 ,mem_mouse_dpi 3d69 20203d80 branch mouse_seting_dpi + 2 mouse_dpi_cheak: 3d6a 6808c6e7 fetcht 1 ,mem_dpi_button_gpio 3d6b 2040681d call gpio_get_bit 3d6c 2420bd62 nbranch mouse_dpi_up ,true mouse_dpi_down: 3d6d 6800c6b6 fetch 1 ,mem_mouse_dpi_button_state 3d6e c1000000 rtneq dpi_button_state_down 3d6f 7046b600 jam dpi_button_state_down ,mem_mouse_dpi_button_state 3d70 6800c77a fetch 1 ,mem_mouse_dpi 3d71 1fe0fe01 increase 1 ,pdata 3d72 1fe17e03 and pdata ,0x03 ,pdata 3d73 6000c77a store 1 ,mem_mouse_dpi 3d74 20403d7e call mouse_seting_dpi 3d75 680246d3 fetch mouse_flag_len ,mem_mouse_flag 3d76 c28a443b bbit1 mouse_enable_eeprom ,mouse_store_eerpom_dpi 3d77 c289bd79 bbit1 mouse_enable_flash ,mouse_before_store_flash_cpi 3d78 20600000 rtn mouse_before_store_flash_cpi: 3d79 d840001e arg mouse_spi2_clk_gpio ,temp 3d7a 2040680e call gpio_config_output 3d7b d840001f arg mouse_spi2_sdio_gpio ,temp 3d7c 2040680e call gpio_config_output 3d7d 20204435 branch mouse_store_flash_device_info mouse_seting_dpi: 3d7e 44f1c01c bpatch patch1c_3 ,mem_patch1c 3d7f 2040424a call mosue_dpi_led_blink_init 3d80 6800c6e0 fetch 1 ,mem_config_sensor_type 3d81 c002bdaa beq p3610 ,mouse_seting_3610_dpi 3d82 c0023d96 beq p3212 ,mouse_seting_3212_dpi 3d83 6800c77a fetch 1 ,mem_mouse_dpi 3d84 c0003d8a beq mouse_dpi_level1 ,mouse_set_cpi1 3d85 c000bd88 beq mouse_dpi_level2 ,mouse_set_cpi2 3d86 c0013d8c beq mouse_dpi_level3 ,mouse_set_cpi3 3d87 c001bd8e beq mouse_dpi_level4 ,mouse_set_cpi4 mouse_set_cpi2: 3d88 6800c780 fetch 1 ,mem_320x_dpi_2 3d89 20203dbe branch mouse_p3205_dpi mouse_set_cpi1: 3d8a 6800c77f fetch 1 ,mem_320x_dpi_1 3d8b 20203dbe branch mouse_p3205_dpi mouse_set_cpi3: 3d8c 6800c781 fetch 1 ,mem_320x_dpi_3 3d8d 20203dbe branch mouse_p3205_dpi mouse_set_cpi4: 3d8e 6800c782 fetch 1 ,mem_320x_dpi_4 3d8f 20203dbe branch mouse_p3205_dpi moue_seting_cpi_count: 3d90 6800c6e0 fetch 1 ,mem_config_sensor_type 3d91 c1030000 rtneq p3065_xy 3d92 6800c6b5 fetch 1 ,mem_mouse_cpi_count 3d93 1fe0fe01 increase 1 ,pdata 3d94 6000c6b5 store 1 ,mem_mouse_cpi_count 3d95 20600000 rtn mouse_seting_3212_dpi: 3d96 6800c77a fetch 1 ,mem_mouse_dpi 3d97 c0003d9d beq mouse_dpi_level1 ,mouse_set_p3212_cpi1 3d98 c000bd9b beq mouse_dpi_level2 ,mouse_set_p3212_cpi2 3d99 c0013d9f beq mouse_dpi_level3 ,mouse_set_p3212_cpi3 3d9a c001bda1 beq mouse_dpi_level4 ,mouse_set_p3212_cpi4 mouse_set_p3212_cpi2: 3d9b 6800c784 fetch 1 ,mem_3212_dpi_2 3d9c 20203da2 branch mouse_p3212_dpi mouse_set_p3212_cpi1: 3d9d 6800c783 fetch 1 ,mem_3212_dpi_1 3d9e 20203da2 branch mouse_p3212_dpi mouse_set_p3212_cpi3: 3d9f 6800c785 fetch 1 ,mem_3212_dpi_3 3da0 20203da2 branch mouse_p3212_dpi mouse_set_p3212_cpi4: 3da1 6800c786 fetch 1 ,mem_3212_dpi_4 mouse_p3212_dpi: 3da2 6000c6b5 store 1 ,mem_mouse_cpi_count 3da3 1fed7e00 lshift8 pdata ,pdata 3da4 1fe22200 copy pdata ,rega 3da5 1fe0fe0d add pdata ,mouse_p3212_dpi_xaddress ,pdata 3da6 20406413 call twspi_write 3da7 1a227e00 copy rega ,pdata 3da8 1fe0fe0e add pdata ,mouse_p3212_dpi_yaddress ,pdata 3da9 20206413 branch twspi_write mouse_seting_3610_dpi: 3daa 6800c77a fetch 1 ,mem_mouse_dpi 3dab c0003db1 beq mouse_dpi_level1 ,mouse_set_p3610_cpi1 3dac c000bdaf beq mouse_dpi_level2 ,mouse_set_p3610_cpi2 3dad c0013db3 beq mouse_dpi_level3 ,mouse_set_p3610_cpi3 3dae c001bdb5 beq mouse_dpi_level4 ,mouse_set_p3610_cpi4 mouse_set_p3610_cpi2: 3daf 6800c788 fetch 1 ,mem_3610_dpi_2 3db0 20203db6 branch mouse_p3610_dpi mouse_set_p3610_cpi1: 3db1 6800c787 fetch 1 ,mem_3610_dpi_1 3db2 20203db6 branch mouse_p3610_dpi mouse_set_p3610_cpi3: 3db3 6800c789 fetch 1 ,mem_3610_dpi_3 3db4 20203db6 branch mouse_p3610_dpi mouse_set_p3610_cpi4: 3db5 6800c78a fetch 1 ,mem_3610_dpi_4 mouse_p3610_dpi: 3db6 6000c6b5 store 1 ,mem_mouse_cpi_count 3db7 204040c0 call mouse_spi_sdio_gpio_pollup 3db8 6800c6b5 fetch 1 ,mem_mouse_cpi_count mouse_reset_p3610_dpi: 3db9 1fe0fe80 add pdata ,0x80 ,pdata 3dba 1fed7e00 lshift8 pdata ,pdata 3dbb 1fe0fe05 add pdata ,mouse_p3610_dpi_address ,pdata 3dbc 1fe22200 copy pdata ,rega 3dbd 2020415a branch mouse_set_sensor_reg mouse_p3205_dpi: 3dbe 6000c6b5 store 1 ,mem_mouse_cpi_count 3dbf 20403d90 call moue_seting_cpi_count 3dc0 6800c6b5 fetch 1 ,mem_mouse_cpi_count 3dc1 58000006 setarg mouse_dpi_address 3dc2 20406414 call twspi_read 3dc3 1fe104f8 and pdata ,0xf8 ,temp 3dc4 6800c6b5 fetch 1 ,mem_mouse_cpi_count 3dc5 9840fe00 iadd temp ,pdata 3dc6 1fed7e00 lshift8 pdata ,pdata 3dc7 1fe0fe06 add pdata ,mouse_dpi_address ,pdata 3dc8 20206413 branch twspi_write mouse_init_environment: 3dc9 204033c4 call app_initflag_check 3dca 2022c316 branch mouse_eeprom_load_recon_info ,zero 3dcb 2040441c call mouse_ble_init_address 3dcc 204042e4 call mouse_store_eeprom_device_info 3dcd 202033bd branch app_initflag_store mouse_24g_pairing_button: 3dce 68014707 fetch 2 ,mem_24g_pairing_timer_count 3dcf 207a0000 rtn blank 3dd0 680246d3 fetch mouse_flag_len ,mem_mouse_flag 3dd1 c4088000 rtnbit0 mouse_enable_24g 3dd2 c3818000 rtnbit1 mosue_24g_pairing_flag 3dd3 c6130000 rtnmark1 mark_24g 3dd4 20404083 call mouse_check_key_gpio 3dd5 c1838000 rtnne mouse_lmr_button 3dd6 20404482 call mouse_devce_led_off 3dd7 d8e00003 arg mosue_24g_pairing_flag ,queue 3dd8 204043ce call mouse_enable_function_flag 3dd9 58000000 setarg 0 3dda 600146ae store 2 ,mem_mouse_direct_timer 3ddb 6000c6b4 store 1 ,mem_mouse_send_blank_timer 3ddc 20403263 call g24_set0_mem_check_dongle_times 3ddd 68014682 fetch 2 ,mem_ui_state_map 3dde c283c392 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect 3ddf c284b402 bbit1 ui_state_ble_connected ,app_ble_disconnect 3de0 c28033e9 bbit1 ui_state_bt_connected ,app_bt_disconnect 3de1 204042ca call mouse_stop_discovery 3de2 20202ead branch g24_start_pairing_sm1 mouse_idle: 3de3 20403dce call mouse_24g_pairing_button 3de4 20407e34 call ui_check_paring_button 3de5 20403d6a call mouse_dpi_cheak 3de6 20403de9 call mouse_usb_isr 3de7 20403ee0 call mouse_wheel_check 3de8 20203df7 branch mouse_usb_mode mouse_usb_isr: 3de9 680246d3 fetch mouse_flag_len ,mem_mouse_flag 3dea c4080000 rtnbit0 mouse_enable_usb 3deb 204048d3 call usb_isr 3dec 202048fd branch usb_offline_state mouse_cheak_usb: 3ded 68108a04 hfetch 1 ,core_usb_addr 3dee c303bdf1 bbit0 7 ,mouse_usb_no_exsit 3def c283bdf4 bbit1 7 ,mouse_usb_exsit 3df0 20600000 rtn mouse_usb_no_exsit: 3df1 6800c6ff fetch 1 ,mem_usb_addr 3df2 c4038000 rtnbit0 7 3df3 2020659a branch soft_reset_chip mouse_usb_exsit: 3df4 6800c6ff fetch 1 ,mem_usb_addr 3df5 c3838000 rtnbit1 7 3df6 20204381 branch mouse_stop_bluetooth_mode mouse_usb_mode: 3df7 20403ded call mouse_cheak_usb 3df8 68108a04 hfetch 1 ,core_usb_addr 3df9 6000c6ff store 1 ,mem_usb_addr 3dfa c4038000 rtnbit0 7 3dfb 20403e07 call mouse_clkn_check 3dfc 680246f9 fetch 4 ,mem_btclk_sensor 3dfd 6808c6fd fetcht 1 ,mem_wire_usb_interval 3dfe 98408400 iadd temp ,temp 3dff 1c427e00 copy clkn_bt ,pdata 3e00 98467c00 isub temp ,null 3e01 24610000 nrtn positive 3e02 600246f9 store 4 ,mem_btclk_sensor 3e03 20403f97 call mouse_motion 3e04 24740000 nrtn user 3e05 700d3804 jam 4 ,mem_usb_tx_enable 3e06 20203e0f branch mouse_wired_to_usb mouse_clkn_check: 3e07 680a46f9 fetcht 4 ,mem_btclk_sensor 3e08 1c427e00 copy clkn_bt ,pdata 3e09 98467c00 isub temp ,null 3e0a 24413e0c ncall mouse_clkn_timeout ,positive 3e0b 20600000 rtn mouse_clkn_timeout: 3e0c 58000000 setarg 0 3e0d 600246f9 store 4 ,mem_btclk_sensor 3e0e 20600000 rtn mouse_wired_to_usb: 3e0f 68008d38 fetch 1 ,mem_usb_tx_enable 3e10 c4010000 rtnbit0 2 3e11 20203e12 branch mouse_data_push mouse_data_push: 3e12 68108a04 hfetch 1 ,core_usb_addr 3e13 c4038000 rtnbit0 7 3e14 700d5220 jam usb_ep2_ms ,mem_usb_ep2_data 3e15 58000001 setarg ms_report_id 3e16 60008d54 store 1 ,mem_usb_mouse_data 3e17 6803c69a fetch 7 ,mem_mouse_key 3e18 e0a38000 istore 7 ,contw 3e19 20600000 rtn mouse_enable_clock_qdecoder: 3e1a 68110050 hfetch 2 ,core_clkoff 3e1b 793ffe0b set0 clock_off_qdecoder ,pdata 3e1c 60110050 hstore 2 ,core_clkoff 3e1d 20600000 rtn mouse_param_init: 3e1e 58008c00 setarg 0x8c00 3e1f 60014575 store 2 ,mem_ui_uuid_table 3e20 58008e7a setarg 0x8e7a 3e21 600144bc store 2 ,mem_ui_le_uuid_table 3e22 58002402 setarg 0x2402 3e23 600140bd store 2 ,mem_fcomp_mul 3e24 58002580 setarg 0x2580 3e25 6001c0aa store 3 ,mem_class 3e26 70417303 jam 3 ,mem_lpm_mult_timeout 3e27 70415608 jam 8 ,mem_lpm_overhead 3e28 7046d901 jam dpi_button_state_up ,mem_select_device_button_statue 3e29 58000200 setarg 0x0200 3e2a 60014154 store 2 ,mem_lpm_interval 3e2b 7044a617 jam 0x17 ,mem_le_local_mtu 3e2c 7044a817 jam 0x17 ,mem_le_remote_mtu 3e2d 58000a77 setarg 0x0a77 3e2e 60014212 store 2 ,mem_spi_init_clk 3e2f 38000306 setsect 0 ,0x306 3e30 38044440 setsect 1 ,0x4440 3e31 38090000 setsect 2 ,0x10000 3e32 380c4408 setsect 3 ,0x4408 3e33 6004c577 store 9 ,mem_all_uuid_16bits 3e34 38001224 setsect 0 ,0x1224 3e35 38044000 setsect 1 ,0x4000 3e36 38080000 setsect 2 ,0x0 3e37 e0a28000 istore 5 ,contw 3e38 3803ffff setsect 0 ,0x3ffff 3e39 3806fe23 setsect 1 ,0x2fe23 3e3a 380999d9 setsect 2 ,0x199d9 3e3b 380c020d setsect 3 ,0x20d 3e3c 60044098 store 8 ,mem_features 3e3d 5800012c setarg 0x012c 3e3e 60014707 store 2 ,mem_24g_pairing_timer_count 3e3f 204057a3 call le_modified_name 3e40 680246d3 fetch mouse_flag_len ,mem_mouse_flag 3e41 c40f8000 rtnbit0 mouse_enable_gpio_control_adc_sensor 3e42 20403e44 call mouse_sensor_set_angle 3e43 20203e4c branch mouse_select_adc mouse_sensor_set_angle: 3e44 6808c6f7 fetcht 1 ,mem_select_sensor_angle_gpio 3e45 204067fb call gpio_config_input 3e46 6808c6f7 fetcht 1 ,mem_select_sensor_angle_gpio 3e47 2040681d call gpio_get_bit 3e48 7046f603 jam mouse_3clk_angle ,mem_config_sensor_angle 3e49 20608000 rtn true 3e4a 7046f602 jam mouse_12clk_angle ,mem_config_sensor_angle 3e4b 20600000 rtn mouse_select_adc: 3e4c 6808c6f8 fetcht 1 ,mem_select_adc_gpio 3e4d 204067fb call gpio_config_input 3e4e 6808c6f8 fetcht 1 ,mem_select_adc_gpio 3e4f 2040681d call gpio_get_bit 3e50 70422d00 jam adc_config_vinlpm ,mem_adc_config_flag 3e51 20608000 rtn true 3e52 70422d02 jam adc_config_gpio ,mem_adc_config_flag 3e53 20600000 rtn mouse_adc_init: 3e54 6800c22d fetch 1 ,mem_adc_config_flag 3e55 c0003e59 beq adc_config_vinlpm ,mouse_adc_init_data_vinlpm 3e56 c000be62 beq adc_config_hvin ,mouse_adc_init_data_hvin 3e57 c0013e6b beq adc_config_gpio ,mouse_adc_init_data_io 3e58 20203e59 branch mouse_adc_init_data_vinlpm mouse_adc_init_data_vinlpm: 3e59 68094221 fetcht 2 ,mem_2v_adc_vinlpm_data 3e5a 68014227 fetch 2 ,mem_3v_adc_vinlpm_data 3e5b 98467e00 isub temp ,pdata 3e5c 1feffe14 mul32 pdata ,20 ,pdata 3e5d 1fe6fc64 div pdata ,100 3e5e 20407f86 call wait_div_end 3e5f 1807fe00 quotient pdata 3e60 600146d0 store 2 ,mem_adc_reference_voltage 3e61 20600000 rtn mouse_adc_init_data_hvin: 3e62 6809421f fetcht 2 ,mem_1v_adc_hvin_data 3e63 68014225 fetch 2 ,mem_5v_adc_hvin_data 3e64 98467e00 isub temp ,pdata 3e65 1feffee6 mul32 pdata ,230 ,pdata 3e66 1fe6fd90 div pdata ,400 3e67 20407f86 call wait_div_end 3e68 1807fe00 quotient pdata 3e69 600146d0 store 2 ,mem_adc_reference_voltage 3e6a 20600000 rtn mouse_adc_init_data_io: 3e6b 68014223 fetch 2 ,mem_1v_adc_io_data 3e6c 600146d0 store 2 ,mem_adc_reference_voltage 3e6d 20600000 rtn mouse_gpio_init: 3e6e 6808c23a fetcht 1 ,mem_eeprom_wp_gpio 3e6f 2040680e call gpio_config_output 3e70 204048fb call usb_offline_check_init 3e71 6808c6e2 fetcht 1 ,mem_lbutton_gpio 3e72 204067fb call gpio_config_input 3e73 6808c6e3 fetcht 1 ,mem_rbutton_gpio 3e74 204067fb call gpio_config_input 3e75 6808c6e4 fetcht 1 ,mem_mbutton_gpio 3e76 204067fb call gpio_config_input 3e77 6808c6f3 fetcht 1 ,mem_sensor_data_gpio 3e78 204067fb call gpio_config_input 3e79 6808c6dc fetcht 1 ,mem_sensor_reset_gpio 3e7a 2040680e call gpio_config_output 3e7b 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio 3e7c 204067fb call gpio_config_input 3e7d 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio 3e7e 204067fb call gpio_config_input 3e7f 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio 3e80 204067fb call gpio_config_input 3e81 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio 3e82 204067fb call gpio_config_input 3e83 6808c6e5 fetcht 1 ,mem_bk_button_gpio 3e84 204067fb call gpio_config_input 3e85 6808c6e6 fetcht 1 ,mem_fw_button_gpio 3e86 204067fb call gpio_config_input 3e87 6808c6ef fetcht 1 ,mem_config_low_voltage_alarm_gpio 3e88 2040680e call gpio_config_output 3e89 6808c6f0 fetcht 1 ,mem_config_device1_led_gpio 3e8a 2040680e call gpio_config_output 3e8b 6808c6f1 fetcht 1 ,mem_config_device2_led_gpio 3e8c 2040680e call gpio_config_output 3e8d 6808c6f2 fetcht 1 ,mem_config_device3_led_gpio 3e8e 2040680e call gpio_config_output 3e8f 6808c6f4 fetcht 1 ,mem_dpi_led_gpio 3e90 2040680e call gpio_config_output 3e91 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio 3e92 204067fb call gpio_config_input 3e93 6808c6ec fetcht 1 ,mem_config_bt_button_gpio 3e94 204067fb call gpio_config_input 3e95 6808c6e7 fetcht 1 ,mem_dpi_button_gpio 3e96 202067fb branch gpio_config_input mouse_wheel_gpio_set_wake: 3e97 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio 3e98 204067dd call gpio_set_wake_by_current_state 3e99 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio 3e9a 204067dd call gpio_set_wake_by_current_state 3e9b 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio 3e9c 204067dd call gpio_set_wake_by_current_state 3e9d 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio 3e9e 202067dd branch gpio_set_wake_by_current_state mouse_before_hibernate_wheel_gpio_set: 3e9f 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio 3ea0 20403ea7 call mouse_gpio_set_pupd_by_input 3ea1 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio 3ea2 20403ea7 call mouse_gpio_set_pupd_by_input 3ea3 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio 3ea4 20403ea7 call mouse_gpio_set_pupd_by_input 3ea5 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio 3ea6 20203ea7 branch mouse_gpio_set_pupd_by_input mouse_gpio_set_pupd_by_input: 3ea7 18467cff sub temp ,ui_button_gpio_disable ,null 3ea8 20628000 rtn zero 3ea9 18410e7f and temp ,0x7f ,queue 3eaa 6812011c hfetch 4 ,core_gpio_in 3eab afefffff qisolate1 pdata 3eac 68120078 hfetch 4 ,core_gpio_pu0 3ead f920fe00 qsetflag true ,pdata 3eae 60120078 hstore 4 ,core_gpio_pu0 3eaf 6812007c hfetch 4 ,core_gpio_pd0 3eb0 fd20fe00 nqsetflag true ,pdata 3eb1 6012007c hstore 4 ,core_gpio_pd0 3eb2 20600000 rtn mouse_before_hibernate: 3eb3 78347c00 enable user 3eb4 68120138 hfetch 4 ,0x8138 3eb5 79347e1a setflag user ,26 ,pdata 3eb6 6012004c hstore 4 ,core_lpm_reg 3eb7 20402c21 call lpm_write_ctrl 3eb8 20404482 call mouse_devce_led_off 3eb9 20403e9f call mouse_before_hibernate_wheel_gpio_set 3eba 20203ebf branch mouse_lpm_before_common mouse_process_lpm_before: 3ebb 20403ebf call mouse_lpm_before_common 3ebc 680080a0 fetch 1 ,mem_lpm_current_mult 3ebd 247a0000 nrtn blank 3ebe 202067ed branch gpio_clr_wake mouse_lpm_before_common: 3ebf 20403ee0 call mouse_wheel_check 3ec0 d8400019 arg mouse_spi1_clk_gpio ,temp 3ec1 680246d3 fetch mouse_flag_len ,mem_mouse_flag 3ec2 2feffe12 isolate1 mouse_enable_spi2 ,pdata 3ec3 2040bede call mouse_spi_clk_gpio ,true 3ec4 2040680e call gpio_config_output 3ec5 204063ee call twspi_disable 3ec6 6808c6e2 fetcht 1 ,mem_lbutton_gpio 3ec7 204067dd call gpio_set_wake_by_current_state 3ec8 6808c6e3 fetcht 1 ,mem_rbutton_gpio 3ec9 204067dd call gpio_set_wake_by_current_state 3eca 6808c6e4 fetcht 1 ,mem_mbutton_gpio 3ecb 204067dd call gpio_set_wake_by_current_state 3ecc 6808c6e5 fetcht 1 ,mem_bk_button_gpio 3ecd 204067dd call gpio_set_wake_by_current_state 3ece 6808c6e6 fetcht 1 ,mem_fw_button_gpio 3ecf 204067dd call gpio_set_wake_by_current_state 3ed0 6808c6e7 fetcht 1 ,mem_dpi_button_gpio 3ed1 204067dd call gpio_set_wake_by_current_state 3ed2 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio 3ed3 204067dd call gpio_set_wake_by_current_state 3ed4 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio 3ed5 204067dd call gpio_set_wake_by_current_state 3ed6 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio 3ed7 204067dd call gpio_set_wake_by_current_state 3ed8 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio 3ed9 204067dd call gpio_set_wake_by_current_state 3eda 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio 3edb 204067dd call gpio_set_wake_by_current_state 3edc 6808c6f3 fetcht 1 ,mem_sensor_data_gpio 3edd 202067e1 branch gpio_set_wake mouse_spi_clk_gpio: 3ede d840001e arg mouse_spi2_clk_gpio ,temp 3edf 20600000 rtn mouse_wheel_check: 3ee0 44f2401c bpatch patch1c_4 ,mem_patch1c 3ee1 20403eee call mouse_t_wheel_scan 3ee2 20403f36 call mouse_wheel_scan 3ee3 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel 3ee4 6808c6b7 fetcht 1 ,mem_wheel_tb_old_pinlevel 3ee5 6000c6b7 store 1 ,mem_wheel_tb_old_pinlevel 3ee6 98467c00 isub temp ,null 3ee7 2422b3d4 nbranch app_lpm_wake_auto_lock ,zero 3ee8 6800c6be fetch 1 ,mem_mwheel_b_new_pinlevel 3ee9 6808c6bd fetcht 1 ,mem_mwheel_b_old_pinlevel 3eea 6000c6bd store 1 ,mem_mwheel_b_old_pinlevel 3eeb 98467c00 isub temp ,null 3eec 2422b3d4 nbranch app_lpm_wake_auto_lock ,zero 3eed 20600000 rtn mouse_t_wheel_scan: 3eee 6800c6ea fetch 1 ,mem_whee_ta_data_gpio 3eef c17f8000 rtneq gpio_disable 3ef0 da200000 arg 0 ,rega 3ef1 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio 3ef2 2040681d call gpio_get_bit 3ef3 7920a200 setflag true ,0 ,rega 3ef4 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio 3ef5 2040681d call gpio_get_bit 3ef6 7920a201 setflag true ,1 ,rega 3ef7 1a227e00 copy rega ,pdata 3ef8 6000c6b8 store 1 ,mem_wheel_tb_new_pinlevel 3ef9 c000befe beq 0x01 ,mouse_t_wheel_scan_judge1 3efa c0013f02 beq 0x02 ,mouse_t_wheel_scan_judge2 3efb 6800c6b9 fetch 1 ,mem_wheel_tog 3efc c283bf0e bbit1 7 ,mouse_t_wheel_scan_judge3 3efd 20600000 rtn mouse_t_wheel_scan_judge1: 3efe 6800c6b7 fetch 1 ,mem_wheel_tb_old_pinlevel 3eff c0003f06 beq 0 ,mouse_t_wheel_scan_judge11 3f00 c001bf08 beq 3 ,mouse_t_wheel_scan_judge12 3f01 20600000 rtn mouse_t_wheel_scan_judge2: 3f02 6800c6b7 fetch 1 ,mem_wheel_tb_old_pinlevel 3f03 c0003f0a beq 0 ,mouse_t_wheel_scan_judge21 3f04 c001bf0c beq 3 ,mouse_t_wheel_scan_judge22 3f05 20600000 rtn mouse_t_wheel_scan_judge11: 3f06 7046b982 jam 0x82 ,mem_wheel_tog 3f07 20600000 rtn mouse_t_wheel_scan_judge12: 3f08 7046b981 jam 0x81 ,mem_wheel_tog 3f09 20600000 rtn mouse_t_wheel_scan_judge21: 3f0a 7046b980 jam 0x80 ,mem_wheel_tog 3f0b 20600000 rtn mouse_t_wheel_scan_judge22: 3f0c 7046b983 jam 0x83 ,mem_wheel_tog 3f0d 20600000 rtn mouse_t_wheel_scan_judge3: 3f0e 6800c6b9 fetch 1 ,mem_wheel_tog 3f0f 793ffe07 set0 7 ,pdata 3f10 6000c6b9 store 1 ,mem_wheel_tog 3f11 c0003f16 beq 0 ,mouse_t_wheel_scan_judge30 3f12 c000bf19 beq 1 ,mouse_t_wheel_scan_judge31 3f13 c0013f1c beq 2 ,mouse_t_wheel_scan_judge32 3f14 c001bf1f beq 3 ,mouse_t_wheel_scan_judge33 3f15 20600000 rtn mouse_t_wheel_scan_judge30: 3f16 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel 3f17 c001bf22 beq 3 ,mouse_wheel_t_forward 3f18 20600000 rtn mouse_t_wheel_scan_judge31: 3f19 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel 3f1a c0003f22 beq 0 ,mouse_wheel_t_forward 3f1b 20600000 rtn mouse_t_wheel_scan_judge32: 3f1c 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel 3f1d c001bf2c beq 3 ,mouse_wheel_t_back 3f1e 20600000 rtn mouse_t_wheel_scan_judge33: 3f1f 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel 3f20 c0003f2c beq 0 ,mouse_wheel_t_back 3f21 20600000 rtn mouse_wheel_t_forward: 3f22 6800c6bc fetch 1 ,mem_mouse_tz_data_count1 3f23 1fe0fe01 increase 1 ,pdata 3f24 6000c6bc store 1 ,mem_mouse_tz_data_count1 3f25 1fe67c01 sub pdata ,1 ,null 3f26 20610000 rtn positive 3f27 7046bc00 jam 0 ,mem_mouse_tz_data_count1 3f28 6800c6ba fetch 1 ,mem_mouse_tz_data 3f29 1fe0fe01 increase 1 ,pdata 3f2a 6000c6ba store 1 ,mem_mouse_tz_data 3f2b 20600000 rtn mouse_wheel_t_back: 3f2c 6800c6bb fetch 1 ,mem_mouse_tz_data_count 3f2d 1fe0fe01 increase 1 ,pdata 3f2e 6000c6bb store 1 ,mem_mouse_tz_data_count 3f2f 1fe67c01 sub pdata ,1 ,null 3f30 20610000 rtn positive 3f31 7046bb00 jam 0 ,mem_mouse_tz_data_count 3f32 6800c6ba fetch 1 ,mem_mouse_tz_data 3f33 1fe0ffff increase -1 ,pdata 3f34 6000c6ba store 1 ,mem_mouse_tz_data 3f35 20600000 rtn mouse_wheel_scan: 3f36 6800c6e8 fetch 1 ,mem_whee_a_data_gpio 3f37 c17f8000 rtneq gpio_disable 3f38 da200000 arg 0 ,rega 3f39 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio 3f3a 2040681d call gpio_get_bit 3f3b 7920a200 setflag true ,0 ,rega 3f3c 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio 3f3d 2040681d call gpio_get_bit 3f3e 7920a201 setflag true ,1 ,rega 3f3f 1a227e00 copy rega ,pdata 3f40 6000c6be store 1 ,mem_mwheel_b_new_pinlevel 3f41 c000bf46 beq 0x01 ,mouse_wheel_scan_judge1 3f42 c0013f4a beq 0x02 ,mouse_wheel_scan_judge2 3f43 6800c6bf fetch 1 ,mem_mwheel_tog 3f44 c283bf56 bbit1 7 ,mouse_wheel_scan_judge3 3f45 20600000 rtn mouse_wheel_scan_judge1: 3f46 6800c6bd fetch 1 ,mem_mwheel_b_old_pinlevel 3f47 c0003f4e beq 0 ,mouse_wheel_scan_judge11 3f48 c001bf50 beq 3 ,mouse_wheel_scan_judge12 3f49 20600000 rtn mouse_wheel_scan_judge2: 3f4a 6800c6bd fetch 1 ,mem_mwheel_b_old_pinlevel 3f4b c0003f52 beq 0 ,mouse_wheel_scan_judge21 3f4c c001bf54 beq 3 ,mouse_wheel_scan_judge22 3f4d 20600000 rtn mouse_wheel_scan_judge11: 3f4e 7046bf82 jam 0x82 ,mem_mwheel_tog 3f4f 20600000 rtn mouse_wheel_scan_judge12: 3f50 7046bf81 jam 0x81 ,mem_mwheel_tog 3f51 20600000 rtn mouse_wheel_scan_judge21: 3f52 7046bf80 jam 0x80 ,mem_mwheel_tog 3f53 20600000 rtn mouse_wheel_scan_judge22: 3f54 7046bf83 jam 0x83 ,mem_mwheel_tog 3f55 20600000 rtn mouse_wheel_scan_judge3: 3f56 6800c6bf fetch 1 ,mem_mwheel_tog 3f57 793ffe07 set0 7 ,pdata 3f58 6000c6bf store 1 ,mem_mwheel_tog 3f59 c0003f5e beq 0 ,mouse_wheel_scan_judge30 3f5a c000bf61 beq 1 ,mouse_wheel_scan_judge31 3f5b c0013f64 beq 2 ,mouse_wheel_scan_judge32 3f5c c001bf67 beq 3 ,mouse_wheel_scan_judge33 3f5d 20600000 rtn mouse_wheel_scan_judge30: 3f5e 6800c6be fetch 1 ,mem_mwheel_b_new_pinlevel 3f5f c001bf6a beq 3 ,mouse_wheel_forward 3f60 20600000 rtn mouse_wheel_scan_judge31: 3f61 6800c6be fetch 1 ,mem_mwheel_b_new_pinlevel 3f62 c0003f6a beq 0 ,mouse_wheel_forward 3f63 20600000 rtn mouse_wheel_scan_judge32: 3f64 6800c6be fetch 1 ,mem_mwheel_b_new_pinlevel 3f65 c001bf6f beq 3 ,mouse_wheel_back 3f66 20600000 rtn mouse_wheel_scan_judge33: 3f67 6800c6be fetch 1 ,mem_mwheel_b_new_pinlevel 3f68 c0003f6f beq 0 ,mouse_wheel_back 3f69 20600000 rtn mouse_wheel_forward: 3f6a 7046c200 jam 0 ,mem_mouse_z_data_count1 3f6b 6800c6c0 fetch 1 ,mem_mouse_z_data 3f6c 1fe0fe01 increase 1 ,pdata 3f6d 6000c6c0 store 1 ,mem_mouse_z_data 3f6e 20600000 rtn mouse_wheel_back: 3f6f 7046c100 jam 0 ,mem_mouse_z_data_count 3f70 6800c6c0 fetch 1 ,mem_mouse_z_data 3f71 1fe0ffff increase -1 ,pdata 3f72 6000c6c0 store 1 ,mem_mouse_z_data 3f73 20600000 rtn mouse_hid_connected: 3f74 58000002 setarg hid_handshake_timeout 3f75 6000c680 store 1 ,mem_hid_handshake_timer_count 3f76 20600000 rtn mouse_send_process: 3f77 6800c1e2 fetch 1 ,mem_app_handshake_flag 3f78 207a0000 rtn blank 3f79 20405271 call l2cap_malloc_is_fifo_nearly_full 3f7a 247a0000 nrtn blank 3f7b 680246d3 fetch mouse_flag_len ,mem_mouse_flag 3f7c c281bf8a bbit1 mosue_24g_pairing_flag ,mouse_send_empty_data 3f7d c2803f8a bbit1 mouse_select_device_flag ,mouse_send_empty_data 3f7e c282bf8a bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data 3f7f 20403f97 call mouse_motion 3f80 24740000 nrtn user mouse_send_data: 3f81 da200009 arg 9 ,rega 3f82 20404d63 call hid_malloc_tx_buff 3f83 6801424e fetch 2 ,mem_hid_int_remote_cid 3f84 e0a10000 istore 2 ,contw 3f85 580002a1 setarg 0x02a1 3f86 e0a10000 istore 2 ,contw 3f87 6803c69a fetch 7 ,mem_mouse_key 3f88 e0a38000 istore 7 ,contw 3f89 20600000 rtn mouse_send_empty_data: 3f8a 58000000 setarg 0 3f8b 6003c69a store 7 ,mem_mouse_key 3f8c 20203f81 branch mouse_send_data mouse_no_data_timer_init: 3f8d 680146aa fetch 2 ,mem_mouse_no_data_timeout 3f8e 600146b0 store 2 ,mem_mouse_no_data_timer 3f8f 20600000 rtn mouse_fill_data_le: 3f90 44f2c01c bpatch patch1c_5 ,mem_patch1c 3f91 da200007 arg 7 ,rega 3f92 6809446f fetcht 2 ,mem_le_notify_handle 3f93 20405a64 call le_att_malloc_tx_notify 3f94 6803c69a fetch 7 ,mem_mouse_key 3f95 e0a38000 istore 7 ,contw 3f96 20600000 rtn mouse_motion: 3f97 44f3401c bpatch patch1c_6 ,mem_patch1c 3f98 78547c00 disable user 3f99 58000000 setarg 0 3f9a 6003469b store 6 ,mem_mouse_x 3f9b 20403fb5 call mouse_cheak_sensor_data 3f9c 20404079 call mouse_zwheel 3f9d 2040407e call mouse_t_zwheel 3f9e 20404099 call mouse_key 3f9f 24740000 nrtn user 3fa0 20403f8d call mouse_no_data_timer_init 3fa1 d8e00008 arg mouse_statue_up_flag ,queue 3fa2 202043ce branch mouse_enable_function_flag motion_6clk_direction_dispose: 3fa3 6801469b fetch 2 ,mem_mouse_x 3fa4 1fe67e00 sub pdata ,0 ,pdata 3fa5 6001469b store 2 ,mem_mouse_x 3fa6 20207fe7 branch enable_user motion_12clk_direction_dispose: 3fa7 6801469d fetch 2 ,mem_mouse_y 3fa8 1fe67e00 sub pdata ,0 ,pdata 3fa9 6001469d store 2 ,mem_mouse_y 3faa 20207fe7 branch enable_user motion_9clk_direction_dispose: 3fab 6801469d fetch 2 ,mem_mouse_y 3fac 1fe67e00 sub pdata ,0 ,pdata 3fad 6001469d store 2 ,mem_mouse_y 3fae 6801469b fetch 2 ,mem_mouse_x 3faf 1fe67e00 sub pdata ,0 ,pdata 3fb0 6001469b store 2 ,mem_mouse_x 3fb1 20404002 call mouse_sensor_data_swap_places 3fb2 20207fe7 branch enable_user motion_3clk_direction_dispose: 3fb3 20404002 call mouse_sensor_data_swap_places 3fb4 20207fe7 branch enable_user mouse_cheak_sensor_data: 3fb5 6800c239 fetch 1 ,mem_spi_write_flash_sm 3fb6 c1800000 rtnne flash_sm_no_buys 3fb7 6800c6e0 fetch 1 ,mem_config_sensor_type 3fb8 c0003fe2 beq p3205 ,mouse_p32xx_sensor_motion 3fb9 c000bfe2 beq p3065 ,mouse_p32xx_sensor_motion 3fba c0013fe2 beq ka8 ,mouse_p32xx_sensor_motion 3fbb c001bfe2 beq p3204 ,mouse_p32xx_sensor_motion 3fbc c0023fc4 beq p3212 ,mouse_p3212_sensor_motion 3fbd c002c010 beq p3610 ,mouse_p3610_sensor_motion 3fbe c0033fe2 beq p3065_xy ,mouse_p32xx_sensor_motion 3fbf 20203fe2 branch mouse_p32xx_sensor_motion mouse_clear_sensor_data: 3fc0 6800c6a7 fetch 1 ,mem_mouse_move_flag 3fc1 205a405d call mouse_read_sensor_common ,blank 3fc2 7046a701 jam 1 ,mem_mouse_move_flag 3fc3 20600000 rtn mouse_p3212_sensor_motion: 3fc4 20403fc0 call mouse_clear_sensor_data 3fc5 6808c6f3 fetcht 1 ,mem_sensor_data_gpio 3fc6 2040681d call gpio_get_bit 3fc7 24608000 nrtn true 3fc8 58000000 setarg pan_reg_pid_l 3fc9 20406414 call twspi_read 3fca c09840d1 bne p32xx_id1 ,mouse_twspi_reset 3fcb 58000002 setarg pan_reg_motion_staus 3fcc 20406414 call twspi_read 3fcd c4038000 rtnbit0 7 3fce 2040405d call mouse_read_sensor_common 3fcf 20403fde call mouse_read_3212sensor_xy_high 3fd0 6000c6a1 store 1 ,mem_mouse_xy_h 3fd1 1ff1fe00 rshift4 pdata ,pdata 3fd2 20404169 call extsign_bit3 3fd3 6000c69c store 1 ,mem_mouse_x + 1 3fd4 6800c6a1 fetch 1 ,mem_mouse_xy_h 3fd5 1fe17e0f and pdata ,0x0f ,pdata 3fd6 20404169 call extsign_bit3 3fd7 6000c69e store 1 ,mem_mouse_y + 1 3fd8 6800c6f6 fetch 1 ,mem_config_sensor_angle 3fd9 c0003fa3 beq mouse_6clk_angle ,motion_6clk_direction_dispose 3fda c000bfab beq mouse_9clk_angle ,motion_9clk_direction_dispose 3fdb c0013fa7 beq mouse_12clk_angle ,motion_12clk_direction_dispose 3fdc c001bfb3 beq mouse_3clk_angle ,motion_3clk_direction_dispose 3fdd 20600000 rtn mouse_read_3212sensor_xy_high: 3fde 58000012 setarg 0x12 3fdf 20206414 branch twspi_read mouse_p3065_judge: 3fe0 c018bfea beq p3065_id1 ,mouse_p32xx_sensor_motion_1 3fe1 202040d1 branch mouse_twspi_reset mouse_p32xx_sensor_motion: 3fe2 20403fc0 call mouse_clear_sensor_data 3fe3 78547c00 disable user 3fe4 6808c6f3 fetcht 1 ,mem_sensor_data_gpio 3fe5 2040681d call gpio_get_bit 3fe6 24608000 nrtn true 3fe7 58000000 setarg pan_reg_pid_l 3fe8 20406414 call twspi_read 3fe9 c0983fe0 bne p32xx_id1 ,mouse_p3065_judge mouse_p32xx_sensor_motion_1: 3fea 58000002 setarg pan_reg_motion_staus 3feb 20406414 call twspi_read 3fec c4038000 rtnbit0 7 3fed 2040405d call mouse_read_sensor_common 3fee 6800c69b fetch 1 ,mem_mouse_x 3fef 20404165 call extsign 3ff0 6001469b store 2 ,mem_mouse_x 3ff1 6800c69d fetch 1 ,mem_mouse_y 3ff2 20404165 call extsign 3ff3 6001469d store 2 ,mem_mouse_y 3ff4 6800c6f6 fetch 1 ,mem_config_sensor_angle 3ff5 c0003ffa beq mouse_6clk_angle ,motion32xx_6clk_direction_selection 3ff6 c000bffc beq mouse_9clk_angle ,motion32xx_9clk_direction_selection 3ff7 c0013ffe beq mouse_12clk_angle ,motion32xx_12clk_direction_selection 3ff8 c001c000 beq mouse_3clk_angle ,motion32xx_3clk_direction_selection 3ff9 20600000 rtn motion32xx_6clk_direction_selection: 3ffa 20403fa3 call motion_6clk_direction_dispose 3ffb 202040b3 branch mouse_sensor_sdio_low motion32xx_9clk_direction_selection: 3ffc 20403fab call motion_9clk_direction_dispose 3ffd 202040b3 branch mouse_sensor_sdio_low motion32xx_12clk_direction_selection: 3ffe 20403fa7 call motion_12clk_direction_dispose 3fff 202040b3 branch mouse_sensor_sdio_low motion32xx_3clk_direction_selection: 4000 20403fb3 call motion_3clk_direction_dispose 4001 202040b3 branch mouse_sensor_sdio_low mouse_sensor_data_swap_places: 4002 6801469d fetch 2 ,mem_mouse_y 4003 6809469b fetcht 2 ,mem_mouse_x 4004 6001469b store 2 ,mem_mouse_x 4005 6009469d storet 2 ,mem_mouse_y 4006 20600000 rtn mouse_p3610sensor_read: 4007 2040640f call spi_ncs_enable 4008 20000064 nop 100 4009 1a427e00 copy regb ,pdata 400a 20406414 call twspi_read 400b 1fe22400 copy pdata ,regb 400c 20406411 call spi_ncs_disable 400d 20000064 nop 100 400e 1a427e00 copy regb ,pdata 400f 20600000 rtn mouse_p3610_sensor_motion: 4010 78547c00 disable user 4011 6808c6f3 fetcht 1 ,mem_sensor_data_gpio 4012 2040681d call gpio_get_bit 4013 24608000 nrtn true 4014 da400002 arg pan_reg_motion_staus ,regb 4015 20404007 call mouse_p3610sensor_read 4016 c4038000 rtnbit0 7 4017 da400000 arg pan_reg_pid_l ,regb 4018 20404007 call mouse_p3610sensor_read 4019 6000c6dd store 1 ,mem_sensor_id1 401a c09f4145 bne p3610_id1 ,mouse_init_3610sensor_reset 401b 6800c6a7 fetch 1 ,mem_mouse_move_flag 401c 205a4039 call mouse_read_sensor3610_data ,blank 401d 7046a701 jam 1 ,mem_mouse_move_flag 401e 20404039 call mouse_read_sensor3610_data 401f 6800c6a1 fetch 1 ,mem_mouse_xy_h 4020 1ff1fe00 rshift4 pdata ,pdata 4021 20404169 call extsign_bit3 4022 6000c69c store 1 ,mem_mouse_x + 1 4023 6800c6a1 fetch 1 ,mem_mouse_xy_h 4024 1fe17e0f and pdata ,0x0f ,pdata 4025 20404169 call extsign_bit3 4026 6000c69e store 1 ,mem_mouse_y + 1 4027 6800c6f6 fetch 1 ,mem_config_sensor_angle 4028 c0004031 beq 0 ,motion3610_6clk_direction_selection 4029 c000c035 beq 1 ,motion3610_9clk_direction_selection 402a c0014033 beq 2 ,motion3610_12clk_direction_selection 402b c001c037 beq 3 ,motion3610_3clk_direction_selection 402c 20600000 rtn mouse_3610_smart_select: 402d 6800c6a4 fetch 1 ,mem_sensor_smart_flag 402e c0004051 beq p3610_smart_enable ,mouse_3610_smart_disable 402f c000c045 beq p3610_smart_disable ,mouse_3610_smart_enable 4030 20600000 rtn motion3610_6clk_direction_selection: 4031 20403fa3 call motion_6clk_direction_dispose 4032 2020402d branch mouse_3610_smart_select motion3610_12clk_direction_selection: 4033 20403fa7 call motion_12clk_direction_dispose 4034 2020402d branch mouse_3610_smart_select motion3610_9clk_direction_selection: 4035 20403fab call motion_9clk_direction_dispose 4036 2020402d branch mouse_3610_smart_select motion3610_3clk_direction_selection: 4037 20403fb3 call motion_3clk_direction_dispose 4038 2020402d branch mouse_3610_smart_select mouse_read_sensor3610_data: 4039 2040640f call spi_ncs_enable 403a 2040405d call mouse_read_sensor_common 403b dfe00005 arg 5 ,pdata 403c 20406414 call twspi_read 403d 6000c6a1 store 1 ,mem_mouse_xy_h 403e dfe00007 arg 7 ,pdata 403f 20406414 call twspi_read 4040 6000c6a2 store 1 ,mem_sensor_shutter_hi 4041 dfe00008 arg 8 ,pdata 4042 20406414 call twspi_read 4043 6000c6a3 store 1 ,mem_sensor_shutter_lo 4044 20206411 branch spi_ncs_disable mouse_3610_smart_enable: 4045 6800c6a2 fetch 1 ,mem_sensor_shutter_hi 4046 c1800000 rtnne 0 4047 6800c6a3 fetch 1 ,mem_sensor_shutter_lo 4048 1fe67c2d sub pdata ,45 ,null 4049 20610000 rtn positive 404a 7046a400 jam p3610_smart_enable ,mem_sensor_smart_flag 404b 5800ba41 setarg 0xba41 404c 20406405 call sensor_write 404d 58000032 setarg 0x0032 404e 20406405 call sensor_write 404f 5800b541 setarg 0xb541 4050 20206405 branch sensor_write mouse_3610_smart_disable: 4051 6800c6a2 fetch 1 ,mem_sensor_shutter_hi 4052 c1800000 rtnne 0 4053 6800c6a3 fetch 1 ,mem_sensor_shutter_lo 4054 1fe67c2d sub pdata ,45 ,null 4055 24610000 nrtn positive 4056 7046a401 jam p3610_smart_disable ,mem_sensor_smart_flag 4057 5800ba41 setarg 0xba41 4058 20406405 call sensor_write 4059 58008032 setarg 0x8032 405a 20406405 call sensor_write 405b 5800b541 setarg 0xb541 405c 20206405 branch sensor_write mouse_read_sensor_common: 405d dfe00003 arg pan_reg_delta_x ,pdata 405e 20406414 call twspi_read 405f 6001469b store 2 ,mem_mouse_x 4060 dfe00004 arg pan_reg_delta_y ,pdata 4061 20406414 call twspi_read 4062 6001469d store 2 ,mem_mouse_y 4063 20600000 rtn mouse_set_qdecoder_x: 4064 d840001b arg mouse_default_xa_gpio ,temp 4065 204067fb call gpio_config_input 4066 d840001b arg mouse_default_xa_gpio ,temp 4067 2040681d call gpio_get_bit 4068 20608000 rtn true 4069 68108109 hfetch 1 ,core_qdec_cntx 406a 79207e04 set1 4 ,pdata 406b 60108109 hstore 1 ,core_qdec_cntx 406c 20600000 rtn mouse_hardware_zwheel: 406d 6808c6c0 fetcht 1 ,mem_mouse_z_data 406e 68108109 hfetch 1 ,core_qdec_cntx 406f 9840fe00 iadd temp ,pdata 4070 207a0000 rtn blank 4071 6000c69f store 1 ,mem_mouse_z 4072 7046c000 jam 0 ,mem_mouse_z_data 4073 20207fe7 branch enable_user mouse_hardware_zwheel_beforelpm: 4074 6808c6c0 fetcht 1 ,mem_mouse_z_data 4075 68108109 hfetch 1 ,core_qdec_cntx 4076 9840fe00 iadd temp ,pdata 4077 6000c6c0 store 1 ,mem_mouse_z_data 4078 20600000 rtn mouse_zwheel: 4079 6800c6c0 fetch 1 ,mem_mouse_z_data 407a 207a0000 rtn blank 407b 6000c69f store 1 ,mem_mouse_z 407c 7046c000 jam 0 ,mem_mouse_z_data 407d 20207fe7 branch enable_user mouse_t_zwheel: 407e 6800c6ba fetch 1 ,mem_mouse_tz_data 407f 207a0000 rtn blank 4080 6000c6a0 store 1 ,mem_mouse_tz 4081 7046ba00 jam 0 ,mem_mouse_tz_data 4082 20207fe7 branch enable_user mouse_check_key_gpio: 4083 da200000 arg 0 ,rega 4084 6808c6e2 fetcht 1 ,mem_lbutton_gpio 4085 2040681d call gpio_get_bit 4086 7920a200 setflag true ,0 ,rega 4087 6808c6e3 fetcht 1 ,mem_rbutton_gpio 4088 2040681d call gpio_get_bit 4089 7920a201 setflag true ,1 ,rega 408a 6808c6e4 fetcht 1 ,mem_mbutton_gpio 408b 2040681d call gpio_get_bit 408c 7920a202 setflag true ,2 ,rega 408d 20404090 call mouse_check_s_key_gpio mouse_check_key_gpio_output: 408e 1a227e00 copy rega ,pdata 408f 20600000 rtn mouse_check_s_key_gpio: 4090 6800c6e5 fetch 1 ,mem_bk_button_gpio 4091 c17f8000 rtneq gpio_disable 4092 6808c6e5 fetcht 1 ,mem_bk_button_gpio 4093 2040681d call gpio_get_bit 4094 7920a203 setflag true ,3 ,rega 4095 6808c6e6 fetcht 1 ,mem_fw_button_gpio 4096 2040681d call gpio_get_bit 4097 7920a204 setflag true ,4 ,rega 4098 20600000 rtn mouse_key: 4099 20404083 call mouse_check_key_gpio 409a 204040a8 call mouse_set_mult 409b 204040a3 call mouse_24g_key 409c 1a227e00 copy rega ,pdata 409d 6808c69a fetcht 1 ,mem_mouse_key 409e 6000c69a store 1 ,mem_mouse_key 409f 9842fe00 ixor temp ,pdata 40a0 1fe67c00 sub pdata ,0 ,null 40a1 20628000 rtn zero 40a2 20207fe7 branch enable_user mouse_24g_key: 40a3 c6930000 rtnmark0 mark_24g 40a4 1a227e00 copy rega ,pdata 40a5 207a0000 rtn blank 40a6 6000c69a store 1 ,mem_mouse_key 40a7 20207fe7 branch enable_user mouse_set_mult: 40a8 68014682 fetch 2 ,mem_ui_state_map 40a9 c284c0ad bbit1 ui_state_ble_connected ,mouse_set_ble_mult 40aa 68014682 fetch 2 ,mem_ui_state_map 40ab c28040b0 bbit1 ui_state_bt_connected ,mouse_set_bt_mult 40ac 20600000 rtn mouse_set_ble_mult: 40ad 1a227e00 copy rega ,pdata 40ae 243a5820 nbranch le_set_config_short_mult ,blank 40af 20205822 branch le_clr_config_short_mult mouse_set_bt_mult: 40b0 1a227e00 copy rega ,pdata 40b1 243a2bc7 nbranch classic_bt_set_mult_short_flag ,blank 40b2 20202bc9 branch classic_bt_clr_mult_short_flag mouse_sensor_sdio_low: 40b3 44f3c01c bpatch patch1c_7 ,mem_patch1c 40b4 d840001a arg mouse_spi1_sdio_gpio ,temp 40b5 680246d3 fetch mouse_flag_len ,mem_mouse_flag 40b6 2feffe12 isolate1 mouse_enable_spi2 ,pdata 40b7 2040c0be call mouse_sensor_sdio_low2 ,true 40b8 2040681d call gpio_get_bit 40b9 20608000 rtn true 40ba 5800000a setarg 0x0a 40bb 20406414 call twspi_read 40bc 200003e8 nop 1000 40bd 202040b3 branch mouse_sensor_sdio_low mouse_sensor_sdio_low2: 40be d840001f arg mouse_spi2_sdio_gpio ,temp 40bf 20600000 rtn mouse_spi_sdio_gpio_pollup: 40c0 680246d3 fetch mouse_flag_len ,mem_mouse_flag 40c1 c28940c4 bbit1 mouse_enable_spi2 ,mouse_spi2_sdio_gpio_pollup mouse_spi1_sdio_gpio_pollup: 40c2 d840001a arg mouse_spi1_sdio_gpio ,temp 40c3 202067fe branch gpio_config_input_without_wake mouse_spi2_sdio_gpio_pollup: 40c4 d840001f arg mouse_spi2_sdio_gpio ,temp 40c5 202067fe branch gpio_config_input_without_wake mouse_init_sunt: 40c6 20403d36 call mouse_spi_init 40c7 20758000 rtn wake 40c8 204040c0 call mouse_spi_sdio_gpio_pollup 40c9 6800c6e0 fetch 1 ,mem_config_sensor_type 40ca c002c0d5 beq p3610 ,mouse_init_3610sensor mouse_init_sensor: 40cb 204040d9 call mouse_read_sensor_id 40cc c01840e0 beq p32xx_id1 ,mouse_init_p32xx_id2_judge 40cd c018c0ea beq p3065_id1 ,mouse_p3065_init_param 40ce 204040d1 call mouse_twspi_reset 40cf 200003e8 nop 1000 40d0 202040cb branch mouse_init_sensor mouse_twspi_reset: 40d1 44f4401d bpatch patch1d_0 ,mem_patch1d 40d2 680246d3 fetch mouse_flag_len ,mem_mouse_flag 40d3 c28963e0 bbit1 mouse_enable_spi2 ,twspi_reset2 40d4 202063d1 branch twspi_reset mouse_init_3610sensor: 40d5 204040d9 call mouse_read_sensor_id 40d6 c01f414b beq p3610_id1 ,mouse_init_p3610 40d7 20404145 call mouse_init_3610sensor_reset 40d8 202040d5 branch mouse_init_3610sensor mouse_read_sensor_id: 40d9 58000001 setarg pan_reg_pid_h 40da 20406414 call twspi_read 40db 6000c6de store 1 ,mem_sensor_id2 40dc 58000000 setarg pan_reg_pid_l 40dd 20406414 call twspi_read 40de 6000c6dd store 1 ,mem_sensor_id1 40df 20600000 rtn mouse_init_p32xx_id2_judge: 40e0 6800c6de fetch 1 ,mem_sensor_id2 40e1 c068c139 beq p3205_tj3t_id2 ,mouse_3205_3t_init_param 40e2 c06940f8 beq p3204_tj3l_id2 ,mouse_3204_3l_init_param 40e3 c00140ee beq p3212_id2 ,mouse_3212_init_param 40e4 c02a40e6 beq pka8_id2 ,mouse_ka8_init_param 40e5 20600000 rtn mouse_ka8_init_param: 40e6 7046e002 jam ka8 ,mem_config_sensor_type 40e7 20600000 rtn mouse_p3065xy_init_param: 40e8 7046e006 jam p3065_xy ,mem_config_sensor_type 40e9 20600000 rtn mouse_p3065_init_param: 40ea 6800c6de fetch 1 ,mem_sensor_id2 40eb c03840e8 beq p3065_xy_id2 ,mouse_p3065xy_init_param 40ec 7046e001 jam p3065 ,mem_config_sensor_type 40ed 20600000 rtn mouse_3212_init_param: 40ee 7046e004 jam p3212 ,mem_config_sensor_type 40ef 204040f6 call mouse_sensor_disable_wp 40f0 58003426 setarg 0x3426 40f1 20406413 call twspi_write 40f2 58000419 setarg 0x0419 40f3 20406413 call twspi_write mouse_sensor_enable_wp: 40f4 58000009 setarg 0x0009 40f5 20206413 branch twspi_write mouse_sensor_disable_wp: 40f6 58005a09 setarg 0x5a09 40f7 20206413 branch twspi_write mouse_3204_3l_init_param: 40f8 7046e003 jam p3204 ,mem_config_sensor_type 40f9 204040f6 call mouse_sensor_disable_wp 40fa 58000f0d setarg 0x0f0d 40fb 20406413 call twspi_write 40fc 5800e31d setarg 0xe31d 40fd 20406413 call twspi_write 40fe 5800d27d setarg 0xd27d 40ff 20406413 call twspi_write 4100 20404102 call mouse_32xx_init_param 4101 2020411a branch mouse_32xx_init_param_1 mouse_32xx_init_param: 4102 5800351b setarg 0x351b 4103 20406413 call twspi_write 4104 5800b428 setarg 0xb428 4105 20406413 call twspi_write 4106 58004629 setarg 0x4629 4107 20406413 call twspi_write 4108 5800962a setarg 0x962a 4109 20406413 call twspi_write 410a 58008c2b setarg 0x8c2b 410b 20406413 call twspi_write 410c 58006e2c setarg 0x6e2c 410d 20406413 call twspi_write 410e 5800642d setarg 0x642d 410f 20406413 call twspi_write 4110 58005f38 setarg 0x5f38 4111 20406413 call twspi_write 4112 58000f39 setarg 0x0f39 4113 20406413 call twspi_write 4114 5800323a setarg 0x323a 4115 20406413 call twspi_write 4116 5800473b setarg 0x473b 4117 20406413 call twspi_write 4118 58001042 setarg 0x1042 4119 20206413 branch twspi_write mouse_32xx_init_param_1: 411a 58002e54 setarg 0x2e54 411b 20406413 call twspi_write 411c 5800f255 setarg 0xf255 411d 20406413 call twspi_write 411e 5800f461 setarg 0xf461 411f 20406413 call twspi_write 4120 58007063 setarg 0x7063 4121 20406413 call twspi_write 4122 58005275 setarg 0x5275 4123 20406413 call twspi_write 4124 58004176 setarg 0x4176 4125 20406413 call twspi_write 4126 5800ed77 setarg 0xed77 4127 20406413 call twspi_write 4128 58002378 setarg 0x2378 4129 20406413 call twspi_write 412a 58004679 setarg 0x4679 412b 20406413 call twspi_write 412c 5800e57a setarg 0xe57a 412d 20406413 call twspi_write 412e 5800487c setarg 0x487c 412f 20406413 call twspi_write 4130 5800777e setarg 0x777e 4131 20406413 call twspi_write 4132 5800017f setarg 0x017f 4133 20406413 call twspi_write 4134 5800000b setarg 0x000b 4135 20406413 call twspi_write 4136 5800007f setarg 0x007f 4137 20406413 call twspi_write 4138 202040f4 branch mouse_sensor_enable_wp mouse_3205_3t_init_param: 4139 7046e000 jam p3205 ,mem_config_sensor_type 413a 204040f6 call mouse_sensor_disable_wp 413b 5800100d setarg 0x100d 413c 20406413 call twspi_write 413d 5800ed1d setarg 0xed1d 413e 20406413 call twspi_write 413f 5800807d setarg 0x807d 4140 20406413 call twspi_write 4141 20404102 call mouse_32xx_init_param 4142 58000943 setarg 0x0943 4143 20406413 call twspi_write 4144 2020411a branch mouse_32xx_init_param_1 mouse_init_3610sensor_reset: 4145 6808c6dc fetcht 1 ,mem_sensor_reset_gpio 4146 20406829 call gpio_out_active 4147 20407ec1 call delay_10ms 4148 6808c6dc fetcht 1 ,mem_sensor_reset_gpio 4149 20406825 call gpio_out_inactive 414a 20207ec1 branch delay_10ms mouse_init_p3610: 414b 7046e005 jam p3610 ,mem_config_sensor_type 414c 5800ba41 setarg 0xba41 414d 20406405 call sensor_write 414e 58000d11 setarg 0x0d11 414f 20406405 call sensor_write 4150 5800041b setarg 0x041b 4151 20406405 call sensor_write 4152 5800041c setarg 0x041c 4153 20406405 call sensor_write 4154 58000f1d setarg 0x0f1d 4155 20406405 call sensor_write 4156 58000032 setarg 0x0032 4157 20406405 call sensor_write 4158 5800b541 setarg 0xb541 4159 20206405 branch sensor_write mouse_set_sensor_reg: 415a 5800ba41 setarg 0xba41 415b 20406405 call sensor_write 415c 20000fa0 nop 4000 415d 5800ff7f setarg 0xff7f 415e 20406405 call sensor_write 415f 1a227e00 copy rega ,pdata 4160 20406405 call sensor_write 4161 5800007f setarg 0x007f 4162 20406405 call sensor_write 4163 5800b541 setarg 0xb541 4164 20206405 branch sensor_write extsign: 4165 c4038000 rtnbit0 7 4166 d840ff00 arg 0xff00 ,temp 4167 9841fe00 ior temp ,pdata 4168 20600000 rtn extsign_bit3: 4169 c4018000 rtnbit0 3 416a d84000f0 arg 0xf0 ,temp 416b 9841fe00 ior temp ,pdata 416c 20600000 rtn mouse_le: 416d 20405892 call le_fifo_check_nearly_full 416e 247a0000 nrtn blank 416f 6800c6c5 fetch 1 ,mem_le_connect_status_flag 4170 1fe17e03 and pdata ,0x03 ,pdata 4171 c1818000 rtnne 0x03 4172 680246d3 fetch mouse_flag_len ,mem_mouse_flag 4173 c281c179 bbit1 mosue_24g_pairing_flag ,mouse_le_send_empty_packet 4174 c2804179 bbit1 mouse_select_device_flag ,mouse_le_send_empty_packet 4175 c282c179 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet 4176 20403f97 call mouse_motion 4177 24740000 nrtn user 4178 20203f90 branch mouse_fill_data_le mouse_le_send_empty_packet: 4179 58000000 setarg 0 417a 6003c69a store 7 ,mem_mouse_key 417b 20203f90 branch mouse_fill_data_le mouse_priority_bb_event: 417c 1a627e00 copy regc ,pdata 417d c00a41c3 beq bt_evt_le_connected ,mouse_le_bb_event_connected 417e c000c2ca beq bt_evt_bb_connected ,mouse_stop_discovery 417f c00ac1d9 beq bt_evt_le_disconnected ,mouse_bb_disconnected 4180 c00141d9 beq bt_evt_bb_disconnected ,mouse_bb_disconnected 4181 c002c1d6 beq bt_evt_setup_complete ,mouse_bt_event_setup_complete 4182 c008426c beq bt_evt_button_long_pressed ,mouse_bb_event_discovery_btn 4183 c009429b beq bt_evt_hid_handshake ,mouse_bt_hid_handshake 4184 c00341d5 beq bt_evt_hid_connected ,mouse_bt_hid_connected 4185 c00241cc beq bt_evt_reconn_failed ,mouse_bb_event_reconn_failed 4186 c009c1cc beq bt_evt_reconn_page_timeout ,mouse_bb_event_reconn_timeout 4187 c00541ca beq bt_evt_pincode_req ,mouse_bb_event_pincode 4188 c01733cd beq bt_evt_remote_unsniff ,app_start_auto_sniff 4189 c018c1b4 beq bt_evt_le_pairing_success ,mouse_le_pairing_success 418a c01941b6 beq bt_evt_le_start_enc ,mouse_le_ll_start_encryt 418b c01f4191 beq bt_evt_le_pairing_complete ,mouse_le_pairing_complete 418c c013c38e beq bt_evt_virtual_cable_unplug ,mouse_irtual_cable_unplug 418d c01cc19c beq bt_evt_24g_pairing_complete ,mouse_24g_pairing_complete 418e c01d4192 beq bt_evt_24g_attempt_fail ,mouse_24g_attempt_fail 418f c01e419a beq bt_evt_24g_attempt_success ,mouse_24g_attempt_success 4190 20600000 rtn mouse_le_pairing_complete: 4191 20203410 branch app_ble_store_reconn_info mouse_24g_attempt_fail: 4192 70478b01 jam 1 ,mem_mouse_24g_enter_lpm_enable 4193 6800c71e fetch 1 ,mem_reconn_times 4194 243a4492 nbranch mouse_polling_device ,blank 4195 6800c720 fetch 1 ,mem_device_flag 4196 6808c703 fetcht 1 ,mem_24g_device_number 4197 98467c00 isub temp ,null 4198 2022b40a branch app_enter_hibernate ,zero 4199 20600000 rtn mouse_24g_attempt_success: 419a 70478b01 jam 1 ,mem_mouse_24g_enter_lpm_enable 419b 20600000 rtn mouse_24g_pairing_complete: 419c 70478b01 jam 1 ,mem_mouse_24g_enter_lpm_enable 419d d8e00003 arg mosue_24g_pairing_flag ,queue 419e 204043d2 call mouse_disable_function_flag 419f 58000000 setarg 0 41a0 60014707 store 2 ,mem_24g_pairing_timer_count 41a1 7046a700 jam 0 ,mem_mouse_move_flag 41a2 6800c6e0 fetch 1 ,mem_config_sensor_type 41a3 1fe67c05 sub pdata ,p3610 ,null 41a4 2042c039 call mouse_read_sensor3610_data ,zero 41a5 2442c05d ncall mouse_read_sensor_common ,zero 41a6 68008004 fetch 1 ,mouse_flag_len ,mem_mouse_flag 41a7 c289c1af bbit1 mouse_enable_flash ,mouse_store_flash_24g_address 41a8 204041aa call mouse_set_24g_addr_eeprom 41a9 202065d1 branch iicd_write_protect_eep_data mouse_set_24g_addr_eeprom: 41aa 20402c7a call g24_head_ptr2regc 41ab 1a60a2ae add regc ,offset_24g_addr ,rega 41ac da40005b arg mouse_g24_addr_eeprom_offect ,regb 41ad d8400004 arg 4 ,temp 41ae 20600000 rtn mouse_store_flash_24g_address: 41af 20402c7a call g24_head_ptr2regc 41b0 1a60a4ae add regc ,offset_24g_addr ,regb 41b1 ea408000 ifetch 1 ,regb 41b2 6000c77b store 1 ,mem_mouse_24g_addr 41b3 20204435 branch mouse_store_flash_device_info mouse_le_pairing_success: 41b4 d8e00002 arg ll_pairing_success_flag ,queue 41b5 202041b9 branch mouse_le_enable_connect_flag mouse_le_ll_start_encryt: 41b6 7046c602 jam 2 ,mem_le_start_encrypt_timer 41b7 d8e00001 arg ll_start_enc_flag ,queue 41b8 202041b9 branch mouse_le_enable_connect_flag mouse_le_enable_connect_flag: 41b9 6800c6c5 fetch 1 ,mem_le_connect_status_flag 41ba f9207e00 qset1 pdata 41bb 6000c6c5 store 1 ,mem_le_connect_status_flag 41bc 20600000 rtn mouse_le_disable_connect_flag: 41bd 6800c6c5 fetch 1 ,mem_le_connect_status_flag 41be f93ffe00 qset0 pdata 41bf 6000c6c5 store 1 ,mem_le_connect_status_flag 41c0 20600000 rtn mouse_le_clean_connect_flag: 41c1 7046c500 jam 0 ,mem_le_connect_status_flag 41c2 20600000 rtn mouse_le_bb_event_connected: 41c3 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 41c4 793ffe00 set0 app_disc_by_button ,pdata 41c5 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 41c6 58000000 setarg 0 41c7 600146ae store 2 ,mem_mouse_direct_timer 41c8 20403f8d call mouse_no_data_timer_init 41c9 202042ca branch mouse_stop_discovery mouse_bb_event_pincode: 41ca 204063cb call pincode_reinit 41cb 202033dd branch app_bt_set_pincode mouse_bb_event_reconn_timeout: mouse_bb_event_reconn_failed: 41cc 6800c71e fetch 1 ,mem_reconn_times 41cd 243a4492 nbranch mouse_polling_device ,blank 41ce 68014682 fetch 2 ,mem_ui_state_map 41cf c28642b0 bbit1 ui_state_btn_down ,mouse_start_discovery 41d0 680246d3 fetch mouse_flag_len ,mem_mouse_flag 41d1 c28041d7 bbit1 mouse_select_device_flag ,mouse_soft_reset 41d2 c282c2b0 bbit1 mouse_bt_discovery_button_down_flag ,mouse_start_discovery 41d3 c281aead bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 41d4 202033a7 branch app_bb_hibernate mouse_bt_hid_connected: 41d5 20203f74 branch mouse_hid_connected mouse_bt_event_setup_complete: 41d6 20600000 rtn mouse_soft_reset: 41d7 204043c0 call mouse_select_device_enable 41d8 2020659a branch soft_reset_chip mouse_bb_disconnected: 41d9 44f4c01d bpatch patch1d_1 ,mem_patch1d 41da 204041e7 call mouse_bb_discon_clear_stack 41db 680246d3 fetch mouse_flag_len ,mem_mouse_flag 41dc c28041d7 bbit1 mouse_select_device_flag ,mouse_soft_reset 41dd c281aead bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 41de 6800c71e fetch 1 ,mem_reconn_times 41df 243a4492 nbranch mouse_polling_device ,blank 41e0 68014208 fetch app_disc_rsn_size ,mem_app_disconn_reason 41e1 c283c1f5 bbit1 app_disc_ble ,mouse4_0_event_bb_disconn 41e2 c28033a9 bbit1 app_disc_by_button ,app_disconn_reason_clear 41e3 c280c1ef bbit1 app_disc_after_pairing ,mouse_event_light_state_pairing 41e4 c28141f2 bbit1 app_disc_after_reconn ,mouse_event_light_state_hibernate 41e5 c281c1f2 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate 41e6 202042b0 branch mouse_start_discovery mouse_bb_discon_clear_stack: 41e7 58000000 setarg 0 41e8 600446b7 store 8 ,mem_wheel_tb_old_pinlevel 41e9 e0a20000 istore 4 ,contw 41ea 7046b400 jam 0 ,mem_mouse_send_blank_timer 41eb 7046a700 jam 0 ,mem_mouse_move_flag 41ec 7041e200 jam app_handshake_null ,mem_app_handshake_flag 41ed 70442900 jam 0 ,mem_ltk_exists 41ee 20600000 rtn mouse_event_light_state_pairing: 41ef c282c1f2 bbit1 app_disc_after_handshake ,mouse_event_light_state_hibernate 41f0 c281c1f2 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate 41f1 202042b0 branch mouse_start_discovery mouse_event_light_state_hibernate: 41f2 68014682 fetch 2 ,mem_ui_state_map 41f3 c28642b0 bbit1 ui_state_btn_down ,mouse_start_discovery 41f4 202033a7 branch app_bb_hibernate mouse4_0_event_bb_disconn: 41f5 204041c1 call mouse_le_clean_connect_flag 41f6 68014208 fetch app_disc_rsn_size ,mem_app_disconn_reason 41f7 c28033a9 bbit1 app_disc_by_button ,app_disconn_reason_clear 41f8 202033a7 branch app_bb_hibernate mouse_bb_event_timer: 41f9 204043d6 call mouse_adc_read 41fa 20404243 call mouse_24g_delay_timer 41fb 20404246 call mouse_ban_24g_pairing_timer 41fc 20404250 call mouse_dpi_led_blink_delay_timer 41fd 2040445d call mouse_statue_up_timer 41fe 20404443 call mouse_statue_cheak_timer 41ff 20404333 call mouse_select_device 4200 204043a5 call mouse_bt_discovery_cheak 4201 204043eb call mouse_low_voltage_led_timer 4202 20404209 call mouse_sensor_led_contrl_timer 4203 20404231 call mouse_check_hid_handshake_timer 4204 20404234 call mouse_check_discovery_timeout_timer 4205 20404237 call mouse_check_direct_timeout_timer 4206 2040423a call mouse_check_no_data_timeout_timer 4207 2040423d call mouse_check_mouse_state_timer 4208 20204240 branch mouse_le_enable_att_list_timer mouse_sensor_led_contrl_timer: 4209 6800c711 fetch 1 ,mem_mouse_sensor_timer_count 420a 207a0000 rtn blank 420b 1fe0ffff increase -1 ,pdata 420c 6000c711 store 1 ,mem_mouse_sensor_timer_count 420d 247a0000 nrtn blank 420e 2020420f branch mouse_sensor_led_contrl mouse_sensor_led_contrl: 420f 6800c712 fetch 1 ,mem_sensor_led_style 4210 c1000000 rtneq ui_led_state_blink_stop 4211 c002c216 beq ui_led_state_blink_darking ,mouse_sensor_led_blink_state_darking mouse_sensor_led_blink_state_lighting: 4212 20404225 call mouse_sensor_led_on 4213 70471205 jam ui_led_state_blink_darking ,mem_sensor_led_style 4214 70471105 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count 4215 20600000 rtn mouse_sensor_led_blink_state_darking: 4216 2040422c call mouse_sensor_led_off 4217 70471204 jam ui_led_state_blink_lighting ,mem_sensor_led_style 4218 70471105 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count 4219 20600000 rtn mouse_sensor_led_blink_stop: mouse_sensor_reset: 421a 58008006 setarg 0x8006 421b 20406413 call twspi_write 421c 200003e8 nop 1000 421d 70471100 jam 0x00 ,mem_mouse_sensor_timer_count 421e 70471200 jam ui_led_state_blink_stop ,mem_sensor_led_style 421f 202040e0 branch mouse_init_p32xx_id2_judge mouse_p3212sensor_led_on: 4220 5800a006 setarg 0xa006 4221 20406413 call twspi_write 4222 5800a005 setarg 0xa005 4223 20206413 branch twspi_write mouse_sensor_led_on_global: 4224 70471100 jam 0 ,mem_mouse_sensor_timer_count mouse_sensor_led_on: 4225 6800c6e0 fetch 1 ,mem_config_sensor_type 4226 c0024220 beq p3212 ,mouse_p3212sensor_led_on 4227 58000106 setarg 0x0106 4228 20406413 call twspi_write 4229 5800a105 setarg 0xa105 422a 20206413 branch twspi_write mouse_sensor_led_off_global: 422b 70471100 jam 0 ,mem_mouse_sensor_timer_count mouse_sensor_led_off: 422c 58000906 setarg 0x0906 422d 20206413 branch twspi_write mouse_sensor_start_blink: 422e 70471105 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count 422f 70471201 jam ui_led_state_blink_start ,mem_sensor_led_style 4230 20600000 rtn mouse_check_hid_handshake_timer: 4231 da604680 arg mem_hid_handshake_timer_count ,regc 4232 da40429b arg mouse_bt_hid_handshake ,regb 4233 2020336d branch timer_single_step mouse_check_discovery_timeout_timer: 4234 da6046ac arg mem_mouse_discovery_timer ,regc 4235 da404264 arg mouse_check_discovery_timeout ,regb 4236 20203374 branch timer_single_step_2b mouse_check_direct_timeout_timer: 4237 da6046ae arg mem_mouse_direct_timer ,regc 4238 da404266 arg mouse_check_direct_timeout ,regb 4239 20203374 branch timer_single_step_2b mouse_check_no_data_timeout_timer: 423a da6046b0 arg mem_mouse_no_data_timer ,regc 423b da40426a arg mouse_check_no_data_timeout ,regb 423c 20203374 branch timer_single_step_2b mouse_check_mouse_state_timer: 423d da6046c4 arg mem_mouse_statue_led_timer ,regc 423e da404478 arg mouse_statue_led_off ,regb 423f 2020336d branch timer_single_step mouse_le_enable_att_list_timer: 4240 da6046c6 arg mem_le_start_encrypt_timer ,regc 4241 da40425e arg mouse_le_enable_att_list ,regb 4242 2020336d branch timer_single_step mouse_24g_delay_timer: 4243 da604704 arg mem_24g_enter_lpm_timer ,regc 4244 da404249 arg mouse_24g_delay ,regb 4245 2020336d branch timer_single_step mouse_ban_24g_pairing_timer: 4246 da604707 arg mem_24g_pairing_timer_count ,regc 4247 da404249 arg mouse_ban_24g_pairing ,regb 4248 20203374 branch timer_single_step_2b mouse_ban_24g_pairing: mouse_24g_delay: 4249 20600000 rtn mosue_dpi_led_blink_init: 424a 680246d3 fetch mouse_flag_len ,mem_mouse_flag 424b c40b8000 rtnbit0 mouse_enable_dpi_led_blink 424c 7046df0a jam 10 ,mem_mouse_dpi_led_delay_count 424d 6800c6f4 fetch 1 ,mem_dpi_led_gpio 424e 6000c715 store 1 ,mem_mouse_struct_led_gpio 424f 20600000 rtn mouse_dpi_led_blink_delay_timer: 4250 da6046df arg mem_mouse_dpi_led_delay_count ,regc 4251 da404253 arg mouse_dpi_led_setting ,regb 4252 2020336d branch timer_single_step mouse_dpi_led_setting: 4253 6800c6f4 fetch 1 ,mem_dpi_led_gpio 4254 6000c715 store 1 ,mem_mouse_struct_led_gpio 4255 58000190 setarg led_dpi_blink 4256 60014716 store 2 ,mem_mouse_on_time 4257 60014718 store 2 ,mem_mouse_off_time 4258 da200000 arg 0 ,rega 4259 6808c77a fetcht 1 ,mem_mouse_dpi 425a 18408401 increase 1 ,temp 425b 6008c714 storet 1 ,mem_mouse_blink_count 425c 70471301 jam ui_led_state_blink_start ,mem_mouse_led_type 425d 20600000 rtn mouse_le_enable_att_list: 425e 6800c6c5 fetch 1 ,mem_le_connect_status_flag 425f c3810000 rtnbit1 ll_pairing_success_flag 4260 700a9912 jam bt_cmd_le_update_conn ,mem_fifo_temp 4261 20407d8f call ui_ipc_send_cmd 4262 d8e00000 arg write_req_enable_flag ,queue 4263 202041b9 branch mouse_le_enable_connect_flag mouse_check_discovery_timeout: 4264 204042ca call mouse_stop_discovery 4265 2020340a branch app_enter_hibernate mouse_check_direct_timeout: 4266 204033f6 call app_ble_stop_direct_adv 4267 6800c71e fetch 1 ,mem_reconn_times 4268 243a4492 nbranch mouse_polling_device ,blank 4269 2020340a branch app_enter_hibernate mouse_check_no_data_timeout: 426a c5137e1d bmark1 mark_24g ,check_51cmd_hibernate 426b 20204386 branch mouse_disconnect mouse_bb_event_discovery_btn: 426c 44f5401d bpatch patch1d_2 ,mem_patch1d 426d 7046b400 jam 0 ,mem_mouse_send_blank_timer 426e 20404386 call mouse_disconnect 426f 204041c1 call mouse_le_clean_connect_flag 4270 202042b0 branch mouse_start_discovery mouse3_0_check_reconn_target: 4271 680341d0 fetch 6 ,mem_hci_plap 4272 203a33eb branch app_bt_start_discovery_short ,blank 4273 2040427e call mouse_reconn_setting_led_gpio 4274 70016d17 jam 0x17 ,mem_connection_options 4275 6800c65a fetch 1 ,mem_ssp_enable 4276 243a33e1 nbranch app_bt_start_reconnect ,blank 4277 70016d04 jam 0x04 ,mem_connection_options 4278 202033e1 branch app_bt_start_reconnect mouse4_0_check_reconn_target: 4279 680146a8 fetch 2 ,mem_mouse_direct_timeout 427a 600146ae store 2 ,mem_mouse_direct_timer 427b 2040427e call mouse_reconn_setting_led_gpio 427c 20403418 call app_lpm_mult_disable 427d 20207df4 branch check_51cmd_adv mouse_reconn_setting_led_gpio: 427e 580000c8 setarg led_reconnect_blink 427f 60014716 store 2 ,mem_mouse_on_time 4280 60014718 store 2 ,mem_mouse_off_time 4281 20204285 branch mouse_setting_led_gpio_comman mouse_discover_setting_led_gpio: 4282 580003e8 setarg led_discovery_blink 4283 60014716 store 2 ,mem_mouse_on_time 4284 60014718 store 2 ,mem_mouse_off_time mouse_setting_led_gpio_comman: 4285 6800c720 fetch 1 ,mem_device_flag 4286 c000c28a beq mode_bt_device1 ,mouse_device_led1 4287 c001428c beq mode_bt_device2 ,mouse_device_led2 4288 c001c28e beq mode_bt_device3 ,mouse_device_led3 4289 20600000 rtn mouse_device_led1: 428a 6800c6f0 fetch 1 ,mem_config_device1_led_gpio 428b 2020428f branch mouse_led_blink mouse_device_led2: 428c 6800c6f1 fetch 1 ,mem_config_device2_led_gpio 428d 2020428f branch mouse_led_blink mouse_device_led3: 428e 6800c6f2 fetch 1 ,mem_config_device3_led_gpio mouse_led_blink: 428f 60008aa2 store 1 ,mem_temp 4290 20404482 call mouse_devce_led_off 4291 68008aa2 fetch 1 ,mem_temp 4292 6000c715 store 1 ,mem_mouse_struct_led_gpio 4293 da200000 arg 0 ,rega 4294 70471301 jam ui_led_state_blink_start ,mem_mouse_led_type 4295 20207d1e branch ui_led_blink_start_global mouse_led_off: 4296 da200000 arg 0 ,rega 4297 20207d19 branch ui_led_off_global mouse_led_on: 4298 da200000 arg 0 ,rega 4299 20207d14 branch ui_led_on_global mouse4_0_bb_event_discovery_btn: 429a 202041c1 branch mouse_le_clean_connect_flag mouse_bt_hid_handshake: 429b 7041e201 jam app_handshake_done ,mem_app_handshake_flag 429c 20403416 call app_lpm_mult_enable 429d 20403412 call app_bt_store_reconn_info 429e 58000000 setarg 0 429f 6001467e store 2 ,mem_discovery_timeout_timer_count 42a0 6000c680 store 1 ,mem_hid_handshake_timer_count 42a1 2020340e branch app_bt_enter_sniff mouse_check_reconn_target: 42a2 2040435f call mouse_cheak_select_device_by_switch 42a3 6800c720 fetch 1 ,mem_device_flag 42a4 6808c703 fetcht 1 ,mem_24g_device_number 42a5 98467c00 isub temp ,null 42a6 2022c2ab branch mouse_connect_24g_mode ,zero 42a7 6800c210 fetch 1 ,mem_xrecord_mode 42a8 c019c271 beq rec_3_mode ,mouse3_0_check_reconn_target 42a9 c01a4279 beq rec_4_mode ,mouse4_0_check_reconn_target 42aa 202042b0 branch mouse_start_discovery mouse_connect_24g_mode: 42ab 20403d57 call mouse_start_24g_mode 42ac c6130000 rtnmark1 mark_24g 42ad 6800c71e fetch 1 ,mem_reconn_times 42ae 243a4492 nbranch mouse_polling_device ,blank 42af 20600000 rtn mouse_start_discovery: 42b0 44f5c01d bpatch patch1d_3 ,mem_patch1d 42b1 68014682 fetch 2 ,mem_ui_state_map 42b2 c285c2b7 bbit1 ui_state_ble_adv ,mouse_start_discovery_norandom 42b3 680246d3 fetch mouse_flag_len ,mem_mouse_flag 42b4 c30c42b7 bbit0 mouse_enable_ble_random_addre ,mouse_start_discovery_norandom 42b5 180a7e00 random pdata 42b6 6000c4a1 store 1 ,mem_le_lap + 1 mouse_start_discovery_norandom: 42b7 20403418 call app_lpm_mult_disable 42b8 68014687 fetch 2 ,mem_discovery_timeout 42b9 600146ac store 2 ,mem_mouse_discovery_timer 42ba 70016d06 jam 6 ,mem_connection_options 42bb 58000000 setarg 0 42bc 600146b0 store 2 ,mem_mouse_no_data_timer 42bd 600146ae store 2 ,mem_mouse_direct_timer 42be d8e00007 arg mouse_store_eeprom_flag ,queue 42bf 204043ce call mouse_enable_function_flag 42c0 204043ca call mouse_bt_discovery_button_down_disable 42c1 6800c092 fetch 1 ,mem_device_option 42c2 2feffe01 isolate1 mode_4_mouse ,pdata 42c3 2040fdf4 call check_51cmd_adv ,true 42c4 6800c092 fetch 1 ,mem_device_option 42c5 2feffe00 isolate1 mode_3_mouse ,pdata 42c6 2040fddd call check_51cmd_start_discovery ,true 42c7 680246d3 fetch mouse_flag_len ,mem_mouse_flag 42c8 c28e422e bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_start_blink 42c9 20204282 branch mouse_discover_setting_led_gpio mouse_stop_discovery: 42ca 44f6401d bpatch patch1d_4 ,mem_patch1d 42cb 6800c092 fetch 1 ,mem_device_option 42cc 2feffe01 isolate1 mode_4_mouse ,pdata 42cd 2040c2d4 call mouse_stop_le_adv ,true 42ce 6800c092 fetch 1 ,mem_device_option 42cf 2feffe00 isolate1 mode_3_mouse ,pdata 42d0 2040c2d7 call mouse_stop_bt3_discovery ,true 42d1 680246d3 fetch mouse_flag_len ,mem_mouse_flag 42d2 c28e421a bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_led_blink_stop 42d3 20204482 branch mouse_devce_led_off mouse_stop_le_adv: 42d4 58000000 setarg 0 42d5 600146ae store 2 ,mem_mouse_direct_timer 42d6 20207dfa branch check_51cmd_stop_adv mouse_stop_bt3_discovery: 42d7 58000000 setarg 0 42d8 600146ac store 2 ,mem_mouse_discovery_timer 42d9 20207de2 branch check_51cmd_stop_discovery mouse_store_remote_bdaddr: 42da 680246d3 fetch mouse_flag_len ,mem_mouse_flag 42db c4038000 rtnbit0 mouse_store_eeprom_flag 42dc d8e00007 arg mouse_store_eeprom_flag ,queue 42dd 204043d2 call mouse_disable_function_flag 42de 204042e8 call mouse_check_device_addr mouse_unplug_clean_bdaddr: 42df 204042fb call mouse_before_store_reconn_info 42e0 680246d3 fetch mouse_flag_len ,mem_mouse_flag 42e1 c289c435 bbit1 mouse_enable_flash ,mouse_store_flash_device_info 42e2 c28a42e4 bbit1 mouse_enable_eeprom ,mouse_store_eeprom_device_info 42e3 20600000 rtn mouse_store_eeprom_device_info: 42e4 d8400058 arg 88 ,temp 42e5 da204720 arg mem_device_flag ,rega 42e6 da400000 arg mouse_info_eeprom_offect ,regb 42e7 202065d1 branch iicd_write_protect_eep_data mouse_check_device_addr: 42e8 68008185 fetch 1 ,mem_record_bt_mode 42e9 c01a42ec beq rec_4_mode ,mouse_check_le_device_addr 42ea c019c2ef beq rec_3_mode ,mouse_check_bt_device_addr 42eb 20600000 rtn mouse_check_le_device_addr: 42ec 6000c6c7 store 1 ,mem_device_addr_temp 42ed 6803044f fetch 6 ,mem_le_plap 42ee 202042f1 branch mouse_check_bt_device_addr_common mouse_check_bt_device_addr: 42ef 6000c6c7 store 1 ,mem_device_addr_temp 42f0 68030040 fetch 6 ,mem_plap mouse_check_bt_device_addr_common: 42f1 600346c8 store 6 ,mem_device_addr_temp + 1 42f2 6803c6c7 fetch 7 ,mem_device_addr_temp 42f3 d8c04721 arg mem_device1_type ,contr 42f4 df200003 arg 3 ,loopcnt mouse_check_device_addr_end: 42f5 e8cb8000 ifetcht 7 ,contr 42f6 98467c00 isub temp ,null 42f7 2022c310 branch mouse_clean_addr ,zero 42f8 18c08c16 increase 22 ,contr 42f9 c20042f5 loop mouse_check_device_addr_end 42fa 20600000 rtn mouse_before_store_reconn_info: 42fb da204721 arg mem_device1_type ,rega 42fc 6800c720 fetch 1 ,mem_device_flag 42fd 1fe0ffff increase -1 ,pdata 42fe 1feffe1d mul32 pdata ,29 ,pdata 42ff 9a20a200 iadd rega ,rega 4300 68008185 fetch 1 ,mem_record_bt_mode 4301 e2208000 istore 1 ,rega 4302 c01a4305 beq rec_4_mode ,mouse_store_le_device 4303 c019c30c beq rec_3_mode ,mouse_store_bt_device 4304 20600000 rtn mouse_store_le_device: 4305 6803044f fetch 6 ,mem_le_plap 4306 e0a30000 istore 6 ,contw 4307 d8c04419 arg mem_le_ltk ,contr 4308 20407ebf call memcpy16 4309 680344a0 fetch 6 ,mem_le_lap 430a e0a30000 istore 6 ,contw 430b 20600000 rtn mouse_store_bt_device: 430c 68030040 fetch 6 ,mem_plap 430d e0a30000 istore 6 ,contw 430e d8c041be arg mem_link_key ,contr 430f 20207ebf branch memcpy16 mouse_clean_addr: 4310 18c08dfa increase -6 ,contr 4311 18c20a00 copy contr ,contw 4312 680b46c8 fetcht 6 ,mem_device_addr_temp + 1 4313 18408403 increase 3 ,temp 4314 e0ab0000 istoret 6 ,contw 4315 20600000 rtn mouse_eeprom_load_recon_info: 4316 d8400058 arg 88 ,temp 4317 da204720 arg mem_device_flag ,rega 4318 da400000 arg mouse_info_eeprom_offect ,regb 4319 204065df call iicd_read_eep_data mouse_select_reconn_device: 431a da204721 arg mem_device1_type ,rega 431b 6800c720 fetch 1 ,mem_device_flag 431c 6808c703 fetcht 1 ,mem_24g_device_number 431d 98467c00 isub temp ,null 431e 20628000 rtn zero 431f 1fe0ffff increase -1 ,pdata 4320 1feffe1d mul32 pdata ,29 ,pdata 4321 9a20a200 iadd rega ,rega 4322 ea208000 ifetch 1 ,rega 4323 6000c210 store 1 ,mem_xrecord_mode 4324 c019c327 beq rec_3_mode ,mouse_load_bt_device 4325 c01a432c beq rec_4_mode ,mouse_load_le_device 4326 20600000 rtn mouse_load_bt_device: 4327 e8c30000 ifetch 6 ,contr mouse_load_bt_device_end: 4328 600341d0 store 6 ,mem_hci_plap 4329 d8a041be arg mem_link_key ,contw 432a 20407ebf call memcpy16 432b 202067d7 branch check_link_key_load mouse_load_le_device: 432c e8c30000 ifetch 6 ,contr mouse_load_le_device_end: 432d 600341d0 store 6 ,mem_hci_plap 432e d8a04419 arg mem_le_ltk ,contw 432f 20407ebf call memcpy16 4330 e8c30000 ifetch 6 ,contr 4331 600344a0 store 6 ,mem_le_lap 4332 20600000 rtn mouse_select_device: 4333 6800c6f5 fetch 1 ,mem_config_function_enable 4334 c282c349 bbit1 enable_select_device_by_gpio_button ,mouse_select_device_by_button 4335 c2834359 bbit1 enable_select_device_by_switch ,mouse_select_device_by_switch 4336 20204337 branch mouse_select_device_by_combination_key mouse_select_device_by_combination_key: 4337 20404083 call mouse_check_key_gpio 4338 c003433e beq mouse_rm_button ,mouse_select_device_commbination_key_down mouse_select_device_commbination_key_up: 4339 7046d81e jam 30 ,mem_combination_select_device_count 433a 6800c6d9 fetch 1 ,mem_select_device_button_statue 433b c1008000 rtneq dpi_button_state_up 433c 7046d901 jam dpi_button_state_up ,mem_select_device_button_statue 433d 20600000 rtn mouse_select_device_commbination_key_down: 433e 20404343 call mouse_combination_select_device_timer 433f 6800c6d9 fetch 1 ,mem_select_device_button_statue 4340 c1000000 rtneq dpi_button_state_down 4341 7046d900 jam dpi_button_state_down ,mem_select_device_button_statue 4342 202043c0 branch mouse_select_device_enable mouse_combination_select_device_timer: 4343 6800c6d8 fetch 1 ,mem_combination_select_device_count 4344 207a0000 rtn blank 4345 1fe0ffff pincrease -1 4346 6000c6d8 store 1 ,mem_combination_select_device_count 4347 247a0000 nrtn blank 4348 20204370 branch mouse_ready_reconnection_by_button mouse_select_device_by_button: 4349 6800c6ed fetch 1 ,mem_config_select_device_button_gpio 434a c17f8000 rtneq gpio_disable 434b 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio 434c 2040681d call gpio_get_bit 434d 2020c354 branch mouse_select_device_button_down ,true mouse_select_device_button_up: 434e 6800c6d9 fetch 1 ,mem_select_device_button_statue 434f c1008000 rtneq dpi_button_state_up 4350 7046d901 jam dpi_button_state_up ,mem_select_device_button_statue 4351 680246d3 fetch mouse_flag_len ,mem_mouse_flag 4352 c3830000 rtnbit1 mouse_long_bt_button_flag 4353 20204370 branch mouse_ready_reconnection_by_button mouse_select_device_button_down: 4354 6800c6d9 fetch 1 ,mem_select_device_button_statue 4355 c1000000 rtneq dpi_button_state_down 4356 7046d900 jam dpi_button_state_down ,mem_select_device_button_statue 4357 d8e00006 arg mouse_long_bt_button_flag ,queue 4358 202043d2 branch mouse_disable_function_flag mouse_select_device_by_switch: 4359 68008004 fetch 1 ,mouse_flag_len ,mem_mouse_flag 435a c4030000 rtnbit0 enable_select_device_by_switch 435b 6800c720 fetch 1 ,mem_device_flag 435c c000c369 beq mode_bt_device1 ,mouse_select1_device 435d c001436c beq mode_24g_device ,mouse_select2_device 435e 20600000 rtn mouse_cheak_select_device_by_switch: 435f 68008004 fetch 1 ,mouse_flag_len ,mem_mouse_flag 4360 c4030000 rtnbit0 enable_select_device_by_switch 4361 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio 4362 2040681d call gpio_get_bit 4363 2020c366 branch mouse_cheak_select_24gdevice ,true mouse_select_btdevice: 4364 70472001 jam mode_bt_device1 ,mem_device_flag 4365 20600000 rtn mouse_cheak_select_24gdevice: 4366 6800c703 fetch 1 ,mem_24g_device_number 4367 6000c720 store 1 ,mem_device_flag 4368 20600000 rtn mouse_select1_device: 4369 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio 436a 2420c370 nbranch mouse_ready_reconnection_by_button ,true 436b 20600000 rtn mouse_select2_device: 436c 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio 436d 2040681d call gpio_get_bit 436e 2020c354 branch mouse_select_device_button_down ,true 436f 20600000 rtn mouse_ready_reconnection_by_button: 4370 6808c720 fetcht 1 ,mem_device_flag 4371 18408401 increase 1 ,temp 4372 6800c6d2 fetch 1 ,mem_device_number 4373 98467c00 isub temp ,null 4374 244143cc ncall mouse_select_device_count_clean ,positive 4375 6008c720 storet 1 ,mem_device_flag 4376 7041bd00 jam 0 ,mem_link_key_exists 4377 2040437a call mouse_store_device_number2eeprom 4378 204043c0 call mouse_select_device_enable 4379 2020437e branch mouse_set_reconnection mouse_store_device_number2eeprom: 437a d8400001 arg 1 ,temp 437b da204720 arg mem_device_flag ,rega 437c da400000 arg 0 ,regb 437d 20206606 branch iicd_write_eep_data mouse_set_reconnection: 437e 20404381 call mouse_stop_bluetooth_mode 437f 204043c2 call mouse_select_device_disable 4380 202041d7 branch mouse_soft_reset mouse_stop_bluetooth_mode: 4381 68014682 fetch 2 ,mem_ui_state_map 4382 c283c392 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect 4383 c284b402 bbit1 ui_state_ble_connected ,app_ble_disconnect 4384 c28033e9 bbit1 ui_state_bt_connected ,app_bt_disconnect 4385 202042ca branch mouse_stop_discovery mouse_disconnect: 4386 44f6c01d bpatch patch1d_5 ,mem_patch1d 4387 58000000 setarg 0 4388 600146b0 store 2 ,mem_mouse_no_data_timer 4389 68014682 fetch 2 ,mem_ui_state_map 438a c284b402 bbit1 ui_state_ble_connected ,app_ble_disconnect 438b 68014682 fetch 2 ,mem_ui_state_map 438c c28033e9 bbit1 ui_state_bt_connected ,app_bt_disconnect 438d 20600000 rtn mouse_irtual_cable_unplug: 438e 58000001 setarg 0x01 438f 60030040 store 6 ,mem_plap 4390 70018533 jam rec_3_mode ,mem_record_bt_mode 4391 202042df branch mouse_unplug_clean_bdaddr mouse_cancel_reconnect: 4392 204043c4 call mouse_bt_cannel_reconn_enable 4393 20207e2f branch check_51cmd_bb_reconn_cancel mouse_bt_discovery_by_button: 4394 6800c6ec fetch 1 ,mem_config_bt_button_gpio 4395 c17f8000 rtneq gpio_disable 4396 6808c6ec fetcht 1 ,mem_config_bt_button_gpio 4397 2040681d call gpio_get_bit 4398 2020c39f branch mouse_bt_discovery_button_down ,true mouse_bt_discovery_button_up: 4399 6800c685 fetch 1 ,mem_ui_button_timeout 439a 6000c6da store 1 ,mem_combination_ui_button_count 439b 6800c6db fetch 1 ,mem_bt_discovey_button_statue 439c c1008000 rtneq dpi_button_state_up 439d 7046db01 jam dpi_button_state_up ,mem_bt_discovey_button_statue 439e 202043ca branch mouse_bt_discovery_button_down_disable mouse_bt_discovery_button_down: 439f 204043b5 call mouse_bt_discovry_timer 43a0 6800c6db fetch 1 ,mem_bt_discovey_button_statue 43a1 c1000000 rtneq dpi_button_state_down 43a2 7046db00 jam dpi_button_state_down ,mem_bt_discovey_button_statue 43a3 20407e2f call check_51cmd_bb_reconn_cancel 43a4 202043c8 branch mouse_bt_discovery_button_down_enable mouse_bt_discovery_cheak: 43a5 6800c6f5 fetch 1 ,mem_config_function_enable 43a6 c2824394 bbit1 enable_bt_button ,mouse_bt_discovery_by_button mouse_bt_discovery_commbination_key: 43a7 20404083 call mouse_check_key_gpio 43a8 c003c3af beq mouse_lmr_button ,mouse_bt_discovery_commbination_key_down mouse_bt_discovery_commbination_key_up: 43a9 6800c685 fetch 1 ,mem_ui_button_timeout 43aa 6000c6da store 1 ,mem_combination_ui_button_count 43ab 6800c6db fetch 1 ,mem_bt_discovey_button_statue 43ac c1008000 rtneq dpi_button_state_up 43ad 7046db01 jam dpi_button_state_up ,mem_bt_discovey_button_statue 43ae 202043ca branch mouse_bt_discovery_button_down_disable mouse_bt_discovery_commbination_key_down: 43af 204043b5 call mouse_bt_discovry_timer 43b0 6800c6db fetch 1 ,mem_bt_discovey_button_statue 43b1 c1000000 rtneq dpi_button_state_down 43b2 7046db00 jam dpi_button_state_down ,mem_bt_discovey_button_statue 43b3 20407e2f call check_51cmd_bb_reconn_cancel 43b4 202043c8 branch mouse_bt_discovery_button_down_enable mouse_bt_discovry_timer: 43b5 da6046da arg mem_combination_ui_button_count ,regc 43b6 da4043b8 arg mouse_long_button_bt_discovry ,regb 43b7 2020336d branch timer_single_step mouse_long_button_bt_discovry: 43b8 d8e00006 arg mouse_long_bt_button_flag ,queue 43b9 204043ce call mouse_enable_function_flag 43ba 20403357 call app_evt_button_long_pressed 43bb 2020426c branch mouse_bb_event_discovery_btn mouse_cpi_enable: 43bc d8e00001 arg mouse_cpi_flag ,queue 43bd 202043ce branch mouse_enable_function_flag mouse_cpi_disable: 43be d8e00001 arg mouse_cpi_flag ,queue 43bf 202043d2 branch mouse_disable_function_flag mouse_select_device_enable: 43c0 d8e00000 arg mouse_select_device_flag ,queue 43c1 202043ce branch mouse_enable_function_flag mouse_select_device_disable: 43c2 d8e00000 arg mouse_select_device_flag ,queue 43c3 202043d2 branch mouse_disable_function_flag mouse_bt_cannel_reconn_enable: 43c4 d8e00002 arg mouse_bt_cannel_reconn_flag ,queue 43c5 202043ce branch mouse_enable_function_flag mouse_bt_cannel_reconn_disable: 43c6 d8e00002 arg mouse_bt_cannel_reconn_flag ,queue 43c7 202043d2 branch mouse_disable_function_flag mouse_bt_discovery_button_down_enable: 43c8 d8e00005 arg mouse_bt_discovery_button_down_flag ,queue 43c9 202043ce branch mouse_enable_function_flag mouse_bt_discovery_button_down_disable: 43ca d8e00005 arg mouse_bt_discovery_button_down_flag ,queue 43cb 202043d2 branch mouse_disable_function_flag mouse_select_device_count_clean: 43cc d8400001 arg 1 ,temp 43cd 20600000 rtn mouse_enable_function_flag: 43ce 680246d3 fetch mouse_flag_len ,mem_mouse_flag 43cf f9207e00 qset1 pdata 43d0 600246d3 store mouse_flag_len ,mem_mouse_flag 43d1 20600000 rtn mouse_disable_function_flag: 43d2 680246d3 fetch mouse_flag_len ,mem_mouse_flag 43d3 f93ffe00 qset0 pdata 43d4 600246d3 store mouse_flag_len ,mem_mouse_flag 43d5 20600000 rtn mouse_adc_read: 43d6 680246d3 fetch mouse_flag_len ,mem_mouse_flag 43d7 c40d0000 rtnbit0 mouse_enable_adc 43d8 6800c6ce fetch 1 ,mem_adc_read_timer 43d9 1fe0fe01 increase 1 ,pdata 43da 6000c6ce store 1 ,mem_adc_read_timer 43db 1fe67c0a sub pdata ,10 ,null 43dc 20610000 rtn positive 43dd 7046ce00 jam 0 ,mem_adc_read_timer 43de 204068eb call adc_set_mode 43df 20406908 call vdd_calculate_by_mode 43e0 6001470f store 2 ,mem_mouse_vdd_now_vol 43e1 da204709 arg mem_mouse_vdd_calculate_set ,rega 43e2 20406930 call adc_bat_percent_lowpower_out 43e3 6800c231 fetch 1 ,mem_adc_power_flag 43e4 c280c4a0 bbit1 1 ,mouse_power_down 43e5 c30043e9 bbit0 0 ,mouse_adc_no_low_voltage 43e6 202043e7 branch mouse_adc_low_voltage mouse_adc_low_voltage: 43e7 d8e00004 arg mouse_low_voltage_flag ,queue 43e8 202043ce branch mouse_enable_function_flag mouse_adc_no_low_voltage: 43e9 d8e00004 arg mouse_low_voltage_flag ,queue 43ea 202043d2 branch mouse_disable_function_flag mouse_low_voltage_led_timer: 43eb 680246d3 fetch mouse_flag_len ,mem_mouse_flag 43ec c4020000 rtnbit0 mouse_low_voltage_flag 43ed 6800c6ef fetch 1 ,mem_config_low_voltage_alarm_gpio 43ee 6000c715 store 1 ,mem_mouse_struct_led_gpio 43ef 6800c6cf fetch 1 ,mem_adc_low_volatage_led_timer_count 43f0 1fe0fe01 pincrease 1 43f1 6000c6cf store 1 ,mem_adc_low_volatage_led_timer_count 43f2 1fe67c14 sub pdata ,20 ,null 43f3 244143f9 ncall mouse_adc_low_volatage_led_timer_count_clean ,positive 43f4 c00143fb beq 2 ,mouse_low_voltage_led_on 43f5 c00243fe beq 4 ,mouse_low_voltage_led_off 43f6 c00343fb beq 6 ,mouse_low_voltage_led_on 43f7 c00443fe beq 8 ,mouse_low_voltage_led_off 43f8 20600000 rtn mouse_adc_low_volatage_led_timer_count_clean: 43f9 7046cf01 jam 1 ,mem_adc_low_volatage_led_timer_count 43fa 202043fe branch mouse_low_voltage_led_off mouse_low_voltage_led_on: 43fb da200000 arg 0 ,rega 43fc 70471302 jam ui_led_state_lighting ,mem_mouse_led_type 43fd 20207d14 branch ui_led_on_global mouse_low_voltage_led_off: 43fe da200000 arg 0 ,rega 43ff 70471302 jam ui_led_state_lighting ,mem_mouse_led_type 4400 20207d19 branch ui_led_off_global mouse_g24_package_data: 4401 20403f97 call mouse_motion 4402 24740000 nrtn user 4403 da200007 arg 7 ,rega 4404 da40469a arg mem_mouse_key ,regb 4405 20600000 rtn mouse_g24_enter_lpm: 4406 6800c78b fetch 1 ,mem_mouse_24g_enter_lpm_enable 4407 207a0000 rtn blank 4408 6808c6e7 fetcht 1 ,mem_dpi_button_gpio 4409 2040681d call gpio_get_bit 440a 2040c410 call mouse_24g_dpi_delay_init ,true 440b 6800c704 fetch 1 ,mem_24g_enter_lpm_timer 440c 247a0000 nrtn blank 440d 20404083 call mouse_check_key_gpio 440e 247a0000 nrtn blank 440f 20202d83 branch g24_lpm_long_sleep mouse_24g_dpi_delay_init: 4410 6800c6e7 fetch 1 ,mem_dpi_button_gpio 4411 c17f8000 rtneq ui_button_gpio_disable 4412 7047040a jam 10 ,mem_24g_enter_lpm_timer 4413 20600000 rtn mouse_load_flash_info_cheak: 4414 20404423 call mouse_load_flash_flag 4415 68014778 fetch 2 ,mem_store_flag 4416 d840aa55 arg eeprom_init_flag ,temp 4417 98467c00 isub temp ,null 4418 2022c42b branch mouse_load_flash_device_info ,zero 4419 60094778 storet 2 ,mem_store_flag 441a 2040441c call mouse_ble_init_address 441b 20204435 branch mouse_store_flash_device_info mouse_ble_init_address: 441c 680344a0 fetch 6 ,mem_le_lap 441d 60034738 store 6 ,mem_device1_locall_addr 441e 1fe0ff00 add pdata ,0x0100 ,pdata 441f 60034755 store 6 ,mem_device2_locall_addr 4420 1fe0ff00 add pdata ,0x0100 ,pdata 4421 60034772 store 6 ,mem_device3_locall_addr 4422 20600000 rtn mouse_load_flash_flag: 4423 58004778 setarg mem_store_flag 4424 d8404720 arg mem_mouse_information_start ,temp 4425 98460400 isub temp ,temp 4426 6801c700 fetch 3 ,mem_flash_base 4427 9840fe00 iadd temp ,pdata 4428 d8400002 arg 2 ,temp 4429 da204778 arg mem_store_flag ,rega 442a 20206562 branch spid_read_flash mouse_load_flash_device_info: 442b 5800477f setarg mem_mouse_information_end 442c d8404720 arg mem_mouse_information_start ,temp 442d 98460400 isub temp ,temp 442e 6801c700 fetch 3 ,mem_flash_base 442f da204720 arg mem_mouse_information_start ,rega 4430 20406562 call spid_read_flash 4431 2040431a call mouse_select_reconn_device 4432 6802477b fetch 4 ,mem_mouse_24g_addr 4433 20402c7a call g24_head_ptr2regc 4434 2020322c branch g24_store_mem_addr mouse_store_flash_device_info: 4435 5800477f setarg mem_mouse_information_end 4436 d8404720 arg mem_mouse_information_start ,temp 4437 98460400 isub temp ,temp 4438 da204720 arg mem_mouse_information_start ,rega 4439 6801c700 fetch 3 ,mem_flash_base 443a 20206514 branch flash_write mouse_store_eerpom_dpi: 443b d8400001 arg 1 ,temp 443c da20477a arg mem_mouse_dpi ,rega 443d da40005a arg mouse_dpi_eeprom_offect ,regb 443e 202065d1 branch iicd_write_protect_eep_data mouse_load_eeprom_dpi: 443f d8400001 arg 1 ,temp 4440 da20477a arg mem_mouse_dpi ,rega 4441 da40005a arg mouse_dpi_eeprom_offect ,regb 4442 202065df branch iicd_read_eep_data mouse_statue_cheak_timer: 4443 c6130000 rtnmark1 mark_24g 4444 680246d3 fetch mouse_flag_len ,mem_mouse_flag 4445 c40b0000 rtnbit0 mouse_enable_statue_up 4446 6800c705 fetch 1 ,mem_mouse_1step_up_count 4447 1fe0fe01 pincrease 1 4448 1fe17e07 and pdata ,0x07 ,pdata 4449 6000c705 store 1 ,mem_mouse_1step_up_count 444a c1838000 rtnne 0x07 444b 68014682 fetch 2 ,mem_ui_state_map 444c c280444f bbit1 ui_state_bt_connected ,mouse_check_statue_up 444d c284c44f bbit1 ui_state_ble_connected ,mouse_check_statue_up 444e 20600000 rtn mouse_check_statue_up: 444f 44f7401d bpatch patch1d_6 ,mem_patch1d 4450 6800c706 fetch 1 ,mem_mouse_2step_up_count 4451 247a0000 nrtn blank 4452 680246d3 fetch mouse_flag_len ,mem_mouse_flag 4453 c4040000 rtnbit0 mouse_statue_up_flag 4454 6800c6a5 fetch 1 ,mem_sensor_squal_reg 4455 204063fb call sensor_read 4456 6000c6a6 store 1 ,mem_sensor_iqc 4457 1fe67c10 sub pdata ,0x10 ,null 4458 2021445b branch mouse_statue_up_timer_init ,positive 4459 70470600 jam 0 ,mem_mouse_2step_up_count 445a 20600000 rtn mouse_statue_up_timer_init: 445b 7047061e jam 30 ,mem_mouse_2step_up_count 445c 20600000 rtn mouse_statue_up_timer: 445d da604706 arg mem_mouse_2step_up_count ,regc 445e da404460 arg mouse_statue_up ,regb 445f 2020336d branch timer_single_step mouse_statue_up: 4460 6800c6a5 fetch 1 ,mem_sensor_squal_reg 4461 20406414 call twspi_read 4462 1fe67c10 sub pdata ,0x10 ,null 4463 24610000 nrtn positive 4464 680246d3 fetch mouse_flag_len ,mem_mouse_flag 4465 c4040000 rtnbit0 mouse_statue_up_flag 4466 d8e00008 arg mouse_statue_up_flag ,queue 4467 204043d2 call mouse_disable_function_flag 4468 70417200 jam 0 ,mem_lpm_mult 4469 7046c41e jam 30 ,mem_mouse_statue_led_timer 446a 20404482 call mouse_devce_led_off 446b 680246d3 fetch mouse_flag_len ,mem_mouse_flag 446c c28ac471 bbit1 mouse_enable_statue_up_three_led ,mouse_three_device_statue_up mouse_two_device_statue_up: 446d 6800c720 fetch 1 ,mem_device_flag 446e c000c489 beq mode_bt_device1 ,mouse_device1_led_on 446f c0014476 beq mode_bt_device2 ,mouse_device_blink_led_init 4470 20600000 rtn mouse_three_device_statue_up: 4471 6800c720 fetch 1 ,mem_device_flag 4472 c000c489 beq mode_bt_device1 ,mouse_device1_led_on 4473 c001448c beq mode_bt_device2 ,mouse_device2_led_on 4474 c001c48f beq mode_bt_device3 ,mouse_device3_led_on 4475 20600000 rtn mouse_device_blink_led_init: 4476 6800c6f0 fetch 1 ,mem_config_device1_led_gpio 4477 2020428f branch mouse_led_blink mouse_statue_led_off: 4478 70417220 jam 0x20 ,mem_lpm_mult 4479 20204482 branch mouse_devce_led_off mouse_devce1_led_off: 447a 6800c6f0 fetch 1 ,mem_config_device1_led_gpio 447b c17f8000 rtneq gpio_disable 447c 6000c715 store 1 ,mem_mouse_struct_led_gpio 447d 20204296 branch mouse_led_off mouse_devce2_led_off: 447e 6800c6f1 fetch 1 ,mem_config_device2_led_gpio 447f c17f8000 rtneq gpio_disable 4480 6000c715 store 1 ,mem_mouse_struct_led_gpio 4481 20204296 branch mouse_led_off mouse_devce_led_off: 4482 20404296 call mouse_led_off 4483 2040447a call mouse_devce1_led_off 4484 2040447e call mouse_devce2_led_off mouse_devce3_led_off: 4485 6800c6f2 fetch 1 ,mem_config_device3_led_gpio 4486 c17f8000 rtneq gpio_disable 4487 6000c715 store 1 ,mem_mouse_struct_led_gpio 4488 20204296 branch mouse_led_off mouse_device1_led_on: 4489 6800c6f0 fetch 1 ,mem_config_device1_led_gpio 448a 6000c715 store 1 ,mem_mouse_struct_led_gpio 448b 20204298 branch mouse_led_on mouse_device2_led_on: 448c 6800c6f1 fetch 1 ,mem_config_device2_led_gpio 448d 6000c715 store 1 ,mem_mouse_struct_led_gpio 448e 20204298 branch mouse_led_on mouse_device3_led_on: 448f 6800c6f2 fetch 1 ,mem_config_device3_led_gpio 4490 6000c715 store 1 ,mem_mouse_struct_led_gpio 4491 20204298 branch mouse_led_on mouse_polling_device: 4492 44f7c01d bpatch patch1d_7 ,mem_patch1d 4493 6800c71e fetch 1 ,mem_reconn_times 4494 1fe0ffff increase -1 ,pdata 4495 6000c71e store 1 ,mem_reconn_times 4496 6808c720 fetcht 1 ,mem_device_flag 4497 18408401 increase 1 ,temp 4498 6800c6d2 fetch 1 ,mem_device_number 4499 98467c00 isub temp ,null 449a 244143cc ncall mouse_select_device_count_clean ,positive 449b 6008c720 storet 1 ,mem_device_flag 449c 7041bd00 jam 0 ,mem_link_key_exists 449d 2040437a call mouse_store_device_number2eeprom 449e 204042fb call mouse_before_store_reconn_info 449f 202042a2 branch mouse_check_reconn_target mouse_power_down: 44a0 20404482 call mouse_devce_led_off 44a1 58000000 setarg 0 44a2 600400a1 store 8 ,mem_gpio_wakeup_low 44a3 20202b1f branch lpm_hibernate remote_car_init: 44a4 20758000 rtn wake 44a5 68108081 hfetch 1 ,core_gpio_sel1 44a6 1fe17ef0 and_into 0xf0 ,pdata 44a7 60108081 hstore 1 ,core_gpio_sel1 44a8 20406948 call keyscan_key_init 44a9 580044e6 setarg remote_car_le_before_hibernate 44aa 600141eb store 2 ,mem_cb_before_hibernate 44ab 580044e9 setarg remote_car_process_lpm_before 44ac 600141ed store 2 ,mem_cb_before_lpm 44ad 580044ef setarg remote_car_scale_process_idle 44ae 600141f3 store 2 ,mem_cb_idle_process 44af 580044f2 setarg remote_car_scale_process_bb_event 44b0 600141f5 store 2 ,mem_cb_bb_event_process 44b1 580033d0 setarg app_get_lpm_wake_lock 44b2 600141e9 store 2 ,mem_cb_check_wakelock 44b3 20402c7a call g24_head_ptr2regc 44b4 580045c2 setarg remote_car_g24_package_data 44b5 1a608ad8 add regc ,offset_24g_cb_data ,contw 44b6 e0a10000 istore 2 ,contw 44b7 580044ea setarg remote_car_g24_enter_lpm 44b8 1a608ada add regc ,offset_24g_cb_lpm_prepare ,contw 44b9 e0a10000 istore 2 ,contw 44ba 580044e9 setarg remote_car_process_lpm_before 44bb 1a608adc add regc ,offset_24g_cb_lpm_before ,contw 44bc e0a10000 istore 2 ,contw 44bd 5800450e setarg remote_car_event_timer 44be 600141fd store 2 ,mem_cb_event_timer 44bf 580044da setarg remote_car_power_off_signal 44c0 6001475b store 2 ,mem_remote_car_power_off_cb 44c1 580044d6 setarg remote_car_soft_switch_power_on_signal 44c2 6001475f store 2 ,mem_remote_car_power_standby_cb 44c3 58004560 setarg remote_car_send_key_data 44c4 6001470f store 2 ,mem_cb_remote_car_keyscan 44c5 44f8401e bpatch patch1e_0 ,mem_patch1e 44c6 204044e2 call remote_car_init_environment 44c7 20407e38 call queue_init 44c8 70417202 jam 2 ,mem_lpm_mult 44c9 6800c72b fetch 1 ,mem_remote_car_config_soft_switch_enable 44ca 6000c69a store 1 ,mem_remote_car_hard_soft_switch 44cb c00044d5 beq hard_switch ,remote_car_hard_switch_power_on_signal 44cc 6800c72c fetch 1 ,mem_remote_car_config_soft_switch_gpio 44cd 6000c686 store 1 ,mem_ui_button_gpio remote_car_soft_switch_power_on_init: 44ce 204044db call remote_car_ui_led_init 44cf 20407cd3 call ui_button_init 44d0 20407cdd call ui_button_polling 44d1 70475701 jam power_starting ,mem_remote_car_power_state 44d2 68014682 fetch 2 ,mem_ui_state_map 44d3 c3860000 rtnbit1 ui_state_btn_down 44d4 2020340a branch app_enter_hibernate remote_car_hard_switch_power_on_signal: 44d5 70475702 jam power_standby ,mem_remote_car_power_state remote_car_soft_switch_power_on_signal: 44d6 204044db call remote_car_ui_led_init 44d7 da200000 arg 0 ,rega 44d8 20407d1e call ui_led_blink_start_global remote_car_connect_24g_mode: 44d9 20202ee4 branch g24_auto_pair_start remote_car_power_off_signal: 44da 202044db branch remote_car_ui_led_init remote_car_ui_led_init: 44db 44f8c01e bpatch patch1e_1 ,mem_patch1e 44dc 6800c729 fetch 1 ,mem_remote_car_config_connect_led_gpio 44dd c0ffc4e0 bne invalid_pin_num ,remote_car_pairing_led_gpio_set remote_car_ui_led_init_1: 44de 6808c706 fetcht 1 ,mem_remote_car_led_map 44df 2020680e branch gpio_config_output remote_car_pairing_led_gpio_set: 44e0 6000c706 store 1 ,mem_remote_car_led_map 44e1 202044de branch remote_car_ui_led_init_1 remote_car_init_environment: 44e2 20402c9d call g24_set_device_addr 44e3 68014753 fetch 2 ,mem_remote_car_no_data_timeout 44e4 60014755 store 2 ,mem_remote_car_no_data_timer 44e5 20204515 branch remote_car_get_adc_default_data remote_car_le_before_hibernate: remote_car_in_enter_hibernate: 44e6 20406835 call gpio_set_before_lpm_common 44e7 204044e9 call remote_car_process_lpm_before 44e8 2020340a branch app_enter_hibernate remote_car_process_lpm_before: 44e9 2020696c branch keyscan_process_lpm_before remote_car_g24_enter_lpm: 44ea 6800c765 fetch 1 ,mem_remote_car_24g_enter_lpm_enable 44eb 207a0000 rtn blank 44ec 20202d83 branch g24_lpm_long_sleep remote_car_process_auto_pair_exit: 44ed 20600000 rtn remote_car_key_scan_process: 44ee 20206978 branch keyscan_key_process remote_car_scale_process_idle: 44ef 20404544 call remote_car_rocker_process 44f0 20404503 call remote_car_24g_status_process 44f1 202044ee branch remote_car_key_scan_process remote_car_scale_process_bb_event: 44f2 1a627e00 copy regc ,pdata 44f3 c016b431 beq bt_evt_button_up ,app_event_button_up 44f4 c008341a beq bt_evt_button_long_pressed ,app_button_long_pressed 44f5 c01cc4fb beq bt_evt_24g_pairing_complete ,remote_car_24g_pairing_complete 44f6 c01e44ff beq bt_evt_24g_attempt_success ,remote_car_24g_attempt_success 44f7 c01d44f9 beq bt_evt_24g_attempt_fail ,remote_car_24g_attempt_fail 44f8 20600000 rtn remote_car_24g_attempt_fail: 44f9 70476501 jam 1 ,mem_remote_car_24g_enter_lpm_enable 44fa 20600000 rtn remote_car_24g_pairing_complete: 44fb 70476501 jam 1 ,mem_remote_car_24g_enter_lpm_enable 44fc 70476301 jam work_paired ,mem_remote_car_24g_auto_work_step 44fd 70476401 jam work_paired ,mem_remote_car_24g_pair_success_flag 44fe 20600000 rtn remote_car_24g_attempt_success: 44ff 70476501 jam 1 ,mem_remote_car_24g_enter_lpm_enable 4500 70476301 jam work_paired ,mem_remote_car_24g_auto_work_step 4501 70476401 jam work_paired ,mem_remote_car_24g_pair_success_flag 4502 20600000 rtn remote_car_24g_status_process: 4503 6800c763 fetch 1 ,mem_remote_car_24g_auto_work_step 4504 c1000000 rtneq power_on 4505 6800c762 fetch 1 ,mem_remote_car_24g_status 4506 c1008000 rtneq work_paired 4507 70476201 jam work_paired ,mem_remote_car_24g_status remote_car_scale_process_paired: 4508 da200000 arg 0 ,rega 4509 20207d19 branch ui_led_off_global remote_car_scale_process_shutdown: 450a da200000 arg 0 ,rega 450b 20407d19 call ui_led_off_global 450c 204044db call remote_car_ui_led_init 450d 2020340a branch app_enter_hibernate remote_car_event_timer: 450e 2040337b call app_power_timer 450f 20204510 branch remote_car_no_data_timer remote_car_no_data_timer: 4510 6800c72d fetch 1 ,mem_remote_car_config_timeout_shutdown_enable 4511 207a0000 rtn blank 4512 da604755 arg mem_remote_car_no_data_timer ,regc 4513 da40450a arg remote_car_scale_process_shutdown ,regb 4514 20203374 branch timer_single_step_2b remote_car_get_adc_default_data: 4515 2040451a call remote_car_rocker_get_x 4516 6009471a storet 2 ,mem_current_vdd_value_default_mid_x 4517 2040451f call remote_car_rocker_get_y 4518 6009471c storet 2 ,mem_current_vdd_value_default_mid_y 4519 20600000 rtn remote_car_rocker_data_get: remote_car_rocker_get_x: 451a 6801471a fetch 2 ,mem_current_vdd_value_default_mid_x 451b 6001471e store 2 ,mem_current_vdd_value_default_mid_temp 451c 20404540 call remote_car_get_adc_from_gpio6 451d 20404525 call remote_car_rocker_get_value 451e 6000c724 store 1 ,mem_rocker_status remote_car_rocker_get_y: 451f 6801471c fetch 2 ,mem_current_vdd_value_default_mid_y 4520 6001471e store 2 ,mem_current_vdd_value_default_mid_temp 4521 20404542 call remote_car_get_adc_from_gpio7 4522 20404525 call remote_car_rocker_get_value 4523 6000c725 store 1 ,mem_rocker_status + 1 4524 20600000 rtn remote_car_rocker_get_value: 4525 68014720 fetch 2 ,mem_current_vdd_default_range 4526 1fe22200 copy pdata ,rega 4527 6801471e fetch 2 ,mem_current_vdd_value_default_mid_temp 4528 2040452e call remote_car_rocker_mid_value_adjust 4529 6800c719 fetch 1 ,mem_rocker_work_status 452a 243a4537 nbranch remote_car_rocker_translate_key ,blank 452b 24610000 nrtn positive 452c 6809471e fetcht 2 ,mem_current_vdd_value_default_mid_temp 452d 20600000 rtn remote_car_rocker_mid_value_adjust: 452e 98467e00 isub temp ,pdata 452f 20214534 branch remote_car_rocker_mid_adjust_positive ,positive 4530 1fe67e00 sub pdata ,0 ,pdata 4531 70471801 jam 1 ,mem_rocker_negative_flag 4532 9a267c00 isub rega ,null 4533 20600000 rtn remote_car_rocker_mid_adjust_positive: 4534 70471800 jam 0 ,mem_rocker_negative_flag 4535 9a267c00 isub rega ,null 4536 20600000 rtn remote_car_rocker_translate_key: 4537 2421453e nbranch remote_car_rocker_middle_key ,positive 4538 6800c718 fetch 1 ,mem_rocker_negative_flag 4539 243a453c nbranch remote_car_rocker_negative_key ,blank remote_car_rocker_positive_key: 453a 58000001 setarg rocker_positive_key 453b 20600000 rtn remote_car_rocker_negative_key: 453c 58000002 setarg rocker_negative_key 453d 20600000 rtn remote_car_rocker_middle_key: 453e 58000000 setarg rocker_middle_key 453f 20600000 rtn remote_car_get_adc_from_gpio6: 4540 70422e33 jam 0x33 ,mem_adc_channel 4541 202068eb branch adc_set_mode remote_car_get_adc_from_gpio7: 4542 70422e34 jam 0x34 ,mem_adc_channel 4543 202068eb branch adc_set_mode remote_car_rocker_process: 4544 6800c72a fetch 1 ,mem_remote_car_config_check_way 4545 c1808000 rtnne car_remote_check_rocker remote_car_read_rocker_check_start: 4546 44f9401e bpatch patch1e_2 ,mem_patch1e 4547 70471901 jam 1 ,mem_rocker_work_status 4548 2040451a call remote_car_rocker_data_get 4549 68014724 fetch 2 ,mem_rocker_status 454a 68094722 fetcht 2 ,mem_rocker_last_status 454b 98467c00 isub temp ,null 454c 20628000 rtn zero 454d 60014722 store 2 ,mem_rocker_last_status 454e 20404550 call remote_car_rocker_x_to_key 454f 20204554 branch remote_car_rocker_y_to_key remote_car_rocker_x_to_key: 4550 6800c724 fetch 1 ,mem_rocker_x_status 4551 203a455a branch rocker_to_queue_set_0 ,blank 4552 1fe0ffff increase -1 ,pdata 4553 20204557 branch remote_car_rocker_to_key remote_car_rocker_y_to_key: 4554 6800c725 fetch 1 ,mem_rocker_y_status 4555 203a455d branch rocker_to_queue_set_2 ,blank 4556 1fe0fe01 increase 1 ,pdata remote_car_rocker_to_key: 4557 1fe20e00 copy pdata ,queue 4558 da200001 arg 1 ,rega 4559 20204560 branch remote_car_send_key_data rocker_to_queue_set_0: 455a d8e00000 arg 0 ,queue 455b da200000 arg 0 ,rega 455c 20204560 branch remote_car_send_key_data rocker_to_queue_set_2: 455d d8e00002 arg 2 ,queue 455e da200000 arg 0 ,rega 455f 20204560 branch remote_car_send_key_data remote_car_send_key_data: 4560 1a227e00 copy rega ,pdata 4561 6000c761 store 1 ,mem_remote_key_status 4562 6800c763 fetch 1 ,mem_remote_car_24g_auto_work_step 4563 c0002ee4 beq power_on ,g24_auto_pair_start 4564 68014753 fetch 2 ,mem_remote_car_no_data_timeout 4565 60014755 store 2 ,mem_remote_car_no_data_timer 4566 6800c761 fetch 1 ,mem_remote_key_status 4567 203a4580 branch remote_car_key_is_release ,blank remote_car_key_is_press: 4568 44f9c01e bpatch patch1e_3 ,mem_patch1e 4569 da200000 arg 0 ,rega 456a 20407d14 call ui_led_on_global remote_car_attack_key_press: 456b 18e27e00 copy queue ,pdata 456c c00245a3 beq 4 ,remote_car_send_attack_key4_press 456d c002c5a5 beq 5 ,remote_car_send_attack_key5_press 456e c00345a7 beq 6 ,remote_car_send_fire_key6_press remote_car_motor_key_press: 456f 2040458b call remote_car_device_layout_select 4570 c0004574 beq control_f_b_ten ,remote_car_single_motor_key_is_press 4571 c001457a beq control_l_r_ten ,remote_car_double_motor_key_press 4572 c001c574 beq control_l_r_lr ,remote_car_single_motor_key_is_press 4573 20600000 rtn remote_car_single_motor_key_is_press: 4574 18e27e00 copy queue ,pdata 4575 c000458f beq 0 ,remote_car_send_motor1_key0_press 4576 c000c591 beq 1 ,remote_car_send_motor1_key1_press 4577 c0014593 beq 2 ,remote_car_send_motor2_key2_press 4578 c001c595 beq 3 ,remote_car_send_motor2_key3_press 4579 20600000 rtn remote_car_double_motor_key_press: 457a 18e27e00 copy queue ,pdata 457b c0004597 beq 0 ,remote_car_send_double_motor_key0_press 457c c000c59a beq 1 ,remote_car_send_double_motor_key1_press 457d c001459d beq 2 ,remote_car_send_double_motor_key2_press 457e c001c5a0 beq 3 ,remote_car_send_double_motor_key3_press 457f 20600000 rtn remote_car_key_is_release: 4580 44fa401e bpatch patch1e_4 ,mem_patch1e 4581 da200000 arg 0 ,rega 4582 20407d19 call ui_led_off_global remote_car_attack_key_release: 4583 18e27e00 copy queue ,pdata 4584 c00245bc beq 4 ,remote_car_send_attack_key4_rel 4585 c002c5bc beq 5 ,remote_car_send_attack_key5_rel remote_car_motor_key_release: 4586 2040458b call remote_car_device_layout_select 4587 c00045a9 beq control_f_b_ten ,remote_car_single_motor_key_rel 4588 c00145af beq control_l_r_ten ,remote_car_double_motor_key_rel 4589 c001c5a9 beq control_l_r_lr ,remote_car_single_motor_key_rel 458a 20600000 rtn remote_car_device_layout_select: 458b 6800c728 fetch 1 ,mem_remote_car_config_layout 458c 6808c727 fetcht 1 ,mem_remote_car_config_key_map 458d 9841fe00 ior temp ,pdata 458e 20600000 rtn remote_car_send_motor1_key0_press: 458f 70473401 jam motor_positive ,mem_remote_car_24g_motor1_payload 4590 202045be branch remote_car_send_key remote_car_send_motor1_key1_press: 4591 70473402 jam motor_negative ,mem_remote_car_24g_motor1_payload 4592 202045be branch remote_car_send_key remote_car_send_motor2_key2_press: 4593 70473601 jam motor_positive ,mem_remote_car_24g_motor2_payload 4594 202045be branch remote_car_send_key remote_car_send_motor2_key3_press: 4595 70473602 jam motor_negative ,mem_remote_car_24g_motor2_payload 4596 202045be branch remote_car_send_key remote_car_send_double_motor_key0_press: 4597 70473401 jam motor_positive ,mem_remote_car_24g_motor1_payload 4598 70473601 jam motor_positive ,mem_remote_car_24g_motor2_payload 4599 202045be branch remote_car_send_key remote_car_send_double_motor_key1_press: 459a 70473402 jam motor_negative ,mem_remote_car_24g_motor1_payload 459b 70473602 jam motor_negative ,mem_remote_car_24g_motor2_payload 459c 202045be branch remote_car_send_key remote_car_send_double_motor_key2_press: 459d 70473402 jam motor_negative ,mem_remote_car_24g_motor1_payload 459e 70473601 jam motor_positive ,mem_remote_car_24g_motor2_payload 459f 202045be branch remote_car_send_key remote_car_send_double_motor_key3_press: 45a0 70473401 jam motor_positive ,mem_remote_car_24g_motor1_payload 45a1 70473602 jam motor_negative ,mem_remote_car_24g_motor2_payload 45a2 202045be branch remote_car_send_key remote_car_send_attack_key4_press: 45a3 70473801 jam motor_positive ,mem_remote_car_24g_motor3_payload 45a4 202045be branch remote_car_send_key remote_car_send_attack_key5_press: 45a5 70473802 jam motor_negative ,mem_remote_car_24g_motor3_payload 45a6 202045be branch remote_car_send_key remote_car_send_fire_key6_press: 45a7 70474101 jam 0x01 ,mem_remote_car_24g_fire_send_payload 45a8 202045c0 branch remote_car_send_attack remote_car_single_motor_key_rel: 45a9 18e27e00 copy queue ,pdata 45aa c00045b5 beq 0 ,remote_car_send_motor1_key0_rel 45ab c000c5b5 beq 1 ,remote_car_send_motor1_key1_rel 45ac c00145b7 beq 2 ,remote_car_send_motor2_key2_rel 45ad c001c5b7 beq 3 ,remote_car_send_motor2_key3_rel 45ae 20600000 rtn remote_car_double_motor_key_rel: 45af 18e27e00 copy queue ,pdata 45b0 c00045b9 beq 0 ,remote_car_send_double_motor_key0_rel 45b1 c000c5b9 beq 1 ,remote_car_send_double_motor_key1_rel 45b2 c00145b9 beq 2 ,remote_car_send_double_motor_key2_rel 45b3 c001c5b9 beq 3 ,remote_car_send_double_motor_key3_rel 45b4 20600000 rtn remote_car_send_motor1_key0_rel: remote_car_send_motor1_key1_rel: 45b5 70473400 jam motor_stop ,mem_remote_car_24g_motor1_payload 45b6 202045be branch remote_car_send_key remote_car_send_motor2_key2_rel: remote_car_send_motor2_key3_rel: 45b7 70473600 jam motor_stop ,mem_remote_car_24g_motor2_payload 45b8 202045be branch remote_car_send_key remote_car_send_double_motor_key0_rel: remote_car_send_double_motor_key1_rel: remote_car_send_double_motor_key2_rel: remote_car_send_double_motor_key3_rel: 45b9 70473400 jam motor_stop ,mem_remote_car_24g_motor1_payload 45ba 70473600 jam motor_stop ,mem_remote_car_24g_motor2_payload 45bb 202045be branch remote_car_send_key remote_car_send_attack_key4_rel: remote_car_send_attack_key5_rel: 45bc 70473800 jam motor_stop ,mem_remote_car_24g_motor3_payload 45bd 202045be branch remote_car_send_key remote_car_send_key: 45be da20472e arg mem_remote_car_24g_motor_packet ,rega 45bf 20207e3d branch queue_push remote_car_send_attack: 45c0 da20473b arg mem_remote_car_24g_fire_packet ,rega 45c1 20207e3d branch queue_push remote_car_g24_package_data: 45c2 6800c764 fetch 1 ,mem_remote_car_24g_pair_success_flag 45c3 c000c5cc beq work_paired ,remote_car_g24_send_empty 45c4 da204744 arg mem_remote_car_24g_tx_temp ,rega 45c5 20407e54 call queue_pop 45c6 243445d1 nbranch remote_car_moto_data ,user remote_car_g24_package_data_continue: 45c7 d8c04744 arg mem_remote_car_24g_tx_temp ,contr 45c8 e8c08000 ifetch 1 ,contr 45c9 1fe22200 copy pdata ,rega 45ca da404745 arg mem_remote_car_24g_tx_temp + 1 ,regb 45cb 20600000 rtn remote_car_g24_send_empty: 45cc 70476400 jam 0 ,mem_remote_car_24g_pair_success_flag 45cd 78347c00 enable user 45ce da200001 arg 1 ,rega 45cf da404766 arg mem_remote_car_empty_packet ,regb 45d0 20600000 rtn remote_car_moto_data: 45d1 6800c747 fetch 1 ,mem_remote_car_24g_tx_temp + 3 45d2 c00245d5 beq car_cmd_l_r_motor_control ,remote_car_moto_data_next 45d3 c002c5d5 beq car_cmd_f_b_motor_control ,remote_car_moto_data_next 45d4 20600000 rtn remote_car_moto_data_next: 45d5 6800c74a fetch 1 ,mem_remote_car_24g_tx_temp + 6 45d6 243a45dc nbranch remote_car_moto_data_enable_user ,blank 45d7 6800c74c fetch 1 ,mem_remote_car_24g_tx_temp + 8 45d8 243a45dc nbranch remote_car_moto_data_enable_user ,blank 45d9 6800c74e fetch 1 ,mem_remote_car_24g_tx_temp + 10 45da 243a45dc nbranch remote_car_moto_data_enable_user ,blank 45db 20600000 rtn remote_car_moto_data_enable_user: 45dc 78347c00 enable user 45dd 202045c7 branch remote_car_g24_package_data_continue shutter_init: 45de 20758000 rtn wake 45df 68108081 hfetch 1 ,core_gpio_sel1 45e0 1fe17efc and_into 0xfc ,pdata 45e1 60108081 hstore 1 ,core_gpio_sel1 45e2 580046b4 setarg shutter_le_before_hibernate 45e3 600141eb store 2 ,mem_cb_before_hibernate 45e4 580046b3 setarg shutter_process_lpm_before 45e5 600141ed store 2 ,mem_cb_before_lpm 45e6 5800340a setarg app_enter_hibernate 45e7 600141f7 store 2 ,mem_cb_discovry_timeout 45e8 580046b1 setarg shutter_process_idle 45e9 600141f3 store 2 ,mem_cb_idle_process 45ea 58004612 setarg shutter_process_bb_event 45eb 600141f5 store 2 ,mem_cb_bb_event_process 45ec 5800460c setarg shutter_le_scale_lpm_lock 45ed 600141e9 store 2 ,mem_cb_check_wakelock 45ee 5800476a setarg ble_shutter_receive_data 45ef 600141f9 store 2 ,mem_cb_att_write 45f0 58004686 setarg shutter_le_bb_event_timer 45f1 600141fd store 2 ,mem_cb_event_timer 45f2 58004729 setarg shutter_key_change 45f3 600146e7 store 2 ,mem_cb_shutter_keycan 45f4 58004806 setarg shutter_soft_swtich_power_on 45f5 600146e2 store 2 ,mem_shutter_soft_switch_poweron_callback_function 45f6 58004807 setarg shutter_soft_swtich_power_off 45f7 600146e4 store 2 ,mem_shutter_soft_switch_poweroff_callback_function 45f8 204057a3 call le_modified_name 45f9 204047da call shutter_load_bluetooth_config_by_user_config 45fa 20404788 call shutter_init_bluetooth_config 45fb 2040476d call shutter_init_param 45fc 20406948 call keyscan_key_init 45fd 2040477a call shutter_load_buffer_config_form_datarom 45fe 20407e38 call queue_init 45ff 20407d08 call ui_led_init_global 4600 20404793 call shutter_load_bluetooth_config 4601 204047c7 call shutter_load_bluetooth_config_by_eeprom 4602 44fac01e bpatch patch1e_5 ,mem_patch1e 4603 2040464f call classic_shutter_load_reconn_info 4604 6800c6dd fetch 1 ,mem_shutter_hard_soft_switch_case 4605 c0004609 beq hard_switch ,shutter_hart_swtich_power_on 4606 6800c6de fetch 1 ,mem_shutter_soft_switch_button_gpio 4607 6000c686 store 1 ,mem_ui_button_gpio 4608 2020480e branch ui_soft_swtich_init shutter_hart_swtich_power_on: 4609 704686ff jam ui_button_gpio_disable ,mem_ui_button_gpio 460a 7046df01 jam ss_state_power_on ,mem_shutter_soft_switch_power_state 460b 202046d9 branch shutter_start_reconnect shutter_le_scale_lpm_lock: 460c 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state 460d c00133d0 beq ss_state_power_off ,app_get_lpm_wake_lock 460e 2040527e call l2cap_malloc_get_full_map 460f 6800c256 fetch 1 ,mem_used_map 4610 243a33d0 nbranch app_get_lpm_wake_lock ,blank 4611 202033d2 branch app_put_lpm_wake_lock shutter_process_bb_event: 4612 1a627e00 copy regc ,pdata 4613 c000c626 beq bt_evt_bb_connected ,classic_shutter_process_baseband_connect 4614 c0014629 beq bt_evt_bb_disconnected ,classic_shutter_process_baseband_disconnect 4615 c0024631 beq bt_evt_reconn_failed ,classic_shutter_process_reconnect_failed 4616 c002c633 beq bt_evt_setup_complete ,classic_shutter_process_setup_complete 4617 c0034635 beq bt_evt_hid_connected ,classic_shutter_process_hid_connect 4618 c003c638 beq bt_evt_hid_disconnected ,classic_shutter_process_hid_disconnect 4619 c009463c beq bt_evt_hid_handshake ,classic_shutter_process_hid_handshake 461a c009c644 beq bt_evt_reconn_page_timeout ,classic_shutter_process_reconnect_page_timeout 461b c013c645 beq bt_evt_virtual_cable_unplug ,classic_shutter_process_virtual_cable_unplug 461c c0174648 beq bt_evt_remote_unsniff ,classic_shutter_process_remote_unsniff 461d c01ec649 beq bt_evt_store_nvram ,classic_shutter_process_store_reconnect_information 461e c00a4658 beq bt_evt_le_connected ,ble_shutter_process_baseband_connect 461f c00ac65c beq bt_evt_le_disconnected ,ble_shutter_process_baseband_disconnect 4620 c01fc65f beq bt_evt_le_reconnect_complete ,ble_shutter_process_reconnect_complete 4621 c0204665 beq bt_evt_le_parse_conn_papa_update_rsp ,ble_shutter_process_parse_connect_parameter_update_response 4622 c008466b beq bt_evt_button_long_pressed ,shutter_process_soft_swtich_button_long_press 4623 c016466c beq bt_evt_button_down ,shutter_process_soft_swtich_button_down 4624 c016c677 beq bt_evt_button_up ,shutter_process_soft_swtich_button_up 4625 20600000 rtn classic_shutter_process_baseband_connect: 4626 7046ad00 jam 0 ,mem_classic_shutter_hid_disconn_count 4627 7046ac00 jam 0 ,mem_classic_shutter_cable_unplug_conut 4628 20600000 rtn classic_shutter_process_baseband_disconnect: 4629 2040462b call classic_shutter_disconnect_clear_flag 462a 20204631 branch classic_shutter_process_reconnect_failed classic_shutter_disconnect_clear_flag: 462b 7041e200 jam app_handshake_null ,mem_app_handshake_flag 462c 70468000 jam 0 ,mem_hid_handshake_timer_count 462d 70420500 jam 0 ,mem_unsniff2sniff_timer_count 462e 7046ac00 jam 0 ,mem_classic_shutter_cable_unplug_conut 462f 7046ad00 jam 0 ,mem_classic_shutter_hid_disconn_count 4630 20207e38 branch queue_init classic_shutter_process_reconnect_failed: 4631 204033a9 call app_disconn_reason_clear 4632 202046c2 branch shutter_start_bluetooth_discovery classic_shutter_process_setup_complete: 4633 204046b6 call shutter_stop_bluetooth_discovery 4634 20203408 branch app_led_stop_blink classic_shutter_process_hid_connect: 4635 58000002 setarg hid_handshake_timeout 4636 6000c680 store 1 ,mem_hid_handshake_timer_count 4637 20600000 rtn classic_shutter_process_hid_disconnect: 4638 7046ac00 jam 0 ,mem_classic_shutter_cable_unplug_conut 4639 58000001 setarg flag_shutter_hid_disconn_timeout 463a 6000c6ad store 1 ,mem_classic_shutter_hid_disconn_count 463b 20600000 rtn classic_shutter_process_hid_handshake: 463c 6800c1e2 fetch 1 ,mem_app_handshake_flag 463d c1008000 rtneq app_handshake_done 463e 7041e201 jam app_handshake_done ,mem_app_handshake_flag 463f 20403416 call app_lpm_mult_enable 4640 20403414 call app_store_reconn_info 4641 204046b6 call shutter_stop_bluetooth_discovery 4642 20403408 call app_led_off 4643 2020340e branch app_bt_enter_sniff classic_shutter_process_reconnect_page_timeout: 4644 20204631 branch classic_shutter_process_reconnect_failed classic_shutter_process_virtual_cable_unplug: 4645 58000005 setarg flag_shutter_cable_unplug_timeout 4646 6000c6ac store 1 ,mem_classic_shutter_cable_unplug_conut 4647 20600000 rtn classic_shutter_process_remote_unsniff: 4648 202033cd branch app_start_auto_sniff classic_shutter_process_store_reconnect_information: 4649 da400000 arg nvram_eeprom_offset ,regb 464a 6800c217 fetch 1 ,mem_nv_data_number 464b 1fef8422 mul32 pdata ,34 ,temp 464c 68014215 fetch 2 ,mem_nv_data_ptr 464d 1fe22200 copy pdata ,rega 464e 20206606 branch iicd_write_eep_data classic_shutter_load_reconn_info: 464f da400000 arg nvram_eeprom_offset ,regb 4650 6800c69a fetch 1 ,mem_shutter_bluetooth_type 4651 c4008000 rtnbit0 classic_shutter 4652 6800c217 fetch 1 ,mem_nv_data_number 4653 207a0000 rtn blank 4654 1fef8422 mul32 pdata ,34 ,temp 4655 68014215 fetch 2 ,mem_nv_data_ptr 4656 1fe22200 copy pdata ,rega 4657 202065df branch iicd_read_eep_data ble_shutter_process_baseband_connect: 4658 204046b6 call shutter_stop_bluetooth_discovery 4659 58000000 setarg 0 465a 600146b7 store 2 ,mem_ble_shutter_reconn_timer 465b 20203408 branch app_led_off ble_shutter_process_baseband_disconnect: 465c 20407e38 call queue_init 465d 7046b000 jam 0 ,mem_ble_shutter_enable_notify 465e 202046d9 branch shutter_start_reconnect ble_shutter_process_reconnect_complete: 465f 20407e38 call queue_init 4660 7046b001 jam 1 ,mem_ble_shutter_enable_notify 4661 680446c1 fetch 8 ,mem_ble_shutter_interval_min 4662 60044496 store 8 ,mem_le_interval_min 4663 20403416 call app_lpm_mult_enable 4664 20205abf branch le_l2cap_tx_update_req ble_shutter_process_parse_connect_parameter_update_response: 4665 68014509 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result 4666 c1000000 rtneq ble_signaling_connect_parameter_update_accepted 4667 680446c9 fetch 8 ,mem_ble_shutter_interval_min_new 4668 207a0000 rtn blank 4669 60044496 store 8 ,mem_le_interval_min 466a 20205abf branch le_l2cap_tx_update_req shutter_process_soft_swtich_button_long_press: 466b 2020481f branch ui_soft_switch_botton_long_press shutter_process_soft_swtich_button_down: 466c 6800c6dd fetch 1 ,mem_shutter_hard_soft_switch_case 466d c1000000 rtneq hard_switch 466e 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state 466f c1808000 rtnne ss_state_power_on 4670 20404672 call shutter_store_currenct_led_state 4671 20203406 branch app_led_on shutter_store_currenct_led_state: 4672 7048df01 jam 1 ,mem_shutter_soft_swtich_botton_down 4673 df20000b arg 11 ,loopcnt 4674 d8a048e0 arg mem_shutter_soft_swtich_led_struct_temp ,contw 4675 d8c048c9 arg mem_shutter_led_struct_app_led ,contr 4676 20207f01 branch memcpy shutter_process_soft_swtich_button_up: 4677 6800c6dd fetch 1 ,mem_shutter_hard_soft_switch_case 4678 c1000000 rtneq hard_switch 4679 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state 467a c000c67c beq ss_state_power_on ,shutter_load_currenct_led_state 467b 2020481b branch ui_soft_switch_botton_up shutter_load_currenct_led_state: 467c 6800c8df fetch 1 ,mem_shutter_soft_swtich_botton_down 467d c1808000 rtnne 1 467e 7048df00 jam 0 ,mem_shutter_soft_swtich_botton_down 467f 68014682 fetch 2 ,mem_ui_state_map 4680 c2803408 bbit1 ui_state_bt_connected ,app_led_off 4681 c284b408 bbit1 ui_state_ble_connected ,app_led_off 4682 df20000b arg 11 ,loopcnt 4683 d8c048e0 arg mem_shutter_soft_swtich_led_struct_temp ,contr 4684 d8a048c9 arg mem_shutter_led_struct_app_led ,contw 4685 20207f01 branch memcpy shutter_le_bb_event_timer: 4686 2040468c call shutter_check_sleep_timer 4687 20404693 call shutter_check_power_off_timer 4688 2040469e call classic_shutter_check_unplug_timer 4689 204046a6 call classic_shutter_hid_handshake_timer 468a 204046a9 call classic_shutter_hid_disconn_timer 468b 202046ac branch ble_shutter_reconn_timer shutter_check_sleep_timer: 468c da6046db arg mem_shutter_sleep_timer ,regc 468d da40468f arg shutter_sleep_timeout ,regb 468e 20203374 branch timer_single_step_2b shutter_sleep_timeout: 468f 7046df02 jam ss_state_power_off ,mem_shutter_soft_switch_power_state 4690 20403408 call app_led_off 4691 204046f4 call shutter_disconnect_current_connection 4692 2020480b branch shutter_wait_power_off shutter_check_power_off_timer: 4693 da6048ec arg mem_shutter_power_off_timer ,regc 4694 da404696 arg shutter_check_power_off_timeout ,regb 4695 2020336d branch timer_single_step shutter_check_power_off_timeout: 4696 68014682 fetch 2 ,mem_ui_state_map 4697 c284c80b bbit1 ui_state_ble_connected ,shutter_wait_power_off 4698 c280480b bbit1 ui_state_bt_connected ,shutter_wait_power_off 4699 6800c8c9 fetch 1 ,mem_shutter_led_struct_app_led_type 469a c000c80b beq ui_led_state_blink_start ,shutter_wait_power_off 469b c002480b beq ui_led_state_blink_lighting ,shutter_wait_power_off 469c c002c80b beq ui_led_state_blink_darking ,shutter_wait_power_off 469d 2020340a branch app_enter_hibernate classic_shutter_check_unplug_timer: 469e da6046ac arg mem_classic_shutter_cable_unplug_conut ,regc 469f da4046a1 arg classic_shutter_unplug_timeout ,regb 46a0 2020336d branch timer_single_step classic_shutter_unplug_timeout: 46a1 6800827f fetch 1 ,mem_control_tasks 46a2 79207e00 set1 l2cap_disconnect_interrupt ,pdata 46a3 79207e07 set1 l2cap_disconnect_control ,pdata 46a4 6000827f store 1 ,mem_control_tasks 46a5 20600000 rtn classic_shutter_hid_handshake_timer: 46a6 da604680 arg mem_hid_handshake_timer_count ,regc 46a7 da40463c arg classic_shutter_process_hid_handshake ,regb 46a8 2020336d branch timer_single_step classic_shutter_hid_disconn_timer: 46a9 da6046ad arg mem_classic_shutter_hid_disconn_count ,regc 46aa da4033e9 arg app_bt_disconnect ,regb 46ab 2020336d branch timer_single_step ble_shutter_reconn_timer: 46ac 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state 46ad c1808000 rtnne ss_state_power_on 46ae da6046b7 arg mem_ble_shutter_reconn_timer ,regc 46af da4046c2 arg shutter_start_bluetooth_discovery ,regb 46b0 20203374 branch timer_single_step_2b shutter_process_idle: 46b1 2040473a call shutter_send_data_to_master 46b2 20206978 branch keyscan_key_process shutter_process_lpm_before: 46b3 2020696c branch keyscan_process_lpm_before shutter_le_before_hibernate: 46b4 20406835 call gpio_set_before_lpm_common 46b5 202046b3 branch shutter_process_lpm_before shutter_stop_bluetooth_discovery: 46b6 6800c69a fetch 1 ,mem_shutter_bluetooth_type 46b7 c280c6be bbit1 classic_shutter ,classic_shutter_stop_bluetooth_discovery 46b8 c28046ba bbit1 ble_shutter ,ble_shutter_stop_bluetooth_discovery 46b9 20600000 rtn ble_shutter_stop_bluetooth_discovery: 46ba 680146d7 fetch 2 ,mem_ble_shutter_connect_timeout 46bb 600146d9 store 2 ,mem_shutter_sleep_timeout 46bc 600146db store 2 ,mem_shutter_sleep_timer 46bd 202033f8 branch app_ble_stop_adv classic_shutter_stop_bluetooth_discovery: 46be 680146d3 fetch 2 ,mem_classic_shutter_connect_timeout 46bf 600146d9 store 2 ,mem_shutter_sleep_timeout 46c0 600146db store 2 ,mem_shutter_sleep_timer 46c1 202033f0 branch app_bt_stop_discovery shutter_start_bluetooth_discovery: 46c2 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state 46c3 c1808000 rtnne ss_state_power_on 46c4 6800c69a fetch 1 ,mem_shutter_bluetooth_type 46c5 c280c6c8 bbit1 classic_shutter ,classic_shutter_start_discovery 46c6 c28046cc bbit1 ble_shutter ,ble_shutter_start_discovery 46c7 20600000 rtn classic_shutter_start_discovery: 46c8 680146d1 fetch 2 ,mem_classic_shutter_discovery_timeout , 46c9 600146d9 store 2 ,mem_shutter_sleep_timeout 46ca 600146db store 2 ,mem_shutter_sleep_timer 46cb 202033eb branch app_bt_start_discovery_short ble_shutter_start_discovery: 46cc 68014682 fetch 2 ,mem_ui_state_map 46cd c3848000 rtnbit1 ui_state_ble_connected 46ce 680146d5 fetch 2 ,mem_ble_shutter_discovery_timeout 46cf 600146d9 store 2 ,mem_shutter_sleep_timeout 46d0 600146db store 2 ,mem_shutter_sleep_timer 46d1 680146b3 fetch 2 ,mem_ble_shutter_discovery_adv_interval 46d2 204046f0 call shutter_ble_adv_interval_set 46d3 20403404 call app_led_start_blink 46d4 680246bd fetch 4 ,mem_ble_shutter_discovery_blink_on_time 46d5 600248cc store 4 ,mem_shutter_led_struct_app_led_on_time 46d6 68014682 fetch 2 ,mem_ui_state_map 46d7 c3858000 rtnbit1 ui_state_ble_adv 46d8 202033fa branch app_ble_start_adv shutter_start_reconnect: 46d9 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state 46da c1808000 rtnne ss_state_power_on 46db 6800c69a fetch 1 ,mem_shutter_bluetooth_type 46dc c280c6df bbit1 classic_shutter ,classic_shutter_start_reconnect 46dd c28046e4 bbit1 ble_shutter ,ble_shutter_start_reconnect 46de 20600000 rtn classic_shutter_start_reconnect: 46df 204046f8 call app_check_reconn_target 46e0 203a46c2 branch shutter_start_bluetooth_discovery ,blank 46e1 20403406 call app_led_on 46e2 204033f0 call app_bt_stop_discovery 46e3 202033e1 branch app_bt_start_reconnect ble_shutter_start_reconnect: 46e4 680146b7 fetch 2 ,mem_ble_shutter_reconn_timer 46e5 680946b5 fetcht 2 ,mem_ble_shutter_reconn_timeout 46e6 600946b7 storet 2 ,mem_ble_shutter_reconn_timer 46e7 247a0000 nrtn blank 46e8 680146b1 fetch 2 ,mem_ble_shutter_reconn_dav_interval 46e9 204046f0 call shutter_ble_adv_interval_set 46ea 20403404 call app_led_start_blink 46eb 680246b9 fetch 4 ,mem_ble_shutter_reconn_blink_on_time 46ec 600248cc store 4 ,mem_shutter_led_struct_app_led_on_time 46ed 68014682 fetch 2 ,mem_ui_state_map 46ee c3858000 rtnbit1 ui_state_ble_adv 46ef 202033fa branch app_ble_start_adv shutter_ble_adv_interval_set: 46f0 60014154 store 2 ,mem_lpm_interval 46f1 1fe0fffc increase -4 ,pdata 46f2 60014482 store 2 ,mem_le_adv_interval 46f3 20600000 rtn shutter_disconnect_current_connection: 46f4 68014682 fetch 2 ,mem_ui_state_map 46f5 c284b402 bbit1 ui_state_ble_connected ,app_ble_disconnect 46f6 c28033e9 bbit1 ui_state_bt_connected ,app_bt_disconnect 46f7 202046b6 branch shutter_stop_bluetooth_discovery app_check_reconn_target: 46f8 6800c217 fetch 1 ,mem_nv_data_number 46f9 1fe27200 copy pdata ,loopcnt 46fa 68014215 fetch 2 ,mem_nv_data_ptr 46fb 1fe22200 copy pdata ,rega app_check_reconn_target_loop: 46fc ea210000 ifetch 2 ,rega 46fd c0004701 beq 0 ,found_reconn_device 46fe 1a20a222 increase nv_data_len ,rega 46ff c20046fc loop app_check_reconn_target_loop 4700 20207ff1 branch enable_blank found_reconn_device: 4701 e8c30000 ifetch 6 ,contr 4702 600341d0 store 6 ,mem_hci_plap 4703 18c08c0a increase 10 ,contr 4704 d8a041be arg mem_link_key ,contw 4705 20407ebf call memcpy16 4706 204067d7 call check_link_key_load 4707 20207fef branch disable_blank shutter_check_data_enable: 4708 20407fe9 call disable_user 4709 68014682 fetch 2 ,mem_ui_state_map 470a c280470d bbit1 ui_state_bt_connected ,shutter_check_bt_data_enable 470b c284c710 bbit1 ui_state_ble_connected ,shutter_check_ble_data_enable 470c 20600000 rtn shutter_check_bt_data_enable: 470d 6800c253 fetch 1 ,mem_hid_interrupt_state 470e c19f8000 rtnne 0x3f 470f 20207fe7 branch enable_user shutter_check_ble_data_enable: 4710 6800c6b0 fetch 1 ,mem_ble_shutter_enable_notify 4711 207a0000 rtn blank 4712 20207fe7 branch enable_user shutter_check_bluetooth_conn: 4713 20407fe9 call disable_user 4714 68014682 fetch 2 ,mem_ui_state_map 4715 c3800000 rtnbit1 ui_state_bt_connected 4716 c3848000 rtnbit1 ui_state_ble_connected 4717 20207fe7 branch enable_user shutter_change_bluetooth_status_bt_disconn: 4718 6800c69a fetch 1 ,mem_shutter_bluetooth_type 4719 c280c71c bbit1 classic_shutter ,classic_shutter_change_bluetooth_status_bt_disconn 471a c280471f bbit1 ble_shutter ,ble_shutter_change_bluetooth_status_bt_disconn 471b 20600000 rtn classic_shutter_change_bluetooth_status_bt_disconn: 471c 6800c093 fetch 1 ,mem_scan_mode 471d c1818000 rtnne 0x03 471e 202046d9 branch shutter_start_reconnect ble_shutter_change_bluetooth_status_bt_disconn: 471f 202046d9 branch shutter_start_reconnect shutter_check_send_data: 4720 78567c00 disable user2 4721 680146d9 fetch 2 ,mem_shutter_sleep_timeout 4722 600146db store 2 ,mem_shutter_sleep_timer 4723 20404713 call shutter_check_bluetooth_conn 4724 20344718 branch shutter_change_bluetooth_status_bt_disconn ,user 4725 20404708 call shutter_check_data_enable 4726 24740000 nrtn user 4727 78367c00 enable user2 4728 20600000 rtn shutter_key_change: 4729 20404720 call shutter_check_send_data 472a 24760000 nrtn user2 472b 1a227e00 deposit rega 472c 203a4730 branch shutter_key_release ,blank shutter_key_press: 472d 20403406 call app_led_on 472e da6046f1 arg mem_key0_press ,regc 472f 20204732 branch push_queue_press_or_release shutter_key_release: 4730 20403408 call app_led_off 4731 da604719 arg mem_key0_release ,regc push_queue_press_or_release: 4732 dfe00005 arg max_queue_num ,pdata 4733 98effe00 imul32 queue ,pdata 4734 9a60a600 iadd regc ,regc push_buffer_in_queue: 4735 ea608000 ifetch 1 ,regc 4736 207a0000 rtn blank 4737 20404762 call queue_push_one_byte 4738 1a60a601 increase 1 ,regc 4739 20204735 branch push_buffer_in_queue shutter_send_data_to_master: 473a 68014682 fetch 2 ,mem_ui_state_map 473b c284c73e bbit1 ui_state_ble_connected ,pop_queue_to_ble_data 473c c280474e bbit1 ui_state_bt_connected ,pop_queue_to_classic_data 473d 20600000 rtn pop_queue_to_ble_data: 473e 20405892 call le_fifo_check_nearly_full 473f 247a0000 nrtn blank 4740 20404765 call queue_pop_one_byte 4741 24740000 nrtn user 4742 1fe0ffff pincrease -1 4743 1feffe05 mul32 pdata ,shutter_ble_data_buffer ,pdata 4744 d8404741 arg mem_ble_data_buffer1 ,temp 4745 98408c00 iadd temp ,contr le_send_notify_from_list: 4746 e8c08000 ifetch 1 ,contr 4747 1fe22200 copy pdata ,rega 4748 e8c90000 ifetcht 2 ,contr 4749 20407ea5 call store_contr 474a 20405a64 call le_att_malloc_tx_notify 474b 1a227200 copy rega ,loopcnt 474c 20407e9f call get_contr 474d 20207f01 branch memcpy pop_queue_to_classic_data: 474e 20405271 call l2cap_malloc_is_fifo_nearly_full 474f 247a0000 nrtn blank 4750 20404765 call queue_pop_one_byte 4751 24740000 nrtn user 4752 1fe0ffff pincrease -1 4753 1feffe05 mul32 pdata ,shutter_classic_data_buffer ,pdata 4754 d84047a0 arg mem_classic_data_buffer1 ,temp 4755 98408c00 iadd temp ,contr 4756 e8c28000 ifetch 5 ,contr 4757 6002c79b store 5 ,mem_classic_data_buffer classic_send_hid_data: 4758 6800c79b fetch 1 ,mem_classic_data_buffer 4759 1fe22200 copy pdata ,rega 475a 20404d63 call hid_malloc_tx_buff 475b 6801424e fetch 2 ,mem_hid_int_remote_cid 475c e0a10000 istore 2 ,contw 475d 580000a1 setarg 0xa1 475e e0a08000 istore 1 ,contw 475f 6802479c fetch 4 ,mem_classic_data_buffer + 1 4760 e0a48000 istore 9 ,contw 4761 20600000 rtn queue_push_one_byte: 4762 60008a9a store 1 ,mem_pdatatemp 4763 da200a9a arg mem_pdatatemp ,rega 4764 20207e3d branch queue_push queue_pop_one_byte: 4765 da200a9a arg mem_pdatatemp ,rega 4766 20407e54 call queue_pop 4767 24740000 nrtn user 4768 68008a9a fetch 1 ,mem_pdatatemp 4769 20600000 rtn ble_shutter_receive_data: 476a 68010478 fetch 2 ,mem_le_att_handle 476b c00c465f beq gatt_keyboard_write_handle ,ble_shutter_process_reconnect_complete 476c 20600000 rtn shutter_init_param: 476d 58000002 setarg 0x02 476e 6000c8eb store 1 ,mem_shutter_power_off_timeout 476f 58200008 setarg 0x00200008 4770 600246c1 store 4 ,mem_ble_shutter_interval_min 4771 592c0005 setarg 0x012c0005 4772 e0a20000 istore 4 ,contw 4773 7044a617 jam 0x17 ,mem_le_local_mtu 4774 5800001b setarg 0x1b 4775 600144fa store 2 ,mem_le_pairing_handle 4776 20405810 call le_set_config_fixed_ltk 4777 2040582c call le_set_fixed_ltk 4778 20405839 call le_set_justwork 4779 20205818 branch le_set_config_read_authentication shutter_load_buffer_config_form_datarom: 477a df200028 arg ble_key_value_list_size ,loopcnt 477b d8a04741 arg mem_ble_data_buffer1 ,contw 477c d8c0949f arg ble_shutter_key_value_list ,contr 477d 20407ef4 call memcpy_fast 477e df200028 arg bt_key_value_list_size ,loopcnt 477f d8a047a0 arg mem_classic_data_buffer1 ,contw 4780 d8c094c7 arg classic_shutter_key_value_list ,contr 4781 20207ef4 branch memcpy_fast shutter_load_ble_gatt_form_datarom: 4782 df20017e arg ble_gatt_list_size ,loopcnt 4783 d8c0913a arg ble_shutter_gatt_list ,contr 4784 20207ef4 branch memcpy_fast shutter_load_bt_sdp_form_datarom: 4785 df2001e7 arg bt_sdp_list_size ,loopcnt 4786 d8c092b8 arg classic_shutter_sdp_list ,contr 4787 20207ef4 branch memcpy_fast shutter_init_bluetooth_config: 4788 204047ae call shutter_check_load_config_flag 4789 24740000 nrtn user 478a 6800c69f fetch 1 ,mem_shutter_config_select_gpio1 478b 20404790 call shutter_init_bluetooth_config_gpio_input 478c 6800c6a0 fetch 1 ,mem_shutter_config_select_gpio2 478d 20404790 call shutter_init_bluetooth_config_gpio_input 478e 6800c6a1 fetch 1 ,mem_shutter_config_select_gpio3 478f 20204790 branch shutter_init_bluetooth_config_gpio_input shutter_init_bluetooth_config_gpio_input: 4790 207a0000 rtn blank 4791 1fe18480 or pdata ,0x80 ,temp 4792 202067f9 branch gpio_config_input_nowake shutter_load_bluetooth_config: 4793 204047ae call shutter_check_load_config_flag 4794 24740000 nrtn user 4795 20404797 call shutter_load_bluetooth_config_label 4796 202047b4 branch shutter_load_bluetooth_config_by_otp shutter_load_bluetooth_config_label: 4797 da200000 arg 0 ,rega 4798 6800c69f fetch 1 ,mem_shutter_config_select_gpio1 4799 204047a9 call shutter_load_bluetooth_config_read_gpio_input 479a 7d3a2200 nsetflag blank ,0 ,rega 479b 6800c6a0 fetch 1 ,mem_shutter_config_select_gpio2 479c 204047a9 call shutter_load_bluetooth_config_read_gpio_input 479d 7d3a2201 nsetflag blank ,1 ,rega 479e 6800c6a1 fetch 1 ,mem_shutter_config_select_gpio3 479f 204047a9 call shutter_load_bluetooth_config_read_gpio_input 47a0 7d3a2202 nsetflag blank ,2 ,rega 47a1 1a227e00 copy rega ,pdata 47a2 6000c6a9 store 1 ,mem_shutter_config_label 47a3 6800c69e fetch 1 ,mem_shutter_config_size 47a4 9a2ffe00 imul32 rega ,pdata 47a5 6809469c fetcht 2 ,mem_shutter_config_otp_base_address 47a6 9840fe00 iadd temp ,pdata 47a7 600146aa store 2 ,mem_shutter_config_otp_addr 47a8 20600000 rtn shutter_load_bluetooth_config_read_gpio_input: 47a9 207a0000 rtn blank 47aa 1fe18480 or pdata ,0x80 ,temp 47ab 2040681d call gpio_get_bit 47ac 2420fff1 nbranch enable_blank ,true 47ad 20207fef branch disable_blank shutter_check_load_config_flag: 47ae 20407fe9 call disable_user 47af 6800c6a8 fetch 1 ,mem_shutter_config_user_size 47b0 247a0000 nrtn blank 47b1 6800c69b fetch 1 ,mem_shutter_config_enable 47b2 207a0000 rtn blank 47b3 20207fe7 branch enable_user shutter_load_bluetooth_config_by_otp: 47b4 2040666a call otp_enable_chgpump 47b5 680146aa fetch 2 ,mem_shutter_config_otp_addr 47b6 da200ac2 arg mem_shutter_config_data_temp ,rega 47b7 6808c69e fetcht 1 ,mem_shutter_config_size 47b8 204066b3 call otpd_read_data 47b9 2040666d call otp_disable_chgpump shutter_load_bluetooth_config_store_name: 47ba 68008ac2 fetch 1 ,mem_shutter_config_data_temp 47bb 1fe27200 copy pdata ,loopcnt 47bc 6000c3af store 1 ,mem_le_name_len 47bd 20407ef4 call memcpy_fast 47be 68008ac2 fetch 1 ,mem_shutter_config_data_temp 47bf 1fe27200 copy pdata ,loopcnt 47c0 6000c515 store 1 ,mem_local_name_length 47c1 20407ef4 call memcpy_fast 47c2 e8c08000 ifetch 1 ,contr 47c3 6000c6e6 store 1 ,mem_shutter_key_num 47c4 e8c08000 ifetch 1 ,contr 47c5 6000c6dd store 1 ,mem_shutter_hard_soft_switch_case 47c6 20600000 rtn shutter_load_bluetooth_config_by_eeprom: 47c7 6800c69a fetch 1 ,mem_shutter_bluetooth_type 47c8 c4008000 rtnbit0 classic_shutter 47c9 d8400003 arg 3 ,temp 47ca 680146a4 fetch 2 ,mem_shutter_config_eeprom_offset_addr 47cb 1fe22400 copy pdata ,regb 47cc da2046a6 arg mem_shutter_config_eeprom_start_flag ,rega 47cd 204065df call iicd_read_eep_data 47ce 680946a6 fetcht 2 ,mem_shutter_config_eeprom_start_flag 47cf 58001b3a setarg shutter_eeprom_config_crc 47d0 98467c00 isub temp ,null 47d1 24628000 nrtn zero 47d2 6800c6a8 fetch 1 ,mem_shutter_config_user_size 47d3 207a0000 rtn blank 47d4 1fe20400 copy pdata ,temp 47d5 680146a4 fetch 2 ,mem_shutter_config_eeprom_offset_addr 47d6 1fe0a403 add pdata ,3 ,regb 47d7 da200ac2 arg mem_shutter_config_data_temp ,rega 47d8 204065df call iicd_read_eep_data 47d9 202047e8 branch shutter_store_config shutter_load_bluetooth_config_by_user_config: 47da 680146a2 fetch 2 ,mem_shutter_config_user_otp_address 47db 207a0000 rtn blank 47dc 2040666a call otp_enable_chgpump 47dd d8400001 arg 1 ,temp 47de da2046a8 arg mem_shutter_config_user_size ,rega 47df 204066b3 call otpd_read_data 47e0 6800c6a8 fetch 1 ,mem_shutter_config_user_size 47e1 207a0000 rtn blank 47e2 680146a2 fetch 2 ,mem_shutter_config_user_otp_address 47e3 1fe0fe01 pincrease 1 47e4 da200ac2 arg mem_shutter_config_data_temp ,rega 47e5 6808c6a8 fetcht 1 ,mem_shutter_config_user_size 47e6 204066b3 call otpd_read_data 47e7 2040666d call otp_disable_chgpump shutter_store_config: 47e8 204047ba call shutter_load_bluetooth_config_store_name shutter_load_bluetooth_config_custom: 47e9 e8c10000 ifetch 2 ,contr 47ea 207a0000 rtn blank 47eb 1fe20a00 copy pdata ,contw 47ec e8c88000 ifetcht 1 ,contr 47ed 18427200 copy temp ,loopcnt 47ee 20407f01 call memcpy 47ef 202047e9 branch shutter_load_bluetooth_config_custom shutter_random_mac_addr: 47f0 6800c69a fetch 1 ,mem_shutter_bluetooth_type 47f1 c4008000 rtnbit0 classic_shutter 47f2 680146ae fetch 2 ,mem_classic_shutter_random_mac_offset_addr 47f3 1fe22400 copy pdata ,regb 47f4 d8400004 arg 4 ,temp 47f5 da200ac2 arg mem_shutter_random_mac_data_temp ,rega 47f6 204065df call iicd_read_eep_data 47f7 68008ac2 fetch 1 ,mem_shutter_random_mac_data_temp 47f8 c080c7f9 bne 1 ,shutter_write_random_mac_addr_to_eeprom shutter_write_random_mac_addr_to_eeprom: 47f9 58000001 setarg 1 47fa 60008ac2 store 1 ,mem_shutter_random_mac_data_temp 47fb 18007203 force 3 ,loopcnt 47fc 2040630d call generate_random_loop 47fd 680146ae fetch 2 ,mem_classic_shutter_random_mac_offset_addr 47fe 1fe22400 copy pdata ,regb 47ff d8400004 arg 4 ,temp 4800 da200ac2 arg mem_shutter_random_mac_data_temp ,rega 4801 20406606 call iicd_write_eep_data shutter_write_random_mac_addr: 4802 68018ac3 fetch 3 ,mem_shutter_random_mac_data_temp + 1 4803 6001c0a0 store 3 ,mem_lap 4804 6001c4a0 store 3 ,mem_le_lap 4805 20600000 rtn shutter_soft_swtich_power_on: 4806 202046d9 branch shutter_start_reconnect shutter_soft_swtich_power_off: 4807 da200000 arg 0 ,rega 4808 da6048d4 arg mem_shutter_power_off_led_style ,regc 4809 20407d24 call ui_led_set_style_global 480a 204046f4 call shutter_disconnect_current_connection shutter_wait_power_off: 480b 6800c8eb fetch 1 ,mem_shutter_power_off_timeout 480c 6000c8ec store 1 ,mem_shutter_power_off_timer 480d 20600000 rtn ui_soft_swtich_init: 480e 58000000 setarg ss_state_power_up 480f 20404816 call ui_soft_swtich_init_power_on_time 4810 70467901 jam ui_button_state_up ,mem_ui_button_last_state 4811 20407cd3 call ui_button_init 4812 20407cdd call ui_button_polling 4813 68014682 fetch 2 ,mem_ui_state_map 4814 c3860000 rtnbit1 ui_state_btn_down 4815 2020340a branch app_enter_hibernate ui_soft_swtich_init_power_on_time: 4816 6809423f fetcht 2 ,mem_power_param_ptr 4817 e0408000 istore 1 ,temp 4818 e8a08000 ifetch 1 ,contw 4819 6000c685 store 1 ,mem_ui_button_timeout 481a 20600000 rtn ui_soft_switch_botton_up: 481b 6801423f fetch 2 ,mem_power_param_ptr 481c efe08000 ifetch 1 ,pdata 481d c1800000 rtnne ss_state_power_up 481e 2020340a branch app_enter_hibernate ui_soft_switch_botton_long_press: 481f 6809423f fetcht 2 ,mem_power_param_ptr 4820 e8408000 ifetch 1 ,temp 4821 c000c82a beq ss_state_power_on ,ui_soft_switch_power_off ui_soft_switch_power_on: 4822 58000001 setarg ss_state_power_on 4823 6809423f fetcht 2 ,mem_power_param_ptr 4824 e0408000 istore 1 ,temp 4825 18408c02 add temp ,ss_power_off_time ,contr 4826 e8c08000 ifetch 1 ,contr 4827 e0a08000 istore 1 ,mem_ui_button_timeout 4828 e8c10000 ifetch 2 ,contr 4829 20207f9c branch callback_func ui_soft_switch_power_off: 482a 58000002 setarg ss_state_power_off 482b 20404816 call ui_soft_swtich_init_power_on_time 482c 18408c05 add temp ,ss_power_off_cb ,contr 482d e8c10000 ifetch 2 ,contr 482e 203a340a branch app_enter_hibernate ,blank 482f 20207f9c branch callback_func shutter_byteswap: 4830 60030101 store 6 ,mem_tmp_buffer 4831 68008101 fetch 1 ,mem_tmp_buffer 4832 6000810c store 1 ,mem_tmp_buffer + 11 4833 e8c08000 ifetch 1 ,contr 4834 6000810b store 1 ,mem_tmp_buffer + 10 4835 e8c08000 ifetch 1 ,contr 4836 6000810a store 1 ,mem_tmp_buffer + 9 4837 e8c08000 ifetch 1 ,contr 4838 60008109 store 1 ,mem_tmp_buffer + 8 4839 e8c08000 ifetch 1 ,contr 483a 60008108 store 1 ,mem_tmp_buffer + 7 483b e8c08000 ifetch 1 ,contr 483c 60008107 store 1 ,mem_tmp_buffer + 6 483d 68030107 fetch 6 ,mem_tmp_buffer + 6 483e 20600000 rtn shutter_random_addr_by_otp: 483f 204068a2 call load_adc_init 4840 6800c223 fetch 1 ,mem_1v_adc_io_data 4841 6000c4a0 store 1 ,mem_le_lap 4842 6800c225 fetch 1 ,mem_5v_adc_hvin_data 4843 e0a08000 istore 1 ,contw 4844 6800c227 fetch 1 ,mem_3v_adc_vinlpm_data 4845 e0a08000 istore 1 ,contw 4846 6801c4a0 fetch 3 ,mem_le_lap 4847 6001c0a0 store 3 ,mem_lap 4848 20600000 rtn sim_iic_read_eep_data: 4849 68014203 fetch 2 ,mem_eeprom_base 484a 9a40fe00 iadd regb ,pdata 484b 1ff0fe00 byteswap pdata ,pdata 484c 600101f7 store 2 ,mem_addr_mi 484d 18422400 copy temp ,regb 484e 2040489b call sim_iic_start 484f 580000a0 setarg 0xa0 4850 2040488d call sim_iic_send_byte 4851 680081f7 fetch 1 ,mem_addr_mi 4852 2040488d call sim_iic_send_byte 4853 c5144856 bmark1 mark_eeprom_size ,sim_iic_read_eep_data_2k 4854 680081f8 fetch 1 ,mem_addr_mi + 1 4855 2040488d call sim_iic_send_byte sim_iic_read_eep_data_2k: 4856 204048a1 call sim_iic_stop 4857 2040489b call sim_iic_start 4858 580000a1 setarg 0xa1 4859 2040488d call sim_iic_send_byte sim_iic_read_eep_data_loop: 485a 2040487f call sim_iic_read_byte 485b e2208000 istore 1 ,rega 485c 1a20a201 increase 1 ,rega 485d 1a40a5ff increase -1 ,regb 485e 2422c85a nbranch sim_iic_read_eep_data_loop ,zero 485f 202048a1 branch sim_iic_stop sim_iic_write_eep_data: 4860 1a50fe00 byteswap regb ,pdata 4861 600101f7 store 2 ,mem_addr_mi 4862 18422400 copy temp ,regb 4863 2040489b call sim_iic_start 4864 580000a0 setarg 0xa0 4865 2040488d call sim_iic_send_byte 4866 680081f7 fetch 1 ,mem_addr_mi 4867 2040488d call sim_iic_send_byte 4868 c514486b bmark1 mark_eeprom_size ,sim_iic_write_eep_data_loop 4869 680081f8 fetch 1 ,mem_addr_mi + 1 486a 2040488d call sim_iic_send_byte sim_iic_write_eep_data_loop: 486b ea208000 ifetch 1 ,rega 486c 2040488d call sim_iic_send_byte 486d 1a20a201 increase 1 ,rega 486e 1a40a5ff increase -1 ,regb 486f 2422c86b nbranch sim_iic_write_eep_data_loop ,zero 4870 202048a1 branch sim_iic_stop sim_iic_wait_ack: 4871 df20000a arg 10 ,loopcnt 4872 204048be call sim_iic_release_sda 4873 204048a6 call sim_iic_scl_output_high 4874 204048d2 call sim_iic_delay sim_iic_wait_ack_loop: 4875 204048c7 call sim_iic_read_sda_level 4876 203a48a9 branch sim_iic_scl_output_low ,blank 4877 c2004875 loop sim_iic_wait_ack_loop 4878 202048a9 branch sim_iic_scl_output_low sim_iic_ack_slave: 4879 204048a9 call sim_iic_scl_output_low 487a 204048af call sim_iic_sda_output_low 487b 204048d2 call sim_iic_delay 487c 204048a6 call sim_iic_scl_output_high 487d 204048d2 call sim_iic_delay 487e 202048a9 branch sim_iic_scl_output_low sim_iic_read_byte: 487f df200008 arg 8 ,loopcnt 4880 da600000 arg 0 ,regc 4881 204048be call sim_iic_release_sda sim_iic_read_byte_loop: 4882 204048a6 call sim_iic_scl_output_high 4883 204048d2 call sim_iic_delay 4884 1a63a600 lshift regc ,regc 4885 204048c7 call sim_iic_read_sda_level 4886 9a60a600 iadd regc ,regc 4887 204048d2 call sim_iic_delay 4888 204048a9 call sim_iic_scl_output_low 4889 c2004882 loop sim_iic_read_byte_loop 488a 20404879 call sim_iic_ack_slave 488b 1a627e00 copy regc ,pdata 488c 20600000 rtn sim_iic_send_byte: 488d df200008 arg 8 ,loopcnt 488e 1fe22600 copy pdata ,regc 488f 204048a9 call sim_iic_scl_output_low sim_iic_send_byte_loop: 4890 2a6ffe07 isolate1 7 ,regc 4891 2040c8ac call sim_iic_sda_output_high ,true 4892 2440c8af ncall sim_iic_sda_output_low ,true 4893 1a63a600 lshift regc ,regc 4894 204048d2 call sim_iic_delay 4895 204048a6 call sim_iic_scl_output_high 4896 204048d2 call sim_iic_delay 4897 204048a9 call sim_iic_scl_output_low 4898 204048d2 call sim_iic_delay 4899 c2004890 loop sim_iic_send_byte_loop 489a 20204871 branch sim_iic_wait_ack sim_iic_start: 489b 204048ac call sim_iic_sda_output_high 489c 204048a6 call sim_iic_scl_output_high 489d 204048d2 call sim_iic_delay 489e 204048af call sim_iic_sda_output_low 489f 204048d2 call sim_iic_delay 48a0 202048a9 branch sim_iic_scl_output_low sim_iic_stop: 48a1 204048af call sim_iic_sda_output_low 48a2 204048a6 call sim_iic_scl_output_high 48a3 204048d2 call sim_iic_delay 48a4 204048ac call sim_iic_sda_output_high 48a5 202048d2 branch sim_iic_delay sim_iic_scl_output_high: 48a6 78347c00 enable user 48a7 6800cffe fetch 1 ,sim_iic_scl_gpio_num 48a8 202048b2 branch sim_iic_config_gpio sim_iic_scl_output_low: 48a9 78547c00 disable user 48aa 6800cffe fetch 1 ,sim_iic_scl_gpio_num 48ab 202048b2 branch sim_iic_config_gpio sim_iic_sda_output_high: 48ac 78347c00 enable user 48ad 6800cfff fetch 1 ,sim_iic_sda_gpio_num 48ae 202048b2 branch sim_iic_config_gpio sim_iic_sda_output_low: 48af 78547c00 disable user 48b0 6800cfff fetch 1 ,sim_iic_sda_gpio_num 48b1 202048b2 branch sim_iic_config_gpio sim_iic_config_gpio: 48b2 1fe10e07 and pdata ,0x07 ,queue 48b3 1fe97e00 rshift3 pdata ,pdata 48b4 d8408070 arg core_gpio_oe0 ,temp 48b5 98408400 iadd temp ,temp 48b6 e8408000 ifetch 1 ,temp 48b7 f9207e00 qset1 pdata 48b8 e0408000 istore 1 ,temp 48b9 18408404 increase 4 ,temp 48ba e8408000 ifetch 1 ,temp 48bb f9347e00 qsetflag user ,pdata 48bc e0408000 istore 1 ,temp 48bd 20600000 rtn sim_iic_release_sda: 48be 6800cfff fetch 1 ,sim_iic_sda_gpio_num 48bf 1fe10e07 and pdata ,0x07 ,queue 48c0 1fe97e00 rshift3 pdata ,pdata 48c1 d8408070 arg core_gpio_oe0 ,temp 48c2 98408400 iadd temp ,temp 48c3 e8408000 ifetch 1 ,temp 48c4 f93ffe00 qset0 pdata 48c5 e0408000 istore 1 ,temp 48c6 20600000 rtn sim_iic_read_sda_level: 48c7 20000004 nop 4 48c8 6800cfff fetch 1 ,sim_iic_sda_gpio_num 48c9 1fe10e07 and pdata ,0x07 ,queue 48ca 1fe97e00 rshift3 pdata ,pdata 48cb d840811c arg core_gpio_in ,temp 48cc 98408400 iadd temp ,temp 48cd 58000000 setarg 0 48ce e8488000 ifetcht 1 ,temp 48cf a84fffff qisolate1 temp 48d0 7920fe00 setflag true ,0 ,pdata 48d1 20600000 rtn sim_iic_delay: 48d2 20600000 rtn usb_isr: 48d3 44fb401e bpatch patch1e_6 ,mem_patch1e 48d4 68108a26 hfetch 1 ,core_usb_status 48d5 2feffe07 isolate1 7 ,pdata 48d6 2040c8ea call usb_init ,true 48d7 2040492e call usb_nak_state_judge 48d8 68108a26 hfetch 1 ,core_usb_status 48d9 60008b22 store 1 ,mem_usb_status 48da 68108a27 hfetch 1 ,core_usb_fifo_empty 48db 60008b23 store 1 ,mem_usb_fifo_empty 48dc 60108a27 hstore 1 ,core_usb_fifo_empty 48dd 1fe47e00 pinvert 48de 68088d37 fetcht 1 ,mem_usb_tx_wait 48df 98417e00 iand temp ,pdata 48e0 60008d37 store 1 ,mem_usb_tx_wait 48e1 708a26e0 jam 0xe0 ,core_usb_status 48e2 68008b23 fetch 1 ,mem_usb_fifo_empty 48e3 2fe00201 compare 0x1 ,pdata ,0x1 48e4 2040c941 call usb0_fifo_empty ,true 48e5 68008b22 fetch 1 ,mem_usb_status 48e6 2fe00201 compare 0x1 ,pdata ,0x1 48e7 2040c94a call usb_status1 ,true 48e8 20404b61 call usb_tx 48e9 20204903 branch usb_nak_state usb_init: 48ea 44fbc01e bpatch patch1e_7 ,mem_patch1e 48eb 20404919 call usb_init_param 48ec 708a0000 jam 0x00 ,core_usb_config 48ed 20002710 nop 10000 48ee 708a10c0 jam 0xc0 ,core_usb_trig 48ef 68110050 hfetch 2 ,core_clkoff 48f0 793ffe0a set0 clock_off_usb ,pdata 48f1 60110050 hstore 2 ,core_clkoff 48f2 708a003c jam 0x3c ,core_usb_config 48f3 708a26ff jam 0xff ,core_usb_status 48f4 708a27ff jam 0xff ,core_usb_fifo_empty 48f5 708a0400 jam 0 ,core_usb_addr 48f6 700c6b02 jam dev_default ,mem_usb0_state 48f7 58000d9d setarg mem_usb_clear_mem_end 48f8 d8a00c6e arg mem_usb_clear_mem_start ,contw 48f9 98a67200 isub contw ,loopcnt 48fa 20207ed4 branch clear_mem usb_offline_check_init: 48fb 68088c6c fetcht 1 ,mem_usb_offline_check_gpio 48fc 202067fb branch gpio_config_input usb_offline_state: 48fd 68008d45 fetch 1 ,mem_usb_device_enumeration_endflag 48fe 207a0000 rtn blank 48ff 68088c6c fetcht 1 ,mem_usb_offline_check_gpio 4900 2040681d call gpio_get_bit 4901 2020c8ea branch usb_init ,true 4902 20600000 rtn usb_nak_state: 4903 d8e00000 arg timer_nak ,queue 4904 20407f16 call timer_check 4905 247a0000 nrtn blank 4906 68008d46 fetch 1 ,mem_usb_wakestate_onetime_flag 4907 247a0000 nrtn blank 4908 68008d45 fetch 1 ,mem_usb_device_enumeration_endflag 4909 245a4bb7 ncall usb_mac_wakeup_judge ,blank 490a 20600000 rtn usb_mem_devicedesc_init: 490b d8a00b68 arg mem_devicedesc ,contw 490c 38011212 setsect 0 ,0x11212 490d 38048000 setsect 1 ,0x8000 490e 38080000 setsect 2 ,0x0 490f 380d0000 setsect 3 ,0x10000 4910 e0a48000 istore 9 ,contw 4911 38022412 setsect 0 ,0x22412 4912 38048604 setsect 1 ,0x8604 4913 38081000 setsect 2 ,0x1000 4914 380c0008 setsect 3 ,0x8 4915 e0a48000 istore 9 ,contw 4916 38000001 setsect 0 ,0x1 4917 e0a08000 istore 1 ,contw 4918 20600000 rtn usb_init_param: 4919 700c6b02 jam 2 ,mem_usb0_state 491a 58000000 setarg 0x0 491b 60008b67 store 1 ,mem_remain 491c 60010c65 store 2 ,mem_usb_zero_packet 491d 1fe0fe01 pincrease 1 491e 60010c67 store 2 ,mem_usb_ones_packet 491f 1fe0fe01 pincrease 1 4920 60010c69 store 2 ,mem_usb_two_packet 4921 58008ffa setarg hid_kbdata_addr 4922 60010b7c store 2 ,mem_hidreportdesc_kb 4923 5800903a setarg hid_msdata_addr 4924 60010b7e store 2 ,mem_hidreportdesc_m 4925 d8a00b80 arg mem_confdesc ,contw 4926 d8c090fe arg hid_confdata_addr ,contr 4927 20407eb3 call memcpy64 4928 68008c6d fetch 1 ,mem_usb_tx_interval 4929 245a492b ncall usb_tx_interval_config ,blank 492a 2020490b branch usb_mem_devicedesc_init usb_tx_interval_config: 492b 60008ba2 store 1 ,mem_confdesc + 34 492c 60008bbb store 1 ,mem_confdesc + 59 492d 20600000 rtn usb_nak_state_judge: 492e 68108a26 hfetch 1 ,core_usb_status 492f c2834931 bbit1 usb_status_nak ,usb_nak_state_timer_init 4930 20600000 rtn usb_nak_state_timer_init: 4931 20404936 call usb0_attached_state_judge 4932 20407f15 call timer_reinit 4933 58000280 setarg timer_nak_delay 4934 d8e00000 arg timer_nak ,queue 4935 20207f08 branch timer_init usb0_attached_state_judge: 4936 68008d36 fetch 1 ,mem_usb_state 4937 c081493b bne usb_connected ,usb_clear_halt_dispose 4938 700d4600 jam 0 ,mem_usb_wakestate_onetime_flag 4939 700d4700 jam 0 ,mem_usb_mac_wakeup_trig 493a 20600000 rtn usb_clear_halt_dispose: 493b 68008d53 fetch 1 ,mem_usb_clear_halt 493c 207a0000 rtn blank 493d 700d5300 jam 0 ,mem_usb_clear_halt 493e 700d3602 jam usb_connected ,mem_usb_state 493f 700d4501 jam 1 ,mem_usb_device_enumeration_endflag 4940 20600000 rtn usb0_fifo_empty: 4941 708a2701 jam 0x1 ,core_usb_fifo_empty 4942 20204b37 branch usb0_tx usb_rx_no_data: 4943 68008b22 fetch 1 ,mem_usb_status 4944 c2824955 bbit1 usb_status_setup ,usb_class_type 4945 20600000 rtn usb_rx_read: 4946 68108a18 hfetch 1 ,core_usb_ep 4947 e0a08000 istore 1 ,contw 4948 c2004946 loop usb_rx_read 4949 20600000 rtn usb_status1: 494a 44fc401f bpatch patch1f_0 ,mem_patch1f 494b 708a2611 jam 0x11 ,core_usb_status 494c 68108a20 hfetch 1 ,core_usb_ep_len 494d 60008b24 store 1 ,mem_usb_read_len 494e 1fe27200 copy pdata ,loopcnt 494f 203a4943 branch usb_rx_no_data ,blank 4950 d8a00c6e arg mem_usb_setup ,contw 4951 20404946 call usb_rx_read 4952 68008b24 fetch 1 ,mem_usb_read_len 4953 1fe67c07 sub pdata ,7 ,null 4954 20610000 rtn positive usb_class_type: 4955 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 4956 1fe17e80 and_into 0x80 ,pdata 4957 c040495a beq in_device ,usb_in_device 4958 c0004962 beq out_device ,usb_out_device 4959 20202a8c branch assert usb_in_device: 495a 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 495b 1ff1fe00 rshift4 pdata ,pdata 495c 1fe37e00 rshift pdata ,pdata 495d 1fe17e03 and_into 0x03 ,pdata 495e c000496a beq standard_req ,usb_in_standard_req 495f c000c970 beq class_req ,usb_in_class_req 4960 c0014975 beq manufacturer_req ,usb_in_manufacturer_req 4961 20202a8c branch assert usb_out_device: 4962 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 4963 1ff1fe00 rshift4 pdata ,pdata 4964 1fe37e00 rshift pdata ,pdata 4965 1fe17e03 and_into 0x03 ,pdata 4966 c0004976 beq standard_req ,usb_out_standard_req 4967 c000c97e beq class_req ,usb_out_class_req 4968 c0014983 beq manufacturer_req ,usb_out_manufacturer_req 4969 20202a8c branch assert usb_in_standard_req: 496a 68008c6f fetch 1 ,mem_usb_setup_brequest 496b c004498a beq get_configuration ,usb0_request_get_configuration 496c c00349a0 beq get_descriptor ,usb0_request_get_descriptor 496d c00549ea beq get_interface ,usb0_request_get_interface 496e c00049fc beq get_status ,usb0_request_get_status 496f 20204984 branch usb0_force_stall usb_in_class_req: 4970 68008c6f fetch 1 ,mem_usb_setup_brequest 4971 c0014a2f beq get_idle ,usb_get_idle 4972 c000ca33 beq get_report ,usb_get_report 4973 c001ca45 beq get_protocol ,usb_get_protocol_req 4974 20204984 branch usb0_force_stall usb_in_manufacturer_req: 4975 20204984 branch usb0_force_stall usb_out_standard_req: 4976 68008c6f fetch 1 ,mem_usb_setup_brequest 4977 c000ca4f beq clear_feature ,usb0_request_clear_feature 4978 c001ca79 beq set_feature ,usb0_request_set_feature 4979 c002caa3 beq set_address ,usb0_request_set_address 497a c004cabc beq set_configuration ,usb0_request_set_configuration 497b c005cad7 beq set_interface ,usb0_request_set_interface 497c c003c984 beq set_descriptor ,usb0_force_stall 497d 20204984 branch usb0_force_stall usb_out_class_req: 497e 68008c6f fetch 1 ,mem_usb_setup_brequest 497f c0054ae8 beq set_idle ,usb_set_idle 4980 c004caf9 beq set_report ,usb_set_report 4981 c005cb11 beq set_protocol ,usb_set_protocol_req 4982 20204984 branch usb0_force_stall usb_out_manufacturer_req: 4983 20204984 branch usb0_force_stall usb0_force_stall: 4984 68108a11 hfetch 1 ,core_usb_stall 4985 79207e00 set1 0 ,pdata 4986 60108a11 hstore 1 ,core_usb_stall 4987 20204988 branch usb0_reply_zerolen usb0_reply_zerolen: 4988 708a1240 jam 0x40 ,core_usb_clear 4989 20600000 rtn usb0_request_get_configuration: 498a 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 498b c0c04984 bne in_device ,usb0_force_stall 498c 68008c72 fetch 1 ,mem_usb_setup_windex 498d c0804984 bne 0 ,usb0_force_stall 498e 68008c73 fetch 1 ,mem_usb_setup_windex + 1 498f c0804984 bne 0 ,usb0_force_stall 4990 68008c74 fetch 1 ,mem_usb_setup_blength 4991 c080c984 bne 1 ,usb0_force_stall 4992 68008c75 fetch 1 ,mem_usb_setup_blengthh 4993 c0804984 bne 0 ,usb0_force_stall 4994 68008c70 fetch 1 ,mem_usb_setup_bvalue 4995 c0804984 bne 0 ,usb0_force_stall 4996 68008c71 fetch 1 ,mem_usb_setup_bvalue + 1 4997 c0804984 bne 0 ,usb0_force_stall 4998 68008c6b fetch 1 ,mem_usb0_state 4999 c002499c beq dev_configured ,usb0_request_get_cfg_dev_cfg 499a c001c99e beq dev_address ,usb0_request_get_cfg_dev_addr 499b 20204984 branch usb0_force_stall usb0_request_get_cfg_dev_cfg: 499c da400001 arg 1 ,regb 499d 20204a14 branch usb_send_ones_packet usb0_request_get_cfg_dev_addr: 499e da400001 arg 1 ,regb 499f 20204a12 branch usb_send_zero_packet usb0_request_get_descriptor: 49a0 44fcc01f bpatch patch1f_1 ,mem_patch1f 49a1 793f8023 set0 mark_isstr ,mark 49a2 68008c71 fetch 1 ,mem_usb_setup_bvalueh 49a3 c000c9b6 beq dsc_device ,dsc_device_info 49a4 c00149cf beq dsc_config ,dsc_config_info 49a5 c001c9d2 beq dsc_string ,dsc_string_info 49a6 c010c9a9 beq dsc_hid ,dsc_hid_info 49a7 c01149e0 beq dsc_hid_report ,dsc_hid_report_info 49a8 20204984 branch usb0_force_stall dsc_hid_info: 49a9 700d4b00 jam 0 ,mem_usb_get_protocol_flag 49aa 68008c72 fetch 1 ,mem_usb_setup_windex 49ab c00049ae beq 0 ,dsc_hid_info_interface0 49ac c000c9b2 beq 1 ,dsc_hid_info_interface1 49ad 20204984 branch usb0_force_stall dsc_hid_info_interface0: 49ae da200b93 arg mem_confdesc + 19 ,rega 49af ea208000 ifetch 1 ,rega 49b0 98002400 iforce regb 49b1 20204b21 branch usb0_respond dsc_hid_info_interface1: 49b2 da200bac arg mem_confdesc + 44 ,rega 49b3 ea208000 ifetch 1 ,rega 49b4 98002400 iforce regb 49b5 20204b21 branch usb0_respond dsc_device_info: 49b6 68008d48 fetch 1 ,mem_usb_set_high_addr_flag 49b7 245a49c7 ncall usb_set_high_addr ,blank 49b8 58000b68 setarg mem_devicedesc 49b9 68088b68 fetcht 1 ,mem_devicedesc dsc_info_set_data_len: 49ba 60010d3f store 2 ,mem_dsc_info_data_pointer 49bb 60088d41 storet 1 ,mem_dsc_info_len 49bc 68008c74 fetch 1 ,mem_usb_setup_blength 49bd 98467c00 isub temp ,null 49be 242149c5 nbranch dsc_info_set_current_data_len ,positive dsc_info_set_initial_data_len: 49bf 68008d41 fetch 1 ,mem_dsc_info_len dsc_info_set_data_size_completed: 49c0 98002400 iforce regb 49c1 68010d3f fetch 2 ,mem_dsc_info_data_pointer 49c2 1fe0fe01 add pdata ,1 ,pdata 49c3 98002200 iforce rega 49c4 20204b21 branch usb0_respond dsc_info_set_current_data_len: 49c5 68008c74 fetch 1 ,mem_usb_setup_blength 49c6 202049c0 branch dsc_info_set_data_size_completed usb_set_high_addr: 49c7 68108a04 hfetch 1 ,core_usb_addr 49c8 245a49cb ncall usb0_set_addr ,blank 49c9 700d4800 jam 0 ,mem_usb_set_high_addr_flag 49ca 20600000 rtn usb0_set_addr: 49cb 68108a04 hfetch 1 ,core_usb_addr 49cc 79207e07 set1 7 ,pdata 49cd 60108a04 hstore 1 ,core_usb_addr 49ce 20600000 rtn dsc_config_info: 49cf 58000b80 setarg mem_confdesc 49d0 68088b80 fetcht 1 ,mem_confdesc 49d1 202049ba branch dsc_info_set_data_len dsc_string_info: 49d2 68008c70 fetch 1 ,mem_usb_setup_bvalue 49d3 1fe67c03 sub pdata ,3 ,null 49d4 24214984 nbranch usb0_force_stall ,positive 49d5 68008c70 fetch 1 ,mem_usb_setup_bvalue 49d6 da200be4 arg mem_string0 ,rega 49d7 c0004b1e beq 0 ,usb0_respond_length 49d8 79200023 set1 mark_isstr ,mark 49d9 da200be9 arg mem_string1 ,rega 49da c000cb1e beq 1 ,usb0_respond_length 49db da200c07 arg mem_string2 ,rega 49dc c0014b1e beq 2 ,usb0_respond_length 49dd da200c47 arg mem_string3 ,rega 49de c001cb1e beq 3 ,usb0_respond_length 49df 20600000 rtn dsc_hid_report_info: 49e0 68010c72 fetch 2 ,mem_usb_setup_windex 49e1 c000c9e5 beq 1 ,dsc_hid_report_info0 49e2 68010b7c fetch 2 ,mem_hidreportdesc_kb 49e3 1fe22200 copy pdata ,rega 49e4 20204b1e branch usb0_respond_length dsc_hid_report_info0: 49e5 700d4501 jam 1 ,mem_usb_device_enumeration_endflag 49e6 700d3601 jam usb_got_report_req ,mem_usb_state 49e7 68010b7e fetch 2 ,mem_hidreportdesc_m 49e8 1fe22200 copy pdata ,rega 49e9 20204b1e branch usb0_respond_length usb0_request_get_interface: 49ea 68008c6b fetch 1 ,mem_usb0_state 49eb c0824984 bne dev_configured ,usb0_force_stall 49ec 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 49ed c0c0c984 bne in_interface ,usb0_force_stall 49ee 68008c70 fetch 1 ,mem_usb_setup_bvalue 49ef c0804984 bne 0 ,usb0_force_stall 49f0 68008c71 fetch 1 ,mem_usb_setup_bvalueh 49f1 c0804984 bne 0 ,usb0_force_stall 49f2 68008c74 fetch 1 ,mem_usb_setup_blength 49f3 c080c984 bne 1 ,usb0_force_stall 49f4 68008c75 fetch 1 ,mem_usb_setup_blengthh 49f5 c0804984 bne 0 ,usb0_force_stall 49f6 68008c72 fetch 1 ,mem_usb_setup_windex 49f7 c0804984 bne 0 ,usb0_force_stall 49f8 68008c73 fetch 1 ,mem_usb_setup_windex + 1 49f9 c0804984 bne 0 ,usb0_force_stall 49fa da400001 arg 1 ,regb 49fb 20204a12 branch usb_send_zero_packet usb0_request_get_status: 49fc 68008c6b fetch 1 ,mem_usb0_state 49fd c0014984 beq dev_default ,usb0_force_stall 49fe 68008c70 fetch 1 ,mem_usb_setup_bvalue 49ff c0804984 bne 0 ,usb0_force_stall 4a00 68008c71 fetch 1 ,mem_usb_setup_bvalueh 4a01 c0804984 bne 0 ,usb0_force_stall 4a02 68008c74 fetch 1 ,mem_usb_setup_blength 4a03 c0814984 bne 2 ,usb0_force_stall 4a04 68008c75 fetch 1 ,mem_usb_setup_blengthh 4a05 c0804984 bne 0 ,usb0_force_stall 4a06 68008c73 fetch 1 ,mem_usb_setup_windex + 1 4a07 c0804984 bne 0 ,usb0_force_stall 4a08 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 4a09 c0404a0d beq in_device ,usb0_get_status_in_device 4a0a c040ca18 beq in_interface ,usb0_get_status_in_interface 4a0b c0414a1c beq in_endpoint ,usb0_get_status_in_endpoint 4a0c 20204984 branch usb0_force_stall usb0_get_status_in_device: 4a0d 68008c72 fetch 1 ,mem_usb_setup_windex 4a0e c0804984 bne 0 ,usb0_force_stall 4a0f da400002 arg 2 ,regb 4a10 68008d39 fetch 1 ,mem_usb_remote_wakeup 4a11 c000ca16 beq 0x01 ,usb_send_two_packet usb_send_zero_packet: 4a12 da200c65 arg mem_usb_zero_packet ,rega 4a13 20204b21 branch usb0_respond usb_send_ones_packet: 4a14 da200c67 arg mem_usb_ones_packet ,rega 4a15 20204b21 branch usb0_respond usb_send_two_packet: 4a16 da200c69 arg mem_usb_two_packet ,rega 4a17 20204b21 branch usb0_respond usb0_get_status_in_interface: 4a18 68008c6b fetch 1 ,mem_usb0_state 4a19 c0824984 bne dev_configured ,usb0_force_stall 4a1a da400002 arg 2 ,regb 4a1b 20204a12 branch usb_send_zero_packet usb0_get_status_in_endpoint: 4a1c 68008c6b fetch 1 ,mem_usb0_state 4a1d c0824984 bne dev_configured ,usb0_force_stall 4a1e 68008c72 fetch 1 ,mem_usb_setup_windex 4a1f c040ca29 beq in_ep1 ,usb0_get_status_in_ep_in_ep1 4a20 c0414a2b beq in_ep2 ,usb0_get_status_in_ep_in_ep2 4a21 c041ca2d beq in_ep3 ,usb0_get_status_in_ep_in_ep3 4a22 1fe17e7f and_into 0x7f ,pdata 4a23 c0004a25 beq 0x00 ,usb0_get_status_in_ep_in_ep0 4a24 20204984 branch usb0_force_stall usb0_get_status_in_ep_in_ep0: 4a25 68008d3b fetch 1 ,mem_usb_ep0_stall_status usb0_get_status_in_ep_in_ack: 4a26 da400002 arg 2 ,regb 4a27 c000ca14 beq 1 ,usb_send_ones_packet 4a28 20204a12 branch usb_send_zero_packet usb0_get_status_in_ep_in_ep1: 4a29 68008d3c fetch 1 ,mem_usb_ep1_stall_status 4a2a 20204a26 branch usb0_get_status_in_ep_in_ack usb0_get_status_in_ep_in_ep2: 4a2b 68008d3d fetch 1 ,mem_usb_ep2_stall_status 4a2c 20204a26 branch usb0_get_status_in_ep_in_ack usb0_get_status_in_ep_in_ep3: 4a2d 68008d3e fetch 1 ,mem_usb_ep3_stall_status 4a2e 20204a26 branch usb0_get_status_in_ep_in_ack usb_get_idle: 4a2f 700d4c01 jam 1 ,mem_usb_idle_flag 4a30 da200d4d arg mem_usb_idle_rate ,rega 4a31 da400001 arg 1 ,regb 4a32 20204b21 branch usb0_respond usb_get_report: 4a33 68010c70 fetch 2 ,mem_usb_setup_bvalue 4a34 d84001ba arg pc_get_report ,temp 4a35 98467c00 isub temp ,null 4a36 2422c984 nbranch usb0_force_stall ,zero 4a37 793f8023 set0 mark_isstr ,mark usb_get_report_dispose: 4a38 68008d42 fetch 1 ,mem_usb0_data_ready_report 4a39 243a4a42 nbranch usb_get_report_data_success ,blank 4a3a 700cf600 jam pc_get_nondata ,mem_usb0_get_report_data usb_get_report_send_data: 4a3b 68008c74 fetch 1 ,mem_usb_setup_blength 4a3c 98002400 iforce regb 4a3d da200cf6 arg mem_usb0_get_report_data ,rega 4a3e 20404b21 call usb0_respond usb_get_report_data_release: 4a3f d8a00cf6 arg mem_usb0_get_report_data ,contw 4a40 df200008 arg 8 ,loopcnt 4a41 20207ec6 branch memset0 usb_get_report_data_success: 4a42 700d4200 jam 0 ,mem_usb0_data_ready_report 4a43 700cf601 jam pc_get_data ,mem_usb0_get_report_data 4a44 20204a3b branch usb_get_report_send_data usb_get_protocol_req: 4a45 68008c74 fetch 1 ,mem_usb_setup_blength 4a46 c080c984 bne 1 ,usb0_force_stall 4a47 700d4b01 jam 1 ,mem_usb_get_protocol_flag 4a48 da400001 arg 1 ,regb 4a49 68008d49 fetch 1 ,mem_usb_set_protocol_value 4a4a c0004a4d beq 0 ,usb_get_report_protocol 4a4b c000ca4e beq 1 ,usb_get_boot_protocol 4a4c 20204a12 branch usb_send_zero_packet usb_get_report_protocol: 4a4d 20204a14 branch usb_send_ones_packet usb_get_boot_protocol: 4a4e 20204a12 branch usb_send_zero_packet usb0_request_clear_feature: 4a4f 68008c6b fetch 1 ,mem_usb0_state 4a50 c0824984 bne dev_configured ,usb0_force_stall 4a51 68008c74 fetch 1 ,mem_usb_setup_blength 4a52 c0804984 bne 0 ,usb0_force_stall 4a53 68008c75 fetch 1 ,mem_usb_setup_blengthh 4a54 c0804984 bne 0 ,usb0_force_stall 4a55 68008c71 fetch 1 ,mem_usb_setup_bvalueh 4a56 c0804984 bne 0 ,usb0_force_stall 4a57 68008c73 fetch 1 ,mem_usb_setup_windex + 1 4a58 c0804984 bne 0 ,usb0_force_stall 4a59 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 4a5a c0004a5e beq out_device ,usb0_request_clear_feature_out_device 4a5b c000ca66 beq out_interface ,usb0_request_clear_feature_out_interface 4a5c c0014a67 beq out_endpoint ,usb0_request_clear_feature_out_endpoint 4a5d 20204984 branch usb0_force_stall usb0_request_clear_feature_out_device: 4a5e 68008c70 fetch 1 ,mem_usb_setup_bvalue 4a5f c080c984 bne device_remote_wakeup ,usb0_force_stall 4a60 68108a00 hfetch 1 ,core_usb_config 4a61 793ffe07 set0 7 ,pdata 4a62 60108a00 hstore 1 ,core_usb_config 4a63 700d3900 jam 0 ,mem_usb_remote_wakeup 4a64 700d3a01 jam 1 ,mem_usb_clear_remote_wakeup 4a65 20204988 branch usb0_reply_zerolen usb0_request_clear_feature_out_interface: 4a66 20204984 branch usb0_force_stall usb0_request_clear_feature_out_endpoint: 4a67 68008c70 fetch 1 ,mem_usb_setup_bvalue 4a68 c0804984 bne endpoint_halt ,usb0_force_stall 4a69 68008c72 fetch 1 ,mem_usb_setup_windex 4a6a c040ca72 beq in_ep1 ,usb0_force_stall_ep1_in_off 4a6b c0414a75 beq in_ep2 ,usb0_force_stall_ep2_in_off 4a6c c041ca77 beq in_ep3 ,usb0_force_stall_ep3_in_off 4a6d 1fe17e7f and_into 0x7f ,pdata 4a6e c0004a70 beq 0x00 ,usb0_force_stall_ep0_in_off 4a6f 20204984 branch usb0_force_stall usb0_force_stall_ep0_in_off: 4a70 700d3b00 jam 0 ,mem_usb_ep0_stall_status 4a71 20204988 branch usb0_reply_zerolen usb0_force_stall_ep1_in_off: 4a72 700d3c00 jam 0 ,mem_usb_ep1_stall_status usb0_force_stall_ep1_in_off_reply: 4a73 700d5301 jam 1 ,mem_usb_clear_halt 4a74 20204988 branch usb0_reply_zerolen usb0_force_stall_ep2_in_off: 4a75 700d3d00 jam 0 ,mem_usb_ep2_stall_status 4a76 20204a73 branch usb0_force_stall_ep1_in_off_reply usb0_force_stall_ep3_in_off: 4a77 700d3e00 jam 0 ,mem_usb_ep3_stall_status 4a78 20204a73 branch usb0_force_stall_ep1_in_off_reply usb0_request_set_feature: 4a79 68008c74 fetch 1 ,mem_usb_setup_blength 4a7a c0804984 bne 0 ,usb0_force_stall 4a7b 68008c75 fetch 1 ,mem_usb_setup_blengthh 4a7c c0804984 bne 0 ,usb0_force_stall 4a7d 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 4a7e c0004a82 beq out_device ,usb0_request_set_feature_out_device 4a7f c000ca8f beq out_interface ,usb0_request_set_feature_out_interface 4a80 c0014a90 beq out_endpoint ,usb0_request_set_feature_out_endpoint 4a81 20204984 branch usb0_force_stall usb0_request_set_feature_out_device: 4a82 68008c70 fetch 1 ,mem_usb_setup_bvalue 4a83 c080c984 bne device_remote_wakeup ,usb0_force_stall 4a84 68108a00 hfetch 1 ,core_usb_config 4a85 79207e07 set1 7 ,pdata 4a86 60108a00 hstore 1 ,core_usb_config 4a87 700d3901 jam 1 ,mem_usb_remote_wakeup 4a88 700d3603 jam usb_sleep ,mem_usb_state 4a89 700d4300 jam 0 ,mem_usb_tx_win_enable 4a8a 20404988 call usb0_reply_zerolen usb_wakeup_timer_reinit: 4a8b 20407f15 call timer_reinit 4a8c 58001388 setarg timer_wakeup_delay 4a8d d8e0000f arg timer_wakeup ,queue 4a8e 20207f08 branch timer_init usb0_request_set_feature_out_interface: 4a8f 20204984 branch usb0_force_stall usb0_request_set_feature_out_endpoint: 4a90 68008c70 fetch 1 ,mem_usb_setup_bvalue 4a91 c0804984 bne endpoint_halt ,usb0_force_stall 4a92 68008c71 fetch 1 ,mem_usb_setup_bvalueh 4a93 c0804984 bne 0 ,usb0_force_stall 4a94 68008c72 fetch 1 ,mem_usb_setup_windex 4a95 c040ca9d beq in_ep1 ,usb0_force_stall_ep1_in_on 4a96 c0414a9f beq in_ep2 ,usb0_force_stall_ep2_in_on 4a97 c041caa1 beq in_ep3 ,usb0_force_stall_ep3_in_on 4a98 1fe17e7f and_into 0x7f ,pdata 4a99 c0004a9b beq 0x00 ,usb0_force_stall_ep0_in_on 4a9a 20204984 branch usb0_force_stall usb0_force_stall_ep0_in_on: 4a9b 700d3b01 jam 1 ,mem_usb_ep0_stall_status 4a9c 20204988 branch usb0_reply_zerolen usb0_force_stall_ep1_in_on: 4a9d 700d3c01 jam 1 ,mem_usb_ep1_stall_status 4a9e 20204988 branch usb0_reply_zerolen usb0_force_stall_ep2_in_on: 4a9f 700d3d01 jam 1 ,mem_usb_ep2_stall_status 4aa0 20204988 branch usb0_reply_zerolen usb0_force_stall_ep3_in_on: 4aa1 700d3e01 jam 1 ,mem_usb_ep3_stall_status 4aa2 20204988 branch usb0_reply_zerolen usb0_request_set_address: 4aa3 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 4aa4 c0804984 bne out_device ,usb0_force_stall 4aa5 68008c72 fetch 1 ,mem_usb_setup_windex 4aa6 c0804984 bne 0 ,usb0_force_stall 4aa7 68008c73 fetch 1 ,mem_usb_setup_windex + 1 4aa8 c0804984 bne 0 ,usb0_force_stall 4aa9 68008c74 fetch 1 ,mem_usb_setup_blength 4aaa c0804984 bne 0 ,usb0_force_stall 4aab 68008c75 fetch 1 ,mem_usb_setup_blengthh 4aac c0804984 bne 0 ,usb0_force_stall 4aad 68008c71 fetch 1 ,mem_usb_setup_bvalueh 4aae c0804984 bne 0 ,usb0_force_stall 4aaf 68008c70 fetch 1 ,mem_usb_setup_bvalue 4ab0 1fe17e80 and_into 0x80 ,pdata 4ab1 c0804984 bne 0 ,usb0_force_stall 4ab2 68008c70 fetch 1 ,mem_usb_setup_bvalue 4ab3 c0804aba bne 0 ,usb_usb0_state_set_dev_addr usb_usb0_state_set_dev_default: 4ab4 700c6b02 jam dev_default ,mem_usb0_state usb0_request_set_wait_address: 4ab5 68008c70 fetch 1 ,mem_usb_setup_bvalue 4ab6 60108a04 hstore 1 ,core_usb_addr 4ab7 20404988 call usb0_reply_zerolen 4ab8 700d4801 jam 1 ,mem_usb_set_high_addr_flag 4ab9 20600000 rtn usb_usb0_state_set_dev_addr: 4aba 700c6b03 jam dev_address ,mem_usb0_state 4abb 20204ab5 branch usb0_request_set_wait_address usb0_request_set_configuration: 4abc 68008c6b fetch 1 ,mem_usb0_state 4abd c0014984 beq dev_default ,usb0_force_stall 4abe 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 4abf c0804984 bne out_device ,usb0_force_stall 4ac0 68008c72 fetch 1 ,mem_usb_setup_windex 4ac1 c0804984 bne 0 ,usb0_force_stall 4ac2 68008c73 fetch 1 ,mem_usb_setup_windex + 1 4ac3 c0804984 bne 0 ,usb0_force_stall 4ac4 68008c74 fetch 1 ,mem_usb_setup_blength 4ac5 c0804984 bne 0 ,usb0_force_stall 4ac6 68008c75 fetch 1 ,mem_usb_setup_blengthh 4ac7 c0804984 bne 0 ,usb0_force_stall 4ac8 68008c71 fetch 1 ,mem_usb_setup_bvalue + 1 4ac9 c0804984 bne 0 ,usb0_force_stall 4aca 68008c70 fetch 1 ,mem_usb_setup_bvalue 4acb 1fe67c01 sub pdata ,usb_max_num_cfg ,null 4acc 24214984 nbranch usb0_force_stall ,positive 4acd 68008c6b fetch 1 ,mem_usb0_state 4ace c001cad1 beq dev_address ,usb0_request_set_cfg_addr_state 4acf c0024ad1 beq dev_configured ,usb0_request_set_cfg_cfg_state 4ad0 20204984 branch usb0_force_stall usb0_request_set_cfg_addr_state: usb0_request_set_cfg_cfg_state: 4ad1 68008c70 fetch 1 ,mem_usb_setup_bvalue 4ad2 c0004ad5 beq 0 ,usb0_request_set_cfg_stay_addr_state 4ad3 700c6b04 jam dev_configured ,mem_usb0_state 4ad4 20204988 branch usb0_reply_zerolen usb0_request_set_cfg_stay_addr_state: 4ad5 700c6b03 jam dev_address ,mem_usb0_state 4ad6 20204988 branch usb0_reply_zerolen usb0_request_set_interface: 4ad7 68008c6b fetch 1 ,mem_usb0_state 4ad8 c0824984 bne dev_configured ,usb0_force_stall 4ad9 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 4ada c080c984 bne out_interface ,usb0_force_stall 4adb 68008c70 fetch 1 ,mem_usb_setup_bvalue 4adc c0804984 bne 0 ,usb0_force_stall 4add 68008c71 fetch 1 ,mem_usb_setup_bvalueh 4ade c0804984 bne 0 ,usb0_force_stall 4adf 68008c74 fetch 1 ,mem_usb_setup_blength 4ae0 c0804984 bne 0 ,usb0_force_stall 4ae1 68008c75 fetch 1 ,mem_usb_setup_blengthh 4ae2 c0804984 bne 0 ,usb0_force_stall 4ae3 68008c72 fetch 1 ,mem_usb_setup_windex 4ae4 c0804984 bne 0 ,usb0_force_stall 4ae5 68008c73 fetch 1 ,mem_usb_setup_windex + 1 4ae6 c0804984 bne 0 ,usb0_force_stall 4ae7 20204988 branch usb0_reply_zerolen usb_set_idle: 4ae8 700d4c01 jam 1 ,mem_usb_idle_flag 4ae9 68008c71 fetch 1 ,mem_usb_setup_bvalueh 4aea 60008d4d store 1 ,mem_usb_idle_rate 4aeb 68008c72 fetch 1 ,mem_usb_setup_windex 4aec 1fe67c01 sub pdata ,1 ,null 4aed 2042caf5 call usb_clear_remote_wakeup_set0 ,zero 4aee 68008d36 fetch 1 ,mem_usb_state 4aef c0824988 bne usb_resume ,usb0_reply_zerolen 4af0 700d3602 jam usb_connected ,mem_usb_state 4af1 20404988 call usb0_reply_zerolen 4af2 20007530 nop 30000 4af3 20007530 nop 30000 4af4 20600000 rtn usb_clear_remote_wakeup_set0: 4af5 700d4501 jam 1 ,mem_usb_device_enumeration_endflag 4af6 700d3a00 jam 0 ,mem_usb_clear_remote_wakeup 4af7 700d3604 jam usb_resume ,mem_usb_state 4af8 20600000 rtn usb_set_report: 4af9 700d5001 jam 1 ,mem_usb0_get_set_report 4afa 20404b03 call usb_set_report_resume_judge 4afb 68010c70 fetch 2 ,mem_usb_setup_bvalue 4afc 60010d4e store 2 ,mem_usb_setup_bvalue_temp 4afd 68008c74 fetch 1 ,mem_usb_setup_blength 4afe 98007200 iforce loopcnt 4aff d8c00c76 arg mem_usb0_setup ,contr 4b00 d8a00cb6 arg mem_usb0_set_report_data ,contw 4b01 20407f01 call memcpy 4b02 20204988 branch usb0_reply_zerolen usb_set_report_resume_judge: 4b03 68010c70 fetch 2 ,mem_usb_setup_bvalue 4b04 d8400200 arg pc_set_report_bvalue ,temp 4b05 98467c00 isub temp ,null 4b06 24628000 nrtn zero 4b07 68010c72 fetch 2 ,mem_usb_setup_windex 4b08 d8400000 arg pc_set_report_windex ,temp 4b09 98467c00 isub temp ,null 4b0a 24628000 nrtn zero 4b0b 68010c74 fetch 2 ,mem_usb_setup_blength 4b0c d8400001 arg pc_set_report_blength ,temp 4b0d 98467c00 isub temp ,null 4b0e 24628000 nrtn zero 4b0f 700d4301 jam 1 ,mem_usb_tx_win_enable 4b10 20600000 rtn usb_set_protocol_req: 4b11 68008c74 fetch 1 ,mem_usb_setup_blength 4b12 c0804984 bne 0 ,usb0_force_stall 4b13 68008c70 fetch 1 ,mem_usb_setup_bvalue 4b14 c0004b17 beq boot_protocol ,usb_set_boot_protocol 4b15 c000cb1a beq report_protocol ,usb_set_report_protocol 4b16 20204984 branch usb0_force_stall usb_set_boot_protocol: 4b17 700d4a00 jam 0 ,mem_usb_set_protocol_status 4b18 700d4901 jam 1 ,mem_usb_set_protocol_value 4b19 20204988 branch usb0_reply_zerolen usb_set_report_protocol: 4b1a 700d4401 jam 1 ,mem_usb_tx_mac_enable 4b1b 700d4a01 jam 1 ,mem_usb_set_protocol_status 4b1c 700d4900 jam 0 ,mem_usb_set_protocol_value 4b1d 20204988 branch usb0_reply_zerolen usb0_respond_length: 4b1e ea208000 ifetch 1 ,rega 4b1f 98002400 iforce regb 4b20 1a20a201 increase 1 ,rega usb0_respond: 4b21 44fd401f bpatch patch1f_2 ,mem_patch1f 4b22 c591cb2c bmark0 mark_isstr ,usb0_respond0 4b23 1a40fe01 add regb ,1 ,pdata 4b24 1fe3fe00 lshift pdata ,pdata 4b25 60108a18 hstore 1 ,core_usb_dfifo0 4b26 708a1803 jam 3 ,core_usb_dfifo0 4b27 68008c74 fetch 1 ,mem_usb_setup_blength 4b28 1fe0fffe increase -2 ,pdata 4b29 1fe37e00 rshift pdata ,pdata 4b2a 60008c74 store 1 ,mem_usb_setup_blength 4b2b c0004b35 beq 0 ,usb_no_respond_data usb0_respond0: 4b2c 68010c74 fetch 2 ,mem_usb_setup_blength 4b2d 9a467c00 isub regb ,null 4b2e 20214b30 branch usb0_respond1 ,positive 4b2f 1fe22400 copy pdata ,regb usb0_respond1: 4b30 1a227e00 deposit rega 4b31 60010b65 store 2 ,mem_bufptr 4b32 1a427e00 deposit regb 4b33 60008b67 store 1 ,mem_remain 4b34 20204b37 branch usb0_tx usb_no_respond_data: 4b35 d8e00000 arg 0 ,queue 4b36 20204b57 branch usb_trig usb0_tx: 4b37 44fdc01f bpatch patch1f_3 ,mem_patch1f 4b38 68008b67 fetch 1 ,mem_remain 4b39 207a0000 rtn blank 4b3a 1fe27200 copy pdata ,loopcnt 4b3b 1fe67c40 sub pdata ,ep0_packet_size ,null 4b3c 20214b3e branch usb0_tx_info ,positive 4b3d df200040 arg ep0_packet_size ,loopcnt usb0_tx_info: 4b3e 68008b67 fetch 1 ,mem_remain 4b3f 9f267e00 isub loopcnt ,pdata 4b40 60008b67 store 1 ,mem_remain 4b41 68010b65 fetch 2 ,mem_bufptr 4b42 1fe20c00 copy pdata ,contr usb0_tx0: 4b43 e8c08000 ifetch 1 ,contr 4b44 60108a18 hstore 1 ,core_usb_dfifo0 4b45 c591cb47 bmark0 mark_isstr ,usb0_tx1 4b46 708a1800 jam 0 ,core_usb_dfifo0 usb0_tx1: 4b47 c2004b43 loop usb0_tx0 4b48 18c27e00 copy contr ,pdata 4b49 60010b65 store 2 ,mem_bufptr 4b4a d8e00000 arg 0 ,queue 4b4b 20404b57 call usb_trig 4b4c 68008b67 fetch 1 ,mem_remain 4b4d 247a0000 nrtn blank 4b4e 68008d36 fetch 1 ,mem_usb_state 4b4f c1808000 rtnne usb_got_report_req 4b50 700d3602 jam usb_connected ,mem_usb_state 4b51 20600000 rtn usb_tx_ep1: 4b52 da208a19 arg core_usb_dfifo1 ,rega 4b53 d8e00001 arg 1 ,queue usb_tx_loop: 4b54 e8c08000 ifetch 1 ,contr 4b55 e2208000 istore 1 ,rega 4b56 c2004b54 loop usb_tx_loop usb_trig: 4b57 58000000 setarg 0 4b58 f9207e00 qset1 pdata 4b59 60108a10 hstore 1 ,core_usb_trig 4b5a 68088d37 fetcht 1 ,mem_usb_tx_wait 4b5b 9841fe00 ior temp ,pdata 4b5c 60008d37 store 1 ,mem_usb_tx_wait 4b5d 20600000 rtn usb_tx_ep2: 4b5e d8e00002 arg 2 ,queue 4b5f da208a1a arg core_usb_dfifo2 ,rega 4b60 20204b54 branch usb_tx_loop usb_tx: 4b61 44fe401f bpatch patch1f_4 ,mem_patch1f 4b62 68008d38 fetch 1 ,mem_usb_tx_enable 4b63 207a0000 rtn blank 4b64 68008d37 fetch 1 ,mem_usb_tx_wait 4b65 243a4bac nbranch usb_inwake_state_tx_dispose ,blank 4b66 68008d45 fetch 1 ,mem_usb_device_enumeration_endflag 4b67 203a4b86 branch usb_tx_fifo_release ,blank 4b68 68008d36 fetch 1 ,mem_usb_state 4b69 c001cbbf beq usb_sleep ,usb_windows_wakeup 4b6a c0814b86 bne usb_connected ,usb_tx_fifo_release 4b6b 68008d3a fetch 1 ,mem_usb_clear_remote_wakeup 4b6c 243a4b86 nbranch usb_tx_fifo_release ,blank 4b6d 20404b6f call usb_tx_data_ep1 4b6e 20204b7a branch usb_tx_data_ep2 usb_tx_data_ep1: 4b6f 68008d38 fetch 1 ,mem_usb_tx_enable 4b70 c4008000 rtnbit0 1 4b71 68008d37 fetch 1 ,mem_usb_tx_wait 4b72 c3808000 rtnbit1 1 4b73 68008d38 fetch 1 ,mem_usb_tx_enable 4b74 793ffe01 set0 1 ,pdata 4b75 60008d38 store 1 ,mem_usb_tx_enable 4b76 68008d51 fetch 1 ,mem_usb_ep1_data 4b77 207a0000 rtn blank 4b78 c0084ba8 beq usb_ep1_kb ,usb_tx_kb_normal_data 4b79 20202a8c branch assert usb_tx_data_ep2: 4b7a 68008d38 fetch 1 ,mem_usb_tx_enable 4b7b c4010000 rtnbit0 2 4b7c 68008d37 fetch 1 ,mem_usb_tx_wait 4b7d c3810000 rtnbit1 2 4b7e 68008d38 fetch 1 ,mem_usb_tx_enable 4b7f 793ffe02 set0 2 ,pdata 4b80 60008d38 store 1 ,mem_usb_tx_enable 4b81 68008d52 fetch 1 ,mem_usb_ep2_data 4b82 207a0000 rtn blank 4b83 c0104b89 beq usb_ep2_ms ,usb_tx_ms_data 4b84 c010cba4 beq usb_ep2_multikey ,usb_tx_kb_multikey_data 4b85 20202a8c branch assert usb_tx_fifo_release: 4b86 d8a00d54 arg mem_usb_mouse_data ,contw 4b87 df200006 arg 6 ,loopcnt 4b88 20207ec6 branch memset0 usb_tx_ms_data: 4b89 68008d4c fetch 1 ,mem_usb_idle_flag 4b8a 68088d4b fetcht 1 ,mem_usb_get_protocol_flag 4b8b 98417e00 iand temp ,pdata 4b8c 203a4ba0 branch usb_tx_ms_data_normal_mode ,blank 4b8d 68088d4a fetcht 1 ,mem_usb_set_protocol_status 4b8e 9840fe00 iadd temp ,pdata 4b8f c000cb91 beq mac_boot_mode ,usb_tx_ms_data_mac_boot_mode 4b90 20204ba0 branch usb_tx_ms_data_normal_mode usb_tx_ms_data_mac_boot_mode: 4b91 700d5200 jam 0 ,mem_usb_ep2_data usb_tx_ms_data_mac_boot_regroup: 4b92 68008d55 fetch 1 ,mem_usb_mouse_data + 1 4b93 c0014ba1 beq r_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey 4b94 c001cba1 beq lr_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey 4b95 68008d55 fetch 1 ,mem_usb_mouse_data + 1 4b96 60008d54 store 1 ,mem_usb_mouse_data 4b97 68008d56 fetch 1 ,mem_usb_mouse_data + 2 4b98 e0a08000 istore 1 ,contw 4b99 68008d58 fetch 1 ,mem_usb_mouse_data + 4 4b9a e0a08000 istore 1 ,contw 4b9b 68008d5a fetch 1 ,mem_usb_mouse_data + 6 4b9c e0a08000 istore 1 ,contw 4b9d df200004 arg 4 ,loopcnt 4b9e d8c00d54 arg mem_usb_mouse_data ,contr 4b9f 20204b5e branch usb_tx_ep2 usb_tx_ms_data_normal_mode: 4ba0 700d5200 jam 0 ,mem_usb_ep2_data usb_tx_mac_boot_ms_regroup_r_or_lrkey: 4ba1 df200008 arg 8 ,loopcnt 4ba2 d8c00d54 arg mem_usb_mouse_data ,contr 4ba3 20204b5e branch usb_tx_ep2 usb_tx_kb_multikey_data: 4ba4 700d5200 jam 0 ,mem_usb_ep2_data 4ba5 df200003 arg 3 ,loopcnt 4ba6 d8c00d74 arg mem_usb_kb_multikey ,contr 4ba7 20204b5e branch usb_tx_ep2 usb_tx_kb_normal_data: 4ba8 700d5100 jam 0 ,mem_usb_ep1_data 4ba9 df200008 arg 8 ,loopcnt 4baa d8c00d64 arg mem_usb_kb_data ,contr 4bab 20204b52 branch usb_tx_ep1 usb_inwake_state_tx_dispose: 4bac 68008d36 fetch 1 ,mem_usb_state 4bad c001cbb0 beq usb_sleep ,usb_clear_tx_wait 4bae c0014bb2 beq usb_connected ,usb_mac_wakeup_trig 4baf 20600000 rtn usb_clear_tx_wait: 4bb0 700d3700 jam 0 ,mem_usb_tx_wait 4bb1 20600000 rtn usb_mac_wakeup_trig: 4bb2 68108a00 hfetch 1 ,core_usb_config 4bb3 79207e07 set1 7 ,pdata 4bb4 60108a00 hstore 1 ,core_usb_config 4bb5 700d4701 jam 1 ,mem_usb_mac_wakeup_trig 4bb6 20600000 rtn usb_mac_wakeup_judge: 4bb7 68008d36 fetch 1 ,mem_usb_state 4bb8 c1018000 rtneq usb_sleep 4bb9 c0014bbb beq usb_connected ,usb_mac_wakeup 4bba 20600000 rtn usb_mac_wakeup: 4bbb 68008d47 fetch 1 ,mem_usb_mac_wakeup_trig 4bbc 207a0000 rtn blank 4bbd 700d4601 jam 1 ,mem_usb_wakestate_onetime_flag 4bbe 20204bc2 branch usb_wakeup usb_windows_wakeup: 4bbf d8e0000f arg timer_wakeup ,queue 4bc0 20407f16 call timer_check 4bc1 247a0000 nrtn blank usb_wakeup: 4bc2 68108a00 hfetch 1 ,core_usb_config 4bc3 c4038000 rtnbit0 7 4bc4 708a00fc jam 0xfc ,core_usb_config 4bc5 20007530 nop 30000 4bc6 708a003c jam 0x3c ,core_usb_config 4bc7 20600000 rtn hci_rx_h4: 4bc8 44fec01f bpatch patch1f_5 ,mem_patch1f 4bc9 6800c1ce fetch 1 ,mem_hci_cmd 4bca 247a0000 nrtn blank hci_rx_h4_1: 4bcb 20404bce call hci_h4_parse_packet 4bcc 24544be6 ncall h4_rx_discard_packet ,user 4bcd 20600000 rtn hci_h4_parse_packet: 4bce 44ff401f bpatch patch1f_6 ,mem_patch1f 4bcf 18622200 copy contru ,rega 4bd0 d8400004 arg 4 ,temp 4bd1 e8608000 ifetch 1 ,contru 4bd2 c000cbd8 beq hci_h4_type_cmd ,hci_h4_parse_packet_wait_len 4bd3 18408401 increase 1 ,temp 4bd4 c0014bd8 beq hci_h4_type_acl ,hci_h4_parse_packet_wait_len 4bd5 18627e00 copy contru ,pdata 4bd6 60110058 hstore 2 ,core_uart_rrptr 4bd7 20600000 rtn hci_h4_parse_packet_wait_len: 4bd8 68110112 hfetch 2 ,core_uart_rxitems 4bd9 98467c00 isub temp ,null 4bda 24214bd8 nbranch hci_h4_parse_packet_wait_len ,positive 4bdb 78547c00 disable user 4bdc 1a220600 copy rega ,contru 4bdd 20404bee call h4_get_rx_payload_len 4bde 98408400 iadd temp ,temp hci_h4_parse_packet_wait: 4bdf 68110112 hfetch 2 ,core_uart_rxitems 4be0 98467c00 isub temp ,null 4be1 24214bdf nbranch hci_h4_parse_packet_wait ,positive 4be2 1a220600 copy rega ,contru 4be3 e8608000 ifetch 1 ,contru 4be4 c000cc3f beq hci_h4_type_cmd ,process_hci_cmd 4be5 20202a8c branch assert h4_rx_discard_packet: 4be6 44ffc01f bpatch patch1f_7 ,mem_patch1f 4be7 68110058 hfetch 2 ,core_uart_rrptr 4be8 98000600 iforce contru 4be9 20404bee call h4_get_rx_payload_len 4bea 98608600 iadd contru ,contru 4beb 18627e00 deposit contru 4bec 60110058 hstore 2 ,core_uart_rrptr 4bed 20600000 rtn h4_get_rx_payload_len: 4bee e8608000 ifetch 1 ,contru 4bef 18608602 increase 2 ,contru 4bf0 c0014bf3 beq hci_h4_type_acl ,h4_get_rx_payload_len_acl 4bf1 e8608000 ifetch 1 ,contru 4bf2 20600000 rtn h4_get_rx_payload_len_acl: 4bf3 e8610000 ifetch 2 ,contru 4bf4 20600000 rtn h4_get_tx_ptr: 4bf5 6811005e hfetch 2 ,core_uart_twptr 4bf6 194095fb increase -5 ,contwu 4bf7 99409400 iadd contwu ,contwu 4bf8 20600000 rtn h4_send_packet_event: 4bf9 d8400004 arg hci_h4_type_event ,temp 4bfa 20204bfc branch h4_send_packet h4_send_packet_acl: 4bfb d8400002 arg hci_h4_type_acl ,temp h4_send_packet: 4bfc 47004020 bpatchx patch20_0 ,mem_patch20 4bfd 1f20f201 increase 1 ,loopcnt 4bfe 6811005e hfetch 2 ,core_uart_twptr 4bff 1fe21400 copy pdata ,contwu 4c00 1f227e00 copy loopcnt ,pdata 4c01 e1488000 istoret 1 ,contwu 4c02 1fe0ffff increase -1 ,pdata 4c03 99409400 iadd contwu ,contwu 4c04 19427e00 copy contwu ,pdata 4c05 60010258 store 2 ,mem_hci_acl_tx_trigger_wptr 4c06 18427e00 copy temp ,pdata 4c07 c1010000 rtneq hci_h4_type_acl 4c08 68010258 fetch 2 ,mem_hci_acl_tx_trigger_wptr 4c09 6011005e hstore 2 ,core_uart_twptr 4c0a 20204c0b branch h4_send_acl_trigger_clear h4_send_acl_trigger_clear: 4c0b 58000000 setarg 0 4c0c 60010258 store 2 ,mem_hci_acl_tx_trigger_wptr 4c0d 20600000 rtn hci_init: 4c0e 20758000 rtn wake 4c0f 58004d28 setarg hci_idle_dispatch 4c10 600141f3 store 2 ,mem_cb_idle_process 4c11 580001a0 setarg uart_baud_115200 4c12 60014243 store uart_baud_len ,mem_baud hci_lpm_init: 4c13 58001800 setarg mem_h5rx_buf 4c14 60110054 hstore 2 ,core_uart_rsaddr 4c15 58001bff setarg mem_h5rx_buf_end 4c16 60110056 hstore 2 ,core_uart_readdr 4c17 58001c00 setarg mem_h5tx_buf 4c18 6011005a hstore 2 ,core_uart_tsaddr 4c19 20404c28 call hci_sel_init hci_reinit: 4c1a 70806200 jam 0x0 ,core_uart_ctrl 4c1b 58001c00 setarg mem_h5tx_buf 4c1c 6011005e hstore 2 ,core_uart_twptr 4c1d 60110060 hstore 2 ,core_uart_trptrp 4c1e 58001800 setarg mem_h5rx_buf 4c1f 60110058 hstore 2 ,core_uart_rrptr 4c20 60010244 store 2 ,mem_h5rx_rptr hci_init_common: 4c21 68110050 hfetch 2 ,core_clkoff 4c22 793ffe0f set0 clock_off_uart ,pdata 4c23 60110050 hstore 2 ,core_clkoff 4c24 204066ce call uart_set_baud_by_mem 4c25 70804301 jam uartclk_dpll ,core_uart_clksel 4c26 70806281 jam uart_ctrl_h4 ,core_uart_ctrl 4c27 20600000 rtn hci_sel_init: 4c28 58001fff setarg mem_h5tx_buf_end 4c29 6011005c hstore 2 ,core_uart_teaddr 4c2a 68108081 hfetch 1 ,core_gpio_sel1 4c2b 1fe1fe07 or_into 0x07 ,pdata 4c2c 60108081 hstore 1 ,core_gpio_sel1 4c2d 20600000 rtn hci_rx_packet: 4c2e 4700c020 bpatchx patch20_1 ,mem_patch20 4c2f 6810810c hfetch 1 ,core_uart_status 4c30 98002400 iforce regb 4c31 c301cc37 bbit0 uart_status_rx_fifo_empty ,hci_rx_packet_cont 4c32 68110112 hfetch 2 ,core_uart_rxitems 4c33 98002600 iforce regc 4c34 d840044f arg 0x44f ,temp 4c35 98467c00 isub temp ,null 4c36 24628000 nrtn zero hci_rx_packet_cont: 4c37 68110058 hfetch 2 ,core_uart_rrptr 4c38 98000600 iforce contru 4c39 20204bc8 branch hci_rx_h4 uart_send_byte: 4c3a 6818810c hfetcht 1 ,core_uart_status 4c3b 284ffe06 isolate1 6 ,temp 4c3c 2020cc3a branch uart_send_byte ,true 4c3d 60108015 hstore 1 ,core_uart_txd 4c3e 20600000 rtn process_hci_cmd: 4c3f 47014020 bpatchx patch20_2 ,mem_patch20 4c40 6800c1ce fetch 1 ,mem_hci_cmd 4c41 203a4c44 branch process_hci_cmd_cont ,blank 4c42 78347c00 enable user 4c43 20600000 rtn process_hci_cmd_cont: 4c44 e8610000 ifetch 2 ,contru 4c45 98006000 iforce alarm 4c46 98000e00 iforce queue 4c47 e8608000 ifetch 1 ,contru 4c48 98000400 iforce temp 4c49 1e0b7e00 rshift2 alarm ,pdata 4c4a 1fecfe00 rshift8 pdata ,pdata 4c4b c01fcc4d beq hci_ogf_vendor_specific ,phci_grp_vendor_specific 4c4c 20600000 rtn phci_grp_vendor_specific: 4c4d 4701c020 bpatchx patch20_3 ,mem_patch20 4c4e 18e27e00 deposit queue 4c4f c0004cdc beq hci_vendor_cmd_reset ,hci_normal_reply 4c50 c000cc66 beq hci_vendor_cmd_chipid ,phci_grp_vendor_chipid 4c51 c0014c6b beq hci_vendor_cmd_baud ,phci_grp_vendor_baud 4c52 c001cc7a beq hci_vendor_cmd_patch ,phci_grp_vendor_patch 4c53 c0024cb3 beq hci_vendor_cmd_patch_done ,phci_grp_vendor_done 4c54 c002ccdc beq hci_vendor_cmd_echo ,hci_normal_reply 4c55 c0034cc6 beq hci_vendor_cmd_bdaddr ,phci_grp_vendor_bdaddr 4c56 c003cc5c beq hci_vendor_cmd_enter_lpm ,phci_grp_vendor_enter_lpm 4c57 c0084cc9 beq hci_vendor_cmd_mem ,phci_grp_vendor_mem 4c58 c008ccd1 beq hci_vendor_cmd_eep ,phci_grp_vendor_eep 4c59 c0094ca5 beq hci_vendor_cmd_patch_sec_init ,phci_grp_vendor_patch_sec_init 4c5a c009cc85 beq hci_vendor_cmd_patch_sec ,phci_grp_vendor_patch_sec 4c5b 20204cdc branch hci_normal_reply phci_grp_vendor_enter_lpm: 4c5c 20404cdc call hci_normal_reply 4c5d 20407f9e call wait_uarttx 4c5e 2040688c call gpio_pu_uart_tx hci_enter_lpm: 4c5f 204033d2 call app_put_lpm_wake_lock 4c60 204033d9 call app_l2cap_flow_control_enable 4c61 2020688f branch gpio_rx_config_input_with_pu hci_exit_lpm: 4c62 70424500 jam hci_rx_ready ,mem_hci_lt_rx_state 4c63 204033d0 call app_get_lpm_wake_lock 4c64 20404c13 call hci_lpm_init 4c65 202033db branch app_l2cap_flow_control_disable phci_grp_vendor_chipid: 4c66 20404cf2 call hci_get_cmd_complete_ptr 4c67 68110000 hfetch 2 ,core_chipid 4c68 e1410000 istore 2 ,contwu 4c69 18007206 force 6 ,loopcnt 4c6a 20204cdd branch hci_command_complete phci_grp_vendor_baud: 4c6b e8610000 ifetch 2 ,contru 4c6c 60014243 store 2 ,mem_baud 4c6d 60110052 hstore 2 ,core_uart_baud 4c6e 20600000 rtn phci_grp_vendor_patch_common: 4c6f e8608000 ifetch 1 ,contru 4c70 1fe20400 copy pdata ,temp 4c71 60108024 hstore 1 ,core_ucode_low 4c72 e8608000 ifetch 1 ,contru 4c73 98408400 iadd temp ,temp 4c74 79207e07 set1 7 ,pdata 4c75 60108023 hstore 1 ,core_ucode_ctrl 4c76 e8608000 ifetch 1 ,contru 4c77 98408400 iadd temp ,temp 4c78 1fe27200 copy pdata ,loopcnt 4c79 20600000 rtn phci_grp_vendor_patch: 4c7a c515ccc4 bmark1 mark_otp_encrypt ,phci_grp_vendor_patch_bad 4c7b 20404c6f call phci_grp_vendor_patch_common phci_grp_vendor_patch_loop: 4c7c e8608000 ifetch 1 ,contru 4c7d 60108025 hstore 1 ,core_ucode_data 4c7e 98408400 iadd temp ,temp 4c7f c2004c7c loop phci_grp_vendor_patch_loop phci_grp_vendor_patch_check_sum: 4c80 184104ff and temp ,0xff ,temp 4c81 e8608000 ifetch 1 ,contru 4c82 98467c00 isub temp ,null 4c83 2422ccc4 nbranch phci_grp_vendor_patch_bad ,zero 4c84 20204cdc branch hci_normal_reply phci_grp_vendor_patch_sec: 4c85 c595ccc4 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad 4c86 20404c6f call phci_grp_vendor_patch_common 4c87 60040a9a store 8 ,mem_pdatatemp phci_grp_vendor_patch_sec_loop: 4c88 20407422 call do_aes_cbc 4c89 df200010 arg 16 ,loopcnt 4c8a d8a00ac2 arg mem_temp_block0 ,contw 4c8b 20404ca0 call load_uart_sum_loop 4c8c 600c0aa2 storet 8 ,mem_temp 4c8d d8a00ad2 arg mem_temp_block2 ,contw 4c8e 20407497 call store_aes_result 4c8f da200ad2 arg mem_temp_block2 ,rega 4c90 da400ac2 arg mem_temp_block0 ,regb 4c91 d8a00ae2 arg mem_temp_block3 ,contw 4c92 20407352 call xor16 4c93 df200010 arg 16 ,loopcnt 4c94 d8c00ae2 arg mem_temp_block3 ,contr 4c95 20404c9c call load_ucode_only_loop 4c96 680c0aa2 fetcht 8 ,mem_temp 4c97 68040a9a fetch 8 ,mem_pdatatemp 4c98 1fe0fff0 increase -16 ,pdata 4c99 60040a9a store 8 ,mem_pdatatemp 4c9a 243a4c88 nbranch phci_grp_vendor_patch_sec_loop ,blank 4c9b 20204c80 branch phci_grp_vendor_patch_check_sum load_ucode_only_loop: 4c9c e8c08000 ifetch 1 ,contr 4c9d 60108025 hstore 1 ,core_ucode_data 4c9e c2004c9c loop load_ucode_only_loop 4c9f 20600000 rtn load_uart_sum_loop: 4ca0 e8608000 ifetch 1 ,contru 4ca1 e0a08000 istore 1 ,contw 4ca2 98408400 iadd temp ,temp 4ca3 c2004ca0 loop load_uart_sum_loop 4ca4 20600000 rtn phci_grp_vendor_patch_sec_init: 4ca5 c595ccc4 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad 4ca6 d8400000 arg 0 ,temp 4ca7 df200010 arg 16 ,loopcnt 4ca8 d8a00ac2 arg mem_temp_block0 ,contw 4ca9 20404ca0 call load_uart_sum_loop 4caa 68108085 hfetch 1 ,core_gpio_key2 4cab 1fe17efd and_into 0xfd ,pdata 4cac 60108085 hstore 1 ,core_gpio_key2 4cad d8c00ac2 arg mem_temp_block0 ,contr 4cae df200010 arg 16 ,loopcnt 4caf 20407478 call aes_load_data 4cb0 20407428 call aes_init 4cb1 20407491 call aes_clear_data 4cb2 20204c80 branch phci_grp_vendor_patch_check_sum phci_grp_vendor_done: 4cb3 df200020 arg 0x20 ,loopcnt 4cb4 d8a04000 arg mem_patch00 ,contw 4cb5 d8400000 arg 0 ,temp phci_grp_vendor_done_loop: 4cb6 e8608000 ifetch 1 ,contru 4cb7 e0a08000 istore 1 ,contw 4cb8 98408400 iadd temp ,temp 4cb9 c2004cb6 loop phci_grp_vendor_done_loop 4cba 184104ff and temp ,0xff ,temp 4cbb e8608000 ifetch 1 ,contru 4cbc 98467c00 isub temp ,null 4cbd 2422ccc4 nbranch phci_grp_vendor_patch_bad ,zero 4cbe 70802300 jam 0 ,core_ucode_ctrl 4cbf 20404cdc call hci_normal_reply 4cc0 20404be6 call h4_rx_discard_packet 4cc1 204064a3 call clear_key_buf 4cc2 20407f9e call wait_uarttx 4cc3 20202001 branch soft_reset phci_grp_vendor_patch_bad: 4cc4 70802300 jam 0 ,core_ucode_ctrl 4cc5 20202000 branch start phci_grp_vendor_bdaddr: 4cc6 e8630000 ifetch 6 ,contru 4cc7 600340a0 store 6 ,mem_lap 4cc8 20204cdc branch hci_normal_reply phci_grp_vendor_mem: 4cc9 e8608000 ifetch 1 ,contru 4cca 6000825a store 1 ,mem_hci_curr_len 4ccb 1fe27200 copy pdata ,loopcnt 4ccc e8610000 ifetch 2 ,contru 4ccd 6001025b store 2 ,mem_hci_curr_target 4cce 1fe20a00 copy pdata ,contw 4ccf 204066fd call uart_copy_rx_bytes 4cd0 20204cdc branch hci_normal_reply phci_grp_vendor_eep: 4cd1 e8608000 ifetch 1 ,contru 4cd2 6000825a store 1 ,mem_hci_curr_len 4cd3 1fe27200 copy pdata ,loopcnt 4cd4 e8610000 ifetch 2 ,contru 4cd5 6001025b store 2 ,mem_hci_curr_target 4cd6 d8a01000 arg mem_l2cap_rxbuff1 ,contw 4cd7 204066fd call uart_copy_rx_bytes 4cd8 6808825a fetcht 1 ,mem_hci_curr_len 4cd9 da201000 arg mem_l2cap_rxbuff1 ,rega 4cda 6801025b fetch 2 ,mem_hci_curr_target 4cdb 20206608 branch iicd_write_ota_data hci_normal_reply: 4cdc 18007204 force 4 ,loopcnt hci_command_complete: 4cdd 20404cf4 call hci_get_payload_ptr 4cde 18007e01 force 0x1 ,pdata 4cdf e1408000 istore 1 ,contwu 4ce0 1e027e00 deposit alarm 4ce1 e1418000 istore 3 ,contwu 4ce2 18000e0e force hci_event_command_complete ,queue hci_send_event: 4ce3 47024020 bpatchx patch20_4 ,mem_patch20 4ce4 20404cf6 call hci_get_packet_ptr 4ce5 18e27e00 deposit queue 4ce6 e1408000 istore 1 ,contwu 4ce7 1f227e00 deposit loopcnt 4ce8 e1408000 istore 1 ,contwu hci_send_event_raw: 4ce9 18000e05 force 5 ,queue 4cea 1f20f202 increase 2 ,loopcnt hci_send_packet: 4ceb 20204bf9 branch h4_send_packet_event hci_send_commu_ready_event: 4cec 18000eff force hci_event_vendor_specific ,queue 4ced 20404cf4 call hci_get_payload_ptr 4cee 58000001 setarg hci_vendor_event_commu_ready 4cef e1408000 istore 1 ,contwu 4cf0 18007201 force 1 ,loopcnt 4cf1 20204ce3 branch hci_send_event hci_get_cmd_complete_ptr: 4cf2 1800140c force 12 ,contwu 4cf3 20204cf7 branch hci_get_tx_ptr hci_get_payload_ptr: 4cf4 18001408 force 8 ,contwu 4cf5 20204cf7 branch hci_get_tx_ptr hci_get_packet_ptr: 4cf6 18001406 force 6 ,contwu hci_get_tx_ptr: 4cf7 20204bf5 branch h4_get_tx_ptr calc_tx_crc16: 4cf8 7827fc00 pulse crc16 4cf9 7824fc00 enable enable_crc crcloop: 4cfa e9408000 ifetch 1 ,contwu 4cfb 08008008 inject bucket ,8 4cfc c2004cfa loop crcloop 4cfd 78247c00 enable enable_parity 4cfe 08008010 inject bucket ,16 4cff 78447c00 disable enable_parity 4d00 7844fc00 disable enable_crc 4d01 7847fc00 disable crc16 4d02 1ff0fe00 byteswap pdata ,pdata 4d03 20600000 rtn cmd_exit: 4d04 7041ce00 jam 0 ,mem_hci_cmd 4d05 20600000 rtn cmd_check_plap: 4d06 680341d0 fetch 6 ,mem_hci_plap 4d07 680b0040 fetcht 6 ,mem_plap 4d08 98467c00 isub temp ,null 4d09 20600000 rtn cmd_pair: 4d0a 6800804b fetch 1 ,mem_op 4d0b c2814d0f bbit1 op_inrand_req ,cmd_pair_passive 4d0c 204062ef call tid_initiate 4d0d 70007c08 jam lmp_in_rand ,mem_lmo_opcode2 4d0e 20204d04 branch cmd_exit cmd_pair_passive: 4d0f 793ffe02 set0 op_inrand_req ,pdata 4d10 6000804b store 1 ,mem_op 4d11 20406001 call lmp_accept_inrand 4d12 58000000 setarg 0 4d13 7934fe01 setflag master ,smap_lmptid ,pdata 4d14 6000807f store 1 ,mem_lmo_tid2 4d15 20204d04 branch cmd_exit 4d16 20600000 rtn cmd_in_sniff: 4d17 70007c17 jam lmp_sniff_req ,mem_lmo_opcode2 4d18 d8a004d9 arg mem_sniff_payload ,contw 4d19 58000000 setarg 0 4d1a 2d0ffe1b isolate1 27 ,clke_bt 4d1b 7920fe01 setflag true ,1 ,pdata 4d1c e0a08000 istore 1 ,contw 4d1d 58000000 setarg 0 4d1e e0a10000 istore 2 ,contw 4d1f 680141e3 fetch 2 ,mem_sniff_param_interval 4d20 e0a10000 istore 2 ,contw 4d21 6800c1e5 fetch 1 ,mem_sniff_param_attempt 4d22 e0a10000 istore 2 ,contw 4d23 6800c1e7 fetch 1 ,mem_sniff_param_timeout 4d24 e0a10000 istore 2 ,contw 4d25 20204d04 branch cmd_exit cmd_exit_sniff: 4d26 70007c18 jam lmp_unsniff_req ,mem_lmo_opcode2 4d27 20204d04 branch cmd_exit hci_idle_dispatch: 4d28 20406899 call gpio_check_uart_state 4d29 20608000 rtn true 4d2a d8400007 arg uart_wakeup_rx ,temp 4d2b 2040681d call gpio_get_bit 4d2c 2420cd2f nbranch uart_wake_up ,true 4d2d 70424501 jam hci_rx_wake ,mem_hci_lt_rx_state 4d2e 20600000 rtn uart_wake_up: 4d2f 6800c245 fetch 1 ,mem_hci_lt_rx_state 4d30 c1808000 rtnne hci_rx_wake 4d31 20404c62 call hci_exit_lpm 4d32 20204cec branch hci_send_commu_ready_event hid_rx_process: 4d33 4702c020 bpatchx patch20_5 ,mem_patch20 4d34 68010264 fetch 2 ,mem_l2cap_payload_ptr 4d35 1fe20c00 copy pdata ,contr 4d36 e8c08000 ifetch 1 ,contr 4d37 1fe1040f and pdata ,0x0f ,temp 4d38 1ff1fe00 rshift4 pdata ,pdata 4d39 c004cd53 beq hid_type_set_idle ,hid_rx_process_handshake 4d3a c003cd53 beq hid_type_set_protocol ,hid_rx_process_handshake 4d3b c0054d5f beq hid_type_data ,hid_rx_process_data 4d3c c002cd4b beq hid_type_set_report ,hid_rx_process_set_report 4d3d c000cd3f beq hid_type_control ,hid_rx_process_hid_control 4d3e 20600000 rtn hid_rx_process_hid_control: 4d3f 18427e00 copy temp ,pdata 4d40 c002cd43 beq hid_control_p_virtualcableunplug ,hid_rx_process_virtual_cable_unplug 4d41 c001cd4a beq hid_control_p_suspend ,hid_rx_process_suspend 4d42 20600000 rtn hid_rx_process_virtual_cable_unplug: 4d43 700a9927 jam bt_evt_virtual_cable_unplug ,mem_fifo_temp 4d44 20407d86 call ui_ipc_send_event 4d45 6800c092 fetch 1 ,mem_device_option 4d46 c4030000 rtnbit0 dvc_op_mouse 4d47 18427e00 copy temp ,pdata 4d48 c002c38e beq hid_control_p_virtualcableunplug ,mouse_irtual_cable_unplug 4d49 20600000 rtn hid_rx_process_suspend: 4d4a 20600000 rtn hid_rx_process_set_report: 4d4b 20404d5f call hid_rx_process_data 4d4c da200001 arg 0x01 ,rega 4d4d 20404d63 call hid_malloc_tx_buff 4d4e 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 4d4f e0a10000 istore 2 ,contw 4d50 58000000 setarg 0x00 4d51 e0a08000 istore 1 ,contw 4d52 20600000 rtn hid_rx_process_handshake: 4d53 da200001 arg 1 ,rega 4d54 20404d63 call hid_malloc_tx_buff 4d55 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 4d56 e0a10000 istore 2 ,contw 4d57 58000000 setarg 0 4d58 e0a08000 istore 1 ,contw 4d59 700a8e01 jam 1 ,mem_ui_data_txbuff_length 4d5a 6800c252 fetch 1 ,mem_hid_control_state 4d5b 79207e06 set1 l2cap_channel_hid_handshake_done 4d5c 6000c252 store 1 ,mem_hid_control_state 4d5d 700a9912 jam bt_evt_hid_handshake ,mem_fifo_temp 4d5e 20207d86 branch ui_ipc_send_event hid_rx_process_data: 4d5f e8c08000 ifetch 1 ,contr 4d60 c000cd62 beq hid_report_id_kb ,hid_rx_process_data_hid_kb 4d61 20600000 rtn hid_rx_process_data_hid_kb: 4d62 20600000 rtn hid_malloc_tx_buff: 4d63 20405240 call l2cap_malloc 4d64 1a220400 copy rega ,temp 4d65 60088a8e storet 1 ,mem_ui_data_txbuff_length 4d66 1fe20a00 copy pdata ,contw 4d67 1a227e00 copy rega ,pdata 4d68 e0a10000 istore 2 ,contw 4d69 20600000 rtn l2cap_init: 4d6a 2035cd6f branch l2cap_init_wake ,wake l2cap_init_work: 4d6b 58004365 setarg mem_l2cap_xmem_end 4d6c d8a04246 arg mem_l2cap_xmem_start ,contw 4d6d 98a67200 isub contw ,loopcnt 4d6e 20407ed4 call clear_mem l2cap_init_wake: 4d6f 47034020 bpatchx patch20_6 ,mem_patch20 4d70 58000551 setarg mem_sdp_mem_end 4d71 d8a00511 arg mem_sdp_mem_start ,contw 4d72 98a67200 isub contw ,loopcnt 4d73 20407ed4 call clear_mem 4d74 580002c9 setarg mem_l2cap_mem_end 4d75 d8a0025d arg mem_l2cap_mem_start ,contw 4d76 98a67200 isub contw ,loopcnt 4d77 20407ed4 call clear_mem 4d78 20205318 branch l2cap_lpm_load_txbuf process_rx_l2cap_pkt: 4d79 4703c020 bpatchx patch20_7 ,mem_patch20 4d7a 18c20400 copy contr ,temp 4d7b 18420c00 copy temp ,contr 4d7c e8c10000 ifetch 2 ,contr 4d7d 60010266 store 2 ,mem_l2cap_rx_pkt_length 4d7e e8c10000 ifetch 2 ,contr 4d7f 60010268 store 2 ,mem_l2cap_rx_cid 4d80 18c27e00 deposit contr 4d81 60010264 store 2 ,mem_l2cap_payload_ptr 4d82 6800c681 fetch 1 ,memui_reconnect_mode 4d83 c0004d85 beq no_reconnection ,l2cap_rx_multiplexing 4d84 202050ef branch ml2cap_rx_multiplexing l2cap_rx_multiplexing: 4d85 68010266 fetch 2 ,mem_l2cap_rx_pkt_length 4d86 203a4dfc branch l2cap_rx_reset_state ,blank 4d87 47044021 bpatchx patch21_0 ,mem_patch21 4d88 68008268 fetch 1 ,mem_l2cap_rx_cid 4d89 c000cd9d beq l2cap_signal_channel ,l2cap_call_proc_signal l2cap_rx_multiplexing0: 4d8a c0284de0 beq l2cap_sdp_channel ,l2cap_call_proc_sdp 4d8b c028cdf5 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm 4d8c c0294df3 beq l2cap_hid_control_channel ,l2cap_call_proc_hid 4d8d c029cdf3 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid 4d8e 20204dfc branch l2cap_rx_reset_state l2cap_check_map: 4d8f 4704c021 bpatchx patch21_1 ,mem_patch21 4d90 2040527e call l2cap_malloc_get_full_map 4d91 6800c256 fetch 1 ,mem_used_map 4d92 c0004d9b beq 0 ,set_pdata_0 4d93 c000cd9b beq 1 ,set_pdata_0 4d94 c0014d9b beq 2 ,set_pdata_0 4d95 c001cd9b beq 3 ,set_pdata_0 4d96 c040cd9b beq 0x81 ,set_pdata_0 4d97 c0604d9b beq 0xc0 ,set_pdata_0 4d98 c0404d9b beq 0x80 ,set_pdata_0 4d99 c0204d9b beq 0x40 ,set_pdata_0 4d9a 20600000 rtn set_pdata_0: 4d9b 58000000 setarg 0 4d9c 20600000 rtn l2cap_call_proc_signal: 4d9d 20404d8f call l2cap_check_map 4d9e 247a0000 nrtn blank l2cap_call_proc_signal0: 4d9f 204052b8 call l2cap_malloc_signal_channel 4da0 20404e01 call l2cap_process_signal_pkt 4da1 6809026f fetcht 2 ,mem_l2cap_signal_tx_length 4da2 203a4dfb branch l2cap_call_proc_no_reply ,blank 4da3 204052c1 call l2cap_get_signal_tx_buff 4da4 6801026f fetch 2 ,mem_l2cap_signal_tx_length 4da5 e0a10000 istore 2 ,contw 4da6 18007e01 force l2cap_signal_channel ,pdata 4da7 e0a10000 istore 2 ,contw 4da8 20204dfc branch l2cap_rx_reset_state l2cap_call_proc_sigal_pending: 4da9 6800c364 fetch 1 ,mem_l2cap_pending_item 4daa 207a0000 rtn blank 4dab 1fe22200 copy pdata ,rega 4dac 47054021 bpatchx patch21_2 ,mem_patch21 4dad 680202d5 fetch 4 ,mem_l2cap_sdpres_delay_time 4dae d8400100 arg 0x100 ,temp 4daf 98408400 iadd temp ,temp 4db0 1c427e00 copy clkn_bt ,pdata 4db1 98467c00 isub temp ,null 4db2 24610000 nrtn positive 4db3 70436400 jam 0 ,mem_l2cap_pending_item 4db4 1a227e00 copy rega ,pdata 4db5 c0284db7 beq l2cap_sdp_channel ,l2cap_sdp_conn_succ 4db6 20202a8c branch assert l2cap_sdp_conn_succ: 4db7 d9000000 arg 0 ,debug 4db8 204052b8 call l2cap_malloc_signal_channel 4db9 20404e7a call restore_l2cap_req_param 4dba 204052c3 call l2cap_get_signal_tx_payload 4dbb 20407ea8 call save_cont_pointers 4dbc 20404ead call send_connection_sdp_res 4dbd 204052c1 call l2cap_get_signal_tx_buff 4dbe 5800000c setarg 0x000c 4dbf e0a10000 istore 2 ,contw 4dc0 18007e01 force l2cap_signal_channel ,pdata 4dc1 e0a10000 istore 2 ,contw 4dc2 20204dfc branch l2cap_rx_reset_state l2cap_reset_sdp_map: 4dc3 4705c021 bpatchx patch21_3 ,mem_patch21 4dc4 68010275 fetch 2 ,mem_sdp_tx_pkt_length 4dc5 1fe0fe04 increase 4 ,pdata 4dc6 1ff1fe00 rshift4 pdata ,pdata 4dc7 1fe97e00 rshift3 pdata ,pdata 4dc8 1fe08401 add pdata ,1 ,temp 4dc9 d8c04260 arg mem_tx_fifo3 ,contr 4dca e8c18000 ifetch 3 ,contr 4dcb 207a0000 rtn blank 4dcc 60018ac2 store 3 ,mem_tx_fifo_map_temp 4dcd 68008ac2 fetch 1 ,mem_tx_fifo_map_temp 4dce 1fe22200 copy pdata ,rega 4dcf 20404dd3 call check_l2cap_map 4dd0 1a427e00 copy regb ,pdata 4dd1 6000c260 store 1 ,mem_tx_fifo3 4dd2 20600000 rtn check_l2cap_map: 4dd3 d8e00000 arg 0 ,queue 4dd4 da400000 arg 0 ,regb check_l2cap_map_loop: 4dd5 18e67c07 sub queue ,7 ,null 4dd6 24610000 nrtn positive 4dd7 aa2fffff qisolate1 rega 4dd8 2020cdda branch check_l2cap_map_used ,true 4dd9 20204dde branch check_l2cap_map_used2 check_l2cap_map_used: 4dda 18427e00 copy temp ,pdata 4ddb 203a4dde branch check_l2cap_map_used2 ,blank 4ddc f9202400 qset1 regb 4ddd 184085ff increase -1 ,temp check_l2cap_map_used2: 4dde 18e08e01 increase 1 ,queue 4ddf 20204dd5 branch check_l2cap_map_loop l2cap_call_proc_sdp: 4de0 20405274 call l2cap_malloc_is_fifo_empty 4de1 247a0000 nrtn blank 4de2 20404d8f call l2cap_check_map 4de3 247a0000 nrtn blank 4de4 204052c5 call l2cap_malloc_sdp_channel 4de5 20406e11 call sdp_process 4de6 20404dc3 call l2cap_reset_sdp_map 4de7 20204dec branch l2cap_call_proc_sdp_common ml2cap_call_proc_sdp: 4de8 20405274 call l2cap_malloc_is_fifo_empty 4de9 247a0000 nrtn blank 4dea 204052c5 call l2cap_malloc_sdp_channel 4deb 20406e11 call sdp_process l2cap_call_proc_sdp_common: 4dec 204052ce call l2cap_get_sdp_tx_buff 4ded 68010275 fetch 2 ,mem_sdp_tx_pkt_length 4dee 203a4dfb branch l2cap_call_proc_no_reply ,blank 4def e0a10000 istore 2 ,contw 4df0 68014248 fetch 2 ,mem_sdp_remote_cid 4df1 e0a10000 istore 2 ,contw 4df2 20204dfc branch l2cap_rx_reset_state l2cap_call_proc_hid: 4df3 20404d33 call hid_rx_process 4df4 20204dfc branch l2cap_rx_reset_state l2cap_call_proc_rfcomm: 4df5 47064021 bpatchx patch21_4 ,mem_patch21 4df6 70028400 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag 4df7 20406a8a call rfcomm_rx_process 4df8 68008284 fetch 1 ,mem_rfcomm_malloc_fail_flag 4df9 c1008000 rtneq rfcomm_malloc_fail 4dfa 20204dfc branch l2cap_rx_reset_state l2cap_call_proc_no_reply: 4dfb 20405264 call l2cap_malloc_discard l2cap_rx_reset_state: 4dfc 58000000 setarg 0 4dfd 60010266 store 2 ,mem_l2cap_rx_pkt_length 4dfe 60010268 store 2 ,mem_l2cap_rx_cid 4dff 70026a01 jam l2cap_rx_done ,mem_l2cap_rx_done 4e00 20600000 rtn l2cap_process_signal_pkt: 4e01 4706c021 bpatchx patch21_5 ,mem_patch21 4e02 204052c3 call l2cap_get_signal_tx_payload 4e03 18002400 force 0 ,regb 4e04 68010266 fetch 2 ,mem_l2cap_rx_pkt_length 4e05 1fe22600 copy pdata ,regc 4e06 68010264 fetch 2 ,mem_l2cap_payload_ptr 4e07 98000c00 iforce contr l2cap_process_signal_pkt_loop: 4e08 20404e10 call l2cap_process_one_signal 4e09 1a627e00 deposit regc 4e0a 1a60a7fc increase -4 ,regc 4e0b 1fe0fffc increase -4 ,pdata 4e0c 243a4e08 nbranch l2cap_process_signal_pkt_loop ,blank 4e0d 1a427e00 copy regb ,pdata 4e0e 6001026f store 2 ,mem_l2cap_signal_tx_length 4e0f 20600000 rtn l2cap_process_one_signal: 4e10 47074021 bpatchx patch21_6 ,mem_patch21 4e11 e8c08000 ifetch 1 ,contr 4e12 c000ce49 beq signal_cmd_reject ,l2cap_proc_signal_cmd_reject 4e13 c0014e51 beq signal_connect_req ,l2cap_proc_signal_connect_req 4e14 c001ced5 beq signal_connect_rsp ,l2cap_proc_signal_connect_rsp 4e15 c0024f05 beq signal_config_req ,l2cap_proc_signal_config_req 4e16 c002cfa2 beq signal_config_rsp ,l2cap_proc_signal_config_rsp 4e17 c0034fcb beq signal_disconnect_req ,l2cap_proc_signal_disconnect_req 4e18 c003d01b beq signal_disconnect_rsp ,l2cap_proc_signal_disconnect_rsp 4e19 c0045050 beq signal_echo_req ,l2cap_proc_signal_echo_req 4e1a c004d060 beq signal_echo_rsp ,l2cap_proc_signal_echo_rsp 4e1b c0054e1f beq signal_info_req ,l2cap_proc_signal_info_req 4e1c c005d061 beq signal_info_rsp ,l2cap_proc_signal_info_rsp 4e1d 20405062 call l2cap_reject_command l2cap_process_one_signal_rtn: 4e1e 20600000 rtn l2cap_proc_signal_info_req: 4e1f e8c08000 ifetch 1 ,contr 4e20 1fe20e00 copy pdata ,queue 4e21 e8c10000 ifetch 2 ,contr 4e22 1fe22200 copy pdata ,rega 4e23 1a627e00 copy regc ,pdata 4e24 9a262600 isub rega ,regc 4e25 5800000b setarg signal_info_rsp 4e26 e0a08000 istore 1 ,contw 4e27 18e27e00 copy queue ,pdata 4e28 e0a08000 istore 1 ,contw 4e29 e8c10000 ifetch 2 ,contr l2cap_proc_signal_info_req_reply: 4e2a c0014e2d beq l2cap_sig_ext_featrue ,l2cap_proc_signal_info_req_ext 4e2b c001ce33 beq l2cap_sig_fix_featrue ,l2cap_proc_signal_info_req_fix 4e2c 20600000 rtn l2cap_proc_signal_info_req_ext: 4e2d 58020008 setarg 0x020008 4e2e e0a30000 istore 6 ,contw 4e2f 58000280 setarg 0x0280 4e30 e0a20000 istore 4 ,contw 4e31 18007e0c force 12 ,pdata 4e32 20204e38 branch l2cap_proc_signal_info_req_common l2cap_proc_signal_info_req_fix: 4e33 5803000c setarg 0x3000c 4e34 e0a30000 istore 6 ,contw 4e35 58000006 setarg 0x0006 4e36 e0a40000 istore 8 ,contw 4e37 18007e10 force 16 ,pdata l2cap_proc_signal_info_req_common: 4e38 9a40a400 iadd regb ,regb 4e39 20204e1e branch l2cap_process_one_signal_rtn ml2cap_proc_signal_info_req: 4e3a e8c08000 ifetch 1 ,contr 4e3b 1fe20e00 copy pdata ,queue 4e3c e8c10000 ifetch 2 ,contr 4e3d 1fe22200 copy pdata ,rega 4e3e e8c10000 ifetch 2 ,contr 4e3f 60010aa2 store 2 ,mem_temp 4e40 1a627e00 copy regc ,pdata 4e41 9a262600 isub rega ,regc 4e42 204052c3 call l2cap_get_signal_tx_payload 4e43 5800000b setarg signal_info_rsp 4e44 e0a08000 istore 1 ,contw 4e45 18e27e00 copy queue ,pdata 4e46 e0a08000 istore 1 ,contw 4e47 68010aa2 fetch 2 ,mem_temp 4e48 20204e2a branch l2cap_proc_signal_info_req_reply l2cap_proc_signal_cmd_reject: 4e49 e8c08000 ifetch 1 ,contr 4e4a 1fe20e00 copy pdata ,queue 4e4b e8c10000 ifetch 2 ,contr 4e4c 1fe22200 copy pdata ,rega 4e4d 98c08c00 iadd contr ,contr 4e4e 1a627e00 copy regc ,pdata 4e4f 9a262600 isub rega ,regc l2cap_proc_signal_cmd_reject_rtn: 4e50 20204e1e branch l2cap_process_one_signal_rtn l2cap_proc_signal_connect_req: 4e51 20407ea8 call save_cont_pointers 4e52 20407ead call load_cont_pointers 4e53 d9000000 arg 0 ,debug 4e54 e8c08000 ifetch 1 ,contr 4e55 1fe20e00 copy pdata ,queue 4e56 e8c10000 ifetch 2 ,contr 4e57 1fe22200 copy pdata ,rega 4e58 e8c10000 ifetch 2 ,contr 4e59 1fe20400 copy pdata ,temp 4e5a e8c10000 ifetch 2 ,contr 4e5b 1fe21600 copy pdata ,timeup 4e5c 4707c021 bpatchx patch21_7 ,mem_patch21 4e5d 18427e00 copy temp ,pdata 4e5e c000ce64 beq psm_sdp ,l2cap_proc_signal_connect_req_sdp 4e5f c001ce86 beq psm_rfcomm ,l2cap_proc_signal_connect_req_rfcomm 4e60 c008ce92 beq psm_hid_control ,l2cap_proc_signal_connect_req_hid_ctrl 4e61 c009ce9d beq psm_hid_interrupt ,l2cap_proc_signal_connect_req_hid_int 4e62 20405062 call l2cap_reject_command 4e63 20204ed4 branch l2cap_proc_signal_connect_req_rtn l2cap_proc_signal_connect_req_sdp: 4e64 20407ea8 call save_cont_pointers 4e65 d8400050 arg l2cap_sdp_channel ,temp 4e66 68014248 fetch 2 ,mem_sdp_remote_cid 4e67 243a4ece nbranch already_connected ,blank 4e68 19627e00 copy timeup ,pdata 4e69 60014248 store 2 ,mem_sdp_remote_cid 4e6a 1c427e00 copy clkn_bt ,pdata 4e6b 600202d5 store 4 ,mem_l2cap_sdpres_delay_time 4e6c 20404e6e call store_l2cap_req_param 4e6d 20204ea9 branch send_connection_pending store_l2cap_req_param: 4e6e 600902d3 storet 2 ,mem_psm 4e6f 19627e00 deposit timeup 4e70 600102c9 store 2 ,mem_scid 4e71 1a227e00 deposit rega 4e72 600102cb store 2 ,mem_cmd_length 4e73 1a427e00 deposit regb 4e74 600102cd store 2 ,mem_tt2 4e75 1a627e00 deposit regc 4e76 600102cf store 2 ,mem_tt3 4e77 18e27e00 deposit queue 4e78 600102d1 store 2 ,mem_id 4e79 20600000 rtn restore_l2cap_req_param: 4e7a 680902d3 fetcht 2 ,mem_psm 4e7b 680102c9 fetch 2 ,mem_scid 4e7c 1fe21600 copy pdata ,timeup 4e7d 680102cb fetch 2 ,mem_cmd_length 4e7e 1fe22200 copy pdata ,rega 4e7f 680102cd fetch 2 ,mem_tt2 4e80 1fe22400 copy pdata ,regb 4e81 680102cf fetch 2 ,mem_tt3 4e82 1fe22600 copy pdata ,regc 4e83 680102d1 fetch 2 ,mem_id 4e84 1fe20e00 copy pdata ,queue 4e85 20600000 rtn l2cap_proc_signal_connect_req_rfcomm: 4e86 20407ea8 call save_cont_pointers 4e87 58000051 setarg l2cap_rfcomm_channel 4e88 d8400051 arg l2cap_rfcomm_channel ,temp 4e89 6801424a fetch 2 ,mem_rfcomm_remote_cid 4e8a 243a4ece nbranch already_connected ,blank 4e8b 19627e00 copy timeup ,pdata 4e8c 6001424a store 2 ,mem_rfcomm_remote_cid 4e8d 6800c251 fetch 1 ,mem_rfcomm_state 4e8e 79207e00 set1 l2cap_channel_state_conn_req ,pdata 4e8f 79207e01 set1 l2cap_channel_state_conn_res ,pdata 4e90 6000c251 store 1 ,mem_rfcomm_state 4e91 20204eb1 branch send_connection_res l2cap_proc_signal_connect_req_hid_ctrl: 4e92 20407ea8 call save_cont_pointers 4e93 d8400052 arg l2cap_hid_control_channel ,temp 4e94 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 4e95 243a4ece nbranch already_connected ,blank 4e96 19627e00 copy timeup ,pdata 4e97 6001424c store 2 ,mem_hid_ctrl_remote_cid 4e98 6800c252 fetch 1 ,mem_hid_control_state 4e99 79207e00 set1 l2cap_channel_state_conn_req ,pdata 4e9a 79207e01 set1 l2cap_channel_state_conn_res ,pdata 4e9b 6000c252 store 1 ,mem_hid_control_state 4e9c 20204eb1 branch send_connection_res l2cap_proc_signal_connect_req_hid_int: 4e9d 20407ea8 call save_cont_pointers 4e9e 1b427e00 deposit clke 4e9f d8400053 arg l2cap_hid_interrupt_channel ,temp 4ea0 6801424e fetch 2 ,mem_hid_int_remote_cid 4ea1 243a4ece nbranch already_connected ,blank 4ea2 19627e00 copy timeup ,pdata 4ea3 6001424e store 2 ,mem_hid_int_remote_cid 4ea4 6800c253 fetch 1 ,mem_hid_interrupt_state 4ea5 79207e00 set1 l2cap_channel_state_conn_req ,pdata 4ea6 79207e01 set1 l2cap_channel_state_conn_res ,pdata 4ea7 6000c253 store 1 ,mem_hid_interrupt_state 4ea8 20204eb1 branch send_connection_res send_connection_pending: 4ea9 58000001 setarg l2cap_connect_pending 4eaa 6001027d store 2 ,meml2cap_t1 4eab 70436450 jam l2cap_sdp_channel ,mem_l2cap_pending_item 4eac 20204eb3 branch send_connection_res0 send_connection_sdp_res: 4ead 6800c250 fetch 1 ,mem_sdp_state 4eae 79207e00 set1 l2cap_channel_state_conn_req ,pdata 4eaf 79207e01 set1 l2cap_channel_state_conn_res ,pdata 4eb0 6000c250 store 1 ,mem_sdp_state send_connection_res: 4eb1 58000000 setarg l2cap_connect_successful 4eb2 6001027d store 2 ,meml2cap_t1 send_connection_res0: 4eb3 47084022 bpatchx patch22_0 ,mem_patch22 4eb4 20407ead call load_cont_pointers 4eb5 58000003 setarg signal_connect_rsp 4eb6 e0a08000 istore 1 ,contw 4eb7 18e27e00 copy queue ,pdata 4eb8 e0a08000 istore 1 ,contw 4eb9 58000008 setarg 0x0008 4eba e0a10000 istore 2 ,contw 4ebb 18427e00 copy temp ,pdata 4ebc e0a10000 istore 2 ,contw 4ebd 19627e00 copy timeup ,pdata 4ebe e0a10000 istore 2 ,contw 4ebf 6801027d fetch 2 ,meml2cap_t1 4ec0 c000cec9 beq l2cap_connect_pending ,connect_pending 4ec1 290c0000 isolate0 0 ,debug 4ec2 2020cec4 branch connect_suc ,true 4ec3 58000004 setarg l2cap_connect_refused_no_resources connect_suc: 4ec4 e0a10000 istore 2 ,contw 4ec5 18007e00 force 0x0000 ,pdata 4ec6 e0a10000 istore 2 ,contw 4ec7 5800000c setarg 12 4ec8 20204ed0 branch connect_req_update_byte_counts connect_pending: 4ec9 e0a10000 istore 2 ,contw 4eca 18007e02 force 0x0002 ,pdata 4ecb e0a10000 istore 2 ,contw 4ecc 5800000c setarg 12 4ecd 20204ed0 branch connect_req_update_byte_counts already_connected: 4ece 79201000 set1 0 ,debug 4ecf 20204eb1 branch send_connection_res connect_req_update_byte_counts: 4ed0 9a40a400 iadd regb ,regb 4ed1 1a627e00 copy regc ,pdata 4ed2 9a262600 isub rega ,regc 4ed3 20204ed4 branch l2cap_proc_signal_connect_req_rtn l2cap_proc_signal_connect_req_rtn: 4ed4 20204e1e branch l2cap_process_one_signal_rtn l2cap_proc_signal_connect_rsp: 4ed5 e8c08000 ifetch 1 ,contr 4ed6 1fe20e00 copy pdata ,queue 4ed7 e8c10000 ifetch 2 ,contr 4ed8 1fe22200 copy pdata ,rega 4ed9 1a627e00 copy regc ,pdata 4eda 9a262600 isub rega ,regc 4edb e8c10000 ifetch 2 ,contr 4edc 1fe21600 copy pdata ,timeup 4edd e8c10000 ifetch 2 ,contr 4ede 1fe20400 copy pdata ,temp 4edf 4708c022 bpatchx patch22_1 ,mem_patch22 4ee0 58000050 setarg l2cap_sdp_channel 4ee1 98467c00 isub temp ,null 4ee2 2022ceed branch l2cap_proc_signal_connect_rsp_sdp ,zero 4ee3 58000051 setarg l2cap_rfcomm_channel 4ee4 98467c00 isub temp ,null 4ee5 2022cef3 branch l2cap_proc_signal_connect_rsp_rfcomm ,zero 4ee6 58000052 setarg l2cap_hid_control_channel 4ee7 98467c00 isub temp ,null 4ee8 2022ceff branch l2cap_proc_signal_connect_rsp_hid_ctrl ,zero 4ee9 58000053 setarg l2cap_hid_interrupt_channel 4eea 98467c00 isub temp ,null 4eeb 2022cef9 branch l2cap_proc_signal_connect_rsp_hid_int ,zero 4eec 20600000 rtn l2cap_proc_signal_connect_rsp_sdp: 4eed 19627e00 copy timeup ,pdata 4eee 60014248 store 2 ,mem_sdp_remote_cid 4eef 6800c250 fetch 1 ,mem_sdp_state 4ef0 79207e01 set1 l2cap_channel_state_conn_res ,pdata 4ef1 6000c250 store 1 ,mem_sdp_state 4ef2 20204e1e branch l2cap_process_one_signal_rtn l2cap_proc_signal_connect_rsp_rfcomm: 4ef3 19627e00 copy timeup ,pdata 4ef4 6001424a store 2 ,mem_rfcomm_remote_cid 4ef5 6800c251 fetch 1 ,mem_rfcomm_state 4ef6 79207e01 set1 l2cap_channel_state_conn_res ,pdata 4ef7 6000c251 store 1 ,mem_rfcomm_state 4ef8 20600000 rtn l2cap_proc_signal_connect_rsp_hid_int: 4ef9 19627e00 copy timeup ,pdata 4efa 6001424c store 2 ,mem_hid_ctrl_remote_cid 4efb 6800c253 fetch 1 ,mem_hid_interrupt_state 4efc 79207e01 set1 l2cap_channel_state_conn_res ,pdata 4efd 6000c253 store 1 ,mem_hid_interrupt_state 4efe 20600000 rtn l2cap_proc_signal_connect_rsp_hid_ctrl: 4eff 19627e00 copy timeup ,pdata 4f00 6001424e store 2 ,mem_hid_int_remote_cid 4f01 6800c252 fetch 1 ,mem_hid_control_state 4f02 79207e01 set1 l2cap_channel_state_conn_res ,pdata 4f03 6000c252 store 1 ,mem_hid_control_state 4f04 20600000 rtn l2cap_proc_signal_config_req: 4f05 e8c08000 ifetch 1 ,contr 4f06 1fe20e00 copy pdata ,queue 4f07 e8c10000 ifetch 2 ,contr 4f08 1fe22200 copy pdata ,rega 4f09 1a627e00 copy regc ,pdata 4f0a 9a262600 isub rega ,regc 4f0b e8c10000 ifetch 2 ,contr 4f0c 1fe20400 copy pdata ,temp 4f0d 18422200 copy temp ,rega 4f0e 47094022 bpatchx patch22_2 ,mem_patch22 4f0f 58000050 setarg l2cap_sdp_channel 4f10 98467c00 isub temp ,null 4f11 2022cf1c branch l2cap_proc_signal_config_req_sdp ,zero 4f12 58000051 setarg l2cap_rfcomm_channel 4f13 98467c00 isub temp ,null 4f14 2022cf3a branch l2cap_proc_signal_config_req_rfcomm ,zero 4f15 58000052 setarg l2cap_hid_control_channel 4f16 98467c00 isub temp ,null 4f17 2022cf26 branch l2cap_proc_signal_config_req_hid_ctrl ,zero 4f18 58000053 setarg l2cap_hid_interrupt_channel 4f19 98467c00 isub temp ,null 4f1a 2022cf30 branch l2cap_proc_signal_config_req_hid_int ,zero 4f1b 20205062 branch l2cap_reject_command l2cap_proc_signal_config_req_sdp: 4f1c 18a21600 copy contw ,timeup 4f1d 6800c250 fetch 1 ,mem_sdp_state 4f1e 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata 4f1f 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata 4f20 6000c250 store 1 ,mem_sdp_state 4f21 19620a00 copy timeup ,contw 4f22 d9600050 arg l2cap_sdp_channel ,timeup 4f23 68014248 fetch 2 ,mem_sdp_remote_cid 4f24 1fe20400 copy pdata ,temp 4f25 20204f43 branch l2cap_send_config_rsp l2cap_proc_signal_config_req_hid_ctrl: 4f26 18a21600 copy contw ,timeup 4f27 6800c252 fetch 1 ,mem_hid_control_state 4f28 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata 4f29 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata 4f2a 6000c252 store 1 ,mem_hid_control_state 4f2b 19620a00 copy timeup ,contw 4f2c d9600052 arg l2cap_hid_control_channel ,timeup 4f2d 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 4f2e 1fe20400 copy pdata ,temp 4f2f 20204f43 branch l2cap_send_config_rsp l2cap_proc_signal_config_req_hid_int: 4f30 18a21600 copy contw ,timeup 4f31 6800c253 fetch 1 ,mem_hid_interrupt_state 4f32 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata 4f33 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata 4f34 6000c253 store 1 ,mem_hid_interrupt_state 4f35 19620a00 copy timeup ,contw 4f36 d9600053 arg l2cap_hid_interrupt_channel ,timeup 4f37 6801424e fetch 2 ,mem_hid_int_remote_cid 4f38 1fe20400 copy pdata ,temp 4f39 20204f43 branch l2cap_send_config_rsp l2cap_proc_signal_config_req_rfcomm: 4f3a 18a21600 copy contw ,timeup 4f3b 6800c251 fetch 1 ,mem_rfcomm_state 4f3c 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata 4f3d 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata 4f3e 6000c251 store 1 ,mem_rfcomm_state 4f3f 19620a00 copy timeup ,contw 4f40 d9600051 arg l2cap_rfcomm_channel ,timeup 4f41 6801424a fetch 2 ,mem_rfcomm_remote_cid 4f42 1fe20400 copy pdata ,temp l2cap_send_config_rsp: 4f43 4709c022 bpatchx patch22_3 ,mem_patch22 4f44 58000005 setarg signal_config_rsp 4f45 e0a08000 istore 1 ,contw 4f46 18e27e00 copy queue ,pdata 4f47 e0a08000 istore 1 ,contw 4f48 58000006 setarg 0x0006 4f49 e0a10000 istore 2 ,contw 4f4a 18427e00 copy temp ,pdata 4f4b e0a10000 istore 2 ,contw 4f4c 18007e00 force 0x00 ,pdata 4f4d e0a10000 istore 2 ,contw 4f4e 18007e00 force l2cap_config_success ,pdata 4f4f e0a10000 istore 2 ,contw 4f50 18007e0a force 10 ,pdata 4f51 9a40a400 iadd regb ,regb 4f52 60090282 storet 2 ,mem_config_req_dest_cid 4f53 18e27e00 copy queue ,pdata 4f54 60008281 store 1 ,mem_config_identifier 4f55 18007e50 force l2cap_sdp_channel ,pdata 4f56 a961fe00 icompare 0xff ,timeup 4f57 2020cf59 branch l2cap_send_config_rsp_is_sdp ,true 4f58 1fe0fe01 increase 1 ,pdata l2cap_send_config_rsp_is_sdp: 4f59 20600000 rtn l2cap_check_channel_state: 4f5a 78547c00 disable user 4f5b c3810000 rtnbit1 l2cap_channel_state_snd_cfg_req ,pdata 4f5c c4000000 rtnbit0 l2cap_channel_state_conn_req ,pdata 4f5d c4008000 rtnbit0 l2cap_channel_state_conn_res ,pdata 4f5e 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata 4f5f 18c20a00 copy contr ,contw 4f60 18a08bff increase -1 ,contw 4f61 e0a08000 istore 1 ,contw 4f62 78347c00 enable user 4f63 20600000 rtn l2cap_send_config_req: l2cap_send_config_req_sdp: 4f64 6800c250 fetch 1 ,mem_sdp_state 4f65 20404f5a call l2cap_check_channel_state 4f66 24344f6b nbranch l2cap_send_config_req_rfcomm ,user 4f67 70028050 jam l2cap_sdp_channel ,mem_send_config_req 4f68 68014248 fetch 2 ,mem_sdp_remote_cid 4f69 60010282 store 2 ,mem_config_req_dest_cid 4f6a 20204f7f branch l2cap_generate_config_req l2cap_send_config_req_rfcomm: 4f6b 6800c251 fetch 1 ,mem_rfcomm_state 4f6c 20404f5a call l2cap_check_channel_state 4f6d 24344f72 nbranch l2cap_send_config_req_hid_ctrl ,user 4f6e 70028051 jam l2cap_rfcomm_channel ,mem_send_config_req 4f6f 6801424a fetch 2 ,mem_rfcomm_remote_cid 4f70 60010282 store 2 ,mem_config_req_dest_cid 4f71 20204f7f branch l2cap_generate_config_req l2cap_send_config_req_hid_ctrl: 4f72 6800c252 fetch 1 ,mem_hid_control_state 4f73 20404f5a call l2cap_check_channel_state 4f74 24344f79 nbranch l2cap_send_config_req_hid_int ,user 4f75 70028052 jam l2cap_hid_control_channel ,mem_send_config_req 4f76 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 4f77 60010282 store 2 ,mem_config_req_dest_cid 4f78 20204f7f branch l2cap_generate_config_req l2cap_send_config_req_hid_int: 4f79 6800c253 fetch 1 ,mem_hid_interrupt_state 4f7a 20404f5a call l2cap_check_channel_state 4f7b 24740000 nrtn user 4f7c 70028053 jam l2cap_hid_interrupt_channel ,mem_send_config_req 4f7d 6801424e fetch 2 ,mem_hid_int_remote_cid 4f7e 60010282 store 2 ,mem_config_req_dest_cid l2cap_generate_config_req: 4f7f 470a4022 bpatchx patch22_4 ,mem_patch22 4f80 2040523a call l2cap_get_req_id 4f81 204052b8 call l2cap_malloc_signal_channel 4f82 18002400 force 0 ,regb 4f83 204052c3 call l2cap_get_signal_tx_payload 4f84 18007e04 force signal_config_req ,pdata 4f85 e0a08000 istore 1 ,contw 4f86 6800c255 fetch 1 ,mem_ml2cap_comm_id 4f87 e0a08000 istore 1 ,contw 4f88 58000008 setarg 0x0008 4f89 e0a10000 istore 2 ,contw 4f8a 68010282 fetch 2 ,mem_config_req_dest_cid 4f8b e0a10000 istore 2 ,contw 4f8c 58000000 setarg 0x0000 4f8d e0a10000 istore 2 ,contw 4f8e 18007e01 force 1 ,pdata 4f8f e0a08000 istore 1 ,contw 4f90 18007e02 force 2 ,pdata 4f91 e0a08000 istore 1 ,contw 4f92 68008280 fetch 1 ,mem_send_config_req 4f93 c028cf97 beq l2cap_rfcomm_channel ,l2cap_generate_config_req_rfcomm 4f94 58000030 setarg l2cap_config_mtu_sdp 4f95 e0a10000 istore 2 ,contw 4f96 20204f99 branch l2cap_generate_config_req_done l2cap_generate_config_req_rfcomm: 4f97 580003e3 setarg l2cap_config_mtu_rfcomm 4f98 e0a10000 istore 2 ,contw l2cap_generate_config_req_done: 4f99 d840000c arg 0x0c ,temp 4f9a 6009026f storet 2 ,mem_l2cap_signal_tx_length 4f9b 204052c1 call l2cap_get_signal_tx_buff 4f9c 6801026f fetch 2 ,mem_l2cap_signal_tx_length 4f9d e0a10000 istore 2 ,contw 4f9e 18007e01 force l2cap_signal_channel ,pdata 4f9f e0a10000 istore 2 ,contw 4fa0 70028000 jam 0 ,mem_send_config_req l2cap_proc_signal_config_req_rtn: 4fa1 20204e1e branch l2cap_process_one_signal_rtn l2cap_proc_signal_config_rsp: 4fa2 18c08c01 increase 1 ,contr 4fa3 e8c10000 ifetch 2 ,contr 4fa4 1fe22200 copy pdata ,rega 4fa5 1a627e00 copy regc ,pdata 4fa6 9a262600 isub rega ,regc 4fa7 e8c10000 ifetch 2 ,contr 4fa8 1fe22200 copy pdata ,rega 4fa9 470ac022 bpatchx patch22_5 ,mem_patch22 4faa 58000050 setarg l2cap_sdp_channel 4fab 9a267c00 isub rega ,null 4fac 2022cfba branch l2cap_proc_signal_config_rsp_sdp ,zero 4fad 58000051 setarg l2cap_rfcomm_channel 4fae 9a267c00 isub rega ,null 4faf 2022cfbe branch l2cap_proc_signal_config_rsp_rfcomm ,zero 4fb0 58000052 setarg l2cap_hid_control_channel 4fb1 9a267c00 isub rega ,null 4fb2 2022cfc2 branch l2cap_proc_signal_config_rsp_hid_ctrl ,zero 4fb3 58000053 setarg l2cap_hid_interrupt_channel 4fb4 9a267c00 isub rega ,null 4fb5 2022cfc6 branch l2cap_proc_signal_config_rsp_hid_int ,zero 4fb6 18c08c02 increase 2 ,contr 4fb7 e8c10000 ifetch 2 ,contr 4fb8 98007c00 iforce null 4fb9 20204e1e branch l2cap_process_one_signal_rtn l2cap_proc_signal_config_rsp_sdp: 4fba 6800c250 fetch 1 ,mem_sdp_state 4fbb 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata 4fbc 6000c250 store 1 ,mem_sdp_state 4fbd 20204e1e branch l2cap_process_one_signal_rtn l2cap_proc_signal_config_rsp_rfcomm: 4fbe 6800c251 fetch 1 ,mem_rfcomm_state 4fbf 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata 4fc0 6000c251 store 1 ,mem_rfcomm_state 4fc1 20204e1e branch l2cap_process_one_signal_rtn l2cap_proc_signal_config_rsp_hid_ctrl: 4fc2 6800c252 fetch 1 ,mem_hid_control_state 4fc3 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata 4fc4 6000c252 store 1 ,mem_hid_control_state 4fc5 20204e1e branch l2cap_process_one_signal_rtn l2cap_proc_signal_config_rsp_hid_int: 4fc6 6800c253 fetch 1 ,mem_hid_interrupt_state 4fc7 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata 4fc8 6000c253 store 1 ,mem_hid_interrupt_state 4fc9 700a9906 jam bt_evt_hid_connected ,mem_fifo_temp 4fca 20207d86 branch ui_ipc_send_event l2cap_proc_signal_disconnect_req: 4fcb e8c08000 ifetch 1 ,contr 4fcc 1fe20e00 copy pdata ,queue 4fcd e8c10000 ifetch 2 ,contr 4fce 1fe22200 copy pdata ,rega 4fcf 1a627e00 copy regc ,pdata 4fd0 9a262600 isub rega ,regc 4fd1 e8c10000 ifetch 2 ,contr 4fd2 1fe22200 copy pdata ,rega 4fd3 e8c10000 ifetch 2 ,contr 4fd4 1fe21600 copy pdata ,timeup 4fd5 1a220400 copy rega ,temp 4fd6 20407ea8 call save_cont_pointers 4fd7 470b4022 bpatchx patch22_6 ,mem_patch22 4fd8 58000050 setarg l2cap_sdp_channel 4fd9 98467c00 isub temp ,null 4fda 2022cff2 branch l2cap_proc_signal_disconnect_req_sdp ,zero 4fdb 58000051 setarg l2cap_rfcomm_channel 4fdc 98467c00 isub temp ,null 4fdd 2022d002 branch l2cap_proc_signal_disconnect_req_rfcomm ,zero 4fde 58000052 setarg l2cap_hid_control_channel 4fdf 98467c00 isub temp ,null 4fe0 2022cfe6 branch l2cap_proc_signal_disconnect_req_hid_ctrl ,zero 4fe1 58000053 setarg l2cap_hid_interrupt_channel 4fe2 98467c00 isub temp ,null 4fe3 2022cfec branch l2cap_proc_signal_disconnect_req_hid_int ,zero 4fe4 20405062 call l2cap_reject_command 4fe5 20205017 branch l2cap_proc_signal_disconnect_req_err_rtn l2cap_proc_signal_disconnect_req_hid_ctrl: 4fe6 19620400 copy timeup ,temp 4fe7 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 4fe8 98467c00 isub temp ,null 4fe9 2022cff8 branch l2cap_disconnect_hid_control_now ,zero 4fea 20405062 call l2cap_reject_command 4feb 20205017 branch l2cap_proc_signal_disconnect_req_err_rtn l2cap_proc_signal_disconnect_req_hid_int: 4fec 19620400 copy timeup ,temp 4fed 6801424e fetch 2 ,mem_hid_int_remote_cid 4fee 98467c00 isub temp ,null 4fef 2022cffa branch l2cap_disconnect_hid_interrupt_now ,zero 4ff0 20405062 call l2cap_reject_command 4ff1 20205017 branch l2cap_proc_signal_disconnect_req_err_rtn l2cap_proc_signal_disconnect_req_sdp: 4ff2 19620400 copy timeup ,temp 4ff3 68014248 fetch 2 ,mem_sdp_remote_cid 4ff4 98467c00 isub temp ,null 4ff5 2022cffe branch l2cap_disconnect_sdp_now ,zero 4ff6 20405062 call l2cap_reject_command 4ff7 20205017 branch l2cap_proc_signal_disconnect_req_err_rtn l2cap_disconnect_hid_control_now: 4ff8 20405079 call l2cap_reset_hid_ctrl_state 4ff9 2020500a branch l2cap_send_disconnect_rsp_pkt l2cap_disconnect_hid_interrupt_now: 4ffa 2040507f call l2cap_reset_hid_int_state 4ffb 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 4ffc 203a500a branch l2cap_send_disconnect_rsp_pkt ,blank 4ffd 2020500a branch l2cap_send_disconnect_rsp_pkt l2cap_disconnect_sdp_now: 4ffe 20405074 call l2cap_reset_sdp_channel_state 4fff 68008288 fetch 1 ,mem_upper_sm_ss 5000 243a500a nbranch l2cap_send_disconnect_rsp_pkt ,blank 5001 2020500a branch l2cap_send_disconnect_rsp_pkt l2cap_proc_signal_disconnect_req_rfcomm: 5002 19620400 copy timeup ,temp 5003 6801424a fetch 2 ,mem_rfcomm_remote_cid 5004 98467c00 isub temp ,null 5005 2022d008 branch l2cap_disconnect_rfcomm_now ,zero 5006 20405062 call l2cap_reject_command 5007 20205017 branch l2cap_proc_signal_disconnect_req_err_rtn l2cap_disconnect_rfcomm_now: 5008 2040506f call l2cap_reset_rfcomm_channel_state 5009 2020500a branch l2cap_send_disconnect_rsp_pkt l2cap_send_disconnect_rsp_pkt: 500a 20407ead call load_cont_pointers 500b 58000007 setarg signal_disconnect_rsp 500c e0a08000 istore 1 ,contw 500d 18e27e00 copy queue ,pdata 500e e0a08000 istore 1 ,contw 500f 58000004 setarg 0x0004 5010 e0a10000 istore 2 ,contw 5011 1a227e00 copy rega ,pdata 5012 e0a10000 istore 2 ,contw 5013 19627e00 copy timeup ,pdata 5014 e0a10000 istore 2 ,contw 5015 18007e08 force 8 ,pdata 5016 20205019 branch l2cap_proc_signal_disconnect_req_rtn l2cap_proc_signal_disconnect_req_err_rtn: 5017 20407ead call load_cont_pointers 5018 20205019 branch l2cap_proc_signal_disconnect_req_rtn l2cap_proc_signal_disconnect_req_rtn: 5019 9a40a400 iadd regb ,regb 501a 20204e1e branch l2cap_process_one_signal_rtn l2cap_proc_signal_disconnect_rsp: 501b e8c08000 ifetch 1 ,contr 501c 1fe20e00 copy pdata ,queue 501d e8c10000 ifetch 2 ,contr 501e 1fe22200 copy pdata ,rega 501f 1a627e00 copy regc ,pdata 5020 9a262600 isub rega ,regc 5021 e8c10000 ifetch 2 ,contr 5022 1fe21600 copy pdata ,timeup 5023 e8c10000 ifetch 2 ,contr 5024 1fe20400 copy pdata ,temp 5025 20407ea8 call save_cont_pointers 5026 470bc022 bpatchx patch22_7 ,mem_patch22 5027 58000050 setarg l2cap_sdp_channel 5028 98467c00 isub temp ,null 5029 2022d035 branch l2cap_proc_signal_disconnect_rsp_sdp ,zero 502a 58000051 setarg l2cap_rfcomm_channel 502b 98467c00 isub temp ,null 502c 2022d03b branch l2cap_proc_signal_disconnect_rsp_rfcomm ,zero 502d 58000052 setarg l2cap_hid_control_channel 502e 98467c00 isub temp ,null 502f 2022d041 branch l2cap_proc_signal_disconnect_rsp_hid_ctrl ,zero 5030 58000053 setarg l2cap_hid_interrupt_channel 5031 98467c00 isub temp ,null 5032 2022d047 branch l2cap_proc_signal_disconnect_rsp_hid_int ,zero 5033 20405062 call l2cap_reject_command 5034 2020504f branch l2cap_proc_signal_disconnect_rsp_err_rtn l2cap_proc_signal_disconnect_rsp_sdp: 5035 18422200 copy temp ,rega 5036 19620400 copy timeup ,temp 5037 68014248 fetch 2 ,mem_sdp_remote_cid 5038 98467c00 isub temp ,null 5039 2042d074 call l2cap_reset_sdp_channel_state ,zero 503a 2020504d branch l2cap_proc_signal_disconnect_rsp_rtn l2cap_proc_signal_disconnect_rsp_rfcomm: 503b 18422200 copy temp ,rega 503c 19620400 copy timeup ,temp 503d 6801424a fetch 2 ,mem_rfcomm_remote_cid 503e 98467c00 isub temp ,null 503f 2042d06f call l2cap_reset_rfcomm_channel_state ,zero 5040 2020504d branch l2cap_proc_signal_disconnect_rsp_rtn l2cap_proc_signal_disconnect_rsp_hid_ctrl: 5041 18422200 copy temp ,rega 5042 19620400 copy timeup ,temp 5043 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 5044 98467c00 isub temp ,null 5045 2042d079 call l2cap_reset_hid_ctrl_state ,zero 5046 2020504d branch l2cap_proc_signal_disconnect_rsp_rtn l2cap_proc_signal_disconnect_rsp_hid_int: 5047 18422200 copy temp ,rega 5048 19620400 copy timeup ,temp 5049 6801424e fetch 2 ,mem_hid_int_remote_cid 504a 98467c00 isub temp ,null 504b 2042d07f call l2cap_reset_hid_int_state ,zero 504c 2020504d branch l2cap_proc_signal_disconnect_rsp_rtn l2cap_proc_signal_disconnect_rsp_rtn: 504d 20407ead call load_cont_pointers 504e 20204e1e branch l2cap_process_one_signal_rtn l2cap_proc_signal_disconnect_rsp_err_rtn: 504f 20204e1e branch l2cap_process_one_signal_rtn l2cap_proc_signal_echo_req: 5050 e8c08000 ifetch 1 ,contr 5051 1fe20e00 copy pdata ,queue 5052 e8c10000 ifetch 2 ,contr 5053 1fe22200 copy pdata ,rega 5054 98c08c00 iadd contr ,contr 5055 58000009 setarg 9 5056 e0a08000 istore 1 ,contw 5057 18e27e00 copy queue ,pdata 5058 e0a08000 istore 1 ,contw 5059 18007e00 force 0x0000 ,pdata 505a e0a10000 istore 2 ,contw 505b 18007e04 force 4 ,pdata 505c 9a40a400 iadd regb ,regb 505d 1a627e00 copy regc ,pdata 505e 9a262600 isub rega ,regc 505f 20204e1e branch l2cap_process_one_signal_rtn l2cap_proc_signal_echo_rsp: 5060 20204e1e branch l2cap_process_one_signal_rtn l2cap_proc_signal_info_rsp: 5061 20204e1e branch l2cap_process_one_signal_rtn l2cap_reject_command: 5062 18002400 force 0 ,regb 5063 204052c3 call l2cap_get_signal_tx_payload 5064 58000001 setarg signal_cmd_reject 5065 e0a08000 istore 1 ,contw 5066 18e27e00 copy queue ,pdata 5067 e0a08000 istore 1 ,contw 5068 58000002 setarg 2 5069 e0a10000 istore 2 ,contw 506a 58000000 setarg cmd_not_understood 506b e0a10000 istore 2 ,contw 506c 1a40a406 increase 6 ,regb 506d da600004 arg 4 ,regc 506e 20204e1e branch l2cap_process_one_signal_rtn l2cap_reset_rfcomm_channel_state: 506f 58000000 setarg 0 5070 6001027b store 2 ,mem_rfcomm_tx_pkt_length 5071 6001424a store 2 ,mem_rfcomm_remote_cid 5072 70425100 jam 0 ,mem_rfcomm_state 5073 20600000 rtn l2cap_reset_sdp_channel_state: 5074 58000000 setarg 0 5075 60010275 store 2 ,mem_sdp_tx_pkt_length 5076 60014248 store 2 ,mem_sdp_remote_cid 5077 70425000 jam 0 ,mem_sdp_state 5078 20600000 rtn l2cap_reset_hid_ctrl_state: 5079 58000000 setarg 0 507a 6001424c store 2 ,mem_hid_ctrl_remote_cid 507b 70425200 jam 0 ,mem_hid_control_state 507c 6800c253 fetch 1 ,mem_hid_interrupt_state 507d c0005085 beq 0 ,l2cap_reset_hid_disconnected 507e 20600000 rtn l2cap_reset_hid_int_state: 507f 58000000 setarg 0 5080 6001424e store 2 ,mem_hid_int_remote_cid 5081 70425300 jam 0 ,mem_hid_interrupt_state 5082 6800c252 fetch 1 ,mem_hid_control_state 5083 c0005085 beq 0 ,l2cap_reset_hid_disconnected 5084 20600000 rtn l2cap_reset_hid_disconnected: 5085 700a9907 jam bt_evt_hid_disconnected ,mem_fifo_temp 5086 20207d86 branch ui_ipc_send_event l2cap_disconnect_interrupt_req: 5087 6800827f fetch 1 ,mem_control_tasks 5088 793ffe00 set0 l2cap_disconnect_interrupt ,pdata 5089 6000827f store 1 ,mem_control_tasks 508a 6801424e fetch 2 ,mem_hid_int_remote_cid 508b 207a0000 rtn blank 508c 204052b8 call l2cap_malloc_signal_channel 508d 6801424e fetch 2 ,mem_hid_int_remote_cid 508e 1fe22200 copy pdata ,rega 508f 18002453 force l2cap_hid_interrupt_channel ,regb 5090 2020509a branch l2cap_generate_disconnect_req l2cap_disconnect_control_req: 5091 6800827f fetch 1 ,mem_control_tasks 5092 793ffe07 set0 l2cap_disconnect_control ,pdata 5093 6000827f store 1 ,mem_control_tasks 5094 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 5095 207a0000 rtn blank 5096 204052b8 call l2cap_malloc_signal_channel 5097 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 5098 1fe22200 copy pdata ,rega 5099 18002452 force l2cap_hid_control_channel ,regb l2cap_generate_disconnect_req: 509a 2040523a call l2cap_get_req_id 509b 204052c3 call l2cap_get_signal_tx_payload 509c 18007e06 force signal_disconnect_req ,pdata 509d e0a08000 istore 1 ,contw 509e 6800c255 fetch 1 ,mem_ml2cap_comm_id 509f e0a08000 istore 1 ,contw 50a0 58000004 setarg 0x0004 50a1 e0a10000 istore 2 ,contw 50a2 1a227e00 copy rega ,pdata 50a3 e0a10000 istore 2 ,contw 50a4 1a427e00 copy regb ,pdata 50a5 e0a10000 istore 2 ,contw 50a6 18000408 force 0x08 ,temp 50a7 202050de branch ml2cap_send_signal ml2cap_send_signal_connect_req: 50a8 470c4023 bpatchx patch23_0 ,mem_patch23 50a9 2040523a call l2cap_get_req_id 50aa 204052c3 call l2cap_get_signal_tx_payload 50ab 58000002 setarg signal_connect_req 50ac e0a08000 istore 1 ,contw 50ad 6800c255 fetch 1 ,mem_ml2cap_comm_id 50ae e0a08000 istore 1 ,contw 50af 58000004 setarg 0x0004 50b0 e0a10000 istore 2 ,contw 50b1 18427e00 copy temp ,pdata 50b2 e0a10000 istore 2 ,contw 50b3 19627e00 copy timeup ,pdata 50b4 e0a10000 istore 2 ,contw 50b5 d8400008 arg 8 ,temp 50b6 202050de branch ml2cap_send_signal ml2cap_send_signal_config_req: 50b7 470cc023 bpatchx patch23_1 ,mem_patch23 50b8 2040523a call l2cap_get_req_id 50b9 204052c3 call l2cap_get_signal_tx_payload 50ba 58000004 setarg signal_config_req 50bb e0a08000 istore 1 ,contw 50bc 6800c255 fetch 1 ,mem_ml2cap_comm_id 50bd e0a08000 istore 1 ,contw 50be 58000008 setarg 0x0008 50bf e0a10000 istore 2 ,contw 50c0 18427e00 copy temp ,pdata 50c1 e0a10000 istore 2 ,contw 50c2 58000000 setarg 0x0000 50c3 e0a10000 istore 2 ,contw 50c4 58000001 setarg 0x01 50c5 e0a08000 istore 1 ,contw 50c6 58000002 setarg 0x02 50c7 e0a08000 istore 1 ,contw 50c8 580003e3 setarg l2cap_config_mtu_rfcomm 50c9 e0a10000 istore 2 ,contw 50ca d840000c arg 0xc ,temp 50cb 202050de branch ml2cap_send_signal ml2cap_send_signal_disconn_req: 50cc 470d4023 bpatchx patch23_2 ,mem_patch23 50cd 2040523a call l2cap_get_req_id 50ce 204052c3 call l2cap_get_signal_tx_payload 50cf 58000006 setarg signal_disconnect_req 50d0 e0a08000 istore 1 ,contw 50d1 6800c255 fetch 1 ,mem_ml2cap_comm_id 50d2 1fe0fe01 increase 1 ,pdata 50d3 18a22200 copy contw ,rega 50d4 6000c255 store 1 ,mem_ml2cap_comm_id 50d5 1a220a00 copy rega ,contw 50d6 e0a08000 istore 1 ,contw 50d7 58000004 setarg 0x0004 50d8 e0a10000 istore 2 ,contw 50d9 18427e00 copy temp ,pdata 50da e0a10000 istore 2 ,contw 50db 19627e00 copy timeup ,pdata 50dc e0a10000 istore 2 ,contw 50dd d8400008 arg 0x8 ,temp ml2cap_send_signal: 50de 6009026f storet 2 ,mem_l2cap_signal_tx_length 50df 18427e00 copy temp ,pdata 50e0 203a5264 branch l2cap_malloc_discard ,blank 50e1 204052c1 call l2cap_get_signal_tx_buff 50e2 6801026f fetch 2 ,mem_l2cap_signal_tx_length 50e3 e0a10000 istore 2 ,contw 50e4 18007e01 force l2cap_signal_channel ,pdata 50e5 e0a10000 istore 2 ,contw 50e6 20600000 rtn msdp_send_req_done: 50e7 68010275 fetch 2 ,mem_sdp_tx_pkt_length 50e8 203a2a8c branch assert ,blank 50e9 204052ce call l2cap_get_sdp_tx_buff 50ea 68010275 fetch 2 ,mem_sdp_tx_pkt_length 50eb e0a10000 istore 2 ,contw 50ec 68014248 fetch 2 ,mem_sdp_remote_cid 50ed e0a10000 istore 2 ,contw 50ee 20600000 rtn ml2cap_rx_multiplexing: 50ef 68010266 fetch 2 ,mem_l2cap_rx_pkt_length 50f0 203a4dfc branch l2cap_rx_reset_state ,blank 50f1 470dc023 bpatchx patch23_3 ,mem_patch23 50f2 68008268 fetch 1 ,mem_l2cap_rx_cid 50f3 c000d0f9 beq l2cap_signal_channel ,ml2cap_call_proc_signal 50f4 c0284de8 beq l2cap_sdp_channel ,ml2cap_call_proc_sdp 50f5 c028cdf5 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm 50f6 c0294df3 beq l2cap_hid_control_channel ,l2cap_call_proc_hid 50f7 c029cdf3 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid 50f8 20204dfc branch l2cap_rx_reset_state ml2cap_call_proc_signal: 50f9 470e4023 bpatchx patch23_4 ,mem_patch23 50fa 204052b8 call l2cap_malloc_signal_channel 50fb 18002400 force 0 ,regb 50fc 204052c3 call l2cap_get_signal_tx_payload 50fd 1fe20a00 copy pdata ,contw 50fe 68010266 fetch 2 ,mem_l2cap_rx_pkt_length 50ff 1fe22600 copy pdata ,regc 5100 68010264 fetch 2 ,mem_l2cap_payload_ptr 5101 98000c00 iforce contr ml2cap_proc_one_comm_loop: 5102 20405108 call ml2cap_proc_one_comm 5103 1a60a7fc increase -4 ,regc 5104 2422d102 nbranch ml2cap_proc_one_comm_loop ,zero 5105 1a420400 copy regb ,temp 5106 204050de call ml2cap_send_signal 5107 20204dfc branch l2cap_rx_reset_state ml2cap_proc_one_comm: 5108 e8c08000 ifetch 1 ,contr 5109 c0015113 beq signal_connect_req ,ml2cap_proc_signal_connect_req 510a c000d116 beq signal_cmd_reject ,ml2cap_proc_signal_cmd_reject 510b c001d120 beq signal_connect_rsp ,ml2cap_proc_signal_connect_rsp 510c c002d15c beq signal_config_rsp ,ml2cap_proc_signal_config_rsp 510d c002518e beq signal_config_req ,ml2cap_proc_signal_config_req 510e c003d213 beq signal_disconnect_rsp ,ml2cap_proc_signal_disconn_rsp 510f c00351e1 beq signal_disconnect_req ,ml2cap_proc_signal_disconn_req 5110 c0045050 beq signal_echo_req ,l2cap_proc_signal_echo_req 5111 c0054e3a beq signal_info_req ,ml2cap_proc_signal_info_req 5112 2020522e branch ml2cap_proc_send_reject ml2cap_proc_signal_connect_req: 5113 20407ea8 call save_cont_pointers 5114 20407ead call load_cont_pointers 5115 20204e51 branch l2cap_proc_signal_connect_req ml2cap_proc_signal_cmd_reject: 5116 e8c08000 ifetch 1 ,contr 5117 1fe20e00 copy pdata ,queue 5118 e8c10000 ifetch 2 ,contr 5119 1fe22200 copy pdata ,rega 511a 1a627e00 copy regc ,pdata 511b 9a262600 isub rega ,regc mvptr: 511c e8c08000 ifetch 1 ,contr 511d 1a20a3ff increase -1 ,rega 511e 2422d11c nbranch mvptr ,zero 511f 20600000 rtn ml2cap_proc_signal_connect_rsp: 5120 e8c08000 ifetch 1 ,contr 5121 1fe20e00 copy pdata ,queue 5122 e8c10000 ifetch 2 ,contr 5123 1fe22200 copy pdata ,rega 5124 e8c10000 ifetch 2 ,contr 5125 1fe21600 copy pdata ,timeup 5126 e8c10000 ifetch 2 ,contr 5127 1fe20400 copy pdata ,temp 5128 e8c10000 ifetch 2 ,contr 5129 1fe67c00 sub pdata ,0 ,null 512a 2022d132 branch ml2cap_proc_signal_connect_rsp_sucessful ,zero 512b c001512e beq l2cap_connect_refused_psm_unsupported ,ml2cap_proc_signal_connect_refused_result 512c c002512e beq l2cap_connect_refused_no_resources ,ml2cap_proc_signal_connect_refused_result 512d 20205130 branch ml2cap_proc_signal_connect_rsp_mnosucc ml2cap_proc_signal_connect_refused_result: 512e 700a9916 jam bt_evt_ml2cap_conn_refused ,mem_fifo_temp 512f 20407d86 call ui_ipc_send_event ml2cap_proc_signal_connect_rsp_mnosucc: 5130 e8c10000 ifetch 2 ,contr 5131 20205159 branch mnosucc ml2cap_proc_signal_connect_rsp_sucessful: 5132 20407ea8 call save_cont_pointers 5133 470ec023 bpatchx patch23_5 ,mem_patch23 5134 58000050 setarg l2cap_sdp_channel 5135 98467c00 isub temp ,null 5136 2022d141 branch ml2cap_proc_signal_connect_rsp_sdp ,zero 5137 58000051 setarg l2cap_rfcomm_channel 5138 98467c00 isub temp ,null 5139 2022d147 branch ml2cap_proc_signal_connect_rsp_rfcomm ,zero 513a 58000053 setarg l2cap_hid_interrupt_channel 513b 98467c00 isub temp ,null 513c 2022d153 branch ml2cap_proc_signal_connect_rsp_hid_int ,zero 513d 58000052 setarg l2cap_hid_control_channel 513e 98467c00 isub temp ,null 513f 2022d14d branch ml2cap_proc_signal_connect_rsp_hid_ctrl ,zero 5140 20205159 branch mnosucc ml2cap_proc_signal_connect_rsp_sdp: 5141 19627e00 copy timeup ,pdata 5142 60014248 store 2 ,mem_sdp_remote_cid 5143 6800c250 fetch 1 ,mem_sdp_state 5144 79207e01 set1 l2cap_channel_state_conn_res 5145 6000c250 store 1 ,mem_sdp_state 5146 20205158 branch mnosucc1 ml2cap_proc_signal_connect_rsp_rfcomm: 5147 19627e00 copy timeup ,pdata 5148 6001424a store 2 ,mem_rfcomm_remote_cid 5149 6800c251 fetch 1 ,mem_rfcomm_state 514a 79207e01 set1 l2cap_channel_state_conn_res 514b 6000c251 store 1 ,mem_rfcomm_state 514c 20205158 branch mnosucc1 ml2cap_proc_signal_connect_rsp_hid_ctrl: 514d 19627e00 copy timeup ,pdata 514e 6001424c store 2 ,mem_hid_ctrl_remote_cid 514f 6800c252 fetch 1 ,mem_hid_control_state 5150 79207e01 set1 l2cap_channel_state_conn_res 5151 6000c252 store 1 ,mem_hid_control_state 5152 20205158 branch mnosucc1 ml2cap_proc_signal_connect_rsp_hid_int: 5153 19627e00 copy timeup ,pdata 5154 6001424e store 2 ,mem_hid_int_remote_cid 5155 6800c253 fetch 1 ,mem_hid_interrupt_state 5156 79207e01 set1 l2cap_channel_state_conn_res 5157 6000c253 store 1 ,mem_hid_interrupt_state mnosucc1: 5158 20407ead call load_cont_pointers mnosucc: 5159 1a627e00 copy regc ,pdata 515a 9a262600 isub rega ,regc 515b 20600000 rtn ml2cap_proc_signal_config_rsp: 515c e8c08000 ifetch 1 ,contr 515d 1fe20e00 copy pdata ,queue 515e e8c10000 ifetch 2 ,contr 515f 1fe22200 copy pdata ,rega 5160 1a627e00 copy regc ,pdata 5161 9a262600 isub rega ,regc 5162 e8c10000 ifetch 2 ,contr 5163 1fe21600 copy pdata ,timeup 5164 e8c10000 ifetch 2 ,contr 5165 e8c10000 ifetch 2 ,contr 5166 243a5188 nbranch mcrsdone1 ,blank 5167 20407ea8 call save_cont_pointers 5168 19620400 copy timeup ,temp 5169 470f4023 bpatchx patch23_6 ,mem_patch23 516a 58000050 setarg l2cap_sdp_channel 516b 98467c00 isub temp ,null 516c 2022d176 branch ml2cap_proc_signal_config_rsp_sdp ,zero 516d 58000051 setarg l2cap_rfcomm_channel 516e 98467c00 isub temp ,null 516f 2022d17a branch ml2cap_proc_signal_config_rsp_rfcomm ,zero 5170 58000052 setarg l2cap_hid_control_channel 5171 98467c00 isub temp ,null 5172 2022d17e branch ml2cap_proc_signal_config_rsp_hid_ctrl ,zero 5173 58000053 setarg l2cap_hid_interrupt_channel 5174 98467c00 isub temp ,null 5175 2022d182 branch ml2cap_proc_signal_config_rsp_hid_int ,zero ml2cap_proc_signal_config_rsp_sdp: 5176 6800c250 fetch 1 ,mem_sdp_state 5177 79207e05 set1 l2cap_channel_state_rcv_cfg_res 5178 6000c250 store 1 ,mem_sdp_state 5179 20600000 rtn ml2cap_proc_signal_config_rsp_rfcomm: 517a 6800c251 fetch 1 ,mem_rfcomm_state 517b 79207e05 set1 l2cap_channel_state_rcv_cfg_res 517c 6000c251 store 1 ,mem_rfcomm_state 517d 20600000 rtn ml2cap_proc_signal_config_rsp_hid_ctrl: 517e 6800c252 fetch 1 ,mem_hid_control_state 517f 79207e05 set1 l2cap_channel_state_rcv_cfg_res 5180 6000c252 store 1 ,mem_hid_control_state 5181 20600000 rtn ml2cap_proc_signal_config_rsp_hid_int: 5182 6800c253 fetch 1 ,mem_hid_interrupt_state 5183 79207e05 set1 l2cap_channel_state_rcv_cfg_res 5184 6000c253 store 1 ,mem_hid_interrupt_state 5185 700a9906 jam bt_evt_hid_connected ,mem_fifo_temp 5186 20207d86 branch ui_ipc_send_event mcfrsdone: 5187 20407ead call load_cont_pointers mcrsdone1: 5188 1a20a3fa increase -6 ,rega mloop2: 5189 2022d18d branch mcrsdone ,zero 518a 18c08c01 increase 1 ,contr 518b 1a20a3ff increase -1 ,rega 518c 20205189 branch mloop2 mcrsdone: 518d 20600000 rtn ml2cap_proc_signal_config_req: 518e e8c08000 ifetch 1 ,contr 518f 1fe20e00 copy pdata ,queue 5190 e8c10000 ifetch 2 ,contr 5191 1fe22200 copy pdata ,rega 5192 1a627e00 copy regc ,pdata 5193 9a262600 isub rega ,regc 5194 e8c10000 ifetch 2 ,contr 5195 18c08c02 increase 2 ,contr 5196 1fe20400 copy pdata ,temp 5197 58000005 setarg signal_config_rsp 5198 e0a08000 istore 1 ,contw 5199 18e27e00 copy queue ,pdata 519a e0a08000 istore 1 ,contw 519b 1a20a202 increase 2 ,rega 519c 1a227e00 copy rega ,pdata 519d e0a10000 istore 2 ,contw 519e 20407ea8 call save_cont_pointers 519f 470fc023 bpatchx patch23_7 ,mem_patch23 51a0 58000050 setarg l2cap_sdp_channel 51a1 98467c00 isub temp ,null 51a2 2022d1ad branch ml2cap_proc_signal_config_req_sdp ,zero 51a3 58000051 setarg l2cap_rfcomm_channel 51a4 98467c00 isub temp ,null 51a5 2022d1be branch ml2cap_proc_signal_config_req_rfcomm ,zero 51a6 58000052 setarg l2cap_hid_control_channel 51a7 98467c00 isub temp ,null 51a8 2022d1c4 branch ml2cap_proc_signal_config_req_hid_ctrl ,zero 51a9 58000053 setarg l2cap_hid_interrupt_channel 51aa 98467c00 isub temp ,null 51ab 2022d1ca branch ml2cap_proc_signal_config_req_hid_int ,zero 51ac 202051cf branch mcfgrq_done ml2cap_proc_signal_config_req_sdp: 51ad 6800c250 fetch 1 ,mem_sdp_state 51ae 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata 51af 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata 51b0 6000c250 store 1 ,mem_sdp_state 51b1 c28151bb bbit1 l2cap_channel_state_snd_cfg_req ,ml2cap_proc_signal_config_req_sdp_nsndreq 51b2 6808827f fetcht 1 ,mem_control_tasks 51b3 79200406 set1 l2cap_init_config_req ,temp 51b4 6008827f storet 1 ,mem_control_tasks 51b5 18e27e00 copy queue ,pdata 51b6 1fe0fe01 increase 1 ,pdata 51b7 60008281 store 1 ,mem_config_identifier 51b8 6800c250 fetch 1 ,mem_sdp_state 51b9 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata 51ba 6000c250 store 1 ,mem_sdp_state ml2cap_proc_signal_config_req_sdp_nsndreq: 51bb 68014248 fetch 2 ,mem_sdp_remote_cid 51bc 60010282 store 2 ,mem_config_req_dest_cid 51bd 202051cf branch mcfgrq_done ml2cap_proc_signal_config_req_rfcomm: 51be 6800c251 fetch 1 ,mem_rfcomm_state 51bf 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata 51c0 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata 51c1 6000c251 store 1 ,mem_rfcomm_state 51c2 6801424a fetch 2 ,mem_rfcomm_remote_cid 51c3 202051cf branch mcfgrq_done ml2cap_proc_signal_config_req_hid_ctrl: 51c4 6800c252 fetch 1 ,mem_hid_control_state 51c5 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata 51c6 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata 51c7 6000c252 store 1 ,mem_hid_control_state 51c8 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 51c9 202051cf branch mcfgrq_done ml2cap_proc_signal_config_req_hid_int: 51ca 6800c253 fetch 1 ,mem_hid_interrupt_state 51cb 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata 51cc 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata 51cd 6000c253 store 1 ,mem_hid_interrupt_state 51ce 6801424e fetch 2 ,mem_hid_int_remote_cid mcfgrq_done: 51cf 1fe21600 copy pdata ,timeup 51d0 20407ead call load_cont_pointers 51d1 19627e00 copy timeup ,pdata 51d2 e0a10000 istore 2 ,contw 51d3 18007e00 force 0x0000 ,pdata 51d4 e0a10000 istore 2 ,contw 51d5 18007e00 force 0x0000 ,pdata 51d6 e0a10000 istore 2 ,contw 51d7 18007e0a force 10 ,pdata 51d8 9a40a400 iadd regb ,regb 51d9 1a20a3fa increase -6 ,rega mloop1: 51da 2022d1e0 branch mcrqdone ,zero 51db e8c08000 ifetch 1 ,contr 51dc e0a08000 istore 1 ,contw 51dd 1a40a401 increase 1 ,regb 51de 1a20a3ff increase -1 ,rega 51df 202051da branch mloop1 mcrqdone: 51e0 20600000 rtn ml2cap_proc_signal_disconn_req: 51e1 e8c08000 ifetch 1 ,contr 51e2 1fe20e00 copy pdata ,queue 51e3 e8c10000 ifetch 2 ,contr 51e4 1fe22200 copy pdata ,rega 51e5 1a627e00 copy regc ,pdata 51e6 9a262600 isub rega ,regc 51e7 e8c10000 ifetch 2 ,contr 51e8 1fe22200 copy pdata ,rega 51e9 e8c10000 ifetch 2 ,contr 51ea 1fe21600 copy pdata ,timeup 51eb 20407ea8 call save_cont_pointers 51ec 47104024 bpatchx patch24_0 ,mem_patch24 51ed 58000050 setarg l2cap_sdp_channel 51ee 1a220400 copy rega ,temp 51ef 98467c00 isub temp ,null 51f0 2022d1fa branch ml2cap_proc_signal_disconn_sdp ,zero 51f1 58000052 setarg l2cap_hid_control_channel 51f2 1a220400 copy rega ,temp 51f3 98467c00 isub temp ,null 51f4 2022d1ff branch ml2cap_proc_signal_disconn_hid_ctrl ,zero 51f5 58000053 setarg l2cap_hid_interrupt_channel 51f6 1a220400 copy rega ,temp 51f7 98467c00 isub temp ,null 51f8 2022d201 branch ml2cap_proc_signal_disconn_hid_int ,zero 51f9 20205203 branch mclsrfc ml2cap_proc_signal_disconn_sdp: 51fa 58000000 setarg 0x0000 51fb 60010275 store 2 ,mem_sdp_tx_pkt_length 51fc 60014248 store 2 ,mem_sdp_remote_cid 51fd 6000c250 store 1 ,mem_sdp_state 51fe 20205205 branch mclssdp ml2cap_proc_signal_disconn_hid_ctrl: 51ff 20405079 call l2cap_reset_hid_ctrl_state 5200 20205205 branch mclssdp ml2cap_proc_signal_disconn_hid_int: 5201 2040507f call l2cap_reset_hid_int_state 5202 20205205 branch mclssdp mclsrfc: 5203 58000000 setarg 0x0000 5204 6001027b store 2 ,mem_rfcomm_tx_pkt_length mclssdp: 5205 20407ead call load_cont_pointers 5206 58000007 setarg signal_disconnect_rsp 5207 e0a08000 istore 1 ,contw 5208 18e27e00 copy queue ,pdata 5209 e0a08000 istore 1 ,contw 520a 58000004 setarg 0x0004 520b e0a10000 istore 2 ,contw 520c 1a227e00 copy rega ,pdata 520d e0a10000 istore 2 ,contw 520e 19627e00 copy timeup ,pdata 520f e0a10000 istore 2 ,contw 5210 18007e08 force 8 ,pdata 5211 9a40a400 iadd regb ,regb 5212 20600000 rtn ml2cap_proc_signal_disconn_rsp: 5213 e8c08000 ifetch 1 ,contr 5214 1fe20e00 copy pdata ,queue 5215 e8c10000 ifetch 2 ,contr 5216 1fe22200 copy pdata ,rega 5217 e8c10000 ifetch 2 ,contr 5218 1fe21600 copy pdata ,timeup 5219 e8c10000 ifetch 2 ,contr 521a 1fe20400 copy pdata ,temp 521b 20407ea8 call save_cont_pointers 521c 4710c024 bpatchx patch24_1 ,mem_patch24 521d 6800c255 fetch 1 ,mem_ml2cap_comm_id 521e a8e1fe00 icompare 0xff ,queue 521f 2420d22a nbranch mdisdone ,true 5220 58000050 setarg l2cap_sdp_channel 5221 98467c00 isub temp ,null 5222 2022d227 branch ml2cap_proc_signal_disconn_rsp_sdp ,zero 5223 58000051 setarg l2cap_rfcomm_channel 5224 98467c00 isub temp ,null 5225 2022d22a branch ml2cap_proc_signal_disconn_rsp_rfcomm ,zero 5226 2020522a branch mdisdone ml2cap_proc_signal_disconn_rsp_sdp: 5227 70424800 jam 0 ,mem_sdp_remote_cid 5228 70425000 jam 0 ,mem_sdp_state 5229 2020522a branch mdisdone ml2cap_proc_signal_disconn_rsp_rfcomm: mdisdone: 522a 20407ead call load_cont_pointers 522b 1a627e00 copy regc ,pdata 522c 9a262600 isub rega ,regc 522d 20600000 rtn ml2cap_proc_send_reject: 522e 58000001 setarg signal_cmd_reject 522f e0a08000 istore 1 ,contw 5230 e8c08000 ifetch 1 ,contr 5231 e0a08000 istore 1 ,contw 5232 58000002 setarg 0x0002 5233 e0a10000 istore 2 ,contw 5234 58000000 setarg 0x0000 5235 e0a10000 istore 2 ,contw 5236 58000006 setarg 0x0006 5237 9a40a400 iadd regb ,regb 5238 18002604 force 4 ,regc 5239 20600000 rtn l2cap_get_req_id: 523a 6800c255 fetch 1 ,mem_ml2cap_comm_id 523b 1fe0fe01 increase 1 ,pdata 523c c080523e bne 0 ,l2cap_get_req_id_ok 523d 1fe0fe01 increase 1 ,pdata l2cap_get_req_id_ok: 523e 6000c255 store 1 ,mem_ml2cap_comm_id 523f 20600000 rtn l2cap_malloc: 5240 47114024 bpatchx patch24_2 ,mem_patch24 5241 da400000 arg 0 ,regb 5242 2040526e call l2cap_malloc_is_fifo_full 5243 243a2a8c nbranch assert ,blank 5244 2040527e call l2cap_malloc_get_full_map 5245 da401800 arg mem_tx_buff0 ,regb 5246 d8e00000 arg 0 ,queue l2cap_malloc_loop: 5247 6808c256 fetcht 1 ,mem_used_map 5248 a84fffff qisolate1 temp 5249 2020d24f branch l2cap_malloc_next ,true 524a 204052a0 call l2cap_malloc_enough 524b 19667c00 sub timeup ,0 ,null 524c 2021524f branch l2cap_malloc_next ,positive 524d 20405288 call l2cap_malloc_into_fifo 524e 20205255 branch l2cap_malloc_rtn l2cap_malloc_next: 524f 1a40a480 increase 128 ,regb 5250 18e08e01 increase 1 ,queue 5251 58000008 setarg 8 5252 98e67c00 isub queue ,null 5253 20215247 branch l2cap_malloc_loop ,positive 5254 da400000 arg 0 ,regb l2cap_malloc_rtn: 5255 1a427e00 copy regb ,pdata 5256 203a2a8c branch assert ,blank 5257 20600000 rtn l2cap_malloc_fifo_out: 5258 4711c024 bpatchx patch24_3 ,mem_patch24 5259 20405277 call l2cap_malloc_fifo_get_first_ptr 525a 18c08c01 increase 1 ,contr 525b e8c10000 ifetch 2 ,contr 525c 20600000 rtn l2cap_malloc_free: 525d 47124024 bpatchx patch24_4 ,mem_patch24 525e 20405277 call l2cap_malloc_fifo_get_first_ptr 525f 18c20a00 copy contr ,contw 5260 18c20400 copy contr ,temp 5261 58000000 setarg 0 5262 e0a18000 istore 3 ,contw 5263 20600000 rtn l2cap_malloc_discard: 5264 4712c024 bpatchx patch24_5 ,mem_patch24 5265 20405274 call l2cap_malloc_is_fifo_empty 5266 203a2a8c branch assert ,blank 5267 6801c25d fetch 3 ,mem_tx_fifo2 5268 6001c260 store 3 ,mem_tx_fifo3 5269 6801c25a fetch 3 ,mem_tx_fifo1 526a 6001c25d store 3 ,mem_tx_fifo2 526b 6801c257 fetch 3 ,mem_tx_fifo0 526c 6001c25a store 3 ,mem_tx_fifo1 526d 20600000 rtn l2cap_malloc_is_fifo_full: 526e 47134024 bpatchx patch24_6 ,mem_patch24 526f 6801c257 fetch 3 ,mem_tx_fifo0 5270 20600000 rtn l2cap_malloc_is_fifo_nearly_full: 5271 4713c024 bpatchx patch24_7 ,mem_patch24 5272 6801c25a fetch 3 ,mem_tx_fifo1 5273 20600000 rtn l2cap_malloc_is_fifo_empty: 5274 47144025 bpatchx patch25_0 ,mem_patch25 5275 6801c260 fetch 3 ,mem_tx_fifo3 5276 20600000 rtn l2cap_malloc_fifo_get_first_ptr: 5277 20405274 call l2cap_malloc_is_fifo_empty 5278 203a2a8c branch assert ,blank 5279 d8c04257 arg mem_tx_fifo0 ,contr l2cap_malloc_free_loop: 527a e8c18000 ifetch 3 ,contr 527b 203a527a branch l2cap_malloc_free_loop ,blank 527c 18c08dfd increase -3 ,contr 527d 20600000 rtn l2cap_malloc_get_full_map: 527e 4714c025 bpatchx patch25_1 ,mem_patch25 527f df200004 arg 4 ,loopcnt 5280 d8c04257 arg mem_tx_fifo0_map ,contr 5281 d8400000 arg 0 ,temp l2cap_malloc_get_full_map_loop: 5282 e8c18000 ifetch 3 ,contr 5283 1fe17eff and pdata ,0xff ,pdata 5284 98418400 ior temp ,temp 5285 c2005282 loop l2cap_malloc_get_full_map_loop 5286 6008c256 storet 1 ,mem_used_map 5287 20600000 rtn l2cap_malloc_into_fifo: 5288 47154025 bpatchx patch25_2 ,mem_patch25 5289 2040526e call l2cap_malloc_is_fifo_full 528a 243a2a8c nbranch assert ,blank 528b 20405274 call l2cap_malloc_is_fifo_empty 528c 203a5295 branch l2cap_malloc_into_fifo_no_push ,blank 528d 6801c25a fetch 3 ,mem_tx_fifo1 528e 6001c257 store 3 ,mem_tx_fifo0 528f e8c18000 ifetch 3 ,contr 5290 e0a18000 istore 3 ,contw 5291 e8c18000 ifetch 3 ,contr 5292 e0a18000 istore 3 ,contw 5293 58000000 setarg 0 5294 e0a18000 istore 3 ,contw l2cap_malloc_into_fifo_no_push: 5295 d8400000 arg 0 ,temp 5296 19627e00 copy timeup ,pdata 5297 98e0fe00 iadd queue ,pdata l2cap_malloc_into_fifo_loop: 5298 f9200400 qset1 temp 5299 18e08e01 increase 1 ,queue 529a 98e67c00 isub queue ,null 529b 2422d298 nbranch l2cap_malloc_into_fifo_loop ,zero 529c 1a4d7e00 lshift8 regb ,pdata 529d 9841fe00 ior temp ,pdata 529e 6001c260 store 3 ,mem_tx_fifo3 529f 20600000 rtn l2cap_malloc_enough: 52a0 4715c025 bpatchx patch25_3 ,mem_patch25 52a1 2040527e call l2cap_malloc_get_full_map 52a2 18e22600 copy queue ,regc 52a3 d8400000 arg 0 ,temp 52a4 d9600000 arg 0 ,timeup l2cap_malloc_enough_loop: 52a5 18e27e00 copy queue ,pdata 52a6 c00452b0 beq 8 ,l2cap_malloc_enough_end 52a7 6800c256 fetch 1 ,mem_used_map 52a8 afefffff qisolate1 pdata 52a9 2020d2b0 branch l2cap_malloc_enough_end ,true 52aa 18408480 increase 128 ,temp 52ab 18e08e01 increase 1 ,queue 52ac 1a227e00 copy rega ,pdata 52ad 98467c00 isub temp ,null 52ae 2022d2b0 branch l2cap_malloc_enough_end ,zero 52af 202152a5 branch l2cap_malloc_enough_loop ,positive l2cap_malloc_enough_end: 52b0 18427e00 copy temp ,pdata 52b1 9a267c00 isub rega ,null 52b2 242152b6 nbranch l2cap_malloc_enough_rtn ,positive 52b3 18e27e00 copy queue ,pdata 52b4 1a620400 copy regc ,temp 52b5 98461600 isub temp ,timeup l2cap_malloc_enough_rtn: 52b6 1a620e00 copy regc ,queue 52b7 20600000 rtn l2cap_malloc_signal_channel: 52b8 47164025 bpatchx patch25_4 ,mem_patch25 52b9 da20007f arg l2cap_signal_malloc_size ,rega 52ba 20405240 call l2cap_malloc 52bb 6001026b store 2 ,mem_l2cap_signal_tx_buff_ptr 52bc 1fe0fe04 increase 4 ,pdata 52bd 6001026d store 2 ,mem_l2cap_signal_tx_payload_ptr 52be 58000000 setarg 0 52bf 6001026f store 2 ,mem_l2cap_signal_tx_length 52c0 20600000 rtn l2cap_get_signal_tx_buff: 52c1 6801026b fetch 2 ,mem_l2cap_signal_tx_buff_ptr 52c2 202052e2 branch l2cap_util_pdata_to_contw l2cap_get_signal_tx_payload: 52c3 6801026d fetch 2 ,mem_l2cap_signal_tx_payload_ptr 52c4 202052e2 branch l2cap_util_pdata_to_contw l2cap_malloc_sdp_channel: 52c5 4716c025 bpatchx patch25_5 ,mem_patch25 52c6 da2000fa arg sdp_malloc_size ,rega 52c7 20405240 call l2cap_malloc 52c8 60010271 store 2 ,mem_sdp_tx_buff_ptr 52c9 1fe0fe04 increase 4 ,pdata 52ca 60010273 store 2 ,mem_sdp_tx_payload_ptr 52cb 58000000 setarg 0 52cc 60010275 store 2 ,mem_sdp_tx_pkt_length 52cd 20600000 rtn l2cap_get_sdp_tx_buff: 52ce 68010271 fetch 2 ,mem_sdp_tx_buff_ptr 52cf 202052e2 branch l2cap_util_pdata_to_contw l2cap_get_sdp_tx_payload: 52d0 68010273 fetch 2 ,mem_sdp_tx_payload_ptr 52d1 202052e2 branch l2cap_util_pdata_to_contw l2cap_malloc_rfcomm_channel: 52d2 47174025 bpatchx patch25_6 ,mem_patch25 52d3 20407e7c call push_stack 52d4 70028401 jam rfcomm_malloc_fail ,mem_rfcomm_malloc_fail_flag 52d5 2040526e call l2cap_malloc_is_fifo_full 52d6 247a0000 nrtn blank 52d7 da20007f arg rfcomm_malloc_size ,rega 52d8 20405240 call l2cap_malloc 52d9 60010277 store 2 ,mem_rfcomm_tx_buff_ptr 52da 1fe0fe04 increase 4 ,pdata 52db 60010279 store 2 ,mem_rfcomm_tx_payload_ptr 52dc 58000000 setarg 0 52dd 6001027b store 2 ,mem_rfcomm_tx_pkt_length 52de 70028400 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag 52df 20207e8c branch pop_stack l2cap_get_rfcomm_tx_buff: 52e0 68010277 fetch 2 ,mem_rfcomm_tx_buff_ptr 52e1 202052e2 branch l2cap_util_pdata_to_contw l2cap_util_pdata_to_contw: 52e2 203a2a8c branch assert ,blank 52e3 1fe20a00 copy pdata ,contw 52e4 20600000 rtn l2cap_lpm_save_calc_len: 52e5 4717c025 bpatchx patch25_7 ,mem_patch25 52e6 da400000 arg 0 ,regb 52e7 da204257 arg mem_tx_fifo0_map ,rega 52e8 1a20a3fe increase -2 ,rega l2cap_lpm_save_calc_len_loop: 52e9 1a20a202 increase 2 ,rega 52ea 58004263 setarg mem_tx_fifo_end 52eb 9a267c00 isub rega ,null 52ec 2022d2f5 branch l2cap_lpm_save_calc_len_end ,zero 52ed ea208000 ifetch 1 ,rega 52ee 1a20a201 increase 1 ,rega 52ef 203a52e9 branch l2cap_lpm_save_calc_len_loop ,blank 52f0 ea290000 ifetcht 2 ,rega 52f1 e8410000 ifetch 2 ,temp 52f2 9a40a400 iadd regb ,regb 52f3 1a40a404 increase 4 ,regb 52f4 202052e9 branch l2cap_lpm_save_calc_len_loop l2cap_lpm_save_calc_len_end: 52f5 1a427e00 copy regb ,pdata 52f6 20600000 rtn l2cap_lpm_get_wake_lock: 52f7 d8e0000c arg wake_lock_l2cap_tx ,queue 52f8 20202c32 branch lpm_get_wake_lock l2cap_lpm_put_wake_lock: 52f9 d8e0000c arg wake_lock_l2cap_tx ,queue 52fa 20202c36 branch lpm_put_wake_lock l2cap_lpm_save_txbuf: 52fb 47184026 bpatchx patch26_0 ,mem_patch26 52fc 2040527e call l2cap_malloc_get_full_map 52fd 6800c256 fetch 1 ,mem_used_map 52fe 207a0000 rtn blank 52ff 204052e5 call l2cap_lpm_save_calc_len 5300 d8400100 arg l2cap_lpm_txbuf_len ,temp 5301 98467c00 isub temp ,null 5302 202152f7 branch l2cap_lpm_get_wake_lock ,positive 5303 204052f9 call l2cap_lpm_put_wake_lock 5304 d8a04263 arg mem_l2cap_lpm_txbuf ,contw 5305 da204257 arg mem_tx_fifo0 ,rega l2cap_lpm_save_txbuf_loop: 5306 58004263 setarg mem_tx_fifo_end 5307 9a267c00 isub rega ,null 5308 20628000 rtn zero 5309 ea208000 ifetch 1 ,rega 530a 1a20a201 increase 1 ,rega 530b 243a530f nbranch l2cap_lpm_save_txbuf_nempty ,blank 530c e0a10000 istore 2 ,contw 530d 1a20a202 increase 2 ,rega 530e 20205306 branch l2cap_lpm_save_txbuf_loop l2cap_lpm_save_txbuf_nempty: 530f ea210000 ifetch 2 ,rega 5310 1a20a202 increase 2 ,rega 5311 1fe20c00 copy pdata ,contr 5312 e8c10000 ifetch 2 ,contr 5313 e0a10000 istore 2 ,contw 5314 1fe27200 copy pdata ,loopcnt 5315 1f20f202 increase 2 ,loopcnt 5316 20407f01 call memcpy 5317 20205306 branch l2cap_lpm_save_txbuf_loop l2cap_lpm_load_txbuf: 5318 4718c026 bpatchx patch26_1 ,mem_patch26 5319 2040527e call l2cap_malloc_get_full_map 531a 6800c256 fetch 1 ,mem_used_map 531b 207a0000 rtn blank 531c da204258 arg mem_tx_fifo0_ptr ,rega 531d 1a20a3fd increase -3 ,rega 531e d8c04263 arg mem_l2cap_lpm_txbuf ,contr l2cap_lpm_load_txbuf_loop: 531f 1a20a203 increase 3 ,rega 5320 58004264 setarg mem_tx_fifo_end + 1 5321 9a267c00 isub rega ,null 5322 20628000 rtn zero 5323 e8c10000 ifetch 2 ,contr 5324 203a531f branch l2cap_lpm_load_txbuf_loop ,blank 5325 1fe0fe04 increase 4 ,pdata 5326 1fe27200 copy pdata ,loopcnt 5327 18c22400 copy contr ,regb 5328 ea210000 ifetch 2 ,rega 5329 1fe20a00 copy pdata ,contw 532a 1a420c00 copy regb ,contr 532b 18c08dfe increase -2 ,contr 532c 20407f01 call memcpy 532d 2020531f branch l2cap_lpm_load_txbuf_loop le_init_conn: 532e 47194026 bpatchx patch26_2 ,mem_patch26 532f 7855fc00 disable wake 5330 70045501 jam 1 ,mem_le_conn_handle 5331 70043f03 jam 3 ,mem_le_state 5332 70045601 jam 1 ,mem_le_arq 5333 5fffffff setarg -1 5334 60010459 store 2 ,mem_le_event_count 5335 18007e00 force 0 ,pdata 5336 60008457 store 1 ,mem_le_ch 5337 60008462 store 1 ,mem_le_op 5338 6001c169 store 3 ,mem_sniff_rcv 5339 6001c16c store 3 ,mem_sniff_lost 533a 6002c403 store 5 ,mem_le_pcnt_tx 533b 79207e27 set1 39 ,pdata 533c 6002c408 store 5 ,mem_le_pcnt_rx 533d 7043dc01 jam 1 ,mem_le_txheader 533e 7043dd00 jam 0 ,mem_le_txlen 533f 202056ed branch le_supervision_flush le_init_master: 5340 4719c026 bpatchx patch26_3 ,mem_patch26 5341 7834fc00 enable master 5342 70044003 jam lemode_master ,mem_le_mode 5343 70047801 jam 1 ,mem_le_att_handle 5344 70445a01 jam 1 ,mem_le_search_handle_start 5345 5800ffff setarg 0xffff 5346 6001445c store 2 ,mem_le_search_handle_end 5347 18007e00 force 0 ,pdata 5348 6002c408 store 5 ,mem_le_pcnt_rx 5349 79207e27 set1 39 ,pdata 534a 6002c403 store 5 ,mem_le_pcnt_tx 534b 2020532e branch le_init_conn le_init_slave: 534c 471a4026 bpatchx patch26_4 ,mem_patch26 534d 7854fc00 disable master 534e 58000017 setarg 0x17 534f 600144a8 store 2 ,mem_le_remote_mtu 5350 70044001 jam lemode_slave ,mem_le_mode 5351 70436e00 jam 0 ,mem_le_adv_enable 5352 7000a000 jam 0 ,mem_lpm_current_mult 5353 7044c400 jam flag_le_pairing_null ,mem_le_pairing_state 5354 7044c500 jam flag_le_enc_null ,mem_le_enc_state 5355 6801046d fetch 2 ,mem_le_superto 5356 600144ba store 2 ,mem_le_init_superto 5357 68010441 fetch 2 ,mem_le_tsniff 5358 1feffe05 mul32 pdata ,5 ,pdata 5359 1ff1fe00 rshift4 pdata ,pdata 535a 6001046d store 2 ,mem_le_superto 535b 2020532e branch le_init_conn le_dispatch: 535c 204053c4 call le_enable 535d 204055e8 call le_scan 535e 204056f0 call le_adv 535f 202053ce branch le_disable le_conn_dispatch: 5360 471ac026 bpatchx patch26_5 ,mem_patch26 5361 204053c4 call le_enable 5362 204032f4 call app_process_ble 5363 68008440 fetch 1 ,mem_le_mode 5364 c001d366 beq lemode_master ,le_master_dispatch 5365 2020537a branch le_slave_dispatch le_master_dispatch: 5366 471b4026 bpatchx patch26_6 ,mem_patch26 5367 7834fc00 enable master 5368 204056e4 call le_supervision_update 5369 20215377 branch le_master_disconn ,positive 536a 20402c6c call check_ble_disabled 536b 20405413 call le_setup 536c 2040561e call le_prepare_tx 536d 7856fc00 disable match 536e 204054bf call le_transmit_receive_sifs 536f 24768000 nrtn match 5370 471bc026 bpatchx patch26_7 ,mem_patch26 5371 68008005 fetch 1 ,mem_le_conn_rcv 5372 1fe0fe01 increase 1 ,pdata 5373 60008005 store 1 ,mem_le_conn_rcv 5374 204055aa call le_acknowledge 5375 7854fc00 disable master 5376 20600000 rtn le_master_disconn: 5377 204053a9 call le_disconnect 5378 7854fc00 disable master 5379 20600000 rtn le_slave_dispatch: 537a 471c4027 bpatchx patch27_0 ,mem_patch27 537b 70450f00 jam 0 ,mem_le_md_count 537c 20407aaf call sp_calc_sequence_256 537d 20405c18 call le_secure_connect_sm 537e 78577c00 disable attempt 537f 204056e4 call le_supervision_update 5380 202153a9 branch le_slave_disconn ,positive 5381 20402c6c call check_ble_disabled 5382 20405413 call le_setup 5383 20405489 call le_receive_slave 5384 242c539b nbranch le_slave_unsync ,sync 5385 204053b7 call le_got_first_packet 5386 2036d388 branch le_slave_match ,match 5387 20205395 branch le_slave_cont le_slave_match: 5388 471cc027 bpatchx patch27_1 ,mem_patch27 5389 6800c50f fetch 1 ,mem_le_md_count 538a 1fe0fe01 pincrease 1 538b 6000c50f store 1 ,mem_le_md_count 538c c0065395 beq le_md_max_count ,le_slave_cont 538d 204055aa call le_acknowledge 538e 2040561e call le_prepare_tx 538f 204054c7 call le_transmit_norx 5390 2040567e call le_parse 5391 680141fb fetch 2 ,mem_cb_ble_transmit 5392 20407f9c call callback_func 5393 204053a0 call le_check_md 5394 203453a4 branch le_slave_more_data ,user le_slave_cont: 5395 471d4027 bpatchx patch27_2 ,mem_patch27 5396 20405be4 call le_pairing_sm 5397 20405bdb call le_check_paring_time 5398 20407d9c call check_51cmd 5399 68008462 fetch 1 ,mem_le_op 539a c281d3a9 bbit1 op_disconn ,le_slave_disconn le_slave_unsync: 539b 471dc027 bpatchx patch27_3 ,mem_patch27 539c 204057f4 call le_lpm_set_mult 539d 2040559d call le_update_channel_map 539e 20405575 call le_update_param 539f 20202841 branch calc_clke_offset le_check_md: 53a0 78547c00 disable user 53a1 c5157fe7 bmark1 mark_ble_rx_md ,enable_user 53a2 c514ffe7 bmark1 mark_ble_tx_md ,enable_user 53a3 20600000 rtn le_slave_more_data: 53a4 471e4027 bpatchx patch27_4 ,mem_patch27 53a5 78377c00 enable attempt 53a6 204054c1 call le_transmit_receive_sifs_notx 53a7 2036d388 branch le_slave_match ,match 53a8 20205395 branch le_slave_cont le_slave_disconn: le_disconnect: 53a9 471ec027 bpatchx patch27_5 ,mem_patch27 53aa 204053af call le_clear_connection_info 53ab 204033b4 call app_disconn_reason_collect_ble 53ac 20407a77 call sp_initialize_256 53ad 700a9915 jam bt_evt_le_disconnected ,mem_fifo_temp 53ae 20207d86 branch ui_ipc_send_event le_clear_connection_info: 53af 58000000 setarg 0 53b0 6004c4ff store 9 ,mem_le_tx_buff_used 53b1 70045500 jam 0 ,mem_le_conn_handle 53b2 70044000 jam lemode_idle ,mem_le_mode 53b3 70043f00 jam 0 ,mem_le_state 53b4 7044c500 jam flag_le_enc_null ,mem_le_enc_state 53b5 7044c400 jam flag_le_pairing_null ,mem_le_pairing_state 53b6 20600000 rtn le_got_first_packet: 53b7 471f4027 bpatchx patch27_6 ,mem_patch27 53b8 68008005 fetch 1 ,mem_le_conn_rcv 53b9 1fe0fe01 increase 1 ,pdata 53ba 60008005 store 1 ,mem_le_conn_rcv 53bb 6800843f fetch 1 ,mem_le_state 53bc c3818000 rtnbit1 lestate_got_first_packet 53bd 79207e03 set1 lestate_got_first_packet 53be 6000843f store 1 ,mem_le_state 53bf 680144ba fetch 2 ,mem_le_init_superto 53c0 6001046d store 2 ,mem_le_superto 53c1 58000000 setarg 0 53c2 600244e5 store 4 ,mem_le_transmit_window 53c3 20600000 rtn le_enable: 53c4 471fc027 bpatchx patch27_7 ,mem_patch27 53c5 70890f36 jam 0x36 ,rf_adc_goff 53c6 70890b5f jam 0x5f ,rf_agc_nsat 53c7 783b7c00 enable le 53c8 70891407 jam 7 ,rfen_ulp 53c9 20402c6c call check_ble_disabled 53ca 6800c1e0 fetch 1 ,mem_250k_freq_enable 53cb 207a0000 rtn blank 53cc 70890ab8 jam 0xb8 ,rf_iq_gain 53cd 20600000 rtn le_disable: 53ce 47204028 bpatchx patch28_0 ,mem_patch28 53cf 70890f2e jam 0x2e ,rf_adc_goff 53d0 70890bff jam 0xff ,rf_agc_nsat 53d1 785b7c00 disable le 53d2 70891403 jam 3 ,rfen_ulp 53d3 db600000 arg 0 ,stop_watch 53d4 20600000 rtn le_prep: 53d5 7844fc00 disable enable_crc 53d6 7843fc00 disable enable_white 53d7 68018467 fetch 3 ,mem_le_crcinit 53d8 98001e00 iforce crc24_init 53d9 68008016 fetch 1 ,mem_le_ch_mapped 53da 1fed8400 reverse pdata ,temp 53db 79200401 set1 1 ,temp 53dc 18431c00 rshift temp ,white_init 53dd 20600000 rtn lerx_setfreq: 53de 204053e6 call le_setfreq 53df 2040291f call set_freq_rx 53e0 58000500 setarg param_pll_setup 53e1 20402a8f call sleep 53e2 20202924 branch rf_rx_enable letx_setfreq: 53e3 2036a939 branch txon ,match letx_setfreq0: 53e4 204053e6 call le_setfreq 53e5 20202933 branch set_freq_tx le_setfreq: 53e6 4720c028 bpatchx patch28_1 ,mem_patch28 53e7 20402918 call set_sync_on 53e8 6800848c fetch 1 ,mem_le_testtype 53e9 243a53f9 nbranch le_ctf_test ,blank 53ea 68008016 fetch 1 ,mem_le_ch_mapped 53eb 1fe67c24 sub pdata ,36 ,null 53ec 202153f3 branch le_ctf_normal ,positive 53ed 18000400 force 0 ,temp 53ee c1128000 rtneq 37 53ef 18000418 force 24 ,temp 53f0 c1130000 rtneq 38 53f1 1800044e force 78 ,temp 53f2 20600000 rtn le_ctf_normal: 53f3 1fe67c0a sub pdata ,10 ,null 53f4 202153f6 branch le_ctf_low ,positive 53f5 1fe0fe01 increase 1 ,pdata le_ctf_low: 53f6 1fe3fe00 lshift pdata ,pdata 53f7 1fe08402 add pdata ,2 ,temp 53f8 20600000 rtn le_ctf_test: 53f9 68008016 fetch 1 ,mem_le_ch_mapped 53fa 1fe38400 lshift pdata ,temp 53fb 20600000 rtn le_sca_map: 53fc d84001f4 arg 500 ,temp 53fd 207a0000 rtn blank 53fe d84000fa arg 250 ,temp 53ff c1008000 rtneq 1 5400 d8400096 arg 150 ,temp 5401 c1010000 rtneq 2 5402 d8400064 arg 100 ,temp 5403 c1018000 rtneq 3 5404 d840004b arg 75 ,temp 5405 c1020000 rtneq 4 5406 d8400032 arg 50 ,temp 5407 c1028000 rtneq 5 5408 d8400028 arg 40 ,temp 5409 c1030000 rtneq 6 540a d8400014 arg 20 ,temp 540b 20600000 rtn le_adv_access: 540c 588e89be setarg 0x8e89be 540d 1fed7e00 lshift8 pdata ,pdata 540e 1fe1fed6 or_into 0xd6 ,pdata 540f 98001200 iforce access 5410 58555555 setarg 0x555555 5411 60018467 store 3 ,mem_le_crcinit 5412 20600000 rtn le_setup: 5413 47214028 bpatchx patch28_2 ,mem_patch28 5414 78287c00 enable swfine 5415 68020463 fetch 4 ,mem_le_access 5416 98001200 iforce access 5417 20405466 call le_map_channel 5418 58000200 setarg 0x200 5419 2034d41c branch le_setup_master ,master 541a 6801044d fetch 2 ,mem_le_receive_window 541b 1fe37e00 rshift pdata ,pdata le_setup_master: 541c d8400500 arg param_pll_setup ,temp 541d 9840fe00 iadd temp ,pdata 541e 20402a24 call ahead_window 541f 1b427e00 deposit clke 5420 60030491 store 6 ,mem_le_rxon_ts 5421 20600000 rtn le_next_adv_channel: 5422 4721c028 bpatchx patch28_3 ,mem_patch28 5423 68008016 fetch 1 ,mem_le_ch_mapped 5424 c012d428 beq 37 ,le_next_adv_channel_curr_channel_37 5425 c013542e beq 38 ,le_next_adv_channel_curr_channel_38 5426 c013d434 beq 39 ,le_next_adv_channel_curr_channel_39 5427 20205434 branch le_next_adv_channel_curr_channel_39 le_next_adv_channel_curr_channel_37: 5428 6808c48d fetcht 1 ,mem_le_adv_channel_map 5429 284ffe01 isolate1 bit_adv_channel_map_38 ,temp 542a 2020d43f branch set_le_next_adv_channel_38 ,true 542b 284ffe02 isolate1 bit_adv_channel_map_39 ,temp 542c 2020d444 branch set_le_next_adv_channel_39 ,true 542d 2020543a branch set_le_next_adv_channel_37 le_next_adv_channel_curr_channel_38: 542e 6808c48d fetcht 1 ,mem_le_adv_channel_map 542f 284ffe02 isolate1 bit_adv_channel_map_39 ,temp 5430 2020d444 branch set_le_next_adv_channel_39 ,true 5431 284ffe00 isolate1 bit_adv_channel_map_37 ,temp 5432 2020d43a branch set_le_next_adv_channel_37 ,true 5433 2020543f branch set_le_next_adv_channel_38 le_next_adv_channel_curr_channel_39: 5434 6808c48d fetcht 1 ,mem_le_adv_channel_map 5435 284ffe00 isolate1 bit_adv_channel_map_37 ,temp 5436 2020d43a branch set_le_next_adv_channel_37 ,true 5437 284ffe01 isolate1 bit_adv_channel_map_38 ,temp 5438 2020d43f branch set_le_next_adv_channel_38 ,true 5439 20205444 branch set_le_next_adv_channel_39 set_le_next_adv_channel_37: 543a 70001625 jam 37 ,mem_le_ch_mapped 543b 68008ac2 fetch 1 ,mem_le_adv_channel_map_temp 543c 79207e00 set1 bit_adv_channel_map_37 ,pdata 543d 60008ac2 store 1 ,mem_le_adv_channel_map_temp 543e 20600000 rtn set_le_next_adv_channel_38: 543f 70001626 jam 38 ,mem_le_ch_mapped 5440 68008ac2 fetch 1 ,mem_le_adv_channel_map_temp 5441 79207e01 set1 bit_adv_channel_map_38 ,pdata 5442 60008ac2 store 1 ,mem_le_adv_channel_map_temp 5443 20600000 rtn set_le_next_adv_channel_39: 5444 70001627 jam 39 ,mem_le_ch_mapped 5445 68008ac2 fetch 1 ,mem_le_adv_channel_map_temp 5446 79207e02 set1 bit_adv_channel_map_39 ,pdata 5447 60008ac2 store 1 ,mem_le_adv_channel_map_temp 5448 20600000 rtn le_context_nexthop: 5449 47224028 bpatchx patch28_4 ,mem_patch28 544a 1a208c01 add rega ,coffset_mode ,contr 544b e8c08000 ifetch 1 ,contr 544c c4000000 rtnbit0 mode_le 544d 1a208a1a add rega ,coffset_le_event_cnt ,contw 544e e8a10000 ifetch 2 ,contw 544f 1fe0fe01 increase 1 ,pdata 5450 e0a10000 istore 2 ,contw 5451 1a208c19 add rega ,coffset_le_hop ,contr 5452 e8c08000 ifetch 1 ,contr 5453 1a208a18 add rega ,coffset_le_ch ,contw 5454 e8a88000 ifetcht 1 ,contw 5455 9840fe00 iadd temp ,pdata 5456 1fe67c24 sub pdata ,36 ,null 5457 20215459 branch le_nexthop_nowrap ,positive 5458 1fe0ffdb increase -37 ,pdata le_nexthop_nowrap: 5459 e0a08000 istore 1 ,contw 545a 20600000 rtn le_calc_channel_map: 545b 4722c028 bpatchx patch28_5 ,mem_patch28 545c 6802846f fetch 5 ,mem_le_channel_map 545d 18000400 force 0 ,temp 545e 18007225 force 37 ,loopcnt le_count_channels_loop: 545f c3005461 bbit0 0 ,le_count_channels_notused 5460 18408401 increase 1 ,temp le_count_channels_notused: 5461 1fe37e00 rshift pdata ,pdata 5462 c200545f loop le_count_channels_loop 5463 1840ffff add temp ,-1 ,pdata 5464 60008461 store 1 ,mem_le_channels 5465 20600000 rtn le_map_channel: 5466 47234028 bpatchx patch28_6 ,mem_patch28 5467 68008457 fetch 1 ,mem_le_ch 5468 98000e00 iforce queue 5469 680a846f fetcht 5 ,mem_le_channel_map 546a a84fffff qisolate1 temp 546b 2020d47c branch le_map_channel_end ,true le_map_channel_next: 546c 4723c028 bpatchx patch28_7 ,mem_patch28 546d 68008461 fetch 1 ,mem_le_channels 546e 98e67e00 isub queue ,pdata 546f 20215472 branch le_map_channel_cont ,positive 5470 1fe60fff sub pdata ,-1 ,queue 5471 2020546c branch le_map_channel_next le_map_channel_cont: 5472 18e27200 copy queue ,loopcnt 5473 18000e00 force 0 ,queue le_map_channel_loop: 5474 a84fffff qisolate1 temp 5475 2020d477 branch le_map_channel_skip ,true 5476 1f20f201 increase 1 ,loopcnt le_map_channel_skip: 5477 1f227e00 deposit loopcnt 5478 203a547c branch le_map_channel_end ,blank 5479 18e08e01 increase 1 ,queue 547a 1f20f3ff increase -1 ,loopcnt 547b 20205474 branch le_map_channel_loop le_map_channel_end: 547c 18e27e00 deposit queue 547d 60008016 store 1 ,mem_le_ch_mapped 547e 20600000 rtn le_wait_tx: 547f 2034d482 branch le_wait_master ,master 5480 37c18200 until null ,timeout 5481 20600000 rtn le_wait_master: 5482 d9600ea0 arg 0xea0 ,timeup 5483 34730200 until clkn_rt ,meet 5484 20600000 rtn le_receive_adv: 5485 78487c00 disable swfine 5486 6801436c fetch 2 ,mem_le_scan_window 5487 1fe21600 copy pdata ,timeup 5488 2020548e branch le_receive_packet le_receive_slave: 5489 47244029 bpatchx patch29_0 ,mem_patch29 548a 78287c00 enable swfine 548b 6801044d fetch 2 ,mem_le_receive_window 548c 680a44e5 fetcht 4 ,mem_le_transmit_window 548d 98409600 iadd temp ,timeup le_receive_packet: 548e 204053de call lerx_setfreq le_receive_rxon: 548f 4724c029 bpatchx patch29_1 ,mem_patch29 5490 204053d5 call le_prep 5491 7856fc00 disable match 5492 7826fc00 enable decode_fec0 5493 7830fc00 enable is_rx 5494 78507c00 disable is_tx 5495 19623600 copy timeup ,stop_watch 5496 37c18400 correlate null ,timeout 5497 2037549a branch le_receive_on_attempt ,attempt 5498 1b420400 copy clke ,temp 5499 600b009a storet 6 ,mem_sync_clke le_receive_on_attempt: 549a 242c264d nbranch end_of_packet ,sync 549b 203754a1 branch le_receive_skip ,attempt 549c dd2001e0 arg param_clke_cal_le ,clke_rt 549d 1c225000 copy bt_clk ,clke_bt 549e 6800843f fetch 1 ,mem_le_state 549f c301d4a1 bbit0 lestate_got_first_packet ,le_receive_skip 54a0 2055ab05 call lpm_adjust_clk ,wake le_receive_skip: 54a1 47254029 bpatchx patch29_2 ,mem_patch29 54a2 204029bb call save_rssi 54a3 7823fc00 enable enable_white 54a4 7824fc00 enable enable_crc 54a5 09800008 parse demod ,bucket ,8 54a6 19897e00 rshift3 pwindow ,pdata 54a7 600082d9 store 1 ,mem_le_rxbuf 54a8 09800008 parse demod ,bucket ,8 54a9 19897e00 rshift3 pwindow ,pdata 54aa e0a08000 istore 1 ,contw 54ab 1fe1723f and pdata ,0x3f ,loopcnt 54ac 2022d4b1 branch lerx_nopayload ,zero lerx_loop: 54ad 09800008 parse demod ,bucket ,8 54ae 19897e00 rshift3 pwindow ,pdata 54af e0a08000 istore 1 ,contw 54b0 c20054ad loop lerx_loop lerx_nopayload: 54b1 4725c029 bpatchx patch29_3 ,mem_patch29 54b2 09800018 parse demod ,bucket ,24 54b3 78287c00 enable swfine 54b4 db600664 arg param_sifs ,stop_watch 54b5 1fef7e00 rshift32 pdata ,pdata 54b6 1ff17e00 rshift16 pdata ,pdata 54b7 e0a18000 istore 3 ,contw 54b8 2023264d branch end_of_packet ,crc_failed 54b9 7836fc00 enable match 54ba 68008017 fetch 1 ,mem_last_freq 54bb 1fe0a200 add pdata ,0 ,rega 54bc 20402981 call rf_write_freq 54bd 7846fc00 disable decode_fec0 54be 20202918 branch set_sync_on le_transmit_receive_sifs: 54bf 47264029 bpatchx patch29_4 ,mem_patch29 54c0 204054c9 call le_transmit le_transmit_receive_sifs_notx: 54c1 68088017 fetcht 1 ,mem_last_freq 54c2 2040291f call set_freq_rx 54c3 20402924 call rf_rx_enable 54c4 78287c00 enable swfine 54c5 d960157c arg 5500 ,timeup 54c6 2020548f branch le_receive_rxon le_transmit_norx: 54c7 204054c9 call le_transmit 54c8 2020264d branch end_of_packet le_transmit: 54c9 4726c029 bpatchx patch29_5 ,mem_patch29 54ca 204053d5 call le_prep 54cb 204053e3 call letx_setfreq 54cc 202054cd branch le_transmit0 le_transmit0: 54cd 79202a00 set1 txgfsk ,radio_ctrl 54ce 782efc00 enable encode_fec0 54cf 78307c00 enable is_tx 54d0 7850fc00 disable is_rx 54d1 2040547f call le_wait_tx 54d2 19317e00 rshift16 access ,pdata 54d3 1fecfe00 rshift8 pdata ,pdata 54d4 1ff1fe00 rshift4 pdata ,pdata 54d5 08008628 inject mod ,40 54d6 7823fc00 enable enable_white 54d7 7824fc00 enable enable_crc 54d8 47274029 bpatchx patch29_6 ,mem_patch29 54d9 6800c3dc fetch 1 ,mem_le_txheader 54da 08008608 inject mod ,8 54db e8c08000 ifetch 1 ,contr 54dc 1fe1723f and pdata ,0x3f ,loopcnt 54dd 08008608 inject mod ,8 54de 2022d4e2 branch letr_nopayload ,zero letr_loop: 54df e8c08000 ifetch 1 ,contr 54e0 08008608 inject mod ,8 54e1 c20054df loop letr_loop letr_nopayload: 54e2 78247c00 enable enable_parity 54e3 08008618 inject mod ,24 54e4 78447c00 disable enable_parity 54e5 37d38200 until null ,tx_clear 54e6 20000064 nop 100 54e7 784efc00 disable encode_fec0 54e8 20600000 rtn le_send_adv_ind: 54e9 4727c029 bpatchx patch29_7 ,mem_patch29 54ea 6800c484 fetch 1 ,mem_le_adv_type 54eb c000d4f9 beq adv_direct_ind ,le_send_adv_direct_ind 54ec 6800c485 fetch 1 ,mem_le_adv_own_addr_type 54ed 1ff27e00 lshift4 pdata ,pdata 54ee 1febfe00 lshift2 pdata ,pdata 54ef 6000c3dc store 1 ,mem_le_txheader 54f0 6808c36f fetcht 1 ,mem_le_adv_data_len 54f1 1840fe06 add temp ,6 ,pdata 54f2 6000c3dd store 1 ,mem_le_txlen 54f3 680344a0 fetch 6 ,mem_le_lap 54f4 600343de store 6 ,mem_le_txpayload 54f5 18427200 copy temp ,loopcnt 54f6 d8c04370 arg mem_le_adv_data ,contr 54f7 20407ef4 call memcpy_fast 54f8 20205504 branch le_send_adv_transmit le_send_adv_direct_ind: 54f9 6800c486 fetch 1 ,mem_le_adv_direct_addr_type 54fa 1ff27e00 lshift4 pdata ,pdata 54fb 1febfe00 lshift2 pdata ,pdata 54fc 1fe0fe01 increase 1 ,pdata 54fd 6000c3dc store 1 ,mem_le_txheader 54fe 5800000c setarg 12 54ff 6000c3dd store 1 ,mem_le_txlen 5500 680344a0 fetch 6 ,mem_le_lap 5501 600343de store 6 ,mem_le_txpayload 5502 680341d0 fetch 6 ,mem_hci_plap 5503 e0a30000 istore 6 ,contw le_send_adv_transmit: 5504 4728402a bpatchx patch2a_0 ,mem_patch2a 5505 68008000 fetch 1 ,mem_le_adv_transmit 5506 1fe0fe01 increase 1 ,pdata 5507 60008000 store 1 ,mem_le_adv_transmit 5508 db600708 arg 1800 ,stop_watch 5509 7856fc00 disable match 550a 202054bf branch le_transmit_receive_sifs le_send_scan_request: 550b 4728c02a bpatchx patch2a_1 ,mem_patch2a 550c 6800c49e fetch 1 ,mem_le_scan_type 550d c1808000 rtnne le_scan_type_active 550e 68008000 fetch 1 ,mem_le_adv_transmit 550f 1fe0fe01 increase 1 ,pdata 5510 60008000 store 1 ,mem_le_adv_transmit 5511 d8400c03 arg 0x0c03 ,temp 5512 6800c49f fetch 1 ,mem_le_scan_own_addr_type 5513 7d3a0406 nsetflag blank ,le_sender_addr_bit ,temp 5514 1a227e00 copy rega ,pdata 5515 7d3a0407 nsetflag blank ,le_receiver_addr_bit ,temp 5516 600943dc storet 2 ,mem_le_txheader 5517 680344a0 fetch 6 ,mem_le_lap 5518 e0a30000 istore 6 ,contw 5519 6803044f fetch 6 ,mem_le_plap 551a e0a30000 istore 6 ,contw 551b 202054bf branch le_transmit_receive_sifs le_send_scan_response: 551c 4729402a bpatchx patch2a_2 ,mem_patch2a 551d d8400004 arg scan_rsp ,temp 551e 6800c485 fetch 1 ,mem_le_adv_own_addr_type 551f 7d3a0406 nsetflag blank ,le_sender_addr_bit ,temp 5520 6008c3dc storet 1 ,mem_le_txheader 5521 6808c38f fetcht 1 ,mem_le_scan_data_len 5522 1840fe06 add temp ,6 ,pdata 5523 6000c3dd store 1 ,mem_le_txlen 5524 680344a0 fetch 6 ,mem_le_lap 5525 600343de store 6 ,mem_le_txpayload 5526 d8c04390 arg mem_le_scan_data ,contr 5527 18427200 copy temp ,loopcnt 5528 20407ef4 call memcpy_fast 5529 204054c7 call le_transmit_norx 552a 20205706 branch le_adv_not_match le_connect_request: 552b 4729c02a bpatchx patch2a_3 ,mem_patch2a 552c 18007fff force -1 ,pdata 552d 38080001 setsect 2 ,1 552e 6002846f store 5 ,mem_le_channel_map 552f 2040545b call le_calc_channel_map 5530 18007204 force 4 ,loopcnt 5531 d8a00463 arg mem_le_access ,contw 5532 2040630d call generate_random_loop 5533 6801449c fetch 2 ,mem_le_timeout 5534 6001046d store 2 ,mem_le_superto le_con_req_hop_retry: 5535 180a7e00 random pdata 5536 1fe17e0f and_into 0xf ,pdata 5537 1fe67c04 sub pdata ,4 ,null 5538 20215535 branch le_con_req_hop_retry ,positive 5539 60008458 store 1 ,mem_le_hop 553a 600086e6 store 1 ,mem_tmp1 553b 472a402a bpatchx patch2a_4 ,mem_patch2a 553c 68094367 fetcht 2 ,mem_le_conn_interval 553d 60090441 storet 2 ,mem_le_tsniff 553e 18422600 copy temp ,regc 553f 1c40fe07 add clkn_bt ,7 ,pdata 5540 9a66fc00 idiv regc 5541 20407f86 call wait_div_end 5542 18072200 remainder rega 5543 9a267e00 isub rega ,pdata 5544 9a60fe00 iadd regc ,pdata 5545 68094365 fetcht 2 ,mem_le_dsniff 5546 9840fe00 iadd temp ,pdata 5547 60020443 store 4 ,mem_le_anchor 5548 9c462200 isub clkn_bt ,rega 5549 1a20a3fa increase -6 ,rega 554a da402205 arg 0x2205 ,regb 554b 6800c495 fetch 1 ,mem_le_conn_own_addr_type 554c 7d3a2406 nsetflag blank ,le_sender_addr_bit ,regb 554d 6800c48e fetch 1 ,mem_le_conn_peer_addr_type 554e 7d3a2407 nsetflag blank ,le_receiver_addr_bit ,regb 554f 1a427e00 copy regb ,pdata 5550 600143dc store 2 ,mem_le_txheader 5551 680344a0 fetch 6 ,mem_le_lap 5552 e0a30000 istore 6 ,contw 5553 6803044f fetch 6 ,mem_le_plap 5554 e0a30000 istore 6 ,contw 5555 68020463 fetch 4 ,mem_le_access 5556 e0a20000 istore 4 ,contw 5557 180a7e00 random pdata 5558 e0a10000 istore 2 ,contw 5559 180a7e00 random pdata 555a e0a08000 istore 1 ,contw 555b 18007e02 force 2 ,pdata 555c e0a08000 istore 1 ,contw 555d 1a2b7e00 rshift2 rega ,pdata 555e e0a10000 istore 2 ,contw 555f 1a6b7e00 rshift2 regc ,pdata 5560 e0a10000 istore 2 ,contw 5561 472ac02a bpatchx patch2a_5 ,mem_patch2a 5562 58000000 setarg 0 5563 e0a10000 istore 2 ,contw 5564 6801449c fetch 2 ,mem_le_timeout 5565 e0a10000 istore 2 ,contw 5566 6802846f fetch 5 ,mem_le_channel_map 5567 e0a28000 istore 5 ,contw 5568 68008458 fetch 1 ,mem_le_hop 5569 d84000a0 arg param_le_sca ,temp 556a 9841fe00 ior temp ,pdata 556b e0a08000 istore 1 ,contw 556c 204054c7 call le_transmit_norx 556d 580043dc setarg mem_le_txheader 556e 1fe08c12 add pdata ,18 ,contr 556f e8c18000 ifetch 3 ,contr 5570 60018467 store 3 ,mem_le_crcinit 5571 20600000 rtn le_init_adv: 5572 472b402a bpatchx patch2a_6 ,mem_patch2a 5573 7854fc00 disable master 5574 2020540c branch le_adv_access le_update_param: 5575 6800843f fetch 1 ,mem_le_state 5576 c4028000 rtnbit0 lestate_update_param 5577 68010459 fetch 2 ,mem_le_event_count 5578 6809045f fetcht 2 ,mem_le_instant 5579 98467e00 isub temp ,pdata 557a 24610000 nrtn positive 557b 60010a9a store 2 ,mem_pdatatemp 557c 472bc02a bpatchx patch2a_7 ,mem_patch2a 557d 6800843f fetch 1 ,mem_le_state 557e 793ffe05 set0 lestate_update_param ,pdata 557f 793ffe03 set0 lestate_got_first_packet ,pdata 5580 6000843f store 1 ,mem_le_state 5581 68020443 fetch 4 ,mem_le_anchor 5582 68090441 fetcht 2 ,mem_le_tsniff 5583 60090aa2 storet 2 ,mem_temp 5584 98462200 isub temp ,rega 5585 472c402b bpatchx patch2b_0 ,mem_patch2b 5586 6800c3d3 fetch 1 ,mem_le_new_param 5587 6000846a store 1 ,mem_le_window_size 5588 e8c90000 ifetcht 2 ,contr 5589 e8c10000 ifetch 2 ,contr 558a 1febfe00 lshift2 pdata ,pdata 558b 60010441 store 2 ,mem_le_tsniff 558c 184b8400 lshift2 temp ,temp 558d 9840fe00 iadd temp ,pdata 558e e8ca0000 ifetcht 4 ,contr 558f 600a046b storet 4 ,mem_le_slave_latency 5590 9a20fe00 iadd rega ,pdata 5591 1fe22800 copy pdata ,regab 5592 68010441 fetch 2 ,mem_le_tsniff 5593 68090aa2 fetcht 2 ,mem_temp 5594 98467e00 isub temp ,pdata 5595 68090a9a fetcht 2 ,mem_pdatatemp 5596 984ffe00 imul32 temp ,pdata 5597 9a80fe00 iadd regab ,pdata 5598 60020443 store 4 ,mem_le_anchor 5599 20405713 call le_receive_window_size 559a 6801046d fetch 2 ,mem_le_superto 559b 600144ba store 2 ,mem_le_init_superto 559c 20600000 rtn le_update_channel_map: 559d 472cc02b bpatchx patch2b_1 ,mem_patch2b 559e 6800843f fetch 1 ,mem_le_state 559f c4030000 rtnbit0 lestate_update_map 55a0 68010459 fetch 2 ,mem_le_event_count 55a1 6809045f fetcht 2 ,mem_le_instant 55a2 98467e00 isub temp ,pdata 55a3 24610000 nrtn positive 55a4 6800843f fetch 1 ,mem_le_state 55a5 793ffe06 set0 lestate_update_map ,pdata 55a6 6000843f store 1 ,mem_le_state 55a7 6802c3ce fetch 5 ,mem_le_new_map 55a8 6002846f store 5 ,mem_le_channel_map 55a9 2020545b branch le_calc_channel_map le_acknowledge: 55aa 472d402b bpatchx patch2b_2 ,mem_patch2b 55ab 204056ed call le_supervision_flush 55ac 204055c0 call le_check_wak 55ad 680082d9 fetch 1 ,mem_le_rxbuf 55ae 2feffe04 isolate1 md ,pdata 55af 7920802a setflag true ,mark_ble_rx_md ,mark 55b0 1fe37e00 rshift pdata ,pdata 55b1 9842fe00 ixor temp ,pdata 55b2 2feffe02 isolate1 nesn ,pdata 55b3 7920800f setflag true ,mark_old_packet ,mark 55b4 c6078000 rtnmark1 mark_old_packet 55b5 680082da fetch 1 ,mem_le_rxbuf + 1 55b6 203a55bc branch le_ack_unenc ,blank 55b7 6800843f fetch 1 ,mem_le_state 55b8 c30255bc bbit0 lestate_encryption ,le_ack_unenc 55b9 2040748d call load_sk 55ba 204073fb call le_decrypt 55bb 247a0000 nrtn blank le_ack_unenc: 55bc 68088456 fetcht 1 ,mem_le_arq 55bd 79400402 setflip nesn ,temp 55be 60088456 storet 1 ,mem_le_arq 55bf 20600000 rtn le_check_wak: 55c0 472dc02b bpatchx patch2b_3 ,mem_patch2b 55c1 68088456 fetcht 1 ,mem_le_arq 55c2 284c0005 isolate0 wak ,temp 55c3 20608000 rtn true 55c4 680082d9 fetch 1 ,mem_le_rxbuf 55c5 1fe3fe00 lshift pdata ,pdata 55c6 9842fe00 ixor temp ,pdata 55c7 c4018000 rtnbit0 sn 55c8 793f8405 set0 wak ,temp 55c9 79400403 setflip sn ,temp 55ca 60088456 storet 1 ,mem_le_arq 55cb 28400603 compare 3 ,temp ,3 55cc 24608000 nrtn true 55cd 6800c3de fetch 1 ,mem_le_txpayload 55ce c002d5d2 beq ll_start_enc_req ,le_set_enc 55cf 6800c4c5 fetch 1 ,mem_le_enc_state 55d0 c00155d6 beq flag_le_enc_pause ,le_clear_enc 55d1 20600000 rtn le_set_enc: 55d2 6800843f fetch 1 ,mem_le_state 55d3 79207e04 set1 lestate_encryption ,pdata 55d4 6000843f store 1 ,mem_le_state 55d5 20600000 rtn le_clear_enc: 55d6 472e402b bpatchx patch2b_4 ,mem_patch2b 55d7 7044c500 jam flag_le_enc_null ,mem_le_enc_state 55d8 dfe00000 arg 0 ,pdata 55d9 6002440d store 4 ,mem_le_last_mic 55da 6002c403 store 5 ,mem_le_pcnt_tx 55db 79207e27 set1 39 ,pdata 55dc 6002c408 store 5 ,mem_le_pcnt_rx 55dd 6800843f fetch 1 ,mem_le_state 55de 793ffe04 set0 lestate_encryption ,pdata 55df 6000843f store 1 ,mem_le_state 55e0 20600000 rtn le_wait_adv: 55e1 472ec02b bpatchx patch2b_5 ,mem_patch2b 55e2 20405422 call le_next_adv_channel 55e3 20405485 call le_receive_adv 55e4 68008001 fetch 1 ,mem_le_adv_waitcnt 55e5 1fe0fe01 increase 1 ,pdata 55e6 60008001 store 1 ,mem_le_adv_waitcnt 55e7 20600000 rtn le_scan: 55e8 472f402b bpatchx patch2b_6 ,mem_patch2b 55e9 6800c369 fetch 1 ,mem_le_scan_enable 55ea c1808000 rtnne le_scan_enable 55eb d8e00002 arg le_scan_interval_timer ,queue 55ec 20407f16 call timer_check 55ed 247a0000 nrtn blank 55ee 6801436a fetch 2 ,mem_le_scan_interval 55ef 6809436c fetcht 2 ,mem_le_scan_window 55f0 98467e00 isub temp ,pdata 55f1 d8e00002 arg le_scan_interval_timer ,queue 55f2 20407f08 call timer_init 55f3 7854fc00 disable master 55f4 20405572 call le_init_adv 55f5 204055e1 call le_wait_adv 55f6 24768000 nrtn match 55f7 472fc02b bpatchx patch2b_7 ,mem_patch2b 55f8 680302db fetch 6 ,mem_le_rxbuf + 2 55f9 6003044f store 6 ,mem_le_plap 55fa 68008002 fetch 1 ,mem_le_adv_rcv 55fb 1fe0fe01 increase 1 ,pdata 55fc 60008002 store 1 ,mem_le_adv_rcv 55fd 20405608 call le_create_conn 55fe 20748000 rtn master 55ff 2040550b call le_send_scan_request 5600 24768000 nrtn match 5601 4730402c bpatchx patch2c_0 ,mem_patch2c 5602 68008004 fetch 1 ,mem_le_scanrsp_rcv 5603 1fe0fe01 increase 1 ,pdata 5604 60008004 store 1 ,mem_le_scanrsp_rcv 5605 680482e1 fetch 9 ,mem_le_rxbuf + 8 5606 60048101 store 9 ,mem_tmp_buffer 5607 20600000 rtn le_create_conn: 5608 4730c02c bpatchx patch2c_1 ,mem_patch2c 5609 6800849b fetch 1 ,mem_cmd_le_create_conn 560a c18d8000 rtnne hci_cmd_le_create_conn 560b 6803044f fetch 6 ,mem_le_plap 560c 680b448f fetcht 6 ,mem_le_conn_peer_addr 560d 98467c00 isub temp ,null 560e 24628000 nrtn zero 560f 2040223b call context_new 5610 24628000 nrtn zero 5611 2040552b call le_connect_request 5612 20405340 call le_init_master 5613 4731402c bpatchx patch2c_2 ,mem_patch2c 5614 7041ce00 jam 0 ,mem_hci_cmd 5615 70047600 jam 0 ,mem_le_peer_sca 5616 70436900 jam 0 ,mem_le_scan_enable 5617 70049b00 jam 0 ,mem_cmd_le_create_conn 5618 20202223 branch context_save le_scan_check_sender_addr_type: 5619 da200001 arg 1 ,rega 561a 680082d9 fetch 1 ,mem_le_rxbuf 561b c3830000 rtnbit1 le_sender_addr_bit 561c da200000 arg 0 ,rega 561d 20600000 rtn le_prepare_tx: 561e 4731c02c bpatchx patch2c_3 ,mem_patch2c 561f 68008456 fetch 1 ,mem_le_arq 5620 c3828000 rtnbit1 wak 5621 20405642 call le_check_tx_md 5622 20405873 call le_fifo_get_first_tx_ptr 5623 203a5664 branch le_send_empty ,blank 5624 e8c08000 ifetch 1 ,contr 5625 e8c88000 ifetcht 1 ,contr 5626 18422200 copy temp ,rega 5627 9a267e00 isub rega ,pdata 5628 d840001b arg le_max_paket_len ,temp 5629 20407fdd call not_greater_than 562a 1fe20400 copy pdata ,temp 562b e8c08000 ifetch 1 ,contr 562c 1fe20200 copy pdata ,type 562d 1a227e00 copy rega ,pdata 562e 98c08c00 iadd contr ,contr 562f d8a043de arg mem_le_txpayload ,contw 5630 18427200 copy temp ,loopcnt 5631 20407f01 call memcpy 5632 20405654 call le_update_tx_type 5633 20405666 call le_send_packet 5634 20405873 call le_fifo_get_first_tx_ptr 5635 e8c08000 ifetch 1 ,contr 5636 1fe22200 copy pdata ,rega 5637 18c22600 copy contr ,regc 5638 e8c88000 ifetcht 1 ,contr 5639 18422400 copy temp ,regb 563a 9a467e00 isub regb ,pdata 563b d840001b arg le_max_paket_len ,temp 563c 20407fdd call not_greater_than 563d 9a40fe00 iadd regb ,pdata 563e e2608000 istore 1 ,regc 563f 9a267c00 isub rega ,null 5640 24628000 nrtn zero 5641 20205896 branch le_fifo_release_first_node le_check_tx_md: 5642 20405649 call le_check_continue 5643 c6148000 rtnmark1 mark_ble_tx_md 5644 6800c4e9 fetch 1 ,mem_le_configuration 5645 c3015652 bbit0 bit_ble_transmit_packet_by_md ,le_clear_md 5646 20405876 call le_fifo_get_second_tx_ptr 5647 203a5652 branch le_clear_md ,blank 5648 20205650 branch le_set_md le_check_continue: 5649 20405873 call le_fifo_get_first_tx_ptr 564a 203a5652 branch le_clear_md ,blank 564b e8c08000 ifetch 1 ,contr 564c e8c88000 ifetcht 1 ,contr 564d 98467e00 isub temp ,pdata 564e 1fe67c1b sub pdata ,le_max_paket_len ,null 564f 20215652 branch le_clear_md ,positive le_set_md: 5650 79200029 set1 mark_ble_tx_md ,mark 5651 20600000 rtn le_clear_md: 5652 793f8029 set0 mark_ble_tx_md ,mark 5653 20600000 rtn le_update_tx_type: 5654 1a227e00 copy rega ,pdata 5655 207a0000 rtn blank 5656 d8200001 arg llid_continue ,type 5657 20600000 rtn le_att_check_notification_enable: 5658 4732402c bpatchx patch2c_4 ,mem_patch2c 5659 18408401 increase 1 ,temp 565a 2040576a call le_att_get_handle_ptr 565b 18c08dfe increase -2 ,contr 565c e8c10000 ifetch 2 ,contr 565d d8402902 arg client_charactertic_configuration ,temp 565e 98467c00 isub temp ,null 565f 24628000 nrtn zero 5660 18c08c01 increase 1 ,contr 5661 18c22200 copy contr ,rega 5662 e8c08000 ifetch 1 ,contr 5663 20600000 rtn le_send_empty: 5664 18000400 force 0 ,temp 5665 18000201 force 1 ,type le_send_packet: 5666 4732c02c bpatchx patch2c_5 ,mem_patch2c 5667 6008c3dd storet 1 ,mem_le_txlen 5668 68088456 fetcht 1 ,mem_le_arq 5669 79200405 set1 wak ,temp 566a 18417efc and temp ,0xfc ,pdata 566b 9821fe00 ior type ,pdata 566c 60008456 store 1 ,mem_le_arq 566d 1fe17e1f and_into 0x1f ,pdata 566e 280ffe29 isolate1 mark_ble_tx_md ,mark 566f 7920fe04 setflag true ,md ,pdata 5670 6000c3dc store 1 ,mem_le_txheader 5671 6800c3dc fetch 1 ,mem_le_txheader 5672 28200601 compare 1 ,type ,3 5673 2420d676 nbranch le_send_no_txlen ,true 5674 6800c3dd fetch 1 ,mem_le_txlen 5675 207a0000 rtn blank le_send_no_txlen: 5676 6800843f fetch 1 ,mem_le_state 5677 c4020000 rtnbit0 lestate_encryption 5678 2040748d call load_sk 5679 202073e3 branch le_encrypt get_lpm_wake_ble_rx_lock: 567a d8e00000 arg wake_lock_ble_rx ,queue 567b 20202c32 branch lpm_get_wake_lock put_lpm_wake_ble_rx_lock: 567c d8e00000 arg wake_lock_ble_rx ,queue 567d 20202c36 branch lpm_put_wake_lock le_parse: 567e 4733402c bpatchx patch2c_6 ,mem_patch2c 567f c6078000 rtnmark1 mark_old_packet 5680 20405890 call le_fifo_check_full 5681 247a0000 nrtn blank 5682 680082d9 fetch 1 ,mem_le_rxbuf 5683 1fe17e03 and pdata ,0x3 ,pdata 5684 6000c50c store 1 ,mem_le_packet_llid 5685 e8c08000 ifetch 1 ,contr 5686 1fe17e1f and pdata ,0x1f ,pdata 5687 6000c50b store 1 ,mem_le_packet_size 5688 207a0000 rtn blank 5689 18c27e00 copy contr ,pdata 568a 6001450d store 2 ,mem_le_payload_ptr 568b 6800c50c fetch 1 ,mem_le_packet_llid 568c c001dc64 beq llid_le_ll ,le_parse_ll le_parse_l2cap: 568d 2040569a call le_check_l2cap_complete 568e 2434567a nbranch get_lpm_wake_ble_rx_lock ,user 568f 2040567c call put_lpm_wake_ble_rx_lock 5690 6801450d fetch 2 ,mem_le_payload_ptr 5691 1fe20c00 copy pdata ,contr 5692 e8c10000 ifetch 2 ,contr 5693 600144fc store 2 ,mem_le_l2cap_size 5694 4733c02c bpatchx patch2c_7 ,mem_patch2c 5695 e8c10000 ifetch 2 ,contr 5696 c00258ab beq le_l2cap_cid_att ,le_parse_att 5697 c0035af4 beq le_l2cap_cid_smp ,le_parse_smp 5698 c002dab6 beq le_l2cap_cid_signal ,le_parse_signaling 5699 20600000 rtn le_check_l2cap_complete: 569a 6800c50c fetch 1 ,mem_le_packet_llid 569b c00156a9 beq llid_start ,le_check_l2cap_llid_start 569c c000d6c1 beq llid_continue ,le_check_l2cap_llid_continue 569d 20600000 rtn le_check_l2cap_cid_legal: 569e 20407fe7 call enable_user 569f d8400004 arg le_l2cap_cid_att ,temp 56a0 9fe67c00 isub pdata ,null 56a1 20628000 rtn zero 56a2 d8400005 arg le_l2cap_cid_signal ,temp 56a3 9fe67c00 isub pdata ,null 56a4 20628000 rtn zero 56a5 d8400006 arg le_l2cap_cid_smp ,temp 56a6 9fe67c00 isub pdata ,null 56a7 20628000 rtn zero 56a8 20207fe9 branch disable_user le_check_l2cap_llid_start: 56a9 6801450d fetch 2 ,mem_le_payload_ptr 56aa 1fe20c00 copy pdata ,contr 56ab e8c10000 ifetch 2 ,contr 56ac 600144fc store 2 ,mem_le_l2cap_size 56ad e8c10000 ifetch 2 ,contr 56ae 2040569e call le_check_l2cap_cid_legal 56af 24740000 nrtn user 56b0 6808c50b fetcht 1 ,mem_le_packet_size 56b1 6008c4fe storet 1 ,mem_le_packet_len_recved 56b2 680144fc fetch 2 ,mem_le_l2cap_size 56b3 1fe0fe04 increase 4 ,pdata 56b4 98467c00 isub temp ,null 56b5 2022ffe7 branch enable_user ,zero 56b6 6800c50b fetch 1 ,mem_le_packet_size 56b7 1fe27200 copy pdata ,loopcnt 56b8 d8a00311 arg mem_le_l2capbuf ,contw 56b9 6801450d fetch 2 ,mem_le_payload_ptr 56ba 1fe20c00 copy pdata ,contr 56bb 20407f01 call memcpy 56bc 20207fe9 branch disable_user le_check_l2cap_continue_legal: 56bd 20407fe7 call enable_user 56be 6800c4fe fetch 1 ,mem_le_packet_len_recved 56bf 247a0000 nrtn blank 56c0 20207fe9 branch disable_user le_check_l2cap_llid_continue: 56c1 204056bd call le_check_l2cap_continue_legal 56c2 24740000 nrtn user 56c3 6800c4fe fetch 1 ,mem_le_packet_len_recved 56c4 d8a00311 arg mem_le_l2capbuf ,contw 56c5 98a0a200 iadd contw ,rega 56c6 6808c50b fetcht 1 ,mem_le_packet_size 56c7 9840fe00 iadd temp ,pdata 56c8 6000c4fe store 1 ,mem_le_packet_len_recved 56c9 6800c50b fetch 1 ,mem_le_packet_size 56ca 1fe27200 copy pdata ,loopcnt 56cb 1a220a00 copy rega ,contw 56cc 6801450d fetch 2 ,mem_le_payload_ptr 56cd 1fe20c00 copy pdata ,contr 56ce 20407ef4 call memcpy_fast 56cf 58000311 setarg mem_le_l2capbuf 56d0 6001450d store 2 ,mem_le_payload_ptr 56d1 680144fc fetch 2 ,mem_le_l2cap_size 56d2 1fe0fe04 increase 4 ,pdata 56d3 6808c4fe fetcht 1 ,mem_le_packet_len_recved 56d4 98467c00 isub temp ,null 56d5 2022ffe7 branch enable_user ,zero 56d6 20207fe9 branch disable_user le_get_search_att_type: 56d7 20407ea5 call store_contr 56d8 d8a0445e arg mem_le_search_att_type_length ,contw le_get_search_common: 56d9 680144fc fetch 2 ,mem_le_l2cap_size 56da 1fe0fffb increase -5 ,pdata le_get_search_common2: 56db e0a08000 istore 1 ,contw 56dc 1fe27200 copy pdata ,loopcnt 56dd 20407e9f call get_contr 56de 20207ef4 branch memcpy_fast le_get_search_att_uuid: 56df 20407ea5 call store_contr 56e0 d8a04471 arg mem_le_search_uuid_length ,contw 56e1 202056d9 branch le_get_search_common le_writeatt_cb: 56e2 680141f9 fetch 2 ,mem_cb_att_write 56e3 20207f9c branch callback_func le_supervision_update: 56e4 680a045b fetcht 4 ,mem_le_supervision_timer 56e5 20402a7b call get_clkbt 56e6 98461600 isub temp ,timeup 56e7 19627e00 deposit timeup 56e8 6809046d fetcht 2 ,mem_le_superto 56e9 18520400 lshift4 temp ,temp 56ea 18438400 lshift temp ,temp 56eb 98467e00 isub temp ,pdata 56ec 20600000 rtn le_supervision_flush: 56ed 20402a7b call get_clkbt 56ee 6002045b store 4 ,mem_le_supervision_timer 56ef 20600000 rtn le_adv: 56f0 70001624 jam 36 ,mem_le_ch_mapped 56f1 700ac200 jam 0 ,mem_le_adv_channel_map_temp le_adv_loop: 56f2 4734402d bpatchx patch2d_0 ,mem_patch2d 56f3 6800c36e fetch 1 ,mem_le_adv_enable 56f4 207a0000 rtn blank 56f5 d8e00000 arg le_adv_interval_timer ,queue 56f6 20407f16 call timer_check 56f7 247a0000 nrtn blank 56f8 4734c02d bpatchx patch2d_1 ,mem_patch2d le_adv_loop_tx: 56f9 7854fc00 disable master 56fa 78287c00 enable swfine 56fb 20405572 call le_init_adv 56fc 20405422 call le_next_adv_channel 56fd 204054e9 call le_send_adv_ind 56fe 2436d706 nbranch le_adv_not_match ,match 56ff 68008003 fetch 1 ,mem_le_req_rcv 5700 1fe0fe01 increase 1 ,pdata 5701 60008003 store 1 ,mem_le_req_rcv 5702 680082d9 fetch 1 ,mem_le_rxbuf 5703 1fe17e0f and pdata ,0x0f ,pdata 5704 c001d51c beq scan_req ,le_send_scan_response 5705 c002d728 beq connect_req ,le_parse_connect_req le_adv_not_match: 5706 4735402d bpatchx patch2d_2 ,mem_patch2d 5707 180a7e00 random pdata 5708 d84001ff arg 0x1ff ,temp 5709 98417e00 iand temp ,pdata 570a 1fe0fefa add pdata ,250 ,pdata 570b 20403cbe call delay 570c 68008ac2 fetch 1 ,mem_le_adv_channel_map_temp 570d 6808c48d fetcht 1 ,mem_le_adv_channel_map 570e 98467c00 isub temp ,null 570f 2422d6f2 nbranch le_adv_loop ,zero 5710 d8e00000 arg le_adv_interval_timer ,queue 5711 68014482 fetch 2 ,mem_le_adv_interval 5712 20207f08 branch timer_init le_receive_window_size: 5713 4735c02d bpatchx patch2d_3 ,mem_patch2d 5714 68008476 fetch 1 ,mem_le_peer_sca 5715 204053fc call le_sca_map 5716 68010441 fetch 2 ,mem_le_tsniff 5717 984ffe00 imul32 temp ,pdata 5718 d8400177 arg 375 ,temp 5719 984ffe00 imul32 temp ,pdata 571a d84186a0 arg 100000 ,temp 571b 9846fc00 idiv temp 571c 6800846a fetch 1 ,mem_le_window_size 571d d8404e20 arg 20000 ,temp 571e 984ffe00 imul32 temp ,pdata 571f 9840fe00 iadd temp ,pdata 5720 600244e5 store 4 ,mem_le_transmit_window 5721 4736402d bpatchx patch2d_4 ,mem_patch2d 5722 680140c1 fetch 2 ,mem_rx_window_sniff 5723 20407f86 call wait_div_end 5724 18078400 quotient temp 5725 9840fe00 iadd temp ,pdata 5726 6001044d store 2 ,mem_le_receive_window 5727 20600000 rtn le_parse_connect_req: 5728 4736c02d bpatchx patch2d_5 ,mem_patch2d 5729 680302e1 fetch 6 ,mem_le_rxbuf + 8 572a 680b44a0 fetcht 6 ,mem_le_lap 572b 98467c00 isub temp ,null 572c 24628000 nrtn zero 572d 20405619 call le_scan_check_sender_addr_type 572e 1a227e00 copy rega ,pdata 572f 6000c48e store 1 ,mem_le_conn_peer_addr_type 5730 680382ee fetch 7 ,mem_le_rxbuf + 21 5731 60038101 store 7 ,mem_tmp_buffer 5732 e8c40000 ifetch 8 ,contr 5733 e0a40000 istore 8 ,contw 5734 680302db fetch 6 ,mem_le_rxbuf + 2 5735 6003044f store 6 ,mem_le_plap 5736 18c08c06 increase 6 ,contr 5737 e8c40000 ifetch 8 ,contr 5738 60040463 store 8 ,mem_le_access 5739 e8c90000 ifetcht 2 ,contr 573a 4737402d bpatchx patch2d_6 ,mem_patch2d 573b 184b8400 lshift2 temp ,temp 573c e8c10000 ifetch 2 ,contr 573d 1febfe00 lshift2 pdata ,pdata 573e 60010441 store 2 ,mem_le_tsniff 573f 60020443 store 4 ,mem_le_anchor 5740 98467e00 isub temp ,pdata 5741 1fe0d1fe add pdata ,-2 ,clke_bt 5742 e8c48000 ifetch 9 ,contr 5743 6004846b store 9 ,mem_le_slave_latency 5744 4737c02d bpatchx patch2d_7 ,mem_patch2d 5745 e8c08000 ifetch 1 ,contr 5746 1ff18400 rshift4 pdata ,temp 5747 18430400 rshift temp ,temp 5748 60088476 storet 1 ,mem_le_peer_sca 5749 1fe17e1f and_into 0x1f ,pdata 574a 60008458 store 1 ,mem_le_hop 574b 20405713 call le_receive_window_size 574c 2040545b call le_calc_channel_map 574d 2040534c call le_init_slave 574e 2040223b call context_new 574f 24628000 nrtn zero 5750 4738402e bpatchx patch2e_0 ,mem_patch2e 5751 20402841 call calc_clke_offset 5752 20405ad3 call le_l2cap_reset_signaling_identifier 5753 700a9914 jam bt_evt_le_connected ,mem_fifo_temp 5754 20407d86 call ui_ipc_send_event 5755 20202223 branch context_save le_init_attlist_search: 5756 4738c02e bpatchx patch2e_1 ,mem_patch2e 5757 6801445a fetch 2 ,mem_le_search_handle_start 5758 98002400 iforce regb 5759 6801445c fetch 2 ,mem_le_search_handle_end 575a 98002600 iforce regc 575b 680144bc fetch 2 ,mem_ui_le_uuid_table 575c 98000c00 iforce contr 575d 78347c00 enable user 575e 20600000 rtn le_att_handle_inrange: 575f e8c10000 ifetch 2 ,contr 5760 207a0000 rtn blank 5761 9a467c00 isub regb ,null 5762 24610000 nrtn positive 5763 9a667c00 isub regc ,null 5764 20628000 rtn zero 5765 20215768 branch le_att_handle_blank ,positive 5766 18007c01 force 1 ,null 5767 20600000 rtn le_att_handle_blank: 5768 18007e00 force 0 ,pdata 5769 20600000 rtn le_att_get_handle_ptr: 576a 2040576d call le_att_get_handle_ptr2 576b 2022d779 branch le_att_get_handle_ptr_found ,zero 576c 20600000 rtn le_att_get_handle_ptr2: 576d 4739402e bpatchx patch2e_2 ,mem_patch2e 576e 680144bc fetch 2 ,mem_ui_le_uuid_table 576f 98000c00 iforce contr le_att_get_handle_loop1: 5770 e8c10000 ifetch 2 ,contr 5771 207a0000 rtn blank 5772 98467c00 isub temp ,null 5773 20628000 rtn zero 5774 e8c08000 ifetch 1 ,contr 5775 98c08c00 iadd contr ,contr 5776 e8c08000 ifetch 1 ,contr 5777 98c08c00 iadd contr ,contr 5778 20205770 branch le_att_get_handle_loop1 le_att_get_handle_ptr_found: 5779 e8c08000 ifetch 1 ,contr 577a 98c08c00 iadd contr ,contr 577b 20600000 rtn le_att_get_short_uuid_ptr: 577c 4739c02e bpatchx patch2e_3 ,mem_patch2e 577d 680144bc fetch 2 ,mem_ui_le_uuid_table 577e 98000c00 iforce contr le_att_get_short_uuid_loop: 577f e8c10000 ifetch 2 ,contr 5780 207a0000 rtn blank 5781 e8c08000 ifetch 1 ,contr 5782 98c08c00 iadd contr ,contr 5783 18c08dfe increase -2 ,contr 5784 e8c10000 ifetch 2 ,contr 5785 98467c00 isub temp ,null 5786 20628000 rtn zero 5787 e8c08000 ifetch 1 ,contr 5788 98c08c00 iadd contr ,contr 5789 2020577f branch le_att_get_short_uuid_loop le_att_get_handle_info_from_ptr: 578a 6801049c fetch 2 ,mem_le_cur_attlist_start_ptr 578b 2020578e branch le_att_get_handle_info_fast le_att_get_handle_info: 578c 473a402e bpatchx patch2e_4 ,mem_patch2e 578d 680144bc fetch 2 ,mem_ui_le_uuid_table le_att_get_handle_info_fast: 578e 98000c00 iforce contr 578f 18422200 copy temp ,rega le_att_get_handle_loop: 5790 e8c10000 ifetch 2 ,contr 5791 203a5799 branch le_att_unfind_handle ,blank 5792 9a267c00 isub rega ,null 5793 2022d79a branch le_att_finded_handle ,zero 5794 e8c08000 ifetch 1 ,contr 5795 98c08c00 iadd contr ,contr 5796 e8c08000 ifetch 1 ,contr 5797 98c08c00 iadd contr ,contr 5798 20205790 branch le_att_get_handle_loop le_att_unfind_handle: 5799 20207fef branch disable_blank le_att_finded_handle: 579a e8c08000 ifetch 1 ,contr 579b 600084a2 store 1 ,mem_le_cur_uuid_length 579c 1fe27200 copy pdata ,loopcnt 579d d8a004a3 arg mem_le_cur_uuid ,contw 579e 20407ef4 call memcpy_fast 579f e8c08000 ifetch 1 ,contr 57a0 600084b3 store 1 ,mem_le_curr_att_len 57a1 20407ea5 call store_contr 57a2 20207ff1 branch enable_blank le_modified_name: 57a3 473ac02e bpatchx patch2e_5 ,mem_patch2e 57a4 204057a6 call le_modified_name_att_list 57a5 202057b8 branch le_modified_name_adv le_modified_name_att_list: 57a6 d8402a00 arg uuid_chrctr_device_name ,temp 57a7 2040577c call le_att_get_short_uuid_ptr 57a8 207a0000 rtn blank 57a9 e8c08000 ifetch 1 ,contr 57aa 18c20a00 copy contr ,contw 57ab 6808c3af fetcht 1 ,mem_le_name_len 57ac 18427200 copy temp ,loopcnt 57ad 98467c00 isub temp ,null 57ae 242157b5 nbranch le_name_length_longer_than_att ,positive 57af 98460400 isub temp ,temp 57b0 d8c043b0 arg mem_le_name ,contr 57b1 20407f01 call memcpy 57b2 18427200 copy temp ,loopcnt 57b3 2442d7f0 ncall memcpy_empty ,zero 57b4 20600000 rtn le_name_length_longer_than_att: 57b5 1fe27200 copy pdata ,loopcnt 57b6 d8c043b0 arg mem_le_name ,contr 57b7 20207ef4 branch memcpy_fast le_modified_name_adv: 57b8 da60438f arg mem_le_adv_data_len + 32 ,regc 57b9 da204370 arg mem_le_adv_data ,rega 57ba 204057c5 call le_modified_name_adv_and_scan 57bb 58000000 setarg 0 57bc 79347e00 setflag user ,0 ,pdata 57bd 60008a9a store 1 ,mem_pdatatemp 57be da6043af arg mem_le_scan_data_len + 32 ,regc 57bf da204390 arg mem_le_scan_data ,rega 57c0 204057c5 call le_modified_name_adv_and_scan 57c1 20740000 rtn user 57c2 68008a9a fetch 1 ,mem_pdatatemp 57c3 203a2a8c branch assert ,blank 57c4 20600000 rtn le_modified_name_adv_and_scan: 57c5 473b402e bpatchx patch2e_6 ,mem_patch2e 57c6 20407fe7 call enable_user 57c7 20407eda call clear_temp_block 57c8 da400000 arg 0 ,regb 57c9 d8a00ac3 arg mem_le_data_temp ,contw 57ca 204057df call le_modified_name_adv_loop 57cb 6800c3af fetch 1 ,mem_le_name_len 57cc 1fe08401 add pdata ,1 ,temp 57cd 9a40a200 iadd regb ,rega 57ce 1a20a202 increase 2 ,rega 57cf 1a267c1f sub rega ,0x1f ,null 57d0 242157dd nbranch le_modified_name_adv_and_scan_name_overflow ,positive 57d1 e0a88000 istoret 1 ,contw 57d2 d8400009 arg gap_adtype_local_name_complete ,temp 57d3 e0a88000 istoret 1 ,contw 57d4 98007200 iforce loopcnt 57d5 20407ef4 call memcpy_fast 57d6 1a222400 copy rega ,regb le_modified_name_adv_and_scan_store_data: 57d7 1a427e00 deposit regb 57d8 60008ac2 store 1 ,mem_le_data_len_temp 57d9 d8c00ac2 arg mem_le_data_len_temp ,contr 57da 5fffffe0 setarg -32 57db 9a608a00 iadd regc ,contw 57dc 20207ebd branch memcpy32 le_modified_name_adv_and_scan_name_overflow: 57dd 20407fe9 call disable_user 57de 202057d7 branch le_modified_name_adv_and_scan_store_data le_modified_name_adv_loop: 57df ea208000 ifetch 1 ,rega 57e0 207a0000 rtn blank 57e1 1fe0fe01 pincrease 1 57e2 e8c88000 ifetcht 1 ,contr 57e3 18467c09 sub temp ,gap_adtype_local_name_complete ,null 57e4 2022d7ee branch le_modified_name_adv_found_name ,zero 57e5 9a40a400 iadd regb ,regb 57e6 1a220c00 copy rega ,contr 57e7 98007200 iforce loopcnt 57e8 20407ef4 call memcpy_fast 57e9 18c22200 copy contr ,rega le_modified_name_adv_loop2: 57ea 1a227e00 deposit rega 57eb 9a667c00 isub regc ,null 57ec 20610000 rtn positive 57ed 202057df branch le_modified_name_adv_loop le_modified_name_adv_found_name: 57ee 9a20a200 iadd rega ,rega 57ef 202057ea branch le_modified_name_adv_loop2 memcpy_empty: 57f0 58000020 setarg space 57f1 e0a08000 istore 1 ,contw 57f2 c20057f0 loop memcpy_empty 57f3 20600000 rtn le_lpm_set_mult: 57f4 473bc02e bpatchx patch2e_7 ,mem_patch2e 57f5 7855fc00 disable wake 57f6 203757f8 branch le_lpm_set_mult_attempt ,attempt 57f7 2436d806 nbranch le_lpm_lost ,match le_lpm_set_mult_attempt: 57f8 20402bcb call lpm_match 57f9 680140c1 fetch 2 ,mem_rx_window_sniff 57fa 6001044d store 2 ,mem_le_receive_window 57fb 2436abde nbranch lpm_mult_short ,match 57fc c507abde bmark1 mark_old_packet ,lpm_mult_short 57fd 6800c50b fetch 1 ,mem_le_packet_size 57fe 243a2bde nbranch lpm_mult_short ,blank 57ff 6800c3dd fetch 1 ,mem_le_txlen 5800 243a2bde nbranch lpm_mult_short ,blank 5801 6800c4e9 fetch 1 ,mem_le_configuration 5802 c282abde bbit1 bit_ble_short_mult ,lpm_mult_short 5803 6800843f fetch 1 ,mem_le_state 5804 c282abde bbit1 lestate_update_param ,lpm_mult_short 5805 20202bc0 branch lpm_mult_wait_timeout le_lpm_lost: 5806 680940c1 fetcht 2 ,mem_rx_window_sniff 5807 18430400 rshift temp ,temp 5808 6801044d fetch 2 ,mem_le_receive_window 5809 9840fe00 iadd temp ,pdata 580a 6001044d store 2 ,mem_le_receive_window 580b 20202bd6 branch lpm_lost le_set_config_fixed_tk: 580c d8e00000 arg bit_ble_passkey_fixed_key ,queue 580d 20205824 branch le_set_config le_clr_config_fixed_tk: 580e d8e00000 arg bit_ble_passkey_fixed_key ,queue 580f 20205828 branch le_clr_config le_set_config_fixed_ltk: 5810 d8e00001 arg bit_ble_pairing_fixed_ltk ,queue 5811 20205824 branch le_set_config le_clr_config_fixed_ltk: 5812 d8e00001 arg bit_ble_pairing_fixed_ltk ,queue 5813 20205828 branch le_clr_config le_set_config_more_data: 5814 d8e00002 arg bit_ble_transmit_packet_by_md ,queue 5815 20205824 branch le_set_config le_clr_config_more_data: 5816 d8e00002 arg bit_ble_transmit_packet_by_md ,queue 5817 20205828 branch le_clr_config le_set_config_read_authentication: 5818 d8e00003 arg bit_ble_read_auth ,queue 5819 20205824 branch le_set_config le_clr_config_read_authentication: 581a d8e00003 arg bit_ble_read_auth ,queue 581b 20205828 branch le_clr_config le_set_config_write_authentication: 581c d8e00004 arg bit_ble_write_auth ,queue 581d 20205824 branch le_set_config le_clr_config_write_authentication: 581e d8e00004 arg bit_ble_write_auth ,queue 581f 20205828 branch le_clr_config le_set_config_short_mult: 5820 d8e00005 arg bit_ble_short_mult ,queue 5821 20205824 branch le_set_config le_clr_config_short_mult: 5822 d8e00005 arg bit_ble_short_mult ,queue 5823 20205828 branch le_clr_config le_set_config: 5824 6800c4e9 fetch 1 ,mem_le_configuration 5825 f9207e00 qset1 pdata 5826 6000c4e9 store 1 ,mem_le_configuration 5827 20600000 rtn le_clr_config: 5828 6800c4e9 fetch 1 ,mem_le_configuration 5829 f93ffe00 qset0 pdata 582a 6000c4e9 store 1 ,mem_le_configuration 582b 20600000 rtn le_set_fixed_ltk: 582c 58112233 setarg 0x112233 582d 6001c4ea store 3 ,mem_le_fixed_ltk 582e 58445566 setarg 0x445566 582f e0a18000 istore 3 ,contw 5830 58778899 setarg 0x778899 5831 e0a18000 istore 3 ,contw 5832 58001122 setarg 0x001122 5833 e0a18000 istore 3 ,contw 5834 58334455 setarg 0x334455 5835 e0a18000 istore 3 ,contw 5836 58000066 setarg 0x66 5837 e0a08000 istore 1 ,contw 5838 20600000 rtn le_set_justwork: 5839 59000302 setarg 0x01000302 583a 60024453 store 4 ,mem_le_pres 583b 58010010 setarg 0x010010 583c 6001c457 store 3 ,mem_le_pres_max_keysize 583d 7044c601 jam 1 ,mem_le_pairing_mode 583e 20600000 rtn le_fifo_malloc_tx_empty: 583f da200000 arg 0 ,rega 5840 d8200001 arg llid_empty ,type 5841 20205850 branch le_fifo_malloc_tx le_fifo_malloc_tx_ll: 5842 d8200003 arg llid_le_ll ,type 5843 20405850 call le_fifo_malloc_tx 5844 1a427e00 copy regb ,pdata 5845 e0a08000 istore 1 ,contw 5846 20600000 rtn le_fifo_malloc_tx_l2cap: 5847 18000202 force llid_l2cap_start ,type 5848 1a20a204 increase 4 ,rega 5849 20405850 call le_fifo_malloc_tx 584a 1a20a3fc increase -4 ,rega 584b 1a227e00 copy rega ,pdata 584c e0a10000 istore 2 ,contw 584d 1a427e00 copy regb ,pdata 584e e0a10000 istore 2 ,contw 584f 20600000 rtn le_fifo_malloc_tx: 5850 1a267cf0 sub rega ,240 ,null 5851 24212a8c nbranch assert ,positive 5852 6800c4ff fetch 1 ,mem_le_tx_buff_used 5853 d8400001 arg 1 ,temp 5854 df200004 arg le_tx_buff_count ,loopcnt le_fifo_malloc_tx_loop: 5855 98417c00 iand temp ,null 5856 2022d85a branch le_fifo_malloc_tx_got_empty ,zero 5857 18438400 lshift temp ,temp 5858 c2005855 loop le_fifo_malloc_tx_loop 5859 20202a8c branch assert le_fifo_malloc_tx_got_empty: 585a 9842fe00 ixor temp ,pdata 585b 6000c4ff store 1 ,mem_le_tx_buff_used 585c 1f267e04 sub loopcnt ,le_tx_buff_count ,pdata 585d 1ff27e00 lshift4 pdata ,pdata 585e 1ff27e00 lshift4 pdata ,pdata 585f d8401800 arg mem_le_tx_buffer0 ,temp 5860 98408400 iadd temp ,temp le_fifo_tx_find_empty_ptr: 5861 df200000 arg 0 ,loopcnt 5862 d8c04500 arg mem_le_tx_ptr0 ,contr le_fifo_tx_find_empty_ptr_loop: 5863 e8c10000 ifetch 2 ,contr 5864 203a5869 branch le_fifo_tx_found_empty_ptr ,blank 5865 1f227e00 copy loopcnt ,pdata 5866 1f20f201 increase 1 ,loopcnt 5867 c0825863 bne le_tx_buff_count ,le_fifo_tx_find_empty_ptr_loop 5868 20202a8c branch assert le_fifo_tx_found_empty_ptr: 5869 18c08dfe increase -2 ,contr 586a e0c90000 istoret 2 ,contr 586b 18420a00 copy temp ,contw 586c 1a227e00 copy rega ,pdata 586d e0a08000 istore 1 ,contw 586e 58000000 setarg 0 586f e0a08000 istore 1 ,contw 5870 18227e00 copy type ,pdata 5871 e0a08000 istore 1 ,contw 5872 20600000 rtn le_fifo_get_first_tx_ptr: 5873 68014500 fetch 2 ,mem_le_tx_ptr0 5874 1fe20c00 copy pdata ,contr 5875 20600000 rtn le_fifo_get_second_tx_ptr: 5876 68014502 fetch 2 ,mem_le_tx_ptr1 5877 1fe20c00 copy pdata ,contr 5878 20600000 rtn le_fifo_get_last_tx_ptr: 5879 2040587c call le_fifo_get_last_tx_ptr0 587a 1fe20c00 copy pdata ,contr 587b 20600000 rtn le_fifo_get_last_tx_ptr0: 587c 68014506 fetch 2 ,mem_le_tx_ptr3 587d 247a0000 nrtn blank 587e 68014504 fetch 2 ,mem_le_tx_ptr2 587f 247a0000 nrtn blank 5880 68014502 fetch 2 ,mem_le_tx_ptr1 5881 247a0000 nrtn blank 5882 68014500 fetch 2 ,mem_le_tx_ptr0 5883 20600000 rtn le_fifo_get_first_l2cap_ptr: 5884 20405873 call le_fifo_get_first_tx_ptr 5885 18c08c03 increase 3 ,contr 5886 20600000 rtn le_fifo_get_first_att_ptr: 5887 20405873 call le_fifo_get_first_tx_ptr 5888 18c08c07 increase 7 ,contr 5889 20600000 rtn le_fifo_get_last_att_ptr: 588a 20405879 call le_fifo_get_last_tx_ptr 588b 18c08c07 increase 7 ,contr 588c 20600000 rtn le_fifo_get_last_l2cap_ptr: 588d 20405879 call le_fifo_get_last_tx_ptr 588e 18c08c03 increase 3 ,contr 588f 20600000 rtn le_fifo_check_full: 5890 68014506 fetch 2 ,mem_le_tx_ptr3 5891 20600000 rtn le_fifo_check_nearly_full: 5892 68014504 fetch 2 ,mem_le_tx_ptr2 5893 20600000 rtn le_fifo_check_empty: 5894 68014500 fetch 2 ,mem_le_tx_ptr0 5895 20600000 rtn le_fifo_release_first_node: 5896 68014500 fetch 2 ,mem_le_tx_ptr0 5897 d8401800 arg mem_le_tx_buffer0 ,temp 5898 98467e00 isub temp ,pdata 5899 1ff1fe00 rshift4 pdata ,pdata 589a 1ff18e00 rshift4 pdata ,queue 589b 6800c4ff fetch 1 ,mem_le_tx_buff_used 589c f93ffe00 qset0 pdata 589d 6000c4ff store 1 ,mem_le_tx_buff_used 589e df200000 arg 0 ,loopcnt le_fifo_release_first_node_loop: 589f 1f23fe00 lshift loopcnt ,pdata 58a0 d8404502 arg mem_le_tx_ptr1 ,temp 58a1 98408400 iadd temp ,temp 58a2 e8410000 ifetch 2 ,temp 58a3 184085fe increase -2 ,temp 58a4 e0410000 istore 2 ,temp 58a5 1f227e00 copy loopcnt ,pdata 58a6 1f20f201 increase 1 ,loopcnt 58a7 c081d89f bne le_tx_buff_update_loopcnt ,le_fifo_release_first_node_loop 58a8 58000000 setarg 0 58a9 e0410000 istore 2 ,temp 58aa 20600000 rtn le_parse_att: 58ab e8c18000 ifetch 3 ,contr 58ac 60018477 store 3 ,mem_le_att_opcode 58ad c00158c1 beq attop_exchange_mtu_request ,le_parse_att_exchange_mtu_request 58ae c001d8c9 beq attop_exchange_mtu_response ,le_parse_att_exchange_mtu_response 58af c00258cc beq attop_find_information_request ,le_parse_att_find_information_request 58b0 c00358f2 beq attop_find_by_type_value_request ,le_parse_att_find_by_type_value_request 58b1 c004593f beq attop_read_by_type_request ,le_parse_att_read_by_type_request 58b2 c00559bc beq attop_read_request ,le_parse_att_read_request 58b3 c00659e4 beq attop_read_blob_request ,le_parse_att_read_blob_request 58b4 c00859fa beq attop_read_by_group_type_request ,le_parse_att_read_by_group_type_request 58b5 c0095a2f beq attop_write_request ,le_parse_att_write_request 58b6 c00b5a48 beq attop_prepare_write_request ,le_parse_att_prepare_write_request 58b7 c00c5a5b beq attop_execute_write_request ,le_parse_att_execute_write_request 58b8 c0295a60 beq attop_write_command ,le_parse_att_write_command 58b9 20600000 rtn le_send_att_exchange_mtu_requset: 58ba 18002203 force 3 ,rega 58bb 20405a82 call le_fifo_malloc_tx_l2cap_gatt 58bc 58000002 setarg attop_exchange_mtu_request 58bd e0a08000 istore 1 ,contw 58be 680144a6 fetch 2 ,mem_le_local_mtu 58bf e0a10000 istore 2 ,contw 58c0 20600000 rtn le_parse_att_exchange_mtu_request: 58c1 204058c9 call le_parse_att_exchange_mtu_response le_send_att_exchange_mtu_response: 58c2 18002203 force 3 ,rega 58c3 20405a82 call le_fifo_malloc_tx_l2cap_gatt 58c4 58000003 setarg attop_exchange_mtu_response 58c5 e0a08000 istore 1 ,contw 58c6 680144a6 fetch 2 ,mem_le_local_mtu 58c7 e0a10000 istore 2 ,contw 58c8 20600000 rtn le_parse_att_exchange_mtu_response: 58c9 1fecfe00 rshift8 pdata ,pdata 58ca 600144a8 store 2 ,mem_le_remote_mtu 58cb 20600000 rtn le_parse_att_find_information_request: 58cc 20405ab1 call le_get_search_handle_start_end_common 58cd 20407fe7 call enable_user 58ce 202058cf branch le_send_att_find_information_response le_send_att_find_information_response: 58cf d9600003 arg 3 ,timeup 58d0 20405756 call le_init_attlist_search le_send_att_find_information_res_loop: 58d1 2040575f call le_att_handle_inrange 58d2 203a58f0 branch le_send_att_find_information_res_end ,blank 58d3 242158ed nbranch le_send_att_find_information_res_next ,positive 58d4 18c08dfe increase -2 ,contr 58d5 20407ea5 call store_contr 58d6 20407e9c call get_contw 58d7 243458e1 nbranch le_send_att_find_information_res_store_info ,user 58d8 20407e85 call push_stack_rega_b_c 58d9 20407fe9 call disable_user 58da 18002214 force 20 ,rega 58db 20405a82 call le_fifo_malloc_tx_l2cap_gatt 58dc 20407e95 call pop_stack_rega_b_c 58dd 58000005 setarg attop_find_information_response 58de e0a08000 istore 1 ,contw 58df 58000001 setarg uuid_size_16bit 58e0 e0a08000 istore 1 ,contw le_send_att_find_information_res_store_info: 58e1 20407e9f call get_contr 58e2 e8c10000 ifetch 2 ,contr 58e3 e0a10000 istore 2 ,contw 58e4 e8c08000 ifetch 1 ,contr 58e5 1fe27200 copy pdata ,loopcnt 58e6 20407f01 call memcpy 58e7 20407ea2 call store_contw 58e8 196097ff increase -1 ,timeup 58e9 2022d8f0 branch le_send_att_find_information_res_end ,zero le_send_att_find_information_res_cont: 58ea e8c08000 ifetch 1 ,contr 58eb 98c08c00 iadd contr ,contr 58ec 202058d1 branch le_send_att_find_information_res_loop le_send_att_find_information_res_next: 58ed e8c08000 ifetch 1 ,contr 58ee 98c08c00 iadd contr ,contr 58ef 202058ea branch le_send_att_find_information_res_cont le_send_att_find_information_res_end: 58f0 20345a76 branch le_send_att_error_response_notfound ,user 58f1 20205aa5 branch le_send_auto_len_by_mem le_parse_att_find_by_type_value_request: 58f2 20405ab1 call le_get_search_handle_start_end_common 58f3 e8c10000 ifetch 2 ,contr 58f4 60014472 store 2 ,mem_le_search_uuid 58f5 20407ea5 call store_contr 58f6 d8a0445e arg mem_le_search_att_type_length ,contw 58f7 680144fc fetch 2 ,mem_le_l2cap_size 58f8 1fe0fff9 increase -7 ,pdata 58f9 204056db call le_get_search_common2 58fa 20205905 branch le_send_att_find_by_type_value_response le_start_end_handle_check_1: 58fb 78547c00 disable user 58fc 6809445a fetcht 2 ,mem_le_search_handle_start 58fd 6801445c fetch 2 ,mem_le_search_handle_end 58fe 98467c00 isub temp ,null 58ff 24215902 nbranch le_start_end_handle_check_1_fail ,positive 5900 18427e00 deposit temp 5901 c1800000 rtnne 0 le_start_end_handle_check_1_fail: 5902 78347c00 enable user 5903 70047a01 jam att_err_invalid_handle ,mem_le_err_code 5904 20205a77 branch le_send_att_error_response le_send_att_find_by_type_value_response: 5905 204058fb call le_start_end_handle_check_1 5906 20740000 rtn user 5907 68094472 fetcht 2 ,mem_le_search_uuid 5908 58002800 setarg uuid_gatt_primary_service 5909 98467c00 isub temp ,null 590a 2022d90c branch le_send_att_find_by_type_value_res_primary ,zero 590b 20205a76 branch le_send_att_error_response_notfound le_send_att_find_by_type_value_res_primary: 590c 7004b400 jam le_find_by_type_val_res_not_found ,mem_le_search_res 590d 6809445a fetcht 2 ,mem_le_search_handle_start 590e 60090aa2 storet 2 ,mem_temp 590f 2040578c call le_att_get_handle_info 5910 243a5a76 nbranch le_send_att_error_response_notfound ,blank le_send_att_find_primary_search_loop: 5911 68090aa2 fetcht 2 ,mem_temp 5912 2040578c call le_att_get_handle_info 5913 243a5925 nbranch le_send_att_error_response_notfound2 ,blank 5914 18c22200 copy contr ,rega 5915 680084b3 fetch 1 ,mem_le_curr_att_len 5916 1fe27200 copy pdata ,loopcnt 5917 6808c45e fetcht 1 ,mem_le_search_att_type_length 5918 98467c00 isub temp ,null 5919 2422d921 nbranch le_send_att_find_primary_search_loop1 ,zero 591a da40445f arg mem_le_search_att_type ,regb 591b 20407f88 call string_compare 591c 2022d928 branch le_send_att_find_primary_search_end_start_handle_found ,zero 591d 680104a3 fetch 2 ,mem_le_cur_uuid 591e 68094472 fetcht 2 ,mem_le_search_uuid 591f 98467c00 isub temp ,null 5920 2022d930 branch le_send_att_find_primary_search_end_ending_handle_found ,zero le_send_att_find_primary_search_loop1: 5921 68010aa2 fetch 2 ,mem_temp 5922 1fe0fe01 increase 1 ,pdata 5923 60010aa2 store 2 ,mem_temp 5924 20205911 branch le_send_att_find_primary_search_loop le_send_att_error_response_notfound2: 5925 680084b4 fetch 1 ,mem_le_search_res 5926 c000d930 beq le_find_by_type_val_res_found_starting_handle ,le_send_att_find_primary_search_end_ending_handle_found 5927 20205a76 branch le_send_att_error_response_notfound le_send_att_find_primary_search_end_start_handle_found: 5928 680104a3 fetch 2 ,mem_le_cur_uuid 5929 68094472 fetcht 2 ,mem_le_search_uuid 592a 98467c00 isub temp ,null 592b 2422d921 nbranch le_send_att_find_primary_search_loop1 ,zero 592c 7004b401 jam le_find_by_type_val_res_found_starting_handle ,mem_le_search_res 592d 68090aa2 fetcht 2 ,mem_temp 592e 6009049e storet 2 ,mem_le_cur_handle_start 592f 20205921 branch le_send_att_find_primary_search_loop1 le_send_att_find_primary_search_end_ending_handle_found: 5930 680084b4 fetch 1 ,mem_le_search_res 5931 c0005921 beq le_find_by_type_val_res_not_found ,le_send_att_find_primary_search_loop1 5932 7004b402 jam le_find_by_type_val_res_found_ending_handle ,mem_le_search_res 5933 68090aa2 fetcht 2 ,mem_temp 5934 184085ff increase -1 ,temp 5935 600904a0 storet 2 ,mem_le_cur_handle_end le_send_att_find_primary_search_end: 5936 da200005 arg 5 ,rega 5937 20405a82 call le_fifo_malloc_tx_l2cap_gatt 5938 58000007 setarg attop_find_by_type_value_response 5939 e0a08000 istore 1 ,contw 593a 6801049e fetch 2 ,mem_le_cur_handle_start 593b e0a10000 istore 2 ,contw 593c 680104a0 fetch 2 ,mem_le_cur_handle_end 593d e0a10000 istore 2 ,contw 593e 20600000 rtn le_parse_att_read_by_type_request: 593f 20405ab1 call le_get_search_handle_start_end_common 5940 204056df call le_get_search_att_uuid 5941 20205942 branch le_send_att_read_by_type_response le_send_att_read_by_type_response: 5942 6809445a fetcht 2 ,mem_le_search_handle_start 5943 60090aa2 storet 2 ,mem_temp 5944 20405756 call le_init_attlist_search 5945 2040576d call le_att_get_handle_ptr2 5946 18c08dfe increase -2 ,contr 5947 18c27e00 copy contr ,pdata 5948 6001049c store 2 ,mem_le_cur_attlist_start_ptr 5949 68094472 fetcht 2 ,mem_le_search_uuid 594a 58002a00 setarg uuid_chrctr_device_name 594b 98467c00 isub temp ,null 594c 2022d9a8 branch le_send_att_read_by_type_res_device_name ,zero 594d 58002803 setarg uuid_gatt_characteristic 594e 98467c00 isub temp ,null 594f 2422d990 nbranch le_send_att_read_by_type_res_not_characteristic ,zero 5950 d9600002 arg 2 ,timeup le_send_att_read_by_type_response_loop: 5951 20405a88 call le_att_check_handle_end 5952 2421596d nbranch le_send_att_read_by_type_response_end ,positive 5953 68090aa2 fetcht 2 ,mem_temp 5954 2040578a call le_att_get_handle_info_from_ptr 5955 c000d96d beq 1 ,le_send_att_read_by_type_response_end 5956 20405a94 call le_att_same_uuid 5957 2422d96b nbranch le_send_att_read_by_type_response_next_handle ,zero 5958 2434596f nbranch le_send_att_read_by_type_res_found_next ,user 5959 78547c00 disable user 595a da200014 arg 20 ,rega 595b 20405a82 call le_fifo_malloc_tx_l2cap_gatt 595c 58000009 setarg attop_read_by_type_response 595d e0a08000 istore 1 ,contw 595e 18a26000 copy contw ,alarm 595f 18a08a01 increase 1 ,contw 5960 2040597d call le_send_att_read_by_type_write_properties 5961 20405a84 call le_att_next_handle 5962 2040578a call le_att_get_handle_info_from_ptr 5963 20405984 call le_send_att_read_by_type_write_uuid 5964 680084a2 fetch 1 ,mem_le_cur_uuid_length 5965 1fe0fe05 increase 5 ,pdata 5966 e6008000 istore 1 ,alarm 5967 680084a2 fetch 1 ,mem_le_cur_uuid_length 5968 c008596d beq 16 ,le_send_att_read_by_type_response_end 5969 196097ff increase -1 ,timeup 596a 2022d96d branch le_send_att_read_by_type_response_end ,zero le_send_att_read_by_type_response_next_handle: 596b 20405a84 call le_att_next_handle 596c 20205951 branch le_send_att_read_by_type_response_loop le_send_att_read_by_type_response_end: 596d 20345a76 branch le_send_att_error_response_notfound ,user 596e 20205aa5 branch le_send_auto_len_by_mem le_send_att_read_by_type_res_found_next: 596f 20405a97 call le_store_att_record 5970 20405a84 call le_att_next_handle 5971 2040578a call le_att_get_handle_info_from_ptr 5972 680084a2 fetch 1 ,mem_le_cur_uuid_length 5973 c008596d beq 16 ,le_send_att_read_by_type_response_end 5974 20407e9c call get_contw 5975 68010aa2 fetch 2 ,mem_temp 5976 1fe0ffff increase -1 ,pdata 5977 e0a10000 istore 2 ,contw 5978 20405aa1 call le_write_att_record_common 5979 20405984 call le_send_att_read_by_type_write_uuid 597a 196097ff increase -1 ,timeup 597b 2022d96d branch le_send_att_read_by_type_response_end ,zero 597c 2020596b branch le_send_att_read_by_type_response_next_handle le_send_att_read_by_type_write_properties: 597d 68010aa2 fetch 2 ,mem_temp 597e e0a10000 istore 2 ,contw 597f 680084b3 fetch 1 ,mem_le_curr_att_len 5980 1fe27200 copy pdata ,loopcnt 5981 20407e9f call get_contr 5982 20407ef4 call memcpy_fast 5983 20207ea2 branch store_contw le_send_att_read_by_type_write_uuid: 5984 20407e9c call get_contw 5985 68010aa2 fetch 2 ,mem_temp 5986 e0a10000 istore 2 ,contw 5987 20407ea2 call store_contw 5988 680084a2 fetch 1 ,mem_le_cur_uuid_length 5989 1fe27200 copy pdata ,loopcnt 598a 20407e9c call get_contw 598b 20407e9f call get_contr 598c 9f260c00 isub loopcnt ,contr 598d 18c08dff increase -1 ,contr 598e 20407ef4 call memcpy_fast 598f 20207ea2 branch store_contw le_send_att_read_by_type_res_not_characteristic: 5990 6809445a fetcht 2 ,mem_le_search_handle_start 5991 60090aa2 storet 2 ,mem_temp le_send_att_read_by_type_res_not_char_loop: 5992 20405a88 call le_att_check_handle_end 5993 24215a76 nbranch le_send_att_error_response_notfound ,positive 5994 2040578a call le_att_get_handle_info_from_ptr 5995 c000da76 beq 1 ,le_send_att_error_response_notfound 5996 20405a94 call le_att_same_uuid 5997 2422d9a6 nbranch le_send_att_read_by_type_res_not_char_next ,zero le_send_att_read_by_type_res_not_char_common: 5998 da200014 arg 20 ,rega 5999 20405a82 call le_fifo_malloc_tx_l2cap_gatt 599a 58000009 setarg attop_read_by_type_response 599b e0a08000 istore 1 ,contw 599c 680084b3 fetch 1 ,mem_le_curr_att_len 599d 1fe27200 copy pdata ,loopcnt 599e 1fe0fe02 increase 2 ,pdata 599f e0a08000 istore 1 ,contw 59a0 68010aa2 fetch 2 ,mem_temp 59a1 e0a10000 istore 2 ,contw 59a2 20407e9f call get_contr 59a3 20407ef4 call memcpy_fast 59a4 20407ea2 call store_contw 59a5 20205aa5 branch le_send_auto_len_by_mem le_send_att_read_by_type_res_not_char_next: 59a6 20405a84 call le_att_next_handle 59a7 20205992 branch le_send_att_read_by_type_res_not_char_loop le_send_att_read_by_type_res_device_name: 59a8 d8402a00 arg uuid_chrctr_device_name ,temp 59a9 2040577c call le_att_get_short_uuid_ptr 59aa 207a0000 rtn blank 59ab 18c08dfb increase -5 ,contr 59ac e8c10000 ifetch 2 ,contr 59ad 60010aa2 store 2 ,mem_temp 59ae da200014 arg 20 ,rega 59af 20405a82 call le_fifo_malloc_tx_l2cap_gatt 59b0 58000009 setarg attop_read_by_type_response 59b1 e0a08000 istore 1 ,contw 59b2 6800c3af fetch 1 ,mem_le_name_len 59b3 1fe27200 copy pdata ,loopcnt 59b4 1fe0fe02 increase 2 ,pdata 59b5 e0a08000 istore 1 ,contw 59b6 68010aa2 fetch 2 ,mem_temp 59b7 e0a10000 istore 2 ,contw 59b8 d8c043b0 arg mem_le_name ,contr 59b9 20407ef4 call memcpy_fast 59ba 20407ea2 call store_contw 59bb 20205aa5 branch le_send_auto_len_by_mem le_parse_att_read_request: 59bc 68090478 fetcht 2 ,mem_le_att_handle 59bd 6800c4e9 fetch 1 ,mem_le_configuration 59be c281d9dd bbit1 bit_ble_read_auth ,le_send_att_read_response_check_auth le_send_att_read_response: 59bf 2040576a call le_att_get_handle_ptr 59c0 203a5a76 branch le_send_att_error_response_notfound ,blank 59c1 18c08dfe increase -2 ,contr 59c2 e8c10000 ifetch 2 ,contr 59c3 d8402a00 arg uuid_chrctr_device_name ,temp 59c4 98467c00 isub temp ,null 59c5 2022d9d3 branch le_send_device_name ,zero 59c6 e8c08000 ifetch 1 ,contr 59c7 1fe67c16 sub pdata ,22 ,null 59c8 202159ca branch le_send_att_read_response_less ,positive 59c9 18007e16 force 22 ,pdata le_send_att_read_response_less: 59ca 1fe22600 copy pdata ,regc 59cb 20407ea5 call store_contr 59cc 1a60a201 add regc ,1 ,rega 59cd 20405a82 call le_fifo_malloc_tx_l2cap_gatt 59ce 5800000b setarg attop_read_response 59cf e0a08000 istore 1 ,contw 59d0 1a627200 copy regc ,loopcnt 59d1 20407e9f call get_contr 59d2 20207f01 branch memcpy le_send_device_name: 59d3 20407ea5 call store_contr 59d4 6800c3af fetch 1 ,mem_le_name_len 59d5 1fe0a201 add pdata ,1 ,rega 59d6 20405a82 call le_fifo_malloc_tx_l2cap_gatt 59d7 5800000b setarg attop_read_response 59d8 e0a08000 istore 1 ,contw 59d9 6800c3af fetch 1 ,mem_le_name_len 59da 1fe27200 copy pdata ,loopcnt 59db d8c043b0 arg mem_le_name ,contr 59dc 20207f01 branch memcpy le_send_att_read_response_check_auth: 59dd 680144fa fetch 2 ,mem_le_pairing_handle 59de 98467c00 isub temp ,null 59df 2422d9bf nbranch le_send_att_read_response ,zero 59e0 20405a42 call le_check_encrypt_state 59e1 243459bf nbranch le_send_att_read_response ,user 59e2 70047a05 jam att_err_insufficient_authentication ,mem_le_err_code 59e3 20205a77 branch le_send_att_error_response le_parse_att_read_blob_request: 59e4 e8c10000 ifetch 2 ,contr 59e5 6001445e store 2 ,mem_le_att_offset le_send_att_read_blob_response: 59e6 da200014 arg 20 ,rega 59e7 20405a82 call le_fifo_malloc_tx_l2cap_gatt 59e8 5800000d setarg attop_read_blob_response 59e9 e0a08000 istore 1 ,contw 59ea 6801445e fetch 2 ,mem_le_att_offset 59eb 98002200 iforce rega 59ec 68090478 fetcht 2 ,mem_le_att_handle 59ed 2040576a call le_att_get_handle_ptr 59ee 203a5a76 branch le_send_att_error_response_notfound ,blank 59ef e8c08000 ifetch 1 ,contr 59f0 9a267200 isub rega ,loopcnt 59f1 24215a76 nbranch le_send_att_error_response_notfound ,positive 59f2 1f267c16 sub loopcnt ,22 ,null 59f3 202159f5 branch le_send_att_read_blob_response_less ,positive 59f4 18007216 force 22 ,loopcnt le_send_att_read_blob_response_less: 59f5 1a227e00 deposit rega 59f6 98c08c00 iadd contr ,contr 59f7 20407ef4 call memcpy_fast 59f8 20407ea2 call store_contw 59f9 20205aa5 branch le_send_auto_len_by_mem le_parse_att_read_by_group_type_request: 59fa 20405ab1 call le_get_search_handle_start_end_common 59fb 204056d7 call le_get_search_att_type 59fc 202059fd branch le_send_att_read_by_group_type_response le_send_att_read_by_group_type_response: 59fd d9600002 arg 2 ,timeup 59fe 6809445a fetcht 2 ,mem_le_search_handle_start 59ff 60090aa2 storet 2 ,mem_temp 5a00 20405756 call le_init_attlist_search 5a01 2040576d call le_att_get_handle_ptr2 5a02 18c08dfe increase -2 ,contr 5a03 18c27e00 copy contr ,pdata 5a04 6001049c store 2 ,mem_le_cur_attlist_start_ptr le_send_att_read_by_group_type_response_loop: 5a05 20405a88 call le_att_check_handle_end 5a06 24215a25 nbranch le_send_att_read_by_group_type_end0 ,positive 5a07 68090aa2 fetcht 2 ,mem_temp 5a08 2040578a call le_att_get_handle_info_from_ptr 5a09 c000da28 beq 1 ,le_send_att_read_by_group_type_end1 5a0a 20405a8c call le_att_same_type 5a0b 2422da23 nbranch le_send_att_read_by_group_type_next_handle ,zero 5a0c 19627e00 copy timeup ,pdata 5a0d c0005a28 beq 0 ,le_send_att_read_by_group_type_end1 5a0e 24345a19 nbranch le_send_att_read_by_group_type_store_write_record ,user 5a0f 78547c00 disable user 5a10 da200014 arg 20 ,rega 5a11 20405a82 call le_fifo_malloc_tx_l2cap_gatt 5a12 58000011 setarg attop_read_by_group_type_response 5a13 e0a08000 istore 1 ,contw 5a14 680084b3 fetch 1 ,mem_le_curr_att_len 5a15 1fe0fe04 increase 4 ,pdata 5a16 e0a08000 istore 1 ,contw 5a17 20407ea2 call store_contw 5a18 20205a1f branch le_send_att_read_by_group_type_store_record le_send_att_read_by_group_type_store_write_record: 5a19 680084b3 fetch 1 ,mem_le_curr_att_len 5a1a c0085a28 beq 16 ,le_send_att_read_by_group_type_end1 5a1b 68010aa2 fetch 2 ,mem_temp 5a1c 1fe0ffff increase -1 ,pdata 5a1d 600104a0 store 2 ,mem_le_cur_handle_end 5a1e 20405a9c call le_write_att_record le_send_att_read_by_group_type_store_record: 5a1f 68010aa2 fetch 2 ,mem_temp 5a20 6001049e store 2 ,mem_le_cur_handle_start 5a21 20405a97 call le_store_att_record 5a22 196097ff increase -1 ,timeup le_send_att_read_by_group_type_next_handle: 5a23 20405a84 call le_att_next_handle 5a24 20205a05 branch le_send_att_read_by_group_type_response_loop le_send_att_read_by_group_type_end0: 5a25 68010aa2 fetch 2 ,mem_temp 5a26 600104a0 store 2 ,mem_le_cur_handle_end 5a27 20205a2c branch le_send_att_read_by_group_type_end_common le_send_att_read_by_group_type_end1: 5a28 68010aa2 fetch 2 ,mem_temp 5a29 1fe0ffff increase -1 ,pdata 5a2a 600104a0 store 2 ,mem_le_cur_handle_end 5a2b 20205a2c branch le_send_att_read_by_group_type_end_common le_send_att_read_by_group_type_end_common: 5a2c 20345a76 branch le_send_att_error_response_notfound ,user 5a2d 20405a9c call le_write_att_record 5a2e 20205aa5 branch le_send_auto_len_by_mem le_parse_att_write_request: 5a2f 18c22200 copy contr ,rega 5a30 680144fc fetch 2 ,mem_le_l2cap_size 5a31 1fe0a5fd add pdata ,-3 ,regb 5a32 204056e2 call le_writeatt_cb le_send_att_write_response_check_auth: 5a33 6800c4e9 fetch 1 ,mem_le_configuration 5a34 c3025a3d bbit0 bit_ble_write_auth ,le_send_att_write_response 5a35 68090478 fetcht 2 ,mem_le_att_handle 5a36 680144fa fetch 2 ,mem_le_pairing_handle 5a37 98467c00 isub temp ,null 5a38 2422da3d nbranch le_send_att_write_response ,zero 5a39 20405a42 call le_check_encrypt_state 5a3a 24345a3d nbranch le_send_att_write_response ,user 5a3b 70047a05 jam att_err_insufficient_authentication ,mem_le_err_code 5a3c 20205a77 branch le_send_att_error_response le_send_att_write_response: 5a3d 18002201 force 1 ,rega 5a3e 20405a82 call le_fifo_malloc_tx_l2cap_gatt 5a3f 58000013 setarg attop_write_response 5a40 e0a08000 istore 1 ,contw 5a41 20600000 rtn le_check_encrypt_state: 5a42 20407fe9 call disable_user 5a43 6800c4c6 fetch 1 ,mem_le_pairing_mode 5a44 c1000000 rtneq le_pairing_mode_none 5a45 6800c040 fetch 1 ,mem_context 5a46 c3820000 rtnbit1 lestate_encryption 5a47 20207fe7 branch enable_user le_parse_att_prepare_write_request: 5a48 18c0a202 add contr ,2 ,rega 5a49 680144fc fetch 2 ,mem_le_l2cap_size 5a4a 1fe0a5fb add pdata ,-5 ,regb 5a4b 204056e2 call le_writeatt_cb 5a4c 20205a4d branch le_send_att_prepare_write_response le_send_att_prepare_write_response: 5a4d 680144fc fetch 2 ,mem_le_l2cap_size 5a4e 1fe22200 copy pdata ,rega 5a4f 20405a82 call le_fifo_malloc_tx_l2cap_gatt 5a50 58000017 setarg attop_prepare_write_response 5a51 e0a08000 istore 1 ,contw 5a52 68010478 fetch 2 ,mem_le_att_handle 5a53 e0a10000 istore 2 ,contw 5a54 680144fc fetch 2 ,mem_le_l2cap_size 5a55 1fe0f3fb add pdata ,-5 ,loopcnt 5a56 6801450d fetch 2 ,mem_le_payload_ptr 5a57 1fe08c07 add pdata ,7 ,contr 5a58 e8c10000 ifetch 2 ,contr 5a59 e0a10000 istore 2 ,contw 5a5a 20207ef4 branch memcpy_fast le_parse_att_execute_write_request: le_send_att_execute_write_response: 5a5b 18002201 force 1 ,rega 5a5c 20405a82 call le_fifo_malloc_tx_l2cap_gatt 5a5d 58000019 setarg attop_execute_write_response 5a5e e0a08000 istore 1 ,contw 5a5f 20600000 rtn le_parse_att_write_command: 5a60 18c22200 copy contr ,rega 5a61 680144fc fetch 2 ,mem_le_l2cap_size 5a62 1fe0a5fd add pdata ,-3 ,regb 5a63 202056e2 branch le_writeatt_cb le_att_malloc_tx_notify: 5a64 18422600 copy temp ,regc 5a65 1a20a203 increase 3 ,rega 5a66 20405a82 call le_fifo_malloc_tx_l2cap_gatt 5a67 1a20a3fd increase -3 ,rega 5a68 5800001b setarg attop_handle_value_notification 5a69 e0a08000 istore 1 ,contw 5a6a 1a620400 copy regc ,temp 5a6b e0a90000 istoret 2 ,contw 5a6c 20600000 rtn le_att_malloc_tx_indication: 5a6d 18422600 copy temp ,regc 5a6e 1a20a203 increase 3 ,rega 5a6f 20405a82 call le_fifo_malloc_tx_l2cap_gatt 5a70 1a20a3fd increase -3 ,rega 5a71 5800001d setarg attop_handle_value_indication 5a72 e0a08000 istore 1 ,contw 5a73 1a620400 copy regc ,temp 5a74 e0a90000 istoret 2 ,contw 5a75 20600000 rtn le_send_att_error_response_notfound: 5a76 70047a0a jam att_err_attribute_not_found ,mem_le_err_code le_send_att_error_response: 5a77 18002205 force 5 ,rega 5a78 20405a82 call le_fifo_malloc_tx_l2cap_gatt 5a79 58000001 setarg attop_error_response 5a7a e0a08000 istore 1 ,contw 5a7b 68008477 fetch 1 ,mem_le_att_opcode 5a7c e0a08000 istore 1 ,contw 5a7d 68010478 fetch 2 ,mem_le_att_handle 5a7e e0a10000 istore 2 ,contw 5a7f 6800847a fetch 1 ,mem_le_err_code 5a80 e0a08000 istore 1 ,contw 5a81 20600000 rtn le_fifo_malloc_tx_l2cap_gatt: 5a82 18002404 force le_l2cap_cid_att ,regb 5a83 20205847 branch le_fifo_malloc_tx_l2cap le_att_next_handle: 5a84 68090aa2 fetcht 2 ,mem_temp 5a85 18408401 increase 1 ,temp 5a86 60090aa2 storet 2 ,mem_temp 5a87 20600000 rtn le_att_check_handle_end: 5a88 68090aa2 fetcht 2 ,mem_temp 5a89 6801445c fetch 2 ,mem_le_search_handle_end 5a8a 98467c00 isub temp ,null 5a8b 20600000 rtn le_att_same_type: 5a8c 6808c45e fetcht 1 ,mem_le_search_att_type_length 5a8d da20445f arg mem_le_search_att_type ,rega le_att_check_same_common: 5a8e 680084a2 fetch 1 ,mem_le_cur_uuid_length 5a8f 1fe27200 copy pdata ,loopcnt 5a90 98467c00 isub temp ,null 5a91 24628000 nrtn zero 5a92 da4004a3 arg mem_le_cur_uuid ,regb 5a93 20207f88 branch string_compare le_att_same_uuid: 5a94 6808c471 fetcht 1 ,mem_le_search_uuid_length 5a95 da204472 arg mem_le_search_uuid ,rega 5a96 20205a8e branch le_att_check_same_common le_store_att_record: 5a97 680084b3 fetch 1 ,mem_le_curr_att_len 5a98 60008101 store 1 ,mem_tmp_buffer 5a99 1fe27200 copy pdata ,loopcnt 5a9a 20407e9f call get_contr 5a9b 20207ef4 branch memcpy_fast le_write_att_record: 5a9c 20407e9c call get_contw 5a9d 6801049e fetch 2 ,mem_le_cur_handle_start 5a9e e0a10000 istore 2 ,contw 5a9f 680104a0 fetch 2 ,mem_le_cur_handle_end 5aa0 e0a10000 istore 2 ,contw le_write_att_record_common: 5aa1 68008101 fetch 1 ,mem_tmp_buffer 5aa2 1fe27200 copy pdata ,loopcnt 5aa3 20407ef4 call memcpy_fast 5aa4 20207ea2 branch store_contw le_send_auto_len_by_mem: 5aa5 20407e9c call get_contw 5aa6 2040588a call le_fifo_get_last_att_ptr 5aa7 18a27e00 copy contw ,pdata 5aa8 98c62200 isub contr ,rega 5aa9 2040588d call le_fifo_get_last_l2cap_ptr 5aaa 1a227e00 copy rega ,pdata 5aab e0c10000 istore 2 ,contr 5aac 1a20a204 increase 4 ,rega 5aad 20405879 call le_fifo_get_last_tx_ptr 5aae 1a227e00 copy rega ,pdata 5aaf e0c08000 istore 1 ,contr 5ab0 20600000 rtn le_get_search_handle_start_end_common: 5ab1 1fecfe00 rshift8 pdata ,pdata 5ab2 6001445a store 2 ,mem_le_search_handle_start 5ab3 e8c10000 ifetch 2 ,contr 5ab4 6001445c store 2 ,mem_le_search_handle_end 5ab5 20600000 rtn le_parse_signaling: 5ab6 e8c08000 ifetch 1 ,contr 5ab7 e8c88000 ifetcht 1 ,contr 5ab8 e8c90000 ifetcht 2 ,contr 5ab9 c009dabb beq l2cap_connection_parameter_update_response ,le_l2cap_parse_conn_parameter_update_rsp 5aba 20600000 rtn le_l2cap_parse_conn_parameter_update_rsp: 5abb e8c10000 ifetch 2 ,contr 5abc 60014509 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result 5abd 700a9940 jam bt_evt_le_parse_conn_papa_update_rsp ,mem_fifo_temp 5abe 20207d86 branch ui_ipc_send_event le_l2cap_tx_update_req: 5abf da20000c arg 0x0c ,rega 5ac0 da600012 arg l2cap_connection_parameter_update_request ,regc 5ac1 20405ac7 call le_fifo_malloc_tx_l2cap_signaling 5ac2 58000008 setarg 0x08 5ac3 e0a10000 istore 2 ,contw 5ac4 68044496 fetch 8 ,mem_le_interval_min 5ac5 e0a40000 istore 8 ,contw 5ac6 20600000 rtn le_fifo_malloc_tx_l2cap_signaling: 5ac7 20405acf call le_l2cap_update_signaling_identifier 5ac8 da400005 arg le_l2cap_cid_signal ,regb 5ac9 20405847 call le_fifo_malloc_tx_l2cap 5aca 1a627e00 copy regc ,pdata 5acb e0a08000 istore 1 ,contw 5acc 6800c508 fetch 1 ,mem_le_signaling_identifier 5acd e0a08000 istore 1 ,contw 5ace 20600000 rtn le_l2cap_update_signaling_identifier: 5acf 6800c508 fetch 1 ,mem_le_signaling_identifier 5ad0 1fe0fe01 pincrease 1 5ad1 6000c508 store 1 ,mem_le_signaling_identifier 5ad2 c1800000 rtnne 0 le_l2cap_reset_signaling_identifier: 5ad3 70450801 jam 1 ,mem_le_signaling_identifier 5ad4 20600000 rtn le_pairing_mode_init: 5ad5 6800c4c6 fetch 1 ,mem_le_pairing_mode 5ad6 c0005ae4 beq le_pairing_mode_none ,le_set_no_pairing 5ad7 c000dae7 beq le_pairing_mode_lagacy_justwork ,le_set_pairing_mode_lagacy_just_work 5ad8 c0015ae9 beq le_pairing_mode_lagacy_passkey ,le_set_pairing_mode_lagacy_passkey 5ad9 c040dadd beq le_pairing_mode_secure_connect_justwork ,le_set_pairing_mode_secure_justwork 5ada c0415adf beq le_pairing_mode_secure_connect_numeric ,le_set_pairing_mode_secure_numeric 5adb c041dae2 beq le_pairing_mode_secure_connect_passkey ,le_set_pairing_mode_secure_passkey 5adc 20600000 rtn le_set_pairing_mode_secure_justwork: 5add 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 5ade 20205ae5 branch le_set_noinputnooutput le_set_pairing_mode_secure_numeric: 5adf 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 5ae0 70445401 jam flag_iocap_displayyesno ,mem_le_pres_iocap 5ae1 20600000 rtn le_set_pairing_mode_secure_passkey: 5ae2 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 5ae3 20205aea branch le_set_displayonly le_set_no_pairing: 5ae4 70445600 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth le_set_noinputnooutput: 5ae5 70445403 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap 5ae6 20600000 rtn le_set_pairing_mode_lagacy_just_work: 5ae7 70445605 jam flag_le_bonding_mitm ,mem_le_pres_auth 5ae8 20205ae5 branch le_set_noinputnooutput le_set_pairing_mode_lagacy_passkey: 5ae9 70445605 jam flag_le_bonding_mitm ,mem_le_pres_auth le_set_displayonly: 5aea 70445400 jam flag_iocap_displayonly ,mem_le_pres_iocap 5aeb 20600000 rtn le_secure_connection_enable: 5aec 6800c456 fetch 1 ,mem_le_pres_auth 5aed 79207e03 set1 le_auth_secure_connection_pairing_bit ,pdata 5aee 6000c456 store 1 ,mem_le_pres_auth 5aef 20600000 rtn le_secure_connection_disable: 5af0 6800c456 fetch 1 ,mem_le_pres_auth 5af1 793ffe03 set0 le_auth_secure_connection_pairing_bit ,pdata 5af2 6000c456 store 1 ,mem_le_pres_auth 5af3 20600000 rtn le_parse_smp: 5af4 e8c08000 ifetch 1 ,contr 5af5 c000db09 beq smp_pairing_request ,le_parse_smp_pairing_request 5af6 c001db30 beq smp_pairing_confirm ,le_parse_smp_pairing_confirm 5af7 c0025b4d beq smp_pairing_random ,le_parse_smp_pairing_random 5af8 c002db5a beq smp_pairing_failed ,le_parse_smp_pairing_failed 5af9 c0035b80 beq smp_encryption_information ,le_parse_smp_encryption_information 5afa c003dbc4 beq smp_master_identification ,le_parse_smp_master_identification 5afb c0045baf beq smp_identity_information ,le_parse_smp_identity_information 5afc c004dbc0 beq smp_identity_address_information ,le_parse_smp_identity_address_information 5afd c0055bc4 beq smp_signing_information ,le_parse_smp_signing_information 5afe c005dbc4 beq smp_security_request ,le_parse_smp_security_request 5aff c0065bc5 beq smp_pairing_public_key ,le_parse_smp_public_key 5b00 c006dbca beq smp_pairing_dhkey_check ,le_parse_smp_dhkey_check 5b01 20600000 rtn le_send_smp_security_request: 5b02 18002202 force 2 ,rega 5b03 20405c62 call le_fifo_malloc_tx_l2cap_smp 5b04 5800000b setarg smp_security_request 5b05 e0a08000 istore 1 ,contw 5b06 6800c456 fetch 1 ,mem_le_pres_auth 5b07 e0a08000 istore 1 ,contw 5b08 20600000 rtn le_parse_smp_pairing_request: 5b09 6000c44c store 1 ,mem_le_preq 5b0a e8c30000 ifetch 6 ,contr 5b0b e0a30000 istore 6 ,contw 5b0c 6800c4c6 fetch 1 ,mem_le_pairing_mode 5b0d c0005b5f beq le_pairing_mode_none ,le_smp_pairing_fail_reason_not_support_pairing 5b0e 20405b2b call le_send_smp_pairing_response 5b0f 20405b26 call le_check_master_support_secure_connect 5b10 7044c403 jam flag_le_pairing_rcv_pairing_req ,mem_le_pairing_state 5b11 6800c44d fetch 1 ,mem_le_preq_iocap 5b12 c0005b18 beq flag_iocap_displayonly ,le_set_tk_0 5b13 c000db18 beq flag_iocap_displayyesno ,le_set_tk_0 5b14 c001db18 beq flag_iocap_noinputnooutput ,le_set_tk_0 5b15 6800c4c6 fetch 1 ,mem_le_pairing_mode 5b16 c0015b1b beq le_pairing_mode_lagacy_passkey ,le_parse_smp_pairing_req_passkey 5b17 c1418000 rtneq le_pairing_mode_secure_connect_passkey le_set_tk_0: 5b18 dfe00000 arg 0 ,pdata 5b19 600244c7 store 4 ,mem_le_tk 5b1a 20600000 rtn le_parse_smp_pairing_req_passkey: 5b1b 6800c4e9 fetch 1 ,mem_le_configuration 5b1c c2805b24 bbit1 bit_ble_passkey_fixed_key ,le_parse_smp_pairing_req_fixed_passkey le_genernate_tk: 5b1d da2044c7 arg mem_le_tk ,rega 5b1e 1a220a00 copy rega ,contw 5b1f df200003 arg 3 ,loopcnt 5b20 2040630d call generate_random_loop 5b21 680144c9 fetch 2 ,mem_le_tk + 2 5b22 1fe17e07 and_into 0x7 ,pdata 5b23 600144c9 store 2 ,mem_le_tk + 2 le_parse_smp_pairing_req_fixed_passkey: 5b24 700a9934 jam bt_evt_le_tk_generate ,mem_fifo_temp 5b25 20207d86 branch ui_ipc_send_event le_check_master_support_secure_connect: 5b26 6800c44f fetch 1 ,mem_le_preq_auth 5b27 c3818000 rtnbit1 le_auth_secure_connection_pairing_bit 5b28 6800c4c6 fetch 1 ,mem_le_pairing_mode 5b29 c4038000 rtnbit0 le_pairing_mode_secure_connect_bit 5b2a 20203402 branch app_ble_disconnect le_send_smp_pairing_response: 5b2b 18002207 force 7 ,rega 5b2c 20405c62 call le_fifo_malloc_tx_l2cap_smp 5b2d 6803c453 fetch 7 ,mem_le_pres 5b2e e0a38000 istore 7 ,contw 5b2f 20600000 rtn le_parse_smp_pairing_confirm: 5b30 18c22200 copy contr ,rega 5b31 6800c4c6 fetch 1 ,mem_le_pairing_mode 5b32 c041db37 beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_confirm_secure_passkey 5b33 1a220c00 copy rega ,contr 5b34 d8a0442a arg mem_le_rconfirm ,contw 5b35 20407ebf call memcpy16 5b36 20205b3d branch le_send_smp_pairing_confirm le_parse_smp_pairing_confirm_secure_passkey: 5b37 1a220c00 copy rega ,contr 5b38 d8a0442a arg mem_le_rconfirm ,contw 5b39 20407ebf call memcpy16 5b3a 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 5b3b 7044c108 jam le_sc_stat_passkey_wait_confirm ,mem_le_secure_connect_state 5b3c 20600000 rtn le_send_smp_pairing_confirm: 5b3d 6800c4c6 fetch 1 ,mem_le_pairing_mode 5b3e c283db45 bbit1 le_pairing_mode_secure_connect_bit ,le_send_smp_pairing_confirm_sc 5b3f 2040739c call generate_confirm 5b40 18002211 force 17 ,rega 5b41 20405c62 call le_fifo_malloc_tx_l2cap_smp 5b42 58000003 setarg smp_pairing_confirm 5b43 e0a08000 istore 1 ,contw 5b44 20207497 branch store_aes_result le_send_smp_pairing_confirm_sc: 5b45 d8a0443a arg mem_le_srand ,contw 5b46 2040630c call generate_random 5b47 204071c5 call function_f4_cb 5b48 18002211 force 17 ,rega 5b49 20405c62 call le_fifo_malloc_tx_l2cap_smp 5b4a 58000003 setarg smp_pairing_confirm 5b4b e0a08000 istore 1 ,contw 5b4c 20207201 branch load_inverse_result le_parse_smp_pairing_random: 5b4d 18c22200 copy contr ,rega 5b4e 6800c4c6 fetch 1 ,mem_le_pairing_mode 5b4f c283db61 bbit1 le_pairing_mode_secure_connect_bit ,le_parse_smp_pairing_random_sc 5b50 1a220c00 copy rega ,contr 5b51 20407394 call authenticate_rconfirm 5b52 2022db75 branch le_parse_smp_pairing_random_success ,zero le_send_pairing_confirm_value_failed: 5b53 70047b04 jam pairing_failed_confirm_value_failed ,mem_le_ll_pairing_fail_reason le_send_pairing_failed: 5b54 18002202 force 2 ,rega 5b55 20405c62 call le_fifo_malloc_tx_l2cap_smp 5b56 58000005 setarg smp_pairing_failed 5b57 e0a08000 istore 1 ,contw 5b58 6800847b fetch 1 ,mem_le_ll_pairing_fail_reason 5b59 e0a08000 istore 1 ,contw le_parse_smp_pairing_failed: 5b5a 18000e0a force smp_pairing_timer ,queue 5b5b 20407f07 call timer_stop 5b5c 7044c400 jam flag_le_pairing_null ,mem_le_pairing_state 5b5d 700a9930 jam bt_evt_le_pairing_fail ,mem_fifo_temp 5b5e 20207d86 branch ui_ipc_send_event le_smp_pairing_fail_reason_not_support_pairing: 5b5f 70047b05 jam pairing_failed_pairing_not_supported ,mem_le_ll_pairing_fail_reason 5b60 20205b54 branch le_send_pairing_failed le_parse_smp_pairing_random_sc: 5b61 d8a0042f arg mem_le_mrand ,contw 5b62 1a220c00 copy rega ,contr 5b63 20407ebf call memcpy16 5b64 6800c4c6 fetch 1 ,mem_le_pairing_mode 5b65 c041db6c beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_random_sc_passkey 5b66 2040714f call function_g2 5b67 20405b7a call le_send_smp_pairing_random 5b68 6800c4c6 fetch 1 ,mem_le_pairing_mode 5b69 c1c10000 rtnne le_pairing_mode_secure_connect_numeric 5b6a 700a993b jam bt_evt_le_gkey_generate ,mem_fifo_temp 5b6b 20207d86 branch ui_ipc_send_event le_parse_smp_pairing_random_sc_passkey: 5b6c 204071ba call function_f4_ca 5b6d d8a00af2 arg mem_aes_cmac_temp ,contw 5b6e 20407201 call load_inverse_result 5b6f da200af2 arg mem_aes_cmac_temp ,rega 5b70 da40442a arg mem_le_rconfirm ,regb 5b71 df200010 arg 16 ,loopcnt 5b72 20407f88 call string_compare 5b73 2422db53 nbranch le_send_pairing_confirm_value_failed ,zero 5b74 20205b7a branch le_send_smp_pairing_random le_parse_smp_pairing_random_success: 5b75 20407390 call generate_stk 5b76 700a9931 jam bt_evt_le_pairing_success ,mem_fifo_temp 5b77 20407d86 call ui_ipc_send_event 5b78 70442901 jam 1 ,mem_ltk_exists 5b79 7044c405 jam flag_le_pairing_after_auth ,mem_le_pairing_state le_send_smp_pairing_random: 5b7a 18002211 force 17 ,rega 5b7b 20405c62 call le_fifo_malloc_tx_l2cap_smp 5b7c 58000004 setarg smp_pairing_random 5b7d e0a08000 istore 1 ,contw 5b7e d8c0443a arg mem_le_srand ,contr 5b7f 20207ebf branch memcpy16 le_parse_smp_encryption_information: 5b80 d8a0041f arg mem_le_peer_ltk ,contw 5b81 20207ebf branch memcpy16 le_send_smp_encryption_information: 5b82 18002211 force 17 ,rega 5b83 20405c62 call le_fifo_malloc_tx_l2cap_smp 5b84 58000006 setarg smp_encryption_information 5b85 e0a08000 istore 1 ,contw 5b86 6800c4e9 fetch 1 ,mem_le_configuration 5b87 c280db8a bbit1 bit_ble_pairing_fixed_ltk ,le_send_fixed_ltk 5b88 d8c04419 arg mem_le_ltk ,contr 5b89 20207ebf branch memcpy16 le_send_fixed_ltk: 5b8a d8c044ea arg mem_le_fixed_ltk ,contr 5b8b 20207ebf branch memcpy16 le_send_smp_master_identification: 5b8c d8a044cb arg mem_le_ediv ,contw 5b8d 1800720a force 10 ,loopcnt 5b8e 2040630d call generate_random_loop 5b8f 1800220b force 11 ,rega 5b90 20405c62 call le_fifo_malloc_tx_l2cap_smp 5b91 58000007 setarg smp_master_identification 5b92 e0a08000 istore 1 ,contw 5b93 680144cb fetch 2 ,mem_le_ediv 5b94 e0a10000 istore 2 ,contw 5b95 680444cd fetch 8 ,mem_le_rand 5b96 e0a40000 istore 8 ,contw 5b97 20600000 rtn le_send_smp_identity_information: 5b98 18002211 force 17 ,rega 5b99 20405c62 call le_fifo_malloc_tx_l2cap_smp 5b9a 58000008 setarg smp_identity_information 5b9b e0a08000 istore 1 ,contw 5b9c 58000000 setarg 0 5b9d e0a40000 istore 8 ,contw 5b9e e0a40000 istore 8 ,contw 5b9f 20600000 rtn le_send_smp_identity_address_information: 5ba0 18002208 force 8 ,rega 5ba1 20405c62 call le_fifo_malloc_tx_l2cap_smp 5ba2 58000009 setarg smp_identity_address_information 5ba3 e0a08000 istore 1 ,contw 5ba4 6800c495 fetch 1 ,mem_le_conn_own_addr_type 5ba5 e0a08000 istore 1 ,contw 5ba6 680344a0 fetch 6 ,mem_le_lap 5ba7 e0a30000 istore 6 ,contw 5ba8 20600000 rtn le_send_pairing_fail_unspecified_reason: 5ba9 70047b08 jam pairing_failed_unspecified_reason ,mem_le_ll_pairing_fail_reason 5baa 20205b54 branch le_send_pairing_failed le_check_init_key_distribution: 5bab 6800c458 fetch 1 ,mem_le_pres_init_key_distribution 5bac 6808c458 fetcht 1 ,mem_le_pres_init_key_distribution 5bad 98417e00 iand temp ,pdata 5bae 20600000 rtn le_parse_smp_identity_information: 5baf d8a044d5 arg mem_le_irk ,contw 5bb0 20407ebf call memcpy16 5bb1 20405bab call le_check_init_key_distribution 5bb2 2fec0001 isolate0 le_initator_irk_bit ,pdata 5bb3 2020dba9 branch le_send_pairing_fail_unspecified_reason ,true 5bb4 6800c092 fetch 1 ,mem_device_option 5bb5 c1850000 rtnne dvc_op_module 5bb6 20405bb9 call le_check_master_addr_type 5bb7 24740000 nrtn user 5bb8 20203410 branch app_ble_store_reconn_info le_check_master_addr_type: 5bb9 20407fe9 call disable_user 5bba 6800c48e fetch 1 ,mem_le_conn_peer_addr_type 5bbb c1000000 rtneq master_public_addr 5bbc 68008454 fetch 1 ,mem_le_plap + 5 5bbd 2fe180c0 compare 0xc0 ,pdata ,0xc0 5bbe 20608000 rtn true 5bbf 20207fe7 branch enable_user le_parse_smp_identity_address_information: 5bc0 20405bab call le_check_init_key_distribution 5bc1 2fec0001 isolate0 le_initator_irk_bit ,pdata 5bc2 2020dba9 branch le_send_pairing_fail_unspecified_reason ,true 5bc3 20600000 rtn le_parse_smp_master_identification: le_parse_smp_signing_information: le_parse_smp_security_request: 5bc4 20600000 rtn le_parse_smp_public_key: 5bc5 d8a009be arg mem_le_pubkey_remote_x_256 ,contw 5bc6 20407eb3 call memcpy64 5bc7 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 5bc8 7044c101 jam le_sc_stat_receive_public_key ,mem_le_secure_connect_state 5bc9 20600000 rtn le_parse_smp_dhkey_check: 5bca d8a00a6e arg mem_sp_confirm_remote ,contw 5bcb 20407ebf call memcpy16 5bcc 7044c106 jam le_sc_stat_receive_dhkey ,mem_le_secure_connect_state 5bcd 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 5bce 20600000 rtn le_send_smp_pairing_public_key: 5bcf 18002241 force 65 ,rega 5bd0 20405c62 call le_fifo_malloc_tx_l2cap_smp 5bd1 5800000c setarg smp_pairing_public_key 5bd2 e0a08000 istore 1 ,contw 5bd3 d8c045d2 arg mem_le_pubkey_local_x_256 ,contr 5bd4 20207eb3 branch memcpy64 le_send_smp_pairing_dhkey_check: 5bd5 20407166 call function_f6_eb 5bd6 18002211 force 17 ,rega 5bd7 20405c62 call le_fifo_malloc_tx_l2cap_smp 5bd8 5800000d setarg smp_pairing_dhkey_check 5bd9 e0a08000 istore 1 ,contw 5bda 20207201 branch load_inverse_result le_check_paring_time: 5bdb 6800c4c4 fetch 1 ,mem_le_pairing_state 5bdc c17f8000 rtneq flag_le_pairing_end 5bdd d8400003 arg flag_le_pairing_rcv_pairing_req ,temp 5bde 98467c00 isub temp ,null 5bdf 24610000 nrtn positive 5be0 d8e0000a arg smp_pairing_timer ,queue 5be1 20407f16 call timer_check 5be2 247a0000 nrtn blank 5be3 20205ba9 branch le_send_pairing_fail_unspecified_reason le_pairing_sm: 5be4 473c402f bpatchx patch2f_0 ,mem_patch2f 5be5 6800c4c4 fetch 1 ,mem_le_pairing_state 5be6 c0005bef beq flag_le_pairing_null ,le_pairing_sm_null 5be7 c000dbf5 beq flag_le_pairing_start ,le_pairing_sm_start 5be8 c0015bef beq flag_le_pairing_send_recurity_req ,le_pairing_sm_send_sec_req 5be9 c001dbf7 beq flag_le_pairing_rcv_pairing_req ,le_pairing_sm_rcv_pairing_req 5bea c002dbfb beq flag_le_pairing_after_auth ,le_pairing_sm_after_auth 5beb c003dc07 beq flag_le_paring_send_enc_information ,le_pairng_sm_send_enc_information 5bec c0045c09 beq flag_le_paring_send_master_identification ,le_pairng_sm_send_master_indentification 5bed c004dc10 beq flag_le_paring_send_indentity_information ,le_pairng_sm_send_indentity_information 5bee 20600000 rtn le_pairing_sm_null: le_pairing_sm_send_sec_req: 5bef 6800c4c5 fetch 1 ,mem_le_enc_state 5bf0 c1820000 rtnne flag_le_send_start_enc_rsp 5bf1 7044c5ff jam flag_le_enc_end ,mem_le_enc_state 5bf2 7044c4ff jam flag_le_pairing_end ,mem_le_pairing_state 5bf3 700a993f jam bt_evt_le_reconnect_complete ,mem_fifo_temp 5bf4 20207d86 branch ui_ipc_send_event le_pairing_sm_start: 5bf5 7044c402 jam flag_le_pairing_send_recurity_req ,mem_le_pairing_state 5bf6 20205b02 branch le_send_smp_security_request le_pairing_sm_rcv_pairing_req: 5bf7 7044c404 jam flag_le_pairing_auth ,mem_le_pairing_state 5bf8 58017700 setarg timer_smp_pairing_timeout 5bf9 d8e0000a arg smp_pairing_timer ,queue 5bfa 20207f08 branch timer_init le_pairing_sm_after_auth: 5bfb 6800c4c5 fetch 1 ,mem_le_enc_state 5bfc c0025bfe beq flag_le_send_start_enc_rsp ,le_pairing_sm_after_auth_start_enc 5bfd 20600000 rtn le_pairing_sm_after_auth_start_enc: 5bfe 7044c407 jam flag_le_paring_send_enc_information ,mem_le_pairing_state 5bff 700a9929 jam bt_evt_le_enc_info ,mem_fifo_temp 5c00 20407d86 call ui_ipc_send_event 5c01 20405b82 call le_send_smp_encryption_information 5c02 6800c092 fetch 1 ,mem_device_option 5c03 c1850000 rtnne dvc_op_module 5c04 20405bb9 call le_check_master_addr_type 5c05 20740000 rtn user 5c06 20203410 branch app_ble_store_reconn_info le_pairng_sm_send_enc_information: 5c07 7044c408 jam flag_le_paring_send_master_identification ,mem_le_pairing_state 5c08 20205b8c branch le_send_smp_master_identification le_pairng_sm_send_master_indentification: 5c09 6800c452 fetch 1 ,mem_le_preq_resp_key_distribution 5c0a 6808c459 fetcht 1 ,mem_le_pres_resp_key_distribution 5c0b 98417e00 iand temp ,pdata 5c0c 2fec0001 isolate0 le_initator_irk_bit ,pdata 5c0d 2020dc12 branch le_parse_start_enc_rsp_after_auth_end ,true 5c0e 7044c409 jam flag_le_paring_send_indentity_information ,mem_le_pairing_state 5c0f 20205b98 branch le_send_smp_identity_information le_pairng_sm_send_indentity_information: 5c10 20405ba0 call le_send_smp_identity_address_information 5c11 20205c12 branch le_parse_start_enc_rsp_after_auth_end le_parse_start_enc_rsp_after_auth_end: 5c12 18000e0a force smp_pairing_timer ,queue 5c13 20407f07 call timer_stop 5c14 7044c5ff jam flag_le_enc_end ,mem_le_enc_state 5c15 7044c4ff jam flag_le_pairing_end ,mem_le_pairing_state 5c16 700a993e jam bt_evt_le_pairing_complete ,mem_fifo_temp 5c17 20207d86 branch ui_ipc_send_event le_secure_connect_sm: 5c18 473cc02f bpatchx patch2f_1 ,mem_patch2f 5c19 6800c4c6 fetch 1 ,mem_le_pairing_mode 5c1a c4038000 rtnbit0 le_pairing_mode_secure_connect_bit 5c1b 6800c4bf fetch 1 ,mem_le_secure_connect_flag 5c1c c1810000 rtnne le_sp_flag_commit_256 5c1d 7044bf00 jam sp_flag_standby ,mem_le_secure_connect_flag 5c1e 6800c4c1 fetch 1 ,mem_le_secure_connect_state 5c1f c000dc58 beq le_sc_stat_receive_public_key ,le_sc_sm_receive_public_key 5c20 c0015c5f beq le_sc_stat_wait_send_public_key ,le_sc_sm_wait_send_public_key 5c21 c001dc52 beq le_sc_stat_send_public_key ,le_sc_sm_send_public_key 5c22 c0035c39 beq le_sc_stat_receive_dhkey ,le_sc_sm_receive_dhkey 5c23 c003dc30 beq le_sc_stat_wait_confirm_gkey ,le_sc_sm_wait_confirm_gkey 5c24 c0045c26 beq le_sc_stat_passkey_wait_confirm ,le_sc_sm_passkey_wait_confirm 5c25 20600000 rtn le_sc_sm_passkey_wait_confirm: 5c26 6800c663 fetch 1 ,mem_authentication_passkey_times 5c27 1fe20e00 copy pdata ,queue 5c28 1fe0fe01 increase 1 ,pdata 5c29 6000c663 store 1 ,mem_authentication_passkey_times 5c2a 680244c7 fetch 4 ,mem_le_tk 5c2b afefffff qisolate1 pdata 5c2c 58000080 setarg 0x80 5c2d 7920fe00 setflag true ,0 ,pdata 5c2e 6000c664 store 1 ,mem_passkey_1bit 5c2f 20205c55 branch le_sc_sm_ready_send_pairing_confirm le_sc_sm_wait_confirm_gkey: 5c30 6800c4c2 fetch 1 ,mem_le_sc_confirm_gkey_flag 5c31 7044c200 jam flag_le_sc_confrim_null ,mem_le_sc_confirm_gkey_flag 5c32 c000dc35 beq flag_le_sc_confrim_gkey_ok ,le_sc_confirm_gkey_ok 5c33 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 5c34 20600000 rtn le_sc_confirm_gkey_ok: 5c35 700a9931 jam bt_evt_le_pairing_success ,mem_fifo_temp 5c36 20407d86 call ui_ipc_send_event 5c37 7044c405 jam flag_le_pairing_after_auth ,mem_le_pairing_state 5c38 20205bd5 branch le_send_smp_pairing_dhkey_check le_sc_sm_receive_dhkey: 5c39 680089b9 fetch 1 ,mem_sp_dhkey_invalid 5c3a c001dc3d beq sp_key_valid_256 ,le_dhkey_ready 5c3b 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 5c3c 20600000 rtn le_dhkey_ready: 5c3d 2040718d call function_f5 5c3e 6800c4c6 fetch 1 ,mem_le_pairing_mode 5c3f c041dc41 beq le_pairing_mode_secure_connect_passkey ,le_dhkey_ready_common 5c40 20405b18 call le_set_tk_0 le_dhkey_ready_common: 5c41 2040717a call function_f6_ea 5c42 da200af2 arg mem_aes_cmac_temp ,rega 5c43 da400a6e arg mem_sp_confirm_remote ,regb 5c44 df200010 arg 16 ,loopcnt 5c45 20407f88 call string_compare 5c46 2022dc49 branch le_dhkey_check_ok ,zero le_dhkey_check_fail: 5c47 70047b0b jam pairing_failed_dhkey_check_failed ,mem_le_ll_pairing_fail_reason 5c48 20205b54 branch le_send_pairing_failed le_dhkey_check_ok: 5c49 20407595 call sp_calc_check_publickey_256 5c4a 2422dc47 nbranch le_dhkey_check_fail ,zero 5c4b 70442901 jam 1 ,mem_ltk_exists 5c4c 6800c4c6 fetch 1 ,mem_le_pairing_mode 5c4d c040dc35 beq le_pairing_mode_secure_connect_justwork ,le_sc_confirm_gkey_ok 5c4e c041dc35 beq le_pairing_mode_secure_connect_passkey ,le_sc_confirm_gkey_ok 5c4f 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 5c50 7044c107 jam le_sc_stat_wait_confirm_gkey ,mem_le_secure_connect_state 5c51 20600000 rtn le_sc_sm_send_public_key: 5c52 6800c4c6 fetch 1 ,mem_le_pairing_mode 5c53 c041dc56 beq le_pairing_mode_secure_connect_passkey ,le_sc_sm_send_public_key_passkey 5c54 70466400 jam 0 ,mem_passkey_1bit le_sc_sm_ready_send_pairing_confirm: 5c55 20205b3d branch le_send_smp_pairing_confirm le_sc_sm_send_public_key_passkey: 5c56 70466300 jam 0 ,mem_authentication_passkey_times 5c57 20205b1b branch le_parse_smp_pairing_req_passkey le_sc_sm_receive_public_key: 5c58 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 5c59 6800c4c3 fetch 1 ,mem_le_sc_local_key_invalid 5c5a c001dc5c beq sp_key_valid_256 ,le_public_key_ready 5c5b 20600000 rtn le_public_key_ready: 5c5c 7044c102 jam le_sc_stat_wait_send_public_key ,mem_le_secure_connect_state 5c5d 7009b900 jam sp_key_invalid ,mem_sp_dhkey_invalid 5c5e 20207a99 branch sp_dhkey_calc_256 le_sc_sm_wait_send_public_key: 5c5f 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 5c60 7044c103 jam le_sc_stat_send_public_key ,mem_le_secure_connect_state 5c61 20205bcf branch le_send_smp_pairing_public_key le_fifo_malloc_tx_l2cap_smp: 5c62 18002406 force le_l2cap_cid_smp ,regb 5c63 20205847 branch le_fifo_malloc_tx_l2cap le_parse_ll: 5c64 680082db fetch 1 ,mem_le_rxbuf + 2 5c65 c0005c7b beq ll_connection_update_req ,le_parse_connection_update_req 5c66 c000dc83 beq ll_channel_map_req ,le_parse_channel_map_req 5c67 c0015c8e beq ll_terminate_ind ,le_parse_terminate_ind 5c68 c001dcaa beq ll_enc_req ,le_parse_enc_req 5c69 c0025ce1 beq ll_enc_rsp ,le_parse_enc_rsp 5c6a c002dce6 beq ll_start_enc_req ,le_parse_start_enc_req 5c6b c0035cea beq ll_start_enc_rsp ,le_parse_start_enc_rsp 5c6c c003dcf5 beq ll_unknown_rsp ,le_parse_unknown_rsp 5c6d c0045c99 beq ll_feature_req ,le_parse_feature_req 5c6e c004dcf5 beq ll_feature_rsp ,le_parse_feature_rsp 5c6f c0055cef beq ll_pause_enc_req ,le_parse_pause_enc_req 5c70 c005dcf5 beq ll_pause_enc_rsp ,le_parse_pause_enc_rsp 5c71 c0065c9f beq ll_version_ind ,le_parse_version_ind 5c72 c006dcf5 beq ll_reject_ind ,le_parse_reject_ind 5c73 c0095ca6 beq ll_ping_req ,le_parse_ping_req 5c74 c009dcf5 beq ll_ping_rsp ,le_parse_ping_rsp 5c75 da200002 arg 2 ,rega 5c76 da400007 arg ll_unknown_rsp ,regb 5c77 20405842 call le_fifo_malloc_tx_ll 5c78 680082db fetch 1 ,mem_le_rxbuf + 2 5c79 e0a08000 istore 1 ,contw 5c7a 20600000 rtn le_parse_connection_update_req: 5c7b e8c48000 ifetch 9 ,contr 5c7c 6004c3d3 store 9 ,mem_le_new_param 5c7d e8c10000 ifetch 2 ,contr 5c7e 6001045f store 2 ,mem_le_instant 5c7f 6800843f fetch 1 ,mem_le_state 5c80 79207e05 set1 lestate_update_param ,pdata 5c81 6000843f store 1 ,mem_le_state 5c82 20600000 rtn le_parse_channel_map_req: 5c83 e8c28000 ifetch 5 ,contr 5c84 6002c3ce store 5 ,mem_le_new_map 5c85 e8c10000 ifetch 2 ,contr 5c86 6001045f store 2 ,mem_le_instant 5c87 68090459 fetcht 2 ,mem_le_event_count 5c88 98467c00 isub temp ,null 5c89 24215c8e nbranch le_parse_terminate_ind ,positive 5c8a 6800843f fetch 1 ,mem_le_state 5c8b 79207e06 set1 lestate_update_map ,pdata 5c8c 6000843f store 1 ,mem_le_state 5c8d 20600000 rtn le_parse_terminate_ind: 5c8e 58000014 setarg 20 5c8f 6001046d store 2 ,mem_le_superto 5c90 600144ba store 2 ,mem_le_init_superto 5c91 20600000 rtn le_send_terminate_ind_user_terminated: 5c92 da600013 arg error_remote_user_terminated_connection ,regc le_send_terminate_ind: 5c93 da200002 arg 2 ,rega 5c94 da400002 arg ll_terminate_ind ,regb 5c95 20405842 call le_fifo_malloc_tx_ll 5c96 1a627e00 copy regc ,pdata 5c97 e0a08000 istore 1 ,contw 5c98 20600000 rtn le_parse_feature_req: le_send_feature_rsp: 5c99 da200009 arg 9 ,rega 5c9a da400009 arg ll_feature_rsp ,regb 5c9b 20405842 call le_fifo_malloc_tx_ll 5c9c 58000001 setarg param_le_features 5c9d e0a40000 istore 8 ,contw 5c9e 20600000 rtn le_parse_version_ind: 5c9f 20748000 rtn master le_send_version_ind: 5ca0 da200006 arg 6 ,rega 5ca1 da40000c arg ll_version_ind ,regb 5ca2 20405842 call le_fifo_malloc_tx_ll 5ca3 6802c510 fetch 5 ,mem_lmp_version 5ca4 e0a28000 istore 5 ,contw 5ca5 20600000 rtn le_parse_ping_req: 5ca6 da400013 arg ll_ping_rsp ,regb 5ca7 20205ca8 branch le_send_ll_one_lenth le_send_ll_one_lenth: 5ca8 da200001 arg 1 ,rega 5ca9 20205842 branch le_fifo_malloc_tx_ll le_parse_enc_req: 5caa e8c40000 ifetch 8 ,contr 5cab 600444cd store 8 ,mem_le_rand 5cac e8c10000 ifetch 2 ,contr 5cad 600144cb store 2 ,mem_le_ediv 5cae e8c40000 ifetch 8 ,contr 5caf 600444aa store 8 ,mem_le_skdm 5cb0 e8c20000 ifetch 4 ,contr 5cb1 60024411 store 4 ,mem_le_ivm 5cb2 20405ccf call le_send_enc_rsp 5cb3 473d402f bpatchx patch2f_2 ,mem_patch2f 5cb4 6800c4c4 fetch 1 ,mem_le_pairing_state 5cb5 c002dcbc beq flag_le_pairing_after_auth ,le_parse_enc_req_after_auth 5cb6 6800c4e9 fetch 1 ,mem_le_configuration 5cb7 c280dcbf bbit1 bit_ble_pairing_fixed_ltk ,le_parse_enc_req_fixed_ltk 5cb8 6800c217 fetch 1 ,mem_nv_data_number 5cb9 245a67be ncall load_device_list_mode_4 ,blank 5cba 6800c429 fetch 1 ,mem_ltk_exists 5cbb c0005cc4 beq 0 ,le_ltk_lost le_parse_enc_req_after_auth: 5cbc 7044c501 jam flag_le_rcv_enc_start ,mem_le_enc_state 5cbd 20405cdd call le_send_start_enc_req 5cbe 202073a2 branch generate_sk le_parse_enc_req_fixed_ltk: 5cbf 70442901 jam 1 ,mem_ltk_exists 5cc0 d8c044ea arg mem_le_fixed_ltk ,contr 5cc1 d8a04419 arg mem_le_ltk ,contw 5cc2 20407ebf call memcpy16 5cc3 20205cbc branch le_parse_enc_req_after_auth le_ltk_lost: 5cc4 473dc02f bpatchx patch2f_3 ,mem_patch2f 5cc5 7044c500 jam flag_le_enc_null ,mem_le_enc_state 5cc6 7044c400 jam flag_le_enc_null ,mem_le_pairing_state 5cc7 700a9941 jam bt_evt_le_ltk_lost ,mem_fifo_temp 5cc8 20207d86 branch ui_ipc_send_event le_send_reject_ind: 5cc9 da200002 arg 2 ,rega 5cca da40000d arg ll_reject_ind ,regb 5ccb 20405842 call le_fifo_malloc_tx_ll 5ccc 58000006 setarg le_err_pin_or_key_missing 5ccd e0a08000 istore 1 ,contw 5cce 20600000 rtn le_send_enc_rsp: 5ccf d8a044b2 arg mem_le_skds ,contw 5cd0 18007208 force 8 ,loopcnt 5cd1 2040630d call generate_random_loop 5cd2 d8a04415 arg mem_le_ivs ,contw 5cd3 18007204 force 4 ,loopcnt 5cd4 2040630d call generate_random_loop 5cd5 da20000d arg 13 ,rega 5cd6 da400004 arg ll_enc_rsp ,regb 5cd7 20405842 call le_fifo_malloc_tx_ll 5cd8 680444b2 fetch 8 ,mem_le_skds 5cd9 e0a40000 istore 8 ,contw 5cda 68024415 fetch 4 ,mem_le_ivs 5cdb e0a20000 istore 4 ,contw 5cdc 20600000 rtn le_send_start_enc_req: 5cdd da400005 arg ll_start_enc_req ,regb 5cde 20205ca8 branch le_send_ll_one_lenth le_send_start_enc_rsp: 5cdf da400006 arg ll_start_enc_rsp ,regb 5ce0 20205ca8 branch le_send_ll_one_lenth le_parse_enc_rsp: 5ce1 e8c40000 ifetch 8 ,contr 5ce2 600444b2 store 8 ,mem_le_skds 5ce3 e8c20000 ifetch 4 ,contr 5ce4 60024415 store 4 ,mem_le_ivs 5ce5 202073a2 branch generate_sk le_parse_start_enc_req: 5ce6 6800843f fetch 1 ,mem_le_state 5ce7 79207e04 set1 lestate_encryption ,pdata 5ce8 6000843f store 1 ,mem_le_state 5ce9 20600000 rtn le_parse_start_enc_rsp: 5cea 20748000 rtn master 5ceb 700a9932 jam bt_evt_le_start_enc ,mem_fifo_temp 5cec 20407d86 call ui_ipc_send_event 5ced 7044c504 jam flag_le_send_start_enc_rsp ,mem_le_enc_state 5cee 20205cdf branch le_send_start_enc_rsp le_parse_pause_enc_req: 5cef 7044c502 jam flag_le_enc_pause ,mem_le_enc_state 5cf0 20405cf3 call le_send_pause_enc_rsp 5cf1 700a9933 jam bt_evt_le_pause_enc ,mem_fifo_temp 5cf2 20207d86 branch ui_ipc_send_event le_send_pause_enc_rsp: 5cf3 da40000b arg ll_pause_enc_rsp ,regb 5cf4 20205ca8 branch le_send_ll_one_lenth le_parse_feature_rsp: le_parse_unknown_rsp: le_parse_pause_enc_rsp: le_parse_reject_ind: le_parse_ping_rsp: 5cf5 20600000 rtn init_lmp: 5cf6 20758000 rtn wake init_lmp_work: 5cf7 473e402f bpatchx patch2f_4 ,mem_patch2f 5cf8 58000000 setarg 0 5cf9 60008048 store 1 ,mem_lmp_to_send 5cfa 60008055 store 1 ,mem_conn_sm 5cfb 60008078 store 1 ,mem_lmo_opcode1 5cfc 6000807c store 1 ,mem_lmo_opcode2 5cfd 6000c158 store 1 ,mem_esco_addr 5cfe 600084d7 store 1 ,mem_auth_enable 5cff 6000816d store 1 ,mem_connection_options 5d00 600089b5 store 1 ,mem_pairing_auth 5d01 70455b00 jam switch_flag_init ,mem_switch_flag 5d02 70022900 jam 0 ,mem_switch_fail_master_count 5d03 7004d800 jam null_encryp ,mem_wait_encryption init_lmp_reinit: 5d04 7009b500 jam 0 ,mem_pairing_auth 5d05 7009b400 jam 0 ,mem_sp_localsm 5d06 7004d100 jam 0 ,mem_lmp_conn_state parse_rx_done: 5d07 20600000 rtn parse_lmp: 5d08 473ec02f bpatchx patch2f_5 ,mem_patch2f 5d09 2054e2ff call setlocalsm_master ,master 5d0a 2454e303 ncall setlocalsm_slave ,master 5d0b 204062bc call lmo_fifo_check 5d0c 247a0000 nrtn blank 5d0d 6800804c fetch 1 ,mem_state_map 5d0e c4030000 rtnbit0 smap_rxlmp 5d0f 793ffe06 set0 smap_rxlmp ,pdata 5d10 793f8001 set0 mark_rxbuf_inuse ,mark 5d11 6000804c store 1 ,mem_state_map 5d12 68008551 fetch 1 ,mem_rxbuf 5d13 6808804c fetcht 1 ,mem_state_map 5d14 2feffe00 isolate1 smap_lmptidinit ,pdata 5d15 79208401 setflag true ,smap_lmptid ,temp 5d16 6008804c storet 1 ,mem_state_map 5d17 18410402 and_into 0x2 ,temp 5d18 6008807f storet 1 ,mem_lmo_tid2 5d19 6808804c fetcht 1 ,mem_state_map 5d1a 1fe37e00 rshift pdata ,pdata 5d1b 6000807d store 1 ,mem_lmi_opcode2 5d1c 473f402f bpatchx patch2f_6 ,mem_patch2f 5d1d 6800807d fetch 1 ,mem_lmi_opcode2 5d1e c03fdd66 beq lmp_escape ,parse_lmp_escape 5d1f c001ddb1 beq lmp_accepted ,parse_lmp_accepted 5d20 c0025dc2 beq lmp_not_accepted ,parse_lmp_not_accepted 5d21 c01e5d59 beq lmp_set_afh ,parse_lmp_set_afh 5d22 c002dd55 beq lmp_clkoffset_req ,parse_lmp_clkoffset_req 5d23 c007dfa8 beq lmp_encryption_mode_req ,parse_lmp_encryption_mode_req 5d24 c0085e24 beq lmp_encryption_key_size_req ,parse_lmp_crypt_key 5d25 c011de42 beq lmp_auto_rate ,parse_lmp_auto_rate 5d26 c01cdfc1 beq lmp_test_control ,parse_lmp_test_control 5d27 c01c5fbc beq lmp_test_activate ,parse_lmp_test_activate 5d28 c018de27 beq lmp_setup_complete ,parse_lmp_setup_complete 5d29 c01bdeb0 beq lmp_supervision_timeout ,parse_lmp_supervision_timeout 5d2a c013deac beq lmp_features_req ,parse_lmp_features_req 5d2b c019dea9 beq lmp_host_connection_req ,parse_lmp_conn_req 5d2c c012deae beq lmp_version_req ,parse_lmp_version_req 5d2d c0135e3e beq lmp_version_res ,parse_lmp_version_res 5d2e c003de36 beq lmp_detach ,parse_lmp_detach 5d2f c016de2d beq lmp_max_slot ,parse_lmp_max_slot 5d30 c0175e2e beq lmp_max_slot_req ,parse_lmp_max_slot_req 5d31 c000dea5 beq lmp_name_req ,parse_lmp_name_req 5d32 c0015e90 beq lmp_name_res ,parse_lmp_name_res 5d33 c0145fb3 beq lmp_features_res ,parse_lmp_features_res 5d34 c004de86 beq lmp_comb_key ,parse_lmp_comb_key 5d35 c005de5f beq lmp_au_rand ,parse_lmp_au_rand 5d36 c0045e43 beq lmp_in_rand ,parse_lmp_in_rand 5d37 c0065e6a beq lmp_sres ,parse_lmp_sres 5d38 c00fde3a beq lmp_incr_power_req ,parse_lmp_incr_power 5d39 c0105e3c beq lmp_decr_power_req ,parse_lmp_decr_power 5d3a c010deca beq lmp_max_power ,parse_lmp_max_power 5d3b c0115eca beq lmp_min_power ,parse_lmp_min_power 5d3c c01adecb beq lmp_page_mode_req ,parse_lmp_page_mode_req 5d3d c01b5ecc beq lmp_page_scan_mode_req ,parse_lmp_page_scan_mode_req 5d3e c0125eca beq lmp_preferred_rate ,parse_lmp_preferred_rate 5d3f c01a5ecd beq lmp_slot_offset ,parse_lmp_slot_offset 5d40 c00bded6 beq lmp_sniff_req ,parse_lmp_sniff_req 5d41 c008def2 beq lmp_start_encryption_req ,parse_lmp_start_encryption_req 5d42 c0095ef6 beq lmp_stop_encryption_req ,parse_lmp_stop_encryption_req 5d43 c009def8 beq lmp_switch_req ,parse_lmp_switch_req 5d44 c006df0a beq lmp_temp_rand ,parse_lmp_temp_rand 5d45 c0075f0a beq lmp_temp_key ,parse_lmp_temp_key 5d46 c017deaa beq lmp_timing_accuracy_req ,parse_lmp_timing_accuracy_req 5d47 c0185f0a beq lmp_timing_accuracy_res ,parse_lmp_timing_accuracy_res 5d48 c0055f0a beq lmp_unit_key ,parse_lmp_unit_key 5d49 c00c5f0b beq lmp_unsniff_req ,parse_lmp_unsniff_req 5d4a c0195f0a beq lmp_use_semi_permanent_key ,parse_lmp_use_semi_permanend_key 5d4b c01edf10 beq lmp_encapsulated_header ,parse_lmp_encapsulated_header 5d4c c01f5f51 beq lmp_encapsulated_payload ,parse_lmp_encapsulated_payload 5d4d c01fdf4b beq lmp_simple_pairing_confirm ,parse_simple_pairing_confirm 5d4e c0205f78 beq lmp_simple_pairing_number ,parse_lmp_simple_pairing_number 5d4f c020df8a beq lmp_dhkey_check ,parse_dhkey_check 5d50 c0035fa7 beq lmp_clkoffset_res ,parse_lmp_clkoffset_res 5d51 c01d5d57 beq lmp_enc_key_size_mask_req ,parse_enc_key_size_mask_req reject_unknown_packet: 5d52 70007e19 jam unknown_lmp_pdu ,mem_lmo_reason2 reject_lmp_packet: 5d53 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 5d54 20600000 rtn parse_lmp_clkoffset_req: 5d55 70007c06 jam lmp_clkoffset_res ,mem_lmo_opcode2 5d56 20600000 rtn parse_enc_key_size_mask_req: 5d57 70007c3b jam lmp_enc_key_size_mask_res ,mem_lmo_opcode2 5d58 20600000 rtn parse_lmp_set_afh: 5d59 68020552 fetch 4 ,mem_rxbuf + 1 5d5a 1fe3fe00 lshift pdata ,pdata 5d5b 600240d2 store 4 ,mem_afh_instant 5d5c 68008556 fetch 1 ,mem_rxbuf + 5 5d5d 6000c0d9 store 1 ,mem_afh_new_mod 5d5e 68028557 fetch 5 ,mem_rxbuf + 6 5d5f 6002c0e7 store 5 ,mem_afh_map_new 5d60 6802855c fetch 5 ,mem_rxbuf + 11 5d61 e0a28000 istore 5 ,contw 5d62 68008031 fetch 1 ,mem_mode 5d63 79207e03 set1 afh_change ,pdata 5d64 60008031 store 1 ,mem_mode 5d65 20600000 rtn parse_lmp_escape: 5d66 473fc02f bpatchx patch2f_7 ,mem_patch2f 5d67 68008552 fetch 1 ,mem_rxbuf + 1 5d68 79207e07 set1 7 ,pdata 5d69 6000807d store 1 ,mem_lmi_opcode2 5d6a c040dd88 beq lmp_ext_accepted ,parse_lmpext_accepted 5d6b c0415d8d beq lmp_not_accepted_ext ,parse_lmpext_not_accepted 5d6c c04adeb1 beq lmp_sniff_subrating_req ,parse_lmp_sniff_subrating_req 5d6d c04b5eca beq lmp_sniff_subrating_res ,parse_lmp_sniff_subrating_res 5d6e c045debf beq lmp_packet_type_table_req ,parse_lmpext_packet_type_table_req 5d6f c041dda5 beq lmp_ext_features_req ,parse_lmpext_features_req 5d70 c0425da7 beq lmp_ext_features_res ,parse_lmpext_features_res 5d71 c0485d7a beq lmp_ext_chn_classification_req ,parse_lmpext_chn_classification_req 5d72 c04bdd9e beq lmp_pause_encryption_req ,parse_lmpext_pause_encrypt 5d73 c04c5da3 beq lmp_resume_encryption_req ,parse_lmpext_resume_encrypt 5d74 c04cdd7d beq lmp_io_cap_req ,parse_lmpext_iocap_req 5d75 c04d5d80 beq lmp_io_cap_res ,parse_lmpext_iocap_res 5d76 c1420000 rtneq lmp_ext_features_res reject_unknown_ext_packet: 5d77 70007c82 jam lmp_not_accepted_ext ,mem_lmo_opcode2 5d78 70007e19 jam unknown_lmp_pdu ,mem_lmo_reason2 5d79 20600000 rtn parse_lmpext_chn_classification_req: 5d7a 70007c82 jam lmp_not_accepted_ext ,mem_lmo_opcode2 5d7b 70007e2e jam not_support_chn_classification ,mem_lmo_reason2 5d7c 20600000 rtn parse_lmpext_iocap_req: 5d7d 20405d82 call iocap_lmpext_load 5d7e 70007c9a jam lmp_io_cap_res ,mem_lmo_opcode2 5d7f 20600000 rtn parse_lmpext_iocap_res: 5d80 20405d82 call iocap_lmpext_load 5d81 20205d86 branch iocap_lmpext_common iocap_lmpext_load: 5d82 d8a0465e arg mem_sp_iocap_remote ,contw 5d83 68018553 fetch 3 ,mem_rxbuf + 2 5d84 e0a18000 istore 3 ,contw 5d85 20600000 rtn iocap_lmpext_common: 5d86 2020f6d8 branch master_set_mem_master_sp_flag ,true 5d87 20600000 rtn parse_lmpext_accepted: 5d88 68008554 fetch 1 ,mem_rxbuf + 3 5d89 79207e07 set1 7 ,pdata 5d8a 600084c9 store 1 ,mem_lmi_accepted_opcode 5d8b c045dd92 beq lmp_packet_type_table_req ,parse_lmpext_accepted_ptt 5d8c 20600000 rtn parse_lmpext_not_accepted: 5d8d 68008554 fetch 1 ,mem_rxbuf + 3 5d8e 79207e07 set1 7 ,pdata 5d8f 600084c9 store 1 ,mem_lmi_accepted_opcode 5d90 c045dd96 beq lmp_packet_type_table_req ,parse_lmpext_not_accepted_ptt 5d91 20600000 rtn parse_lmpext_accepted_ptt: 5d92 6800c15a fetch 1 ,mem_ptt 5d93 6808804c fetcht 1 ,mem_state_map 5d94 7d3a0405 nsetflag blank ,smap_edr ,temp 5d95 6008804c storet 1 ,mem_state_map parse_lmpext_not_accepted_ptt: 5d96 68008030 fetch 1 ,mem_state 5d97 c4028000 rtnbit0 state_init_seq 5d98 793ffe05 set0 state_init_seq ,pdata 5d99 60008030 store 1 ,mem_state 5d9a 680084d7 fetch 1 ,mem_auth_enable 5d9b 247a0000 nrtn blank 5d9c 70007c31 jam lmp_setup_complete ,mem_lmo_opcode2 5d9d 20600000 rtn parse_lmpext_pause_encrypt: 5d9e 2434dda1 nbranch parse_lmpext_pause_encrypt_slave ,master 5d9f 70007c12 jam lmp_stop_encryption_req ,mem_lmo_opcode2 5da0 202062eb branch tid_reply parse_lmpext_pause_encrypt_slave: 5da1 70007c97 jam lmp_pause_encryption_req ,mem_lmo_opcode2 5da2 20600000 rtn parse_lmpext_resume_encrypt: 5da3 204062eb call tid_reply 5da4 20205ffe branch lmp_start_encryption parse_lmpext_features_req: 5da5 70007c84 jam lmp_ext_features_res ,mem_lmo_opcode2 5da6 20600000 rtn parse_lmpext_features_res: 5da7 68088555 fetcht 1 ,mem_rxbuf + 4 5da8 18410401 and temp ,0x1 ,temp 5da9 600884d0 storet 1 ,mem_remote_sppcap 5daa 6800c1ce fetch 1 ,mem_hci_cmd 5dab c0a8ddad bne hci_cmd_wait_remote_ext_feature ,parse_lmpext_features_res_not_hci 5dac 7041ce00 jam 0 ,mem_hci_cmd parse_lmpext_features_res_not_hci: 5dad 68008055 fetch 1 ,mem_conn_sm 5dae c18a8000 rtnne conn_sm_wait_features_ext 5daf 70005504 jam conn_sm_send_conn_req ,mem_conn_sm 5db0 2020631b branch process_conn_sm parse_lmp_accepted: 5db1 47404030 bpatchx patch30_0 ,mem_patch30 5db2 68008552 fetch 1 ,mem_rxbuf + 1 5db3 600084c9 store 1 ,mem_lmi_accepted_opcode 5db4 c019ddd8 beq lmp_host_connection_req ,parse_lmp_accepted_hostconn 5db5 c0045de7 beq lmp_in_rand ,parse_lmp_accepted_inrand 5db6 c007ddee beq lmp_encryption_mode_req ,parse_lmp_accepted_enc_mode 5db7 c0085df4 beq lmp_encryption_key_size_req ,parse_lmp_accepted_enc_keysize 5db8 c008ddf5 beq lmp_start_encryption_req ,parse_lmp_accepted_start_enc 5db9 c0095dfd beq lmp_stop_encryption_req ,parse_lmp_accepted_stop_enc 5dba c00c5e13 beq lmp_unsniff_req ,parse_lmp_accepted_unsniff_req 5dbb c00bde16 beq lmp_sniff_req ,parse_lmp_accepted_sniff_req 5dbc c009ddcf beq lmp_switch_req ,parse_lmp_accepted_switch 5dbd c01edf1e beq lmp_encapsulated_header ,parse_lmp_accepted_encapsulated_header 5dbe c01f5f6a beq lmp_encapsulated_payload ,parse_lmp_accepted_encapsulated_payload 5dbf c0205f20 beq lmp_simple_pairing_number ,parse_lmp_accepted_simple_pairing_number 5dc0 c020df3d beq lmp_dhkey_check ,parse_lmp_accepted_dhkey_check 5dc1 20600000 rtn parse_lmp_not_accepted: 5dc2 4740c030 bpatchx patch30_1 ,mem_patch30 5dc3 68008552 fetch 1 ,mem_rxbuf + 1 5dc4 600084c9 store 1 ,mem_lmi_accepted_opcode 5dc5 c000de0a beq lmp_name_req ,parse_lmp_not_accepted_name_req 5dc6 c019dde2 beq lmp_host_connection_req ,parse_lmp_not_accepted_hostconn 5dc7 c005ddfe beq lmp_au_rand ,parse_lmp_not_accepted_aurand 5dc8 c0045e01 beq lmp_in_rand ,parse_lmp_not_accepted_inrand 5dc9 c009ddd2 beq lmp_switch_req ,parse_lmp_not_accepted_switch 5dca c0205e0b beq lmp_simple_pairing_number ,parse_lmp_not_accepted_simple_pairing_number 5dcb c020de0e beq lmp_dhkey_check ,parse_lmp_not_accepted_dhkey_check 5dcc c00c5e11 beq lmp_unsniff_req ,parse_lmp_not_accepted_unsniff_req 5dcd c00bde22 beq lmp_sniff_req ,parse_lmp_not_acdcept_sniff_req 5dce 20600000 rtn parse_lmp_accepted_switch: 5dcf 700a9920 jam bt_evt_switch_accept ,mem_fifo_temp 5dd0 20407d86 call ui_ipc_send_event 5dd1 202021dc branch role_switch_prepare0 parse_lmp_not_accepted_switch: 5dd2 700a9919 jam bt_evt_switch_not_accept ,mem_fifo_temp 5dd3 20407d86 call ui_ipc_send_event 5dd4 70455b02 jam switch_flag_not_accept ,mem_switch_flag 5dd5 58000050 setarg timer_switch_waite 5dd6 d8e00006 arg switch_wait_timer ,queue 5dd7 20207f08 branch timer_init parse_lmp_accepted_hostconn: 5dd8 680084d1 fetch 1 ,mem_lmp_conn_state 5dd9 79207e00 set1 received_conn_req ,pdata 5dda 600084d1 store 1 ,mem_lmp_conn_state 5ddb 700a9901 jam bt_evt_bb_connected ,mem_fifo_temp 5ddc 20407d86 call ui_ipc_send_event 5ddd 70007c8b jam lmp_packet_type_table_req ,mem_lmo_opcode2 parse_lmp_accepted_hostconn_ctn: 5dde 68008055 fetch 1 ,mem_conn_sm 5ddf c082dd07 bne conn_sm_wait_conn_accept ,parse_rx_done 5de0 70005506 jam conn_sm_auth_pair ,mem_conn_sm 5de1 20600000 rtn parse_lmp_not_accepted_hostconn: 5de2 7004ca0b jam acl_connection_already_exists ,mem_disconn_reason_send 5de3 70007c07 jam lmp_detach ,mem_lmo_opcode2 5de4 70005500 jam conn_sm_standby ,mem_conn_sm 5de5 2020dd07 branch parse_rx_done ,true 5de6 20600000 rtn parse_lmp_accepted_inrand: 5de7 6800c1bd fetch 1 ,mem_link_key_exists 5de8 247a0000 nrtn blank 5de9 2040244f call clear_linkkey 5dea 20405ffc call lmp_generate_key 5deb 20748000 rtn master 5dec 79200021 set1 mark_slave_in_rand_accepted ,mark 5ded 20600000 rtn parse_lmp_accepted_enc_mode: 5dee 24748000 nrtn master 5def 70007c10 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 5df0 6800804c fetch 1 ,mem_state_map 5df1 c4010000 rtnbit0 smap_encryption 5df2 70007c12 jam lmp_stop_encryption_req ,mem_lmo_opcode2 5df3 20600000 rtn parse_lmp_accepted_enc_keysize: 5df4 20205ffe branch lmp_start_encryption parse_lmp_accepted_start_enc: 5df5 20406059 call send_create_conn_start_l2cap_timer_sm 5df6 68008030 fetch 1 ,mem_state 5df7 c3820000 rtnbit1 state_conn_comp 5df8 70007c31 jam lmp_setup_complete ,mem_lmo_opcode2 5df9 68008055 fetch 1 ,mem_conn_sm 5dfa c1850000 rtnne conn_sm_encrypt_wait 5dfb 7000550b jam conn_sm_encrypt_wait_clear ,mem_conn_sm 5dfc 20600000 rtn parse_lmp_accepted_stop_enc: 5dfd 20600000 rtn parse_lmp_not_accepted_aurand: parse_lmp_not_accepted_aurand_send_detach: 5dfe 70007c07 jam lmp_detach ,mem_lmo_opcode2 5dff 7004ca13 jam other_end_terminated ,mem_disconn_reason_send 5e00 20600000 rtn parse_lmp_not_accepted_inrand: 5e01 68008553 fetch 1 ,mem_rxbuf + 2 5e02 c0035e07 beq key_missing ,parse_lmp_inrand_key_missing 5e03 c18c0000 rtnne pairing_not_allowed 5e04 7004ca18 jam pairing_not_allowed ,mem_disconn_reason_send 5e05 70007c07 jam lmp_detach ,mem_lmo_opcode2 5e06 20600000 rtn parse_lmp_inrand_key_missing: 5e07 7004ca06 jam key_missing ,mem_disconn_reason_send 5e08 70007c07 jam lmp_detach ,mem_lmo_opcode2 5e09 20600000 rtn parse_lmp_not_accepted_name_req: 5e0a 20600000 rtn parse_lmp_not_accepted_simple_pairing_number: 5e0b 7009ae00 jam sp_stat_null ,mem_sp_state 5e0c 70007c07 jam lmp_detach ,mem_lmo_opcode2 5e0d 20205d07 branch parse_rx_done parse_lmp_not_accepted_dhkey_check: 5e0e 7009ae00 jam sp_stat_null ,mem_sp_state 5e0f 70007c07 jam lmp_detach ,mem_lmo_opcode2 5e10 20205d07 branch parse_rx_done parse_lmp_not_accepted_unsniff_req: 5e11 700a9924 jam bt_evt_unsniff_not_accept ,mem_fifo_temp 5e12 20207d86 branch ui_ipc_send_event parse_lmp_accepted_unsniff_req: 5e13 700a9923 jam bt_evt_unsniff_accept ,mem_fifo_temp 5e14 20407d86 call ui_ipc_send_event 5e15 202026e9 branch sniff_exit parse_lmp_accepted_sniff_req: 5e16 700a9922 jam bt_evt_sniff_accept ,mem_fifo_temp 5e17 20407d86 call ui_ipc_send_event 5e18 58000000 setarg 0 5e19 60010075 store 2 ,mem_dsniff 5e1a 680141e3 fetch 2 ,mem_sniff_param_interval 5e1b 1fe3fe00 lshift pdata ,pdata 5e1c 60010032 store 2 ,mem_tsniff 5e1d 6800c1e5 fetch 1 ,mem_sniff_param_attempt 5e1e 60008073 store 1 ,mem_sniff_attempt 5e1f 6800c1e7 fetch 1 ,mem_sniff_param_timeout 5e20 60008074 store 1 ,mem_sniff_timeout 5e21 202026c6 branch sniff_init parse_lmp_not_acdcept_sniff_req: 5e22 700a9921 jam bt_evt_sniff_not_accept ,mem_fifo_temp 5e23 20207d86 branch ui_ipc_send_event parse_lmp_crypt_key: 5e24 68088552 fetcht 1 ,mem_rxbuf + 1 5e25 60088054 storet 1 ,mem_key_size 5e26 20205e38 branch accept_lmp_msg parse_lmp_setup_complete: 5e27 680084d1 fetch 1 ,mem_lmp_conn_state 5e28 79207e02 set1 received_setup_complete ,pdata 5e29 600084d1 store 1 ,mem_lmp_conn_state 5e2a c3818000 rtnbit1 sent_setup_complete 5e2b 70007c31 jam lmp_setup_complete ,mem_lmo_opcode2 5e2c 20205d07 branch parse_rx_done parse_lmp_max_slot: 5e2d 20600000 rtn parse_lmp_max_slot_req: 5e2e 6800c0d0 fetch 1 ,mem_max_slot 5e2f 68088552 fetcht 1 ,mem_rxbuf + 1 5e30 98467c00 isub temp ,null 5e31 20215e38 branch accept_lmp_msg ,positive 5e32 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 5e33 70007e1f jam unspecified_error ,mem_lmo_reason2 5e34 70007d2e jam lmp_max_slot_req ,mem_lmi_opcode2 5e35 20600000 rtn parse_lmp_detach: 5e36 20406157 call prepare_disconnect 5e37 20205e38 branch accept_lmp_msg accept_lmp_msg: 5e38 70007c03 jam lmp_accepted ,mem_lmo_opcode2 5e39 20600000 rtn parse_lmp_incr_power: 5e3a 70007c21 jam lmp_max_power ,mem_lmo_opcode2 5e3b 20600000 rtn parse_lmp_decr_power: 5e3c 70007c22 jam lmp_min_power ,mem_lmo_opcode2 5e3d 20600000 rtn parse_lmp_version_res: 5e3e 68008055 fetch 1 ,mem_conn_sm 5e3f c1098000 rtneq conn_sm_wait_version 5e40 70005502 jam conn_sm_send_features ,mem_conn_sm 5e41 20600000 rtn parse_lmp_auto_rate: 5e42 20600000 rtn parse_lmp_in_rand: 5e43 20405ff9 call lmp_copy_rand 5e44 7004d401 jam pincode_state_wait_pincode ,mem_pincode_state 5e45 700a990a jam bt_evt_pincode_req ,mem_fifo_temp 5e46 20407d86 call ui_ipc_send_event 5e47 204062f3 call tid_check 5e48 2420e001 nbranch lmp_accept_inrand ,true 5e49 2434de4e nbranch parse_lmp_inrand_res ,master 5e4a 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 5e4b 70007d08 jam lmp_in_rand ,mem_lmi_opcode2 5e4c 70007e23 jam transaction_collision ,mem_lmo_reason2 5e4d 20600000 rtn parse_lmp_inrand_res: 5e4e 6800804b fetch 1 ,mem_op 5e4f 79207e02 set1 op_inrand_req ,pdata 5e50 6000804b store 1 ,mem_op 5e51 20600000 rtn pop_tid_follow: 5e52 6808804c fetcht 1 ,mem_state_map 5e53 7d3a0401 nsetflag blank ,smap_lmptid ,temp 5e54 6008804c storet 1 ,mem_state_map 5e55 20600000 rtn push_tid_follow: 5e56 6800807f fetch 1 ,mem_lmo_tid2 5e57 1fe37e00 rshift pdata ,pdata 5e58 1fe17e01 and_into 1 ,pdata 5e59 20600000 rtn parse_lmp_au_rand_moudle: 5e5a 6800c217 fetch 1 ,mem_nv_data_number 5e5b 207a0000 rtn blank 5e5c 680089b5 fetch 1 ,mem_pairing_auth 5e5d 205a67b2 call load_device_list ,blank 5e5e 20600000 rtn parse_lmp_au_rand: 5e5f 20405e5a call parse_lmp_au_rand_moudle 5e60 20405e56 call push_tid_follow 5e61 600084d5 store 1 ,mem_sres_tid 5e62 20405ff9 call lmp_copy_rand 5e63 70007c0c jam lmp_sres ,mem_lmo_opcode2 5e64 6800c1bd fetch 1 ,mem_link_key_exists 5e65 247a0000 nrtn blank 5e66 68008030 fetch 1 ,mem_state 5e67 c3830000 rtnbit1 state_combkey 5e68 70007e06 jam key_missing ,mem_lmo_reason2 5e69 20205d53 branch reject_lmp_packet parse_lmp_sres: 5e6a da200040 arg mem_plap ,rega 5e6b 20407288 call function_e1 5e6c 68020552 fetch 4 ,mem_rxbuf + 1 5e6d 680a0592 fetcht 4 ,mem_input_store 5e6e 98467c00 isub temp ,null 5e6f 2022de73 branch authentication_ok ,zero 5e70 70007c07 jam lmp_detach ,mem_lmo_opcode2 5e71 7004ca05 jam authentication_failure_error ,mem_disconn_reason_send 5e72 20600000 rtn authentication_ok: 5e73 20405e77 call authentication_ok_common 5e74 6800c65a fetch 1 ,mem_ssp_enable 5e75 203a5f3e branch pairing_success ,blank 5e76 20600000 rtn authentication_ok_common: 5e77 20407386 call copy_aco 5e78 204021b2 call linkkey_ready 5e79 6800804b fetch 1 ,mem_op 5e7a 2feffe01 isolate1 op_auth_req ,pdata 5e7b 793ffe01 set0 op_auth_req ,pdata 5e7c 6000804b store 1 ,mem_op 5e7d 68008055 fetch 1 ,mem_conn_sm 5e7e c00cde81 beq conn_sm_auth_wait ,authentication_ok_conn_sm 5e7f c00c5e81 beq conn_sm_pairing_wait ,authentication_ok_conn_sm 5e80 20600000 rtn authentication_ok_conn_sm: 5e81 680089b5 fetch 1 ,mem_pairing_auth 5e82 c1800000 rtnne defalt_pairing_auth 5e83 6800804c fetch 1 ,mem_state_map 5e84 c3810000 rtnbit1 smap_encryption 5e85 202063b1 branch host_create_conn_encrypt parse_lmp_comb_key: 5e86 da200552 arg mem_rxbuf + 1 ,rega 5e87 da400582 arg mem_kinit ,regb 5e88 d8a00562 arg mem_random_number ,contw 5e89 20407352 call xor16 5e8a da200040 arg mem_plap ,rega 5e8b 20406311 call generate_linkkey 5e8c 70007c0b jam lmp_au_rand ,mem_lmo_opcode2 5e8d 68008030 fetch 1 ,mem_state 5e8e c3035ffc bbit0 state_combkey ,lmp_generate_key 5e8f 20600000 rtn parse_lmp_name_res: 5e90 6801015f fetch 2 ,mem_len 5e91 1fe0f3fd add pdata ,-3 ,loopcnt 5e92 68088552 fetcht 1 ,mem_rxbuf + 1 5e93 58000101 setarg mem_tmp_buffer 5e94 98408a00 iadd temp ,contw 5e95 d8c00554 arg mem_rxbuf + 3 ,contr 5e96 20407f01 call memcpy 5e97 68088053 fetcht 1 ,mem_name_offset 5e98 68008553 fetch 1 ,mem_rxbuf + 2 5e99 98467e00 isub temp ,pdata 5e9a 1fe67c0e sub pdata ,14 ,null 5e9b 20215ea0 branch parse_lmp_name_res_end ,positive 5e9c 1840fe0e add temp ,14 ,pdata 5e9d 60008053 store 1 ,mem_name_offset 5e9e 70007c01 jam lmp_name_req ,mem_lmo_opcode2 5e9f 20600000 rtn parse_lmp_name_res_end: 5ea0 6800804c fetch 1 ,mem_state_map 5ea1 79207e03 set1 smap_name_res ,pdata 5ea2 6000804c store 1 ,mem_state_map 5ea3 c2826006 bbit1 smap_name_req ,lmp_disconnect 5ea4 20600000 rtn parse_lmp_name_req: 5ea5 68008552 fetch 1 ,mem_rxbuf + 1 5ea6 6000807d store 1 ,mem_lmi_opcode2 5ea7 70007c02 jam lmp_name_res ,mem_lmo_opcode2 5ea8 20600000 rtn parse_lmp_conn_req: 5ea9 20205e38 branch accept_lmp_msg parse_lmp_timing_accuracy_req: 5eaa 70007c30 jam lmp_timing_accuracy_res ,mem_lmo_opcode2 5eab 20600000 rtn parse_lmp_features_req: 5eac 70007c28 jam lmp_features_res ,mem_lmo_opcode2 5ead 20600000 rtn parse_lmp_version_req: 5eae 70007c26 jam lmp_version_res ,mem_lmo_opcode2 5eaf 20600000 rtn parse_lmp_supervision_timeout: 5eb0 20600000 rtn parse_lmp_sniff_subrating_req: 5eb1 68010032 fetch 2 ,mem_tsniff 5eb2 98000400 iforce temp 5eb3 68008553 fetch 1 ,mem_rxbuf + 2 5eb4 60008095 store 1 ,mem_subsniff_rate 5eb5 984f8400 imul32 temp ,temp 5eb6 68010554 fetch 2 ,mem_rxbuf + 3 5eb7 1fe3fe00 lshift pdata ,pdata 5eb8 60010096 store 2 ,mem_subsniff_tcmax 5eb9 68020556 fetch 4 ,mem_rxbuf + 5 5eba 1fe3fe00 lshift pdata ,pdata 5ebb 60020091 store 4 ,mem_subsniff_instant 5ebc 18427e00 deposit temp 5ebd 60010098 store 2 ,mem_subsniff_tsniff 5ebe 20600000 rtn parse_lmpext_packet_type_table_req: 5ebf 6808c15a fetcht 1 ,mem_ptt 5ec0 68008553 fetch 1 ,mem_rxbuf + 2 5ec1 9842fc00 ixor temp ,null 5ec2 2422dd77 nbranch reject_unknown_ext_packet ,zero 5ec3 2feffe00 isolate1 0 ,pdata 5ec4 6800804c fetch 1 ,mem_state_map 5ec5 7920fe05 setflag true ,smap_edr ,pdata 5ec6 6000804c store 1 ,mem_state_map 5ec7 70007c81 jam lmp_ext_accepted ,mem_lmo_opcode2 5ec8 70007d8b jam lmp_packet_type_table_req ,mem_lmi_opcode2 5ec9 20600000 rtn parse_lmp_sniff_subrating_res: parse_lmp_preferred_rate: parse_lmp_max_power: parse_lmp_min_power: 5eca 20600000 rtn parse_lmp_page_mode_req: 5ecb 20205e38 branch accept_lmp_msg parse_lmp_page_scan_mode_req: 5ecc 20205e38 branch accept_lmp_msg parse_lmp_slot_offset: 5ecd 68010552 fetch 2 ,mem_rxbuf + 1 5ece 60010171 store 2 ,mem_slot_offset 5ecf 20600000 rtn parse_lmp_sniff_req_check_sniff_para: 5ed0 68010555 fetch 2 ,mem_rxbuf + 4 5ed1 6808c172 fetcht 1 ,mem_lpm_mult 5ed2 984ffe00 imul32 temp ,pdata 5ed3 d8400640 arg 0x640 ,temp 5ed4 98467c00 isub temp ,null 5ed5 20600000 rtn parse_lmp_sniff_req: 5ed6 68010557 fetch 2 ,mem_rxbuf + 6 5ed7 203a5ef0 branch lmp_reject_sniff ,blank 5ed8 20405ed0 call parse_lmp_sniff_req_check_sniff_para 5ed9 20215ef0 branch lmp_reject_sniff ,positive 5eda 6800c092 fetch 1 ,mem_device_option 5edb 1fe67c0a sub pdata ,dvc_op_module ,null 5edc 2042bcd5 call module_set_lpm_mult_2 ,zero 5edd 68008030 fetch 1 ,mem_state 5ede c280def0 bbit1 state_insniff ,lmp_reject_sniff 5edf 68010553 fetch 2 ,mem_rxbuf + 2 5ee0 1fe3fe00 lshift pdata ,pdata 5ee1 60010075 store 2 ,mem_dsniff 5ee2 68010555 fetch 2 ,mem_rxbuf + 4 5ee3 1fe3fe00 lshift pdata ,pdata 5ee4 60010032 store 2 ,mem_tsniff 5ee5 68010557 fetch 2 ,mem_rxbuf + 6 5ee6 60008073 store 1 ,mem_sniff_attempt 5ee7 98000400 iforce temp 5ee8 68010559 fetch 2 ,mem_rxbuf + 8 5ee9 60008074 store 1 ,mem_sniff_timeout 5eea 98467c00 isub temp ,null 5eeb 24215eed nbranch set_big_value_to_attempt ,positive 5eec 60008073 store 1 ,mem_sniff_attempt set_big_value_to_attempt: 5eed 70007c03 jam lmp_accepted ,mem_lmo_opcode2 5eee 70007d17 jam lmp_sniff_req ,mem_lmi_opcode2 5eef 20600000 rtn lmp_reject_sniff: 5ef0 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 5ef1 20205d53 branch reject_lmp_packet parse_lmp_start_encryption_req: 5ef2 20405e38 call accept_lmp_msg 5ef3 20405ff9 call lmp_copy_rand 5ef4 2040728b call function_e3 5ef5 202026b8 branch start_encryption parse_lmp_stop_encryption_req: 5ef6 20405e38 call accept_lmp_msg 5ef7 202026c0 branch stop_encryption parse_lmp_switch_req: 5ef8 68020552 fetch 4 ,mem_rxbuf + 1 5ef9 1fe3fe00 lshift pdata ,pdata 5efa 2034df04 branch parse_lmp_switch_accept ,master 5efb 6808c1bd fetcht 1 ,mem_link_key_exists 5efc 243a5f01 nbranch parse_lmp_switch_req_clear_mark ,blank parse_lmp_switch_req_not_accept: 5efd 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 5efe 70007d13 jam lmp_switch_req ,mem_lmi_opcode2 5eff 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 5f00 20600000 rtn parse_lmp_switch_req_clear_mark: 5f01 70007c34 jam lmp_slot_offset ,mem_lmo_opcode2 5f02 70005500 jam 0 ,mem_conn_sm 5f03 202021d9 branch role_switch_prepare parse_lmp_switch_accept: 5f04 204021d9 call role_switch_prepare 5f05 79200022 set1 mark_reconn_recieve_switch ,mark 5f06 6800816d fetch 1 ,mem_connection_options 5f07 793ffe02 set0 connection_switch ,pdata 5f08 6000816d store 1 ,mem_connection_options 5f09 20205e38 branch accept_lmp_msg parse_lmp_temp_rand: parse_lmp_temp_key: parse_lmp_timing_accuracy_res: parse_lmp_unit_key: parse_lmp_use_semi_permanend_key: 5f0a 20600000 rtn parse_lmp_unsniff_req: 5f0b 70007c03 jam lmp_accepted ,mem_lmo_opcode2 5f0c 70007d18 jam lmp_unsniff_req ,mem_lmi_opcode2 5f0d 700a992e jam bt_evt_remote_unsniff ,mem_fifo_temp 5f0e 20407d86 call ui_ipc_send_event 5f0f 202026e9 branch sniff_exit parse_lmp_encapsulated_header: 5f10 68008552 fetch 1 ,mem_rxbuf + 1 5f11 c080df1c bne encapsulated_major_type_p192 ,parse_lmp_encapsulated_header_reject 5f12 68008553 fetch 1 ,mem_rxbuf + 2 5f13 c080df1c bne encapsulated_minor_type_p192 ,parse_lmp_encapsulated_header_reject 5f14 68008554 fetch 1 ,mem_rxbuf + 3 5f15 c0985f1c bne encapsulated_len_p192 ,parse_lmp_encapsulated_header_reject 5f16 204062fc call check_localsm 5f17 2020df19 branch parse_lmp_encapsulated_header_master ,true 5f18 7009ae01 jam sp_stat_key_recv ,mem_sp_state parse_lmp_encapsulated_header_master: 5f19 70007c03 jam lmp_accepted ,mem_lmo_opcode2 5f1a 70007d3d jam lmp_encapsulated_header ,mem_lmi_opcode2 5f1b 20205d07 branch parse_rx_done parse_lmp_encapsulated_header_reject: 5f1c 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 5f1d 20205d53 branch reject_lmp_packet parse_lmp_accepted_encapsulated_header: 5f1e 70007c3e jam lmp_encapsulated_payload ,mem_lmo_opcode2 5f1f 20600000 rtn parse_lmp_accepted_simple_pairing_number: 5f20 6800c662 fetch 1 ,mem_ssp_mode_flag 5f21 c000df27 beq ssp_mode_ssp_pin_flag ,parse_lmp_accepted_simple_pairing_number_ssp_pin 5f22 c0015f2b beq ssp_mode_passkey_entry_flag ,parse_lmp_accepted_simple_pairing_number_passkey parse_lmp_accepted_simple_pairing_number_common: 5f23 204062fc call check_localsm 5f24 20608000 rtn true 5f25 7009ae08 jam sp_stat_confirm_recv ,mem_sp_state 5f26 20600000 rtn parse_lmp_accepted_simple_pairing_number_ssp_pin: 5f27 20407962 call g_noninit_number_confirm 5f28 700a9935 jam bt_evt_bt_gkey_generate ,mem_fifo_temp 5f29 20407d86 call ui_ipc_send_event 5f2a 20205f23 branch parse_lmp_accepted_simple_pairing_number_common parse_lmp_accepted_simple_pairing_number_passkey: 5f2b 204062fc call check_localsm 5f2c 20608000 rtn true 5f2d 6800c663 fetch 1 ,mem_authentication_passkey_times 5f2e c009df3b beq 19 ,authentication_passkey_end 5f2f 1fe0fe01 increase 1 ,pdata 5f30 6000c663 store 1 ,mem_authentication_passkey_times authentication_passkey: 5f31 7009b001 jam sp_flag_commit ,mem_sp_flag 5f32 7009ae04 jam sp_stat_commit_calc ,mem_sp_state 5f33 6800c663 fetch 1 ,mem_authentication_passkey_times 5f34 1fe20e00 copy pdata ,queue 5f35 6803468a fetch 6 ,mem_pin 5f36 afefffff qisolate1 pdata 5f37 58000080 setarg 0x80 5f38 7920fe00 setflag true ,0 ,pdata 5f39 6000c664 store 1 ,mem_passkey_1bit 5f3a 20600000 rtn authentication_passkey_end: 5f3b 7009ae08 jam sp_stat_confirm_recv ,mem_sp_state 5f3c 20600000 rtn parse_lmp_accepted_dhkey_check: 5f3d 20405f43 call parse_lmp_accepted_dhkey_check_common pairing_success: 5f3e 6800c665 fetch 1 ,mem_flag_pairing_state 5f3f 207a0000 rtn blank 5f40 70466500 jam flag_pairing_state_not_pairing ,mem_flag_pairing_state 5f41 700a9938 jam bt_evt_bt_pairing_success ,mem_fifo_temp 5f42 20207d86 branch ui_ipc_send_event parse_lmp_accepted_dhkey_check_common: 5f43 204062fc call check_localsm 5f44 2440f965 ncall g_noninit ,true 5f45 2040f975 call g_init ,true 5f46 204062fc call check_localsm 5f47 20608000 rtn true 5f48 7009ae0c jam sp_stat_link_key_calc ,mem_sp_state 5f49 7009b001 jam sp_flag_commit ,mem_sp_flag 5f4a 20600000 rtn parse_simple_pairing_confirm: 5f4b d8a00a6e arg mem_sp_confirm_remote ,contw 5f4c d8c00552 arg mem_rxbuf + 1 ,contr 5f4d 20407ebf call memcpy16 5f4e 6800c662 fetch 1 ,mem_ssp_mode_flag 5f4f c1010000 rtneq ssp_mode_passkey_entry_flag 5f50 202076d8 branch master_set_mem_master_sp_flag parse_lmp_encapsulated_payload: 5f51 680089af fetch 1 ,mem_master_sp_state 5f52 c003df55 beq sp_stat_random_send ,parse_encapsulated_payload_master 5f53 680089ae fetch 1 ,mem_sp_state 5f54 c080df68 bne sp_stat_key_recv ,parse_lmp_encapsulated_payload_reject parse_encapsulated_payload_master: 5f55 680089b7 fetch 1 ,mem_sp_remote_key_recv_count 5f56 1fe60a20 sub pdata ,0x20 ,contw 5f57 24215f68 nbranch parse_lmp_encapsulated_payload_reject ,positive 5f58 d8a009c6 arg mem_sp_pubkey_remote ,contw 5f59 98a08a00 iadd contw ,contw 5f5a 68040552 fetch 8 ,mem_rxbuf + 1 5f5b e0a40000 istore 8 ,contw 5f5c 6804055a fetch 8 ,mem_rxbuf + 9 5f5d e0a40000 istore 8 ,contw 5f5e 680089b7 fetch 1 ,mem_sp_remote_key_recv_count 5f5f 1fe0fe10 increase 16 ,pdata 5f60 600089b7 store 1 ,mem_sp_remote_key_recv_count 5f61 c0985e38 bne encapsulated_len_p192 ,accept_lmp_msg parse_lmp_encapsulated_payload_completed: 5f62 204062fc call check_localsm 5f63 2020de38 branch accept_lmp_msg ,true 5f64 7009b801 jam sp_key_valid ,mem_sp_remote_key_invalid 5f65 7009ae02 jam sp_stat_key_generate ,mem_sp_state 5f66 7009b001 jam sp_flag_commit ,mem_sp_flag 5f67 20205e38 branch accept_lmp_msg parse_lmp_encapsulated_payload_reject: 5f68 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 5f69 20205d53 branch reject_lmp_packet parse_lmp_accepted_encapsulated_payload: 5f6a 680089b6 fetch 1 ,mem_sp_local_key_send_count 5f6b c0185f6e beq encapsulated_len_p192 ,parse_lmp_encapsulated_payload_all_accepted 5f6c 70007c3e jam lmp_encapsulated_payload ,mem_lmo_opcode2 5f6d 20205d07 branch parse_rx_done parse_lmp_encapsulated_payload_all_accepted: 5f6e 204062fc call check_localsm 5f6f 2020df77 branch parse_lmp_encapsulated_payload_all_accepted_master ,true 5f70 6800c662 fetch 1 ,mem_ssp_mode_flag 5f71 c0015f75 beq ssp_mode_passkey_entry_flag ,parse_lmp_encapsulated_payload_all_accepted_get_passkey 5f72 7009b001 jam sp_flag_commit ,mem_sp_flag 5f73 7009ae04 jam sp_stat_commit_calc ,mem_sp_state 5f74 20205d07 branch parse_rx_done parse_lmp_encapsulated_payload_all_accepted_get_passkey: 5f75 700a9936 jam bt_evt_bt_get_passkey ,mem_fifo_temp 5f76 20207d86 branch ui_ipc_send_event parse_lmp_encapsulated_payload_all_accepted_master: 5f77 20205d07 branch parse_rx_done parse_lmp_simple_pairing_number: 5f78 680089af fetch 1 ,mem_master_sp_state 5f79 c003df7c beq sp_stat_random_send ,parse_lmp_simple_pairing_number_master 5f7a 680089ae fetch 1 ,mem_sp_state 5f7b c0835f88 bne sp_stat_random_recv ,parse_lmp_simple_pairing_number_reject parse_lmp_simple_pairing_number_master: 5f7c d8a00a2e arg mem_sp_random_remote ,contw 5f7d 68040552 fetch 8 ,mem_rxbuf + 1 5f7e e0a40000 istore 8 ,contw 5f7f 6804055a fetch 8 ,mem_rxbuf + 9 5f80 e0a40000 istore 8 ,contw 5f81 204062fc call check_localsm 5f82 2020df86 branch parse_lmp_simple_pairing_number_master0 ,true 5f83 7009ae07 jam sp_stat_random_send ,mem_sp_state 5f84 7009b001 jam sp_flag_commit ,mem_sp_flag 5f85 20205e38 branch accept_lmp_msg parse_lmp_simple_pairing_number_master0: 5f86 7009af04 jam sp_stat_commit_calc ,mem_master_sp_state 5f87 202076d8 branch master_set_mem_master_sp_flag parse_lmp_simple_pairing_number_reject: 5f88 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 5f89 20205d53 branch reject_lmp_packet parse_dhkey_check: 5f8a 680089af fetch 1 ,mem_master_sp_state 5f8b c005df8e beq sp_stat_confirm_send ,parse_dhkey_check_master 5f8c 680089ae fetch 1 ,mem_sp_state 5f8d c0845f9d bne sp_stat_confirm_recv ,parse_lmp_dhkey_check_reject parse_dhkey_check_master: 5f8e d8a00a5e arg mem_sp_check_result ,contw 5f8f d8c00552 arg mem_rxbuf + 1 ,contr 5f90 20407ebf call memcpy16 5f91 204062fc call check_localsm 5f92 2020df9a branch parse_dhkey_check_master0 ,true 5f93 6800c662 fetch 1 ,mem_ssp_mode_flag 5f94 c000df9f beq ssp_mode_ssp_pin_flag ,number_comparison_mode number_comparison_successed: 5f95 70466100 jam 0 ,mem_flag_mode_ssp_pin 5f96 7009ae09 jam sp_stat_confirm_check ,mem_sp_state 5f97 7009b001 jam sp_flag_commit ,mem_sp_flag 5f98 70007d41 jam lmp_dhkey_check ,mem_lmi_opcode2 5f99 20205d07 branch parse_rx_done parse_dhkey_check_master0: 5f9a 7009af09 jam sp_stat_confirm_check ,mem_master_sp_state 5f9b 7009b101 jam sp_flag_commit ,mem_master_sp_flag 5f9c 20205d07 branch parse_rx_done parse_lmp_dhkey_check_reject: 5f9d 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 5f9e 20205d53 branch reject_lmp_packet number_comparison_mode: 5f9f 6800c661 fetch 1 ,mem_flag_mode_ssp_pin 5fa0 c283dfa4 bbit1 flag_mode_ssp_pin_reviceve_comparison_bit ,comparison_result 5fa1 79207e06 set1 flag_mode_ssp_pin_recieve_dhkey_bit ,pdata 5fa2 6000c661 store 1 ,mem_flag_mode_ssp_pin 5fa3 20600000 rtn comparison_result: 5fa4 c2805f95 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed 5fa5 70466100 jam 0 ,mem_flag_mode_ssp_pin 5fa6 20205f9d branch parse_lmp_dhkey_check_reject parse_lmp_clkoffset_res: 5fa7 20205d07 branch parse_rx_done parse_lmp_encryption_mode_req: 5fa8 6800816d fetch 1 ,mem_connection_options 5fa9 793ffe01 set0 connection_encrypt 5faa 6000816d store 1 ,mem_connection_options 5fab 20405e38 call accept_lmp_msg 5fac 24748000 nrtn master 5fad 68008552 fetch 1 ,mem_rxbuf + 1 5fae 6808804b fetcht 1 ,mem_op 5faf 793a0404 setflag blank ,op_stop_enc ,temp 5fb0 7d3a0405 nsetflag blank ,op_start_enc ,temp 5fb1 6008804b storet 1 ,mem_op 5fb2 20600000 rtn parse_lmp_features_res: 5fb3 680c0552 fetcht 8 ,mem_rxbuf + 1 parse_lmp_features_res_not_hci: 5fb4 68008055 fetch 1 ,mem_conn_sm 5fb5 c1818000 rtnne conn_sm_wait_features_res 5fb6 6800816d fetch 1 ,mem_connection_options 5fb7 c3025fba bbit0 connection_feature_ext ,parse_lmp_send_conn 5fb8 70005514 jam conn_sm_send_features_ext ,mem_conn_sm 5fb9 20600000 rtn parse_lmp_send_conn: 5fba 70005504 jam conn_sm_send_conn_req ,mem_conn_sm 5fbb 20600000 rtn parse_lmp_test_activate: 5fbc 6800817f fetch 1 ,mem_debug_config 5fbd 6000815b store 1 ,mem_test_mode_old_debug_config 5fbe 70007c03 jam lmp_accepted ,mem_lmo_opcode2 5fbf 70007d38 jam lmp_test_activate ,mem_lmi_opcode2 5fc0 20600000 rtn parse_lmp_test_control: 5fc1 70007c03 jam lmp_accepted ,mem_lmo_opcode2 5fc2 70007d39 jam lmp_test_control ,mem_lmi_opcode2 5fc3 18007209 force 9 ,loopcnt 5fc4 d8c00552 arg mem_rxbuf + 1 ,contr 5fc5 d8a00152 arg mem_temp_payload ,contw parse_lmp_test_xor: 5fc6 e8c08000 ifetch 1 ,contr 5fc7 1fe2fe55 xor_into 0x55 ,pdata 5fc8 e0a08000 istore 1 ,contw 5fc9 c2005fc6 loop parse_lmp_test_xor 5fca 68008152 fetch 1 ,test_mode_scenario 5fcb 68088151 fetcht 1 ,mem_tester_emulate 5fcc 793f8407 set0 tester_no_whitening ,temp 5fcd 793f8404 set0 tester_pattern_test ,temp 5fce c07fdfda beq exit_test_mode ,parse_lmp_test_control_exit 5fcf c0005ff3 beq pause_test_mode ,parse_lmp_test_control_pause 5fd0 c002dfe7 beq closed_loop_back_acl ,parse_lmp_test_control_loopback 5fd1 c003dfe6 beq acl_without_whitening ,parse_lmp_test_control_loopback_nowhite 5fd2 c0035fe7 beq closed_loop_back_sco ,parse_lmp_test_control_loopback 5fd3 c0045fe6 beq sco_without_whitening ,parse_lmp_test_control_loopback_nowhite 5fd4 c000dfdf beq zero_pattern ,parse_lmp_test_control_pattern 5fd5 c0015fdf beq one_pattern ,parse_lmp_test_control_pattern 5fd6 c001dfdf beq alt_pattern ,parse_lmp_test_control_pattern 5fd7 c004dfdf beq alt2_pattern ,parse_lmp_test_control_pattern 5fd8 c0025fdf beq pseudorandom ,parse_lmp_test_control_pattern 5fd9 20600000 rtn parse_lmp_test_control_exit: 5fda 68008151 fetch 1 ,mem_tester_emulate 5fdb 79207e03 set1 tester_exit ,pdata 5fdc 79207e02 set1 tester_change ,pdata 5fdd 60008151 store 1 ,mem_tester_emulate 5fde 20600000 rtn parse_lmp_test_control_pattern: 5fdf 79200404 set1 tester_pattern_test ,temp 5fe0 70018005 jam 5 ,mem_lch_code 5fe1 68010159 fetch 2 ,test_mode_data_length 5fe2 98007200 iforce loopcnt 5fe3 6001015f store 2 ,mem_len 5fe4 d8a00551 arg mem_rxbuf ,contw 5fe5 20407f73 call pn9 parse_lmp_test_control_loopback_nowhite: 5fe6 79200407 set1 tester_no_whitening ,temp parse_lmp_test_control_loopback: 5fe7 79200402 set1 tester_change ,temp 5fe8 18007e00 force 0 ,pdata 5fe9 6000800b store 1 ,mem_slave_rcvcnt 5fea 600100fa store 2 ,mem_tst_pktcnt_crc 5feb 600100fc store 2 ,mem_tst_pktcnt_dmh 5fec 600100f8 store 2 ,mem_tst_pktcnt_hec 5fed 600100f6 store 2 ,mem_tst_pktcnt_sync 5fee 68008153 fetch 1 ,test_mode_hopping_mode 5fef 2fe1fe00 compare fixed_freq ,pdata ,0xff 5ff0 79208406 setflag true ,tester_fixed_freq ,temp 5ff1 60088151 storet 1 ,mem_tester_emulate 5ff2 20600000 rtn parse_lmp_test_control_pause: 5ff3 793f8011 set0 mark_testmode ,mark 5ff4 70015100 jam 0 ,mem_tester_emulate 5ff5 6800817f fetch 1 ,mem_debug_config 5ff6 793ffe06 set0 debug_tx_pattern ,pdata 5ff7 6000817f store 1 ,mem_debug_config 5ff8 20600000 rtn lmp_copy_rand: 5ff9 d8c00552 arg mem_rxbuf + 1 ,contr 5ffa d8a00562 arg mem_random_number ,contw 5ffb 20207ebf branch memcpy16 lmp_generate_key: 5ffc 70007c09 jam lmp_comb_key ,mem_lmo_opcode2 5ffd 20600000 rtn lmp_start_encryption: 5ffe 24748000 nrtn master 5fff 70007c11 jam lmp_start_encryption_req ,mem_lmo_opcode2 6000 20600000 rtn lmp_accept_inrand: 6001 da2040a0 arg mem_lap ,rega 6002 20407255 call generate_kinit 6003 70007c03 jam lmp_accepted ,mem_lmo_opcode2 6004 70007d08 jam lmp_in_rand ,mem_lmi_opcode2 6005 20600000 rtn lmp_disconnect: 6006 7000720a jam 10 ,mem_conn_timer 6007 70007c07 jam lmp_detach ,mem_lmo_opcode2 6008 7004ca16 jam local_host ,mem_disconn_reason_send 6009 20600000 rtn send_lmp: 600a 47414030 bpatchx patch30_2 ,mem_patch30 600b 78547c00 disable user 600c 204062c1 call lmo_fifo_process 600d 68008048 fetch 1 ,mem_lmp_to_send 600e 207a0000 rtn blank 600f c283e03f bbit1 7 ,send_lmp_escape send_lmp0: 6010 c000e16f beq lmp_name_req ,send_lmp_name_req 6011 c00160e4 beq lmp_name_res ,send_lmp_name_res 6012 c001e04a beq lmp_accepted ,send_lmp_accepted 6013 c0026060 beq lmp_not_accepted ,send_lmp_not_accepted 6014 c013e1db beq lmp_features_req ,send_lmp_features_req 6015 c0146108 beq lmp_features_res ,send_lmp_features_res 6016 c01860f4 beq lmp_timing_accuracy_res ,send_lmp_timing_accuracy_res 6017 c012e1d6 beq lmp_version_req ,send_lmp_version_req 6018 c0136103 beq lmp_version_res ,send_lmp_version_res 6019 c018e1c3 beq lmp_setup_complete ,send_lmp_setup_complete 601a c01be16a beq lmp_supervision_timeout ,send_lmp_superto 601b c019e15c beq lmp_host_connection_req ,send_lmp_no_payload 601c c0046259 beq lmp_in_rand ,send_lmp_inrand 601d c004e24f beq lmp_comb_key ,send_lmp_comb_key 601e c005e264 beq lmp_au_rand ,send_lmp_aurand 601f c006626d beq lmp_sres ,send_lmp_sres 6020 c007e162 beq lmp_encryption_mode_req ,send_lmp_encryption_mode_req 6021 c0086292 beq lmp_encryption_key_size_req ,send_lmp_encryption_key_size_req 6022 c008e288 beq lmp_start_encryption_req ,send_lmp_start_encryption 6023 c003e152 beq lmp_detach ,send_lmp_detach 6024 c015617e beq lmp_quality_of_service_req ,send_lmp_quality_of_service_req 6025 c005617f beq lmp_unit_key ,send_lmp_unit_key 6026 c00fe1bc beq lmp_incr_power_req ,send_lmp_inc_power 6027 c00360f9 beq lmp_clkoffset_res ,send_lmp_clkoffset_res 6028 c010e15f beq lmp_max_power ,send_lmp_nopayload_reply 6029 c016e1b2 beq lmp_max_slot ,send_lmp_max_slot 602a c01761b7 beq lmp_max_slot_req ,send_lmp_max_slot_req 602b c011615f beq lmp_min_power ,send_lmp_nopayload_reply 602c c01a6180 beq lmp_slot_offset ,send_lmp_slot_offset 602d c009e195 beq lmp_switch_req ,send_lmp_switch_req 602e c00be1a4 beq lmp_sniff_req ,send_lmp_sniff_req 602f c009628f beq lmp_stop_encryption_req ,send_lmp_stop_encryption_req 6030 c017e1aa beq lmp_timing_accuracy_req ,send_lmp_timing_accuracy_req 6031 c00c61af beq lmp_unsniff_req ,send_lmp_unsniff_req 6032 c01ee1ff beq lmp_encapsulated_header ,send_lmp_encapsulated_header 6033 c01f620b beq lmp_encapsulated_payload ,send_lmp_encapsulated_payload 6034 c01fe21d beq lmp_simple_pairing_confirm ,send_lmp_simple_pairing_comfirm 6035 c0206227 beq lmp_simple_pairing_number ,send_lmp_simple_pairing_number 6036 c020e23c beq lmp_dhkey_check ,send_lmp_dhkey_check 6037 c011e24b beq lmp_auto_rate ,send_lmp_auto_rate 6038 c01de246 beq lmp_enc_key_size_mask_res ,send_lmp_enc_key_size_mask_res 6039 c002e24c beq lmp_clkoffset_req ,send_lmp_clkoffset_req 603a c014e24d beq lmp_quality_of_service ,send_lmp_quality_of_service 603b c01c624e beq lmp_test_activate ,send_lmp_test_activate 603c c01ce175 beq lmp_test_control ,send_lmp_test_control send_lmp_error: 603d 20202a8c branch assert 603e 20600000 rtn send_lmp_escape: 603f c040e06d beq lmp_ext_accepted ,send_lmpext_accepted 6040 c0426099 beq lmp_ext_features_res ,send_lmpext_features_res 6041 c0416076 beq lmp_not_accepted_ext ,send_lmpext_not_accepted 6042 c041e10d beq lmp_ext_features_req ,send_lmpext_features_req 6043 c045e118 beq lmp_packet_type_table_req ,send_lmpext_packet_type_table_req 6044 c04be14e beq lmp_pause_encryption_req ,send_lmpext_pause_encryption_req 6045 c04ce0d5 beq lmp_io_cap_req ,send_lmp_io_cap_req 6046 c04d60a4 beq lmp_io_cap_res ,send_lmpext_io_cap_res 6047 c04ae0da beq lmp_sniff_subrating_req ,send_lmpext_sniff_subrating_req 6048 c04b60db beq lmp_sniff_subrating_res ,send_lmpext_sniff_subrating_res 6049 20202a8c branch assert send_lmp_accepted: 604a 18007e02 force 2 ,pdata 604b 20406298 call msg_send_lmp 604c 68008049 fetch 1 ,mem_lmi_opcode 604d e0a08000 istore 1 ,contw 604e 204062a7 call send_lmp_follow 604f 4741c030 bpatchx patch30_3 ,mem_patch30 6050 68008049 fetch 1 ,mem_lmi_opcode 6051 c0046080 beq lmp_in_rand ,send_lmp_accepted_inrand 6052 c007e084 beq lmp_encryption_mode_req ,send_lmp_accepted_enc_mode 6053 c008608f beq lmp_encryption_key_size_req ,send_lmp_accepted_enc_key 6054 c00be05f beq lmp_sniff_req ,send_lmp_accept_sniff_req 6055 c019e092 beq lmp_host_connection_req ,send_lmp_accepted_connection 6056 c020e098 beq lmp_dhkey_check ,send_lmp_accept_dhkey_check 6057 c008e059 beq lmp_start_encryption_req ,send_create_conn_start_l2cap_timer_sm 6058 20600000 rtn send_create_conn_start_l2cap_timer_sm: 6059 68008055 fetch 1 ,mem_conn_sm 605a 207a0000 rtn blank 605b 7000551b jam conn_sm_wait_done ,mem_conn_sm 605c 5800000c setarg timer_enpt_waite 605d d8e00007 arg enpt_delay_timer ,queue 605e 20207f08 branch timer_init send_lmp_accept_sniff_req: 605f 202026c6 branch sniff_init send_lmp_not_accepted: 6060 18007e03 force 3 ,pdata 6061 20406298 call msg_send_lmp 6062 68008049 fetch 1 ,mem_lmi_opcode 6063 c005e068 beq lmp_au_rand ,send_not_accept_aurand 6064 e0a08000 istore 1 ,contw 6065 6800804a fetch 1 ,mem_lmo_reason 6066 e0a08000 istore 1 ,contw 6067 202062a7 branch send_lmp_follow send_not_accept_aurand: 6068 e0a08000 istore 1 ,contw 6069 6800804a fetch 1 ,mem_lmo_reason 606a e0a08000 istore 1 ,contw 606b d84004d5 arg mem_sres_tid ,temp 606c 202062e2 branch special_tid_store send_lmpext_accepted: 606d 18000e04 force 4 ,queue 606e 204062a0 call send_lmpext 606f 5800007f setarg lmp_escape 6070 e0a08000 istore 1 ,contw 6071 68008049 fetch 1 ,mem_lmi_opcode 6072 793ffe07 set0 7 ,pdata 6073 e0a08000 istore 1 ,contw 6074 68008049 fetch 1 ,mem_lmi_opcode 6075 202062a7 branch send_lmp_follow send_lmpext_not_accepted: 6076 18000e05 force 5 ,queue 6077 204062a0 call send_lmpext 6078 5800007f setarg lmp_escape 6079 e0a08000 istore 1 ,contw 607a 68008049 fetch 1 ,mem_lmi_opcode 607b 793ffe07 set0 7 ,pdata 607c e0a08000 istore 1 ,contw 607d 6800804a fetch 1 ,mem_lmo_reason 607e e0a08000 istore 1 ,contw 607f 202062a7 branch send_lmp_follow send_lmp_accepted_inrand: 6080 2040244f call clear_linkkey 6081 204062f3 call tid_check 6082 20608000 rtn true 6083 20205ffc branch lmp_generate_key send_lmp_accepted_enc_mode: 6084 6800804b fetch 1 ,mem_op 6085 c282e08b bbit1 op_start_enc ,send_lmp_accepted_enc_start 6086 c4020000 rtnbit0 op_stop_enc 6087 70007c12 jam lmp_stop_encryption_req ,mem_lmo_opcode2 6088 793ffe04 set0 op_stop_enc ,pdata 6089 204062eb call tid_reply 608a 2020608d branch send_lmp_accepted_enc_exit send_lmp_accepted_enc_start: 608b 70007c10 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 608c 793ffe05 set0 op_start_enc ,pdata send_lmp_accepted_enc_exit: 608d 6000804b store 1 ,mem_op 608e 20600000 rtn send_lmp_accepted_enc_key: 608f 204062fc call check_localsm 6090 2020dffe branch lmp_start_encryption ,true 6091 20600000 rtn send_lmp_accepted_connection: 6092 70007c8b jam lmp_packet_type_table_req ,mem_lmo_opcode2 6093 680084d1 fetch 1 ,mem_lmp_conn_state 6094 79207e00 set1 received_conn_req ,pdata 6095 600084d1 store 1 ,mem_lmp_conn_state 6096 700a9901 jam bt_evt_bb_connected ,mem_fifo_temp 6097 20207d86 branch ui_ipc_send_event send_lmp_accept_dhkey_check: 6098 20600000 rtn send_lmpext_features_res: 6099 18000e0c force 12 ,queue 609a 204062a0 call send_lmpext 609b 58000001 setarg 0x01 609c e0a08000 istore 1 ,contw 609d 680104ce fetch 2 ,mem_lmpext_ssp_enable 609e e0a10000 istore 2 ,contw 609f 58000000 setarg 0 60a0 e0a18000 istore 3 ,contw 60a1 58000000 setarg 0x00 60a2 e0a20000 istore 4 ,contw 60a3 202062b0 branch send_lmp_reply send_lmpext_io_cap_res: 60a4 18000e05 force 5 ,queue 60a5 204062a0 call send_lmpext 60a6 6801c65b fetch 3 ,mem_sp_iocap_local 60a7 e0a18000 istore 3 ,contw 60a8 204062b0 call send_lmp_reply 60a9 70466501 jam flag_pairing_state_pairing ,mem_flag_pairing_state 60aa 6800c65b fetch 1 ,mem_sp_iocap_local 60ab c000e0b5 beq display_yesno ,responder_iocap_display_yesno 60ac c00160af beq keyboard_only ,responder_iocap_keyboard_only 60ad c001e0bb beq no_input_no_output ,responder_iocap_no_input_no_output 60ae 20600000 rtn responder_iocap_keyboard_only: 60af 6800c65e fetch 1 ,mem_sp_iocap_remote 60b0 c00060c7 beq display_only ,responder_iocap_keyboard_only_initiator_iocap_display_only 60b1 c000e0c7 beq display_yesno ,responder_iocap_keyboard_only_initiator_iocap_display_yesno 60b2 c00160c7 beq keyboard_only ,responder_iocap_keyboard_only_initiator_iocap_keyboard_only 60b3 c001e0c1 beq no_input_no_output ,responder_iocap_keyboard_only_initiator_iocap_no_input_no_output 60b4 20600000 rtn responder_iocap_display_yesno: 60b5 6800c65e fetch 1 ,mem_sp_iocap_remote 60b6 c00060c1 beq display_only ,responder_iocap_display_yesno_initiator_iocap_display_only 60b7 c000e0c5 beq display_yesno ,responder_iocap_display_yesno_initiator_iocap_display_yesno 60b8 c00160c7 beq keyboard_only ,responder_iocap_display_yesno_initiator_iocap_keyboard_only 60b9 c001e0c1 beq no_input_no_output ,responder_iocap_display_yesno_initiator_iocap_no_input_no_output 60ba 20600000 rtn responder_iocap_no_input_no_output: 60bb 6800c65e fetch 1 ,mem_sp_iocap_remote 60bc c00060c1 beq display_only ,responder_iocap_no_input_no_output_initiator_iocap_display_only 60bd c000e0c1 beq display_yesno ,responder_iocap_no_input_no_output_initiator_iocap_display_yesno 60be c00160c1 beq keyboard_only ,responder_iocap_no_input_no_output_initiator_iocap_keyboard_only 60bf c001e0c1 beq no_input_no_output ,responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output 60c0 20600000 rtn responder_iocap_keyboard_only_initiator_iocap_no_input_no_output: responder_iocap_display_yesno_initiator_iocap_no_input_no_output: responder_iocap_display_yesno_initiator_iocap_display_only: responder_iocap_no_input_no_output_initiator_iocap_display_only: responder_iocap_no_input_no_output_initiator_iocap_display_yesno: responder_iocap_no_input_no_output_initiator_iocap_keyboard_only: responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output: set_ssp_mode_justwork: 60c1 70466203 jam ssp_mode_just_work_flag ,mem_ssp_mode_flag 60c2 6800c55c fetch 1 ,mem_classic_bt_flag 60c3 c28033e9 bbit1 flag_ssp_reject_justwork ,app_bt_disconnect 60c4 20600000 rtn responder_iocap_display_yesno_initiator_iocap_display_yesno: set_ssp_mode_numeric_comparison: 60c5 70466201 jam ssp_mode_ssp_pin_flag ,mem_ssp_mode_flag 60c6 20600000 rtn responder_iocap_keyboard_only_initiator_iocap_display_yesno: responder_iocap_keyboard_only_initiator_iocap_keyboard_only: responder_iocap_keyboard_only_initiator_iocap_display_only: responder_iocap_display_yesno_initiator_iocap_keyboard_only: set_ssp_mode_passkey: 60c7 70466202 jam ssp_mode_passkey_entry_flag ,mem_ssp_mode_flag 60c8 20600000 rtn classic_bt_set_reject_justwork_flag: 60c9 d8e00000 arg flag_ssp_reject_justwork ,queue 60ca 202060cd branch classic_bluetooth_set_flag classic_bt_clr_reject_justwork_flag: 60cb d8e00000 arg flag_ssp_reject_justwork ,queue 60cc 202060d1 branch classic_bluetooth_clr_flag classic_bluetooth_set_flag: 60cd 6800c55c fetch 1 ,mem_classic_bt_flag 60ce f9207e00 qset1 pdata 60cf 6000c55c store 1 ,mem_classic_bt_flag 60d0 20600000 rtn classic_bluetooth_clr_flag: 60d1 6800c55c fetch 1 ,mem_classic_bt_flag 60d2 f93ffe00 qset0 pdata 60d3 6000c55c store 1 ,mem_classic_bt_flag 60d4 20600000 rtn send_lmp_io_cap_req: 60d5 18000e05 force 5 ,queue 60d6 204062a0 call send_lmpext 60d7 6801c65b fetch 3 ,mem_sp_iocap_local 60d8 e0a18000 istore 3 ,contw 60d9 202062b2 branch send_lmp_request send_lmpext_sniff_subrating_req: 60da 20600000 rtn send_lmpext_sniff_subrating_res: 60db 18000e09 force 9 ,queue 60dc 204062a0 call send_lmpext 60dd 68008095 fetch 1 ,mem_subsniff_rate 60de e0a08000 istore 1 ,contw 60df 68010096 fetch 2 ,mem_subsniff_tcmax 60e0 e0a10000 istore 2 ,contw 60e1 68020091 fetch 4 ,mem_subsniff_instant 60e2 e0a20000 istore 4 ,contw 60e3 202062b0 branch send_lmp_reply send_lmp_name_res: 60e4 18007e11 force 17 ,pdata 60e5 20406298 call msg_send_lmp 60e6 68008049 fetch 1 ,mem_lmi_opcode 60e7 1fe20400 copy pdata ,temp 60e8 c00060ec beq 0x00 ,send_lmp_name_res_offset_ok 60e9 c00760ec beq 0x0e ,send_lmp_name_res_offset_ok 60ea c00e60ec beq 0x1c ,send_lmp_name_res_offset_ok 60eb 20600000 rtn send_lmp_name_res_offset_ok: 60ec e0a08000 istore 1 ,contw 60ed 6800c515 fetch 1 ,mem_local_name_length 60ee e0a08000 istore 1 ,contw 60ef df20000e arg 14 ,loopcnt 60f0 58004516 setarg mem_local_name 60f1 98408c00 iadd temp ,contr 60f2 20407f01 call memcpy 60f3 202062b0 branch send_lmp_reply send_lmp_timing_accuracy_res: 60f4 18007e03 force 3 ,pdata 60f5 20406298 call msg_send_lmp 60f6 58000114 setarg 0x0114 60f7 e0a10000 istore 2 ,contw 60f8 202062b0 branch send_lmp_reply send_lmp_clkoffset_res: 60f9 18007e03 force 3 ,pdata 60fa 20406298 call msg_send_lmp 60fb 68020165 fetch 4 ,mem_clke_bt 60fc 9c467e00 isub clkn_bt ,pdata 60fd 2034e0ff branch send_lmp_clkoffset_res_master ,master 60fe 1fe67e00 sub pdata ,0 ,pdata send_lmp_clkoffset_res_master: 60ff 1feb7e00 rshift2 pdata ,pdata 6100 793ffe0f set0 15 ,pdata 6101 e0a10000 istore 2 ,contw 6102 202062b0 branch send_lmp_reply send_lmp_version_res: 6103 18007e06 force 6 ,pdata 6104 20406298 call msg_send_lmp 6105 6802c510 fetch 5 ,mem_lmp_version 6106 e0a28000 istore 5 ,contw 6107 202062b0 branch send_lmp_reply send_lmp_features_res: 6108 18007e09 force 9 ,pdata 6109 20406298 call msg_send_lmp 610a 68044098 fetch 8 ,mem_features 610b e0a40000 istore 8 ,contw 610c 202062b0 branch send_lmp_reply send_lmpext_features_req: 610d 18000e0c force 12 ,queue 610e 204062a0 call send_lmpext 610f 58000001 setarg 0x01 6110 e0a08000 istore 1 ,contw 6111 680104ce fetch 2 ,mem_lmpext_ssp_enable 6112 e0a10000 istore 2 ,contw 6113 58000000 setarg 0 6114 e0a18000 istore 3 ,contw 6115 58000000 setarg 0x00 6116 e0a20000 istore 4 ,contw 6117 202062b2 branch send_lmp_request send_lmpext_packet_type_table_req: 6118 18000e03 force 3 ,queue 6119 204062a0 call send_lmpext 611a 6800c15a fetch 1 ,mem_ptt 611b e0a08000 istore 1 ,contw 611c 78547c00 disable user 611d 204062b2 call send_lmp_request 611e 24740000 nrtn user 611f 24748000 nrtn master 6120 6800c0d8 fetch 1 ,mem_afh_cfg 6121 c4000000 rtnbit0 afh_cfg_on 6122 20406132 call afh_init 6123 2020613c branch afh_open_all_channels ssp_enable: 6124 47424030 bpatchx patch30_4 ,mem_patch30 6125 6800c09e fetch 1 ,mem_features + 6 6126 79207e03 set1 param_featrue_ssp ,pdata 6127 6000c09e store 1 ,mem_features + 6 6128 58000101 setarg param_lmpext_ssp_enable 6129 600104ce store 2 ,mem_lmpext_ssp_enable 612a 20600000 rtn ssp_disable: 612b 4742c030 bpatchx patch30_5 ,mem_patch30 612c 6800c09e fetch 1 ,mem_features + 6 612d 793ffe03 set0 param_featrue_ssp ,pdata 612e 6000c09e store 1 ,mem_features + 6 612f 58000000 setarg 0 6130 600104ce store 2 ,mem_lmpext_ssp_enable 6131 20600000 rtn afh_init: 6132 7040d803 jam 0x3 ,mem_afh_cfg 6133 58000000 setarg 0 6134 60024142 store 4 ,mem_afh_timer 6135 d8a040da arg mem_afh_map_lo ,contw 6136 20406140 call afh_reset_map 6137 d8a040e7 arg mem_afh_map_new ,contw 6138 20406140 call afh_reset_map 6139 d8a04146 arg mem_afh_classify_channel_map ,contw 613a 20406140 call afh_reset_map 613b 20206147 branch afh_clear_error_counter afh_open_all_channels: 613c d8a040e7 arg mem_afh_map_new ,contw 613d 20406140 call afh_reset_map 613e 20406147 call afh_clear_error_counter 613f 2020614a branch afh_set_send_flag afh_reset_map: 6140 58ffffff setarg 0xffffff 6141 e0a18000 istore 3 ,contw 6142 e0a18000 istore 3 ,contw 6143 e0a18000 istore 3 ,contw 6144 5800007f setarg 0x7f 6145 e0a08000 istore 1 ,contw 6146 20600000 rtn afh_clear_error_counter: 6147 58000000 setarg 0 6148 600140d6 store 2 ,mem_afh_error_total 6149 20600000 rtn afh_set_send_flag: 614a 6800c0d8 fetch 1 ,mem_afh_cfg 614b 79207e02 set1 send_lmp_set_afh ,pdata 614c 6000c0d8 store 1 ,mem_afh_cfg 614d 20600000 rtn send_lmpext_pause_encryption_req: 614e 18000e02 force 2 ,queue 614f 204062a0 call send_lmpext 6150 2434e2b0 nbranch send_lmp_reply ,master 6151 202062b2 branch send_lmp_request send_lmp_detach: 6152 18007e02 force 2 ,pdata 6153 20406298 call msg_send_lmp 6154 680084ca fetch 1 ,mem_disconn_reason_send 6155 e0a08000 istore 1 ,contw 6156 204062b2 call send_lmp_request prepare_disconnect: 6157 6800804b fetch 1 ,mem_op 6158 79207e03 set1 op_disconn ,pdata 6159 6000804b store 1 ,mem_op 615a 70007232 jam 50 ,mem_conn_timer 615b 20600000 rtn send_lmp_no_payload: 615c 18007e01 force 1 ,pdata 615d 20406298 call msg_send_lmp 615e 202062b2 branch send_lmp_request send_lmp_nopayload_reply: 615f 18007e01 force 1 ,pdata 6160 20406298 call msg_send_lmp 6161 202062b0 branch send_lmp_reply send_lmp_encryption_mode_req: 6162 18007e02 force 2 ,pdata 6163 20406298 call msg_send_lmp 6164 6800804c fetch 1 ,mem_state_map 6165 2fec0002 isolate0 smap_encryption ,pdata 6166 7920fe00 setflag true ,0 ,pdata 6167 1fe17e01 and_into 1 ,pdata 6168 e0a08000 istore 1 ,contw 6169 202062b2 branch send_lmp_request send_lmp_superto: 616a 18007e03 force 3 ,pdata 616b 20406298 call msg_send_lmp 616c 68010051 fetch 2 ,mem_supervision_to 616d e0a10000 istore 2 ,contw 616e 202062b2 branch send_lmp_request send_lmp_name_req: 616f 700072fa jam 250 ,mem_conn_timer 6170 18007e02 force 2 ,pdata 6171 20406298 call msg_send_lmp 6172 68008053 fetch 1 ,mem_name_offset 6173 e0a08000 istore 1 ,contw 6174 202062b2 branch send_lmp_request send_lmp_test_control: 6175 18007e0a force 10 ,pdata 6176 20406298 call msg_send_lmp 6177 d8c00152 arg mem_temp_payload ,contr 6178 18007209 force 9 ,loopcnt send_lmp_test_control_loop: 6179 e8c08000 ifetch 1 ,contr 617a 1fe2fe55 xor_into 0x55 ,pdata 617b e0a08000 istore 1 ,contw 617c c2006179 loop send_lmp_test_control_loop 617d 202062b2 branch send_lmp_request send_lmp_quality_of_service_req: 617e 202062b2 branch send_lmp_request send_lmp_unit_key: 617f 202062b2 branch send_lmp_request send_lmp_slot_offset: 6180 20748000 rtn master 6181 2040282d call calc_slot_offset 6182 18007e09 force 9 ,pdata 6183 20406298 call msg_send_lmp 6184 68010171 fetch 2 ,mem_slot_offset 6185 e0a10000 istore 2 ,contw 6186 6801c0a0 fetch 3 ,mem_lap 6187 e0a18000 istore 3 ,contw 6188 6800c0a3 fetch 1 ,mem_uap 6189 e0a08000 istore 1 ,contw 618a 680140a4 fetch 2 ,mem_nap 618b e0a10000 istore 2 ,contw 618c c581e191 bmark0 mark_switch_initiated ,send_lmp_slot_offset_reply 618d 793f8003 set0 mark_switch_initiated ,mark 618e 204062b2 call send_lmp_request 618f 70007c13 jam lmp_switch_req ,mem_lmo_opcode2 6190 20600000 rtn send_lmp_slot_offset_reply: 6191 204062b0 call send_lmp_reply 6192 70007c03 jam lmp_accepted ,mem_lmo_opcode2 6193 70007d13 jam lmp_switch_req ,mem_lmi_opcode2 6194 20600000 rtn send_lmp_switch_req: 6195 d8400200 arg 0x200 ,temp 6196 2034e199 branch switch_on_native ,master 6197 1d027e00 deposit clke_bt 6198 2020619a branch switch_slack switch_on_native: 6199 1c427e00 deposit clkn_bt switch_slack: 619a 1c227e00 deposit bt_clk 619b 9840fe00 iadd temp ,pdata 619c 1fe17ffc and_into 0x1fc ,pdata 619d 60020034 store 4 ,mem_sniff_anchor 619e 18007e05 force 5 ,pdata 619f 20406298 call msg_send_lmp 61a0 68020034 fetch 4 ,mem_sniff_anchor 61a1 1fe37e00 rshift pdata ,pdata 61a2 e0a20000 istore 4 ,contw 61a3 202062b2 branch send_lmp_request send_lmp_sniff_req: 61a4 18007e0a force 10 ,pdata 61a5 20406298 call msg_send_lmp 61a6 d8c004d9 arg mem_sniff_payload ,contr 61a7 e8c48000 ifetch 9 ,contr 61a8 e0a48000 istore 9 ,contw 61a9 202062b2 branch send_lmp_request send_lmp_timing_accuracy_req: 61aa 18007e03 force 3 ,pdata 61ab 20406298 call msg_send_lmp 61ac 58000114 setarg 0x0114 61ad e0a10000 istore 2 ,contw 61ae 202062b2 branch send_lmp_request send_lmp_unsniff_req: 61af 18007e01 force 1 ,pdata 61b0 20406298 call msg_send_lmp 61b1 202062b2 branch send_lmp_request send_lmp_max_slot: 61b2 18007e02 force 2 ,pdata 61b3 20406298 call msg_send_lmp 61b4 6800c0d0 fetch 1 ,mem_max_slot 61b5 e0a08000 istore 1 ,contw 61b6 202062b2 branch send_lmp_request send_lmp_max_slot_req: 61b7 18007e02 force 2 ,pdata 61b8 20406298 call msg_send_lmp 61b9 58000005 setarg 0x05 61ba e0a08000 istore 1 ,contw 61bb 202062b2 branch send_lmp_request send_lmp_inc_power: 61bc 18007e02 force 2 ,pdata 61bd 20406298 call msg_send_lmp 61be 58000000 setarg 0x00 61bf e0a08000 istore 1 ,contw 61c0 202062b2 branch send_lmp_request send_lmp_setup_complete_by_module: 61c1 70007c2e jam lmp_max_slot_req ,mem_lmo_opcode2 61c2 20600000 rtn send_lmp_setup_complete: 61c3 6800c092 fetch 1 ,mem_device_option 61c4 1fe67c0a sub pdata ,dvc_op_module ,null 61c5 2042e1c1 call send_lmp_setup_complete_by_module ,zero 61c6 68008030 fetch 1 ,mem_state 61c7 79207e04 set1 state_conn_comp ,pdata 61c8 60008030 store 1 ,mem_state 61c9 1c427e00 copy clkn_bt ,pdata 61ca 600204e9 store 4 ,mem_aurand_send_delay_time 61cb 680084d1 fetch 1 ,mem_lmp_conn_state 61cc c281e1d4 bbit1 sent_setup_complete ,send_lmp_setup_complete_has_sent 61cd 79207e03 set1 sent_setup_complete ,pdata 61ce 600084d1 store 1 ,mem_lmp_conn_state 61cf 700a9905 jam bt_evt_setup_complete ,mem_fifo_temp 61d0 20407d86 call ui_ipc_send_event 61d1 18007e01 force 1 ,pdata 61d2 20406298 call msg_send_lmp 61d3 202062b2 branch send_lmp_request send_lmp_setup_complete_has_sent: 61d4 70004800 jam 0 ,mem_lmp_to_send 61d5 20600000 rtn send_lmp_version_req: 61d6 18007e06 force 6 ,pdata 61d7 20406298 call msg_send_lmp 61d8 6802c510 fetch 5 ,mem_lmp_version 61d9 e0a28000 istore 5 ,contw 61da 202062b2 branch send_lmp_request send_lmp_features_req: 61db 18007e09 force 9 ,pdata 61dc 20406298 call msg_send_lmp 61dd 68044098 fetch 8 ,mem_features 61de e0a40000 istore 8 ,contw 61df 202062b2 branch send_lmp_request sp_master_send_io_cap_get: 61e0 7009b101 jam sp_flag_commit ,mem_master_sp_flag 61e1 6800c5b1 fetch 1 ,mem_sp_local_key_invalid 61e2 c1808000 rtnne sp_key_valid 61e3 7009af13 jam sp_master_stat_start_done ,mem_master_sp_state 61e4 20600000 rtn sp_master_send_io_cap_send: 61e5 204062ef call tid_initiate 61e6 70007c99 jam lmp_io_cap_req ,mem_lmo_opcode2 61e7 7009af03 jam sp_stat_key_send ,mem_master_sp_state 61e8 20600000 rtn sp_master_send_lmp_encapsulated_header: 61e9 204062ef call tid_initiate 61ea 70007c3d jam lmp_encapsulated_header ,mem_lmo_opcode2 61eb 7009af07 jam sp_stat_random_send ,mem_master_sp_state 61ec 20600000 rtn sp_master_commitment_compare: 61ed da200a4e arg mem_sp_calc_result_high ,rega 61ee da400a6e arg mem_sp_confirm_remote ,regb 61ef df200010 arg 16 ,loopcnt 61f0 20407f88 call string_compare 61f1 2022e1f7 branch sp_master_commitment_compare_success ,zero 61f2 7009af00 jam sp_stat_null ,mem_master_sp_state 61f3 204076da call master_clear_mem_master_sp_flag 61f4 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 61f5 70007d40 jam lmp_simple_pairing_number ,mem_lmi_opcode2 61f6 20205d53 branch reject_lmp_packet sp_master_commitment_compare_success: 61f7 7009af0a jam sp_stat_confirm_calc ,mem_master_sp_state 61f8 204076d8 call master_set_mem_master_sp_flag 61f9 70007d40 jam lmp_simple_pairing_number ,mem_lmi_opcode2 61fa 20205e38 branch accept_lmp_msg sp_master_send_lmp_simple_pairing_number: 61fb 70007c40 jam lmp_simple_pairing_number ,mem_lmo_opcode2 61fc 20600000 rtn sp_send_lmp_encapsulated_header: 61fd 70007c3d jam lmp_encapsulated_header ,mem_lmo_opcode2 61fe 20600000 rtn send_lmp_encapsulated_header: 61ff 7009b600 jam 0 ,mem_sp_local_key_send_count 6200 18007e04 force 4 ,pdata 6201 20406298 call msg_send_lmp 6202 18007e01 force encapsulated_major_type_p192 ,pdata 6203 e0a08000 istore 1 ,contw 6204 18007e01 force encapsulated_minor_type_p192 ,pdata 6205 e0a08000 istore 1 ,contw 6206 18007e30 force encapsulated_len_p192 ,pdata 6207 e0a08000 istore 1 ,contw 6208 204062fc call check_localsm 6209 2020e2b2 branch send_lmp_request ,true 620a 202062b0 branch send_lmp_reply send_lmp_encapsulated_payload: 620b 18007e11 force 17 ,pdata 620c 20406298 call msg_send_lmp 620d 680089b6 fetch 1 ,mem_sp_local_key_send_count 620e d8c0462a arg mem_sp_pubkey_local ,contr 620f 98c08c00 iadd contr ,contr 6210 e8c40000 ifetch 8 ,contr 6211 e0a40000 istore 8 ,contw 6212 e8c40000 ifetch 8 ,contr 6213 e0a40000 istore 8 ,contw 6214 680089b6 fetch 1 ,mem_sp_local_key_send_count 6215 1fe0fe10 increase 16 ,pdata 6216 600089b6 store 1 ,mem_sp_local_key_send_count 6217 204062fc call check_localsm 6218 2020e2b2 branch send_lmp_request ,true 6219 202062b0 branch send_lmp_reply sp_send_lmp_simple_pairing_comfirm: 621a 7009ae06 jam sp_stat_random_recv ,mem_sp_state 621b 70007c3f jam lmp_simple_pairing_confirm ,mem_lmo_opcode2 621c 20600000 rtn send_lmp_simple_pairing_comfirm: 621d 18007e11 force 17 ,pdata 621e 20406298 call msg_send_lmp 621f d8c00a4e arg mem_sp_calc_result_high ,contr 6220 e8c40000 ifetch 8 ,contr 6221 e0a40000 istore 8 ,contw 6222 e8c40000 ifetch 8 ,contr 6223 e0a40000 istore 8 ,contw 6224 202062b0 branch send_lmp_reply sp_send_lmp_simple_pairing_number: 6225 70007c40 jam lmp_simple_pairing_number ,mem_lmo_opcode2 6226 20600000 rtn send_lmp_simple_pairing_number: 6227 204062fc call check_localsm 6228 2040f612 call sp_local_random_key_generator ,true 6229 18007e11 force 17 ,pdata 622a 20406298 call msg_send_lmp 622b d8c00a1e arg mem_sp_random_local ,contr 622c e8c40000 ifetch 8 ,contr 622d e0a40000 istore 8 ,contw 622e e8c40000 ifetch 8 ,contr 622f e0a40000 istore 8 ,contw 6230 204062fc call check_localsm 6231 2420e2b0 nbranch send_lmp_reply ,true 6232 2020e2b2 branch send_lmp_request ,true master_sp_sm_end: 6233 7009af0f jam sp_stat_done ,mem_master_sp_state sp_aurand_send: 6234 204062ef call tid_initiate 6235 70007c0b jam lmp_au_rand ,mem_lmo_opcode2 6236 20406307 call check_localsm_master 6237 2020f64e branch sp_master_key_prarm_push ,true 6238 20207658 branch sp_link_key_prarm_push master_sp_send_lmp_dhkey_check: 6239 204062eb call tid_reply sp_send_lmp_dhkey_check: 623a 70007c41 jam lmp_dhkey_check ,mem_lmo_opcode2 623b 20600000 rtn send_lmp_dhkey_check: 623c 18007e11 force 17 ,pdata 623d 20406298 call msg_send_lmp 623e d8c00a4e arg mem_sp_calc_result_high ,contr 623f e8c40000 ifetch 8 ,contr 6240 e0a40000 istore 8 ,contw 6241 e8c40000 ifetch 8 ,contr 6242 e0a40000 istore 8 ,contw 6243 204062fc call check_localsm 6244 2420e2b0 nbranch send_lmp_reply ,true 6245 2020e2b2 branch send_lmp_request ,true send_lmp_enc_key_size_mask_res: 6246 18007e03 force 3 ,pdata 6247 20406298 call msg_send_lmp 6248 5800fffe setarg 0xfffe 6249 e0a10000 istore 2 ,contw 624a 202062b0 branch send_lmp_reply send_lmp_auto_rate: 624b 202062b2 branch send_lmp_request send_lmp_clkoffset_req: 624c 202062b2 branch send_lmp_request send_lmp_quality_of_service: 624d 202062b2 branch send_lmp_request send_lmp_test_activate: 624e 202062b2 branch send_lmp_request send_lmp_comb_key: 624f 2040630b call generate_random_number 6250 da2040a0 arg mem_lap ,rega 6251 20406311 call generate_linkkey 6252 18007e11 force 17 ,pdata 6253 20406298 call msg_send_lmp 6254 da200582 arg mem_kinit ,rega 6255 da400562 arg mem_random_number ,regb 6256 20407352 call xor16 6257 2434e2a7 nbranch send_lmp_follow ,master 6258 202062ad branch send_lmp_tid send_lmp_inrand: 6259 2040630b call generate_random_number 625a da200040 arg mem_plap ,rega 625b 20407255 call generate_kinit send_lmp_rand: 625c 18007e11 force 17 ,pdata 625d 20406298 call msg_send_lmp 625e d8c00562 arg mem_random_number ,contr 625f 20407ebf call memcpy16 6260 68008055 fetch 1 ,mem_conn_sm 6261 c00ce2b2 beq conn_sm_auth_wait ,send_lmp_request 6262 c00c62b2 beq conn_sm_pairing_wait ,send_lmp_request 6263 202062ad branch send_lmp_tid send_lmp_aurand: 6264 680089b5 fetch 1 ,mem_pairing_auth 6265 203a626a branch send_lmp_aurand_notpairing ,blank 6266 204062fc call check_localsm 6267 2040e2ef call tid_initiate ,true 6268 2440e2eb ncall tid_reply ,true 6269 2020626b branch send_lmp_aurand_common send_lmp_aurand_notpairing: 626a 204062ef call tid_initiate send_lmp_aurand_common: 626b 2040630b call generate_random_number 626c 2020625c branch send_lmp_rand send_lmp_sres: 626d da2040a0 arg mem_lap ,rega 626e 20407288 call function_e1 626f 18007e05 force 5 ,pdata 6270 20406298 call msg_send_lmp 6271 68020592 fetch 4 ,mem_input_store 6272 e0a20000 istore 4 ,contw 6273 d84004d5 arg mem_sres_tid ,temp 6274 204062e2 call special_tid_store 6275 20407386 call copy_aco 6276 204062fc call check_localsm 6277 2020e27c branch send_lmp_sres_master ,true 6278 7004d801 jam done_encryp ,mem_wait_encryption 6279 680089b5 fetch 1 ,mem_pairing_auth 627a 207a0000 rtn blank 627b 70007c0b jam lmp_au_rand ,mem_lmo_opcode2 send_lmp_sres_master: 627c 6800c1bd fetch 1 ,mem_link_key_exists 627d 207a0000 rtn blank send_lmp_sres_startenc: 627e 204062fc call check_localsm 627f 2420e284 nbranch send_lmp_sres_startenc_slave ,true 6280 680084d7 fetch 1 ,mem_auth_enable 6281 207a0000 rtn blank 6282 70007c0f jam lmp_encryption_mode_req ,mem_lmo_opcode2 6283 20600000 rtn send_lmp_sres_startenc_slave: 6284 c6908000 rtnmark0 mark_slave_in_rand_accepted 6285 793f8021 set0 mark_slave_in_rand_accepted ,mark 6286 70007c0f jam lmp_encryption_mode_req ,mem_lmo_opcode2 6287 20600000 rtn send_lmp_start_encryption: 6288 2040630b call generate_random_number 6289 2040728b call function_e3 628a 18007e11 force 17 ,pdata 628b 20406298 call msg_send_lmp 628c d8c00562 arg mem_random_number ,contr 628d 20407ebf call memcpy16 628e 202062ad branch send_lmp_tid send_lmp_stop_encryption_req: 628f 18007e01 force 1 ,pdata 6290 20406298 call msg_send_lmp 6291 202062ad branch send_lmp_tid send_lmp_encryption_key_size_req: 6292 18007e02 force 2 ,pdata 6293 20406298 call msg_send_lmp 6294 18007e10 force 16 ,pdata 6295 e0a08000 istore 1 ,contw 6296 60008054 store 1 ,mem_key_size 6297 202062ad branch send_lmp_tid msg_send_lmp: 6298 1fe9fe00 lshift3 pdata ,pdata 6299 1fe1fe07 or_into 0x07 ,pdata 629a 600084b6 store 1 ,mem_lmo_header_length 629b df200011 arg 17 ,loopcnt 629c d8a004b8 arg mem_lmo_payload ,contw 629d 20407ed4 call clear_mem 629e d8a004b8 arg mem_lmo_payload ,contw 629f 20600000 rtn send_lmpext: 62a0 1fe1227f and pdata ,0x7f ,rega 62a1 7000487f jam lmp_escape ,mem_lmp_to_send 62a2 18e27e00 deposit queue 62a3 20406298 call msg_send_lmp 62a4 1a227e00 deposit rega 62a5 e0a08000 istore 1 ,contw 62a6 20600000 rtn send_lmp_follow: 62a7 68008048 fetch 1 ,mem_lmp_to_send 62a8 1fe3fe00 lshift pdata ,pdata 62a9 6808804c fetcht 1 ,mem_state_map 62aa 284ffe01 isolate1 smap_lmptid ,temp 62ab 7920fe00 setflag true ,0 ,pdata 62ac 202062b7 branch send_lmp_exit send_lmp_tid: 62ad 6808804c fetcht 1 ,mem_state_map 62ae 18410401 and_into 1 ,temp 62af 202062b3 branch send_lmp_end send_lmp_reply: 62b0 18000400 force 0 ,temp 62b1 202062b3 branch send_lmp_end send_lmp_request: 62b2 18000401 force 1 ,temp send_lmp_end: 62b3 68008048 fetch 1 ,mem_lmp_to_send 62b4 1fe3fe00 lshift pdata ,pdata 62b5 7934fe00 setflag master ,0 ,pdata 62b6 9842fe00 ixor temp ,pdata send_lmp_exit: 62b7 600084b7 store 1 ,mem_lmo_header_opcode 62b8 70004800 jam 0 ,mem_lmp_to_send 62b9 204062c7 call lmo_fifo_process_lmo0empty 62ba 78347c00 enable user 62bb 20600000 rtn lmo_fifo_check: 62bc 6800807c fetch 1 ,mem_lmo_opcode2 62bd 207a0000 rtn blank 62be 204062c1 call lmo_fifo_process 62bf 6800807c fetch 1 ,mem_lmo_opcode2 62c0 20600000 rtn lmo_fifo_process: 62c1 47434030 bpatchx patch30_6 ,mem_patch30 62c2 68008048 fetch 1 ,mem_lmp_to_send 62c3 203a62c7 branch lmo_fifo_process_lmo0empty ,blank 62c4 68008078 fetch 1 ,mem_lmo_opcode1 62c5 247a0000 nrtn blank 62c6 202062d1 branch lmo_fifo_process_lmo2to1 lmo_fifo_process_lmo0empty: 62c7 68008078 fetch 1 ,mem_lmo_opcode1 62c8 203a62d7 branch lmo_fifo_process_lmo1_empty ,blank 62c9 68018078 fetch 3 ,mem_lmo_opcode1 62ca 60018048 store 3 ,mem_lmp_to_send 62cb 6808807b fetcht 1 ,mem_lmo_tid1 62cc 6800804c fetch 1 ,mem_state_map 62cd 793ffe01 set0 smap_lmptid ,pdata 62ce 9841fe00 ior temp ,pdata 62cf 6000804c store 1 ,mem_state_map 62d0 70007800 jam 0 ,mem_lmo_opcode1 lmo_fifo_process_lmo2to1: 62d1 6800807c fetch 1 ,mem_lmo_opcode2 62d2 207a0000 rtn blank 62d3 6802007c fetch 4 ,mem_lmo_opcode2 62d4 60020078 store 4 ,mem_lmo_opcode1 62d5 70007c00 jam 0 ,mem_lmo_opcode2 62d6 20600000 rtn lmo_fifo_process_lmo1_empty: 62d7 6800807c fetch 1 ,mem_lmo_opcode2 62d8 207a0000 rtn blank 62d9 6801807c fetch 3 ,mem_lmo_opcode2 62da 60018048 store 3 ,mem_lmp_to_send 62db 6808807f fetcht 1 ,mem_lmo_tid2 62dc 6800804c fetch 1 ,mem_state_map 62dd 793ffe01 set0 smap_lmptid ,pdata 62de 9841fe00 ior temp ,pdata 62df 6000804c store 1 ,mem_state_map 62e0 70007c00 jam 0 ,mem_lmo_opcode2 62e1 20600000 rtn special_tid_store: 62e2 4743c030 bpatchx patch30_7 ,mem_patch30 62e3 6800804c fetch 1 ,mem_state_map 62e4 1fe22600 copy pdata ,regc 62e5 e8408000 ifetch 1 ,temp 62e6 20405e52 call pop_tid_follow 62e7 204062a7 call send_lmp_follow 62e8 1a627e00 copy regc ,pdata 62e9 6000804c store 1 ,mem_state_map 62ea 20600000 rtn tid_reply: 62eb 6808804c fetcht 1 ,mem_state_map 62ec 793f8400 set0 smap_lmptidinit ,temp 62ed 6008804c storet 1 ,mem_state_map 62ee 20600000 rtn tid_initiate: 62ef 6808804c fetcht 1 ,mem_state_map 62f0 79200400 set1 smap_lmptidinit ,temp 62f1 6008804c storet 1 ,mem_state_map 62f2 20600000 rtn tid_check: 62f3 7d34fe01 nsetflag master ,smap_lmptid ,pdata 62f4 6808804c fetcht 1 ,mem_state_map 62f5 9842fe00 ixor temp ,pdata 62f6 2feffe01 isolate1 smap_lmptid ,pdata 62f7 20600000 rtn tid_set_reply: 62f8 6800804c fetch 1 ,mem_state_map 62f9 7934fe01 setflag master ,smap_lmptid ,pdata 62fa 6000804c store 1 ,mem_state_map 62fb 20600000 rtn check_localsm: 62fc 680089b4 fetch 1 ,mem_sp_localsm 62fd 2fe0fe01 compare local_statemachine ,pdata ,0x7f 62fe 20600000 rtn setlocalsm_master: 62ff 680089b4 fetch 1 ,mem_sp_localsm 6300 79207e07 set1 7 ,pdata 6301 600089b4 store 1 ,mem_sp_localsm 6302 20600000 rtn setlocalsm_slave: 6303 680089b4 fetch 1 ,mem_sp_localsm 6304 793ffe07 set0 7 ,pdata 6305 600089b4 store 1 ,mem_sp_localsm 6306 20600000 rtn check_localsm_master: 6307 680089b4 fetch 1 ,mem_sp_localsm 6308 2feffe07 isolate1 7 ,pdata 6309 600089b4 store 1 ,mem_sp_localsm 630a 20600000 rtn generate_random_number: 630b d8a00562 arg mem_random_number ,contw generate_random: 630c 18007210 force 16 ,loopcnt generate_random_another: generate_random_loop: 630d 180a7e00 random pdata 630e e0a08000 istore 1 ,contw 630f c200630d loop generate_random_another 6310 20600000 rtn generate_linkkey: 6311 20407259 call function_e21 6312 da2041be arg mem_link_key ,rega 6313 da400592 arg mem_input_store ,regb 6314 ea240000 ifetch 8 ,rega 6315 68088030 fetcht 1 ,mem_state 6316 7d3a0406 nsetflag blank ,state_combkey ,temp 6317 60088030 storet 1 ,mem_state 6318 1a220a00 copy rega ,contw 6319 20407352 call xor16 631a 202021c4 branch generate_linkkey_continue process_conn_sm: 631b 47444031 bpatchx patch31_0 ,mem_patch31 631c 204062bc call lmo_fifo_check 631d 247a0000 nrtn blank process_conn_sm_continue: 631e 68008055 fetch 1 ,mem_conn_sm 631f 207a0000 rtn blank 6320 c002636f beq conn_sm_send_conn_req ,host_create_conn_send_conn_req 6321 c002e374 beq conn_sm_wait_conn_accept ,host_create_conn_wait_accept 6322 c0016366 beq conn_sm_send_features ,host_create_conn_send_features 6323 c001e37c beq conn_sm_wait_features_res ,host_create_conn_waiting 6324 c0076369 beq conn_sm_send_switch ,host_create_conn_send_switch 6325 c0036398 beq conn_sm_auth_pair ,host_create_conn_auth_pair 6326 c003e3b0 beq conn_sm_auth_pair_wait ,host_create_conn_auth_pair_wait 6327 c004e3b1 beq conn_sm_encrypt ,host_create_conn_encrypt 6328 c00563ba beq conn_sm_encrypt_wait ,host_create_conn_encrypt_wait 6329 c005e3be beq conn_sm_encrypt_wait_clear ,host_create_conn_encrypt_wait_clear 632a c0066386 beq conn_sm_send_setup_complete ,host_create_conn_send_setup_complete 632b c006e389 beq conn_sm_wait_setup_complete ,host_create_conn_wait_setup_complete 632c c007e38f beq conn_sm_detach_delay ,host_create_conn_master_detach 632d c0096359 beq conn_sm_send_version ,host_create_conn_send_version 632e c009e37c beq conn_sm_wait_version ,host_create_conn_waiting 632f c008635c beq conn_sm_wait_switch_after_host_connection ,host_creat_conn_wait_switch 6330 c00a6356 beq conn_sm_send_features_ext ,host_creat_conn_send_feat_ext 6331 c00ae37c beq conn_sm_wait_features_ext ,host_create_conn_waiting 6332 c00b6350 beq conn_sm_pairing ,host_create_conn_pairing 6333 c00c6355 beq conn_sm_pairing_wait ,host_create_conn_pairing_wait 6334 c00be349 beq conn_sm_auth ,host_create_conn_auth 6335 c00ce34f beq conn_sm_auth_wait ,host_create_conn_auth_wait 6336 c00d633a beq conn_sm_done ,host_create_conn_done 6337 c00de344 beq conn_sm_wait_done ,host_create_conn_done_wait 6338 70005500 jam conn_sm_standby ,mem_conn_sm 6339 20600000 rtn host_create_conn_done: 633a 680084d1 fetch 1 ,mem_lmp_conn_state 633b c4010000 rtnbit0 received_setup_complete 633c c4018000 rtnbit0 sent_setup_complete 633d 70005500 jam conn_sm_standby ,mem_conn_sm 633e 20406340 call host_conn_judge_encrypt 633f 20206cef branch scheduler_start_upper_sm host_conn_judge_encrypt: 6340 6800816d fetch 1 ,mem_connection_options 6341 c4008000 rtnbit0 connection_encrypt 6342 7000550a jam conn_sm_encrypt_wait ,mem_conn_sm 6343 20600000 rtn host_create_conn_done_wait: 6344 d8e00007 arg enpt_delay_timer ,queue 6345 20407f16 call timer_check 6346 247a0000 nrtn blank 6347 7000551a jam conn_sm_done ,mem_conn_sm 6348 20600000 rtn host_create_conn_auth: 6349 6800816d fetch 1 ,mem_connection_options 634a 793ffe00 set0 connection_auth ,pdata 634b 6000816d store 1 ,mem_connection_options 634c 70005519 jam conn_sm_auth_wait ,mem_conn_sm 634d 70007c0b jam lmp_au_rand ,mem_lmo_opcode2 634e 20600000 rtn host_create_conn_auth_wait: 634f 20600000 rtn host_create_conn_pairing: 6350 680084d4 fetch 1 ,mem_pincode_state 6351 c1810000 rtnne pincode_state_pincode_ready 6352 204063c0 call host_auth 6353 70005518 jam conn_sm_pairing_wait ,mem_conn_sm 6354 20600000 rtn host_create_conn_pairing_wait: 6355 20600000 rtn host_creat_conn_send_feat_ext: 6356 70005515 jam conn_sm_wait_features_ext ,mem_conn_sm 6357 70007c83 jam lmp_ext_features_req ,mem_lmo_opcode2 6358 20600000 rtn host_create_conn_send_version: 6359 70005513 jam conn_sm_wait_version ,mem_conn_sm 635a 70007c25 jam lmp_version_req ,mem_lmo_opcode2 635b 20600000 rtn host_creat_conn_wait_switch: 635c 6800c55b fetch 1 ,mem_switch_flag 635d c1000000 rtneq switch_flag_init 635e c000e364 beq switch_flag_accept ,host_create_conn_switch_accept 635f d8e00006 arg switch_wait_timer ,queue 6360 20407f16 call timer_check 6361 247a0000 nrtn blank 6362 70455b00 jam switch_flag_init ,mem_switch_flag 6363 2020637d branch host_create_conn_switch host_create_conn_switch_accept: 6364 20748000 rtn master 6365 20206398 branch host_create_conn_auth_pair host_create_conn_send_features: 6366 70005503 jam conn_sm_wait_features_res ,mem_conn_sm 6367 70007c27 jam lmp_features_req ,mem_lmo_opcode2 6368 20600000 rtn host_create_conn_send_switch: 6369 70007c13 jam lmp_switch_req ,mem_lmo_opcode2 636a 79200003 set1 mark_switch_initiated ,mark 636b 70005505 jam conn_sm_wait_conn_accept ,mem_conn_sm 636c 580001ff setarg 0x1ff 636d 600104d2 store 2 ,mem_soft_timer 636e 20600000 rtn host_create_conn_send_conn_req: 636f 70005505 jam conn_sm_wait_conn_accept ,mem_conn_sm 6370 7004d2ff jam 0xff ,mem_soft_timer 6371 793f8022 set0 mark_reconn_recieve_switch ,mark 6372 70007c33 jam lmp_host_connection_req ,mem_lmo_opcode2 6373 20205d04 branch init_lmp_reinit host_create_conn_wait_accept: 6374 c6110000 rtnmark1 mark_reconn_recieve_switch 6375 680104d2 fetch 2 ,mem_soft_timer 6376 1fe67e01 sub pdata ,1 ,pdata 6377 2022e37a branch host_create_conn_resend ,zero 6378 600104d2 store 2 ,mem_soft_timer 6379 20600000 rtn host_create_conn_resend: 637a 7000550e jam conn_sm_send_switch ,mem_conn_sm 637b 20600000 rtn host_create_conn_waiting: 637c 20600000 rtn host_create_conn_switch: 637d 680084d1 fetch 1 ,mem_lmp_conn_state 637e c4018000 rtnbit0 sent_setup_complete 637f c4010000 rtnbit0 received_setup_complete 6380 6800816d fetch 1 ,mem_connection_options 6381 793ffe02 set0 connection_switch ,pdata 6382 6000816d store 1 ,mem_connection_options 6383 70007c13 jam lmp_switch_req ,mem_lmo_opcode2 6384 70005510 jam conn_sm_wait_switch_after_host_connection ,mem_conn_sm 6385 20600000 rtn host_create_conn_send_setup_complete: 6386 7000550d jam conn_sm_wait_setup_complete ,mem_conn_sm 6387 70007c31 jam lmp_setup_complete ,mem_lmo_opcode2 6388 20600000 rtn host_create_conn_wait_setup_complete: 6389 680084d1 fetch 1 ,mem_lmp_conn_state 638a c4010000 rtnbit0 received_setup_complete 638b 70005500 jam conn_sm_standby ,mem_conn_sm 638c 20600000 rtn host_create_conn_wait_setup_complete_rtn: 638d 70005506 jam conn_sm_auth_pair ,mem_conn_sm 638e 20600000 rtn host_create_conn_master_detach: 638f 680084d2 fetch 1 ,mem_soft_timer 6390 1fe0ffff increase -1 ,pdata 6391 203a6394 branch host_create_conn_send_detach ,blank 6392 600084d2 store 1 ,mem_soft_timer 6393 20600000 rtn host_create_conn_send_detach: 6394 70007c07 jam lmp_detach ,mem_lmo_opcode2 6395 7004ca16 jam local_host ,mem_disconn_reason_send 6396 70005500 jam 0 ,mem_conn_sm 6397 20600000 rtn host_create_conn_auth_pair: 6398 6800816d fetch 1 ,mem_connection_options 6399 c281637d bbit1 connection_switch ,host_create_conn_switch 639a c280639d bbit1 connection_auth ,host_create_conn_auth_pair_true host_create_conn_sm_done: 639b 7000551a jam conn_sm_done ,mem_conn_sm 639c 20600000 rtn host_create_conn_auth_pair_true: 639d 6800c1bd fetch 1 ,mem_link_key_exists 639e 203a63a9 branch host_create_conn_auth_pair_nokey ,blank 639f 680084d1 fetch 1 ,mem_lmp_conn_state 63a0 c4018000 rtnbit0 sent_setup_complete 63a1 c4010000 rtnbit0 received_setup_complete 63a2 680204e9 fetch 4 ,mem_aurand_send_delay_time 63a3 d8400064 arg 100 ,temp 63a4 98408400 iadd temp ,temp 63a5 1c427e00 copy clkn_bt ,pdata 63a6 98467c00 isub temp ,null 63a7 24610000 nrtn positive 63a8 20206349 branch host_create_conn_auth host_create_conn_auth_pair_nokey: 63a9 70005516 jam conn_sm_pairing ,mem_conn_sm 63aa 70468904 jam 4 ,mem_pin_length 63ab 58003030 setarg 0x3030 63ac 6001468a store 2 ,mem_pin 63ad e0a10000 istore 2 ,contw 63ae 7004d402 jam pincode_state_pincode_ready ,mem_pincode_state 63af 20206350 branch host_create_conn_pairing host_create_conn_auth_pair_wait: 63b0 20600000 rtn host_create_conn_encrypt: 63b1 6800816d fetch 1 ,mem_connection_options 63b2 c280e3b5 bbit1 connection_encrypt ,host_create_conn_encrypt_start 63b3 7000551a jam conn_sm_done ,mem_conn_sm 63b4 20600000 rtn host_create_conn_encrypt_start: 63b5 6800816d fetch 1 ,mem_connection_options 63b6 793ffe01 set0 connection_encrypt ,pdata 63b7 6000816d store 1 ,mem_connection_options 63b8 70007c0f jam lmp_encryption_mode_req ,mem_lmo_opcode2 63b9 20600000 rtn host_create_conn_encrypt_wait: 63ba 680084d8 fetch 1 ,mem_wait_encryption 63bb 207a0000 rtn blank 63bc 70005500 jam conn_sm_standby ,mem_conn_sm 63bd 202063b5 branch host_create_conn_encrypt_start host_create_conn_encrypt_wait_clear: 63be 7000550c jam conn_sm_send_setup_complete ,mem_conn_sm 63bf 20600000 rtn host_auth: 63c0 6800804b fetch 1 ,mem_op 63c1 c28163c5 bbit1 op_inrand_req ,remote_auth 63c2 204062ef call tid_initiate 63c3 70007c08 jam lmp_in_rand ,mem_lmo_opcode2 63c4 20204d04 branch cmd_exit remote_auth: 63c5 6800804b fetch 1 ,mem_op 63c6 793ffe02 set0 op_inrand_req ,pdata 63c7 6000804b store 1 ,mem_op 63c8 20406001 call lmp_accept_inrand 63c9 204062f8 call tid_set_reply 63ca 20204d04 branch cmd_exit pincode_reinit: 63cb 58000004 setarg 4 63cc 6000c689 store 1 ,mem_pin_length 63cd 58003030 setarg 0x3030 63ce e0a10000 istore 2 ,contw 63cf e0a10000 istore 2 ,contw 63d0 20600000 rtn twspi_reset: 63d1 47464031 bpatchx patch31_4 ,mem_patch31 63d2 68108073 hfetch 1 ,core_gpio_oe3 63d3 d8400006 arg 0x06 ,temp 63d4 9841fe00 ior temp ,pdata 63d5 60108073 hstore 1 ,core_gpio_oe3 63d6 68108077 hfetch 1 ,core_gpio_out3 63d7 9841fe00 ior temp ,pdata 63d8 60108077 hstore 1 ,core_gpio_out3 63d9 204063ee call twspi_disable 63da 68108077 hfetch 1 ,core_gpio_out3 63db 793ffe01 set0 1 ,pdata 63dc 793ffe02 set0 2 ,pdata 63dd 60108077 hstore 1 ,core_gpio_out3 63de 2000001e nop 30 63df 202063f2 branch twspi_enable twspi_reset2: 63e0 68108073 hfetch 1 ,core_gpio_oe3 63e1 d84000c0 arg 0xc0 ,temp 63e2 9841fe00 ior temp ,pdata 63e3 60108073 hstore 1 ,core_gpio_oe3 63e4 68108077 hfetch 1 ,core_gpio_out3 63e5 9841fe00 ior temp ,pdata 63e6 60108077 hstore 1 ,core_gpio_out3 63e7 204063ee call twspi_disable 63e8 68108077 hfetch 1 ,core_gpio_out3 63e9 793ffe06 set0 6 ,pdata 63ea 793ffe07 set0 7 ,pdata 63eb 60108077 hstore 1 ,core_gpio_out3 63ec 2000001e nop 30 63ed 202063f6 branch twspi_enable2 twspi_disable: 63ee 68108081 hfetch 1 ,core_gpio_sel1 63ef 1fe17efc and pdata ,0xfc ,pdata 63f0 60108081 hstore 1 ,core_gpio_sel1 63f1 20600000 rtn twspi_enable: 63f2 68108081 hfetch 1 ,core_gpio_sel1 63f3 1fe1fe01 or pdata ,0x01 ,pdata 63f4 60108081 hstore 1 ,core_gpio_sel1 63f5 20600000 rtn twspi_enable2: 63f6 68108081 hfetch 1 ,core_gpio_sel1 63f7 1fe1fe03 or pdata ,0x03 ,pdata 63f8 793ffe04 set0 4 ,pdata 63f9 60108081 hstore 1 ,core_gpio_sel1 63fa 20600000 rtn sensor_read: 63fb 1fe22400 copy pdata ,regb 63fc 2040640f call spi_ncs_enable 63fd 20000064 nop 100 63fe 1a427e00 copy regb ,pdata 63ff 20406414 call twspi_read 6400 1fe22400 copy pdata ,regb 6401 20406411 call spi_ncs_disable 6402 20000064 nop 100 6403 1a427e00 copy regb ,pdata 6404 20600000 rtn sensor_write: 6405 1fe22400 copy pdata ,regb 6406 2040640f call spi_ncs_enable 6407 20000064 nop 100 6408 1a427e00 copy regb ,pdata 6409 20406413 call twspi_write 640a 20406411 call spi_ncs_disable 640b 20000064 nop 100 640c 20600000 rtn spi_ncs_gpio_init: 640d 6808c214 fetcht 1 ,mem_spi_ncs_gpio 640e 2020680e branch gpio_config_output spi_ncs_enable: 640f 6808c214 fetcht 1 ,mem_spi_ncs_gpio 6410 20206829 branch gpio_out_active spi_ncs_disable: 6411 6808c214 fetcht 1 ,mem_spi_ncs_gpio 6412 20206825 branch gpio_out_inactive twspi_write: 6413 202064ec branch spid_write_reg twspi_read: 6414 202064f3 branch spid_read_reg read_function_aes: 6415 24346419 nbranch read_function ,user 6416 68108085 hfetch 1 ,core_gpio_key2 6417 1fe1fe02 or_into 0x2 ,pdata 6418 60108085 hstore 1 ,core_gpio_key2 read_function: 6419 18427c00 copy temp ,null 641a 2022e41c branch read_fuction_zero ,zero 641b 1a627a00 copy regc ,pc read_fuction_zero: 641c 2fcc0000 isolate0 0 ,null 641d 202064b9 branch set_ucode_status get_block_header: 641e 18000404 force 4 ,temp get_block_header0: 641f da2001fe arg mem_ucode_buf ,rega 6420 68108085 hfetch 1 ,core_gpio_key2 6421 1fe17efd and_into 0xfd ,pdata 6422 60108085 hstore 1 ,core_gpio_key2 6423 20406419 call read_function 6424 da2055aa arg 0x55aa ,rega 6425 680101fe fetch 2 ,mem_ucode_buf 6426 e8c90000 ifetcht 2 ,contr 6427 9a267c00 isub rega ,null 6428 20600000 rtn read_first_block: 6429 d8400002 arg 2 ,temp 642a da200204 arg mem_ucode_ptr ,rega 642b 20406419 call read_function 642c 68010204 fetch 2 ,mem_ucode_ptr 642d 600101f7 store 2 ,mem_addr_mi 642e 20546430 call get_iv ,user 642f 20600000 rtn get_iv: 6430 d8400010 arg 16 ,temp 6431 da200206 arg mem_ucode_keybuf ,rega 6432 68108085 hfetch 1 ,core_gpio_key2 6433 1fe17efd and_into 0xfd ,pdata 6434 60108085 hstore 1 ,core_gpio_key2 6435 20406419 call read_function 6436 d8c00206 arg mem_ucode_keybuf ,contr 6437 df200010 arg 16 ,loopcnt 6438 20407478 call aes_load_data 6439 20407428 call aes_init 643a 20407491 call aes_clear_data 643b 20207422 branch do_aes_cbc load_storage: 643c 7856fc00 disable match 643d 2040641e call get_block_header 643e 24628000 nrtn zero 643f 7836fc00 enable match 6440 70802380 jam 0x80 ,core_ucode_ctrl 6441 70802200 jam 0 ,core_ucode_hi 6442 70802400 jam 0 ,core_ucode_low 6443 da208025 arg core_ucode_data ,rega 6444 20406415 call read_function_aes 6445 70802300 jam 0x0 ,core_ucode_ctrl load_storage_loop: 6446 d8400006 arg 6 ,temp 6447 2040641f call get_block_header0 6448 24628000 nrtn zero 6449 e8c10000 ifetch 2 ,contr 644a 98002200 iforce rega 644b 20406419 call read_function 644c 20206446 branch load_storage_loop reload_eeprom: 644d 20407f99 call clean_mem 644e 58001000 setarg 0x1000 644f 600101f7 store 2 ,mem_addr_mi 6450 da6065e5 arg iicd_read_eep ,regc 6451 df200002 arg 2 ,loopcnt reload_eeprom_loop: 6452 2040641e call get_block_header 6453 24628000 nrtn zero 6454 680101f7 fetch 2 ,mem_addr_mi 6455 1ff0fe00 byteswap pdata ,pdata 6456 9840fe00 iadd temp ,pdata 6457 1ff0fe00 byteswap pdata ,pdata 6458 600101f7 store 2 ,mem_addr_mi 6459 c2006452 loop reload_eeprom_loop 645a 20206446 branch load_storage_loop loadcode: 645b 20407f99 call clean_mem 645c 78547c00 disable user 645d 2040666a call otp_enable_chgpump 645e 58000000 setarg otp_ucode_flag 645f da2001f3 arg mem_otp_ucode_flag ,rega 6460 d8400002 arg 2 ,temp 6461 204066b3 call otpd_read_data 6462 680101f3 fetch 2 ,mem_otp_ucode_flag 6463 c303e46e bbit0 otp_uflag_aes ,loadcode_otp 6464 70805025 jam 0x25 ,core_clkoff 6465 580007f0 setarg otp_ucode_aeskey 6466 da200206 arg mem_ucode_keybuf ,rega 6467 d8400010 arg 16 ,temp 6468 204066b3 call otpd_read_data 6469 70800608 jam lock_otp ,core_misc_ctrl 646a 7920002b set1 mark_otp_encrypt ,mark 646b d8c00206 arg mem_ucode_keybuf ,contr 646c 20407484 call load_key 646d 78347c00 enable user loadcode_otp: 646e 7041da00 jam 0 ,mem_loadcode_times loadcode_otp_2: 646f 204064b0 call loadcode_check_times 6470 680101f3 fetch 2 ,mem_otp_ucode_flag 6471 1ff0fe00 byteswap pdata ,pdata 6472 d84007ff arg 0x7ff ,temp 6473 98417e00 iand temp ,pdata 6474 2022e47b branch loadcode_iic ,zero 6475 2040666f call otp_set_addr 6476 da6066b8 arg otpd_read_code ,regc 6477 20546430 call get_iv ,user 6478 2040643c call load_storage 6479 680081f2 fetch 1 ,mem_ucode_status 647a c300646f bbit0 0 ,loadcode_otp_2 loadcode_iic: 647b 2040666d call otp_disable_chgpump 647c 7041da00 jam 0 ,mem_loadcode_times loadcode_iic_2: 647d 204064b0 call loadcode_check_times 647e 204065c2 call clear_eeprom_size_2k 647f 680081f3 fetch 1 ,mem_otp_ucode_flag 6480 c283648e bbit1 otp_uflag_skip_eep ,loadcode_spi 6481 204064aa call loadcode_iic_by_eeprom 6482 2436e486 nbranch loadcode_iic_eeprom_2k ,match 6483 680081f2 fetch 1 ,mem_ucode_status 6484 c300647d bbit0 0 ,loadcode_iic_2 6485 2020649b branch loadcode_hci loadcode_iic_eeprom_2k: 6486 204065bf call set_eeprom_size_2k 6487 680081f3 fetch 1 ,mem_otp_ucode_flag 6488 c283648e bbit1 otp_uflag_skip_eep ,loadcode_spi 6489 204064aa call loadcode_iic_by_eeprom 648a 2436e48e nbranch loadcode_spi ,match 648b 680081f2 fetch 1 ,mem_ucode_status 648c c300647d bbit0 0 ,loadcode_iic_2 648d 2020649b branch loadcode_hci loadcode_spi: 648e 7041da00 jam 0 ,mem_loadcode_times loadcode_spi_2: 648f 204064b0 call loadcode_check_times 6490 680081f3 fetch 1 ,mem_otp_ucode_flag 6491 c282e49b bbit1 otp_uflag_skip_flash ,loadcode_hci 6492 58000000 setarg 0x0 6493 600181f6 store 3 ,mem_addr_hi 6494 20406502 call spid_init_flash 6495 da606578 arg spid_load_flash ,regc 6496 20406429 call read_first_block 6497 2040643c call load_storage 6498 2436e49b nbranch loadcode_hci ,match 6499 680081f2 fetch 1 ,mem_ucode_status 649a c300648f bbit0 0 ,loadcode_spi_2 loadcode_hci: 649b c515e49d bmark1 mark_otp_encrypt ,loadcode_hci_enc 649c 204064a3 call clear_key_buf loadcode_hci_enc: 649d 680081f3 fetch 1 ,mem_otp_ucode_flag 649e c30264a3 bbit0 otp_uflag_hci ,clear_key_buf 649f 70805021 jam 0x21 ,core_clkoff 64a0 20404c0e call hci_init loadcode_hci_loop: 64a1 20404c2e call hci_rx_packet 64a2 202064a1 branch loadcode_hci_loop clear_key_buf: 64a3 58000000 setarg 0 64a4 60040206 store 8 ,mem_ucode_keybuf 64a5 6004020e store 8 ,mem_ucode_keybuf + 8 64a6 18007004 force regidx_key ,regext_index 64a7 20407492 call aes_clear 64a8 70805021 jam 0x21 ,core_clkoff 64a9 20600000 rtn loadcode_iic_by_eeprom: 64aa 58000000 setarg 0x0 64ab 600101f7 store 2 ,mem_addr_mi 64ac da6065e5 arg iicd_read_eep ,regc 64ad 204065a3 call iicd_init_12m 64ae 20406429 call read_first_block 64af 2020643c branch load_storage loadcode_check_times: 64b0 6800c1da fetch 1 ,mem_loadcode_times 64b1 1fe0fe01 increase 1 ,pdata 64b2 1fe67c03 sub pdata ,3 ,null 64b3 242164b6 nbranch loadcode_error ,positive 64b4 6000c1da store 1 ,mem_loadcode_times 64b5 20600000 rtn loadcode_error: 64b6 204064a3 call clear_key_buf 64b7 20407fa1 call ice_break 64b8 20600000 rtn set_ucode_status: 64b9 680081f2 fetch 1 ,mem_ucode_status 64ba 1fe3fe00 lshift pdata ,pdata 64bb 7920fe00 setflag true ,0 ,pdata 64bc 2a2c000f isolate0 15 ,rega 64bd 20608000 rtn true 64be 600081f2 store 1 ,mem_ucode_status 64bf 20600000 rtn decrypt_code: 64c0 68108085 hfetch 1 ,core_gpio_key2 64c1 c4008000 rtnbit0 1 64c2 202064c6 branch decrypt_code_skip decrypt_code_loop: 64c3 6810812c hfetch 1 ,core_dma_status 64c4 afefffff qisolate1 pdata 64c5 20608000 rtn true decrypt_code_skip: 64c6 68108108 hfetch 1 ,core_misc_status 64c7 c300e4c3 bbit0 1 ,decrypt_code_loop 64c8 20407422 call do_aes_cbc 64c9 202064c3 branch decrypt_code_loop load_ucode: 64ca 68014199 fetch 2 ,mem_patch_ptr 64cb 207a0000 rtn blank 64cc 70802380 jam 0x80 ,core_ucode_ctrl 64cd 70802200 jam 0 ,core_ucode_hi 64ce 70802400 jam 0 ,core_ucode_low 64cf 6809419b fetcht 2 ,mem_patch_len 64d0 184bf200 lshift2 temp ,loopcnt 64d1 98000c00 iforce contr load_ucode_loop: 64d2 e8c08000 ifetch 1 ,contr 64d3 60108025 hstore 1 ,core_ucode_data 64d4 c20064d2 loop load_ucode_loop 64d5 70802300 jam 0x0 ,core_ucode_ctrl 64d6 20600000 rtn spid_init: 64d7 4746c031 bpatchx patch31_5 ,mem_patch31 64d8 204064dd call spid_init_common 64d9 202063f2 branch twspi_enable spid_init2: 64da 204064dd call spid_init_common 64db 204063ee call twspi_disable 64dc 202063f6 branch twspi_enable2 spid_init_common: 64dd 6800c212 fetch 1 ,mem_spi_init_clk 64de 60108086 hstore 1 ,core_spid_ctrl 64df 6800c213 fetch 1 ,mem_spi_init_delay_time 64e0 60108087 hstore 1 ,core_spid_delay 64e1 580001f5 setarg mem_spid_tbuf 64e2 6011008a hstore 2 ,core_spid_txaddr 64e3 580001fa setarg mem_spid_rbuf 64e4 6011008c hstore 2 ,core_spid_rxaddr 64e5 202063ee branch twspi_disable spid_reset: 64e6 68108086 hfetch 1 ,core_spid_ctrl 64e7 79207e07 set1 7 ,pdata 64e8 60108086 hstore 1 ,core_spid_ctrl 64e9 793ffe07 set0 7 ,pdata 64ea 60108086 hstore 1 ,core_spid_ctrl 64eb 20600000 rtn spid_write_reg: 64ec 79207e07 set1 7 ,pdata 64ed 600101f5 store 2 ,mem_spid_tbuf 64ee 47474031 bpatchx patch31_6 ,mem_patch31 64ef 70808802 jam 2 ,core_spid_txlen 64f0 70808e00 jam 0 ,core_spid_rxlen 64f1 70800602 jam spid_start ,core_misc_ctrl 64f2 202064fc branch wait_spid_done spid_read_reg: 64f3 18000401 force 1 ,temp spid_read_regs: 64f4 600081f5 store 1 ,mem_spid_tbuf 64f5 4747c031 bpatchx patch31_7 ,mem_patch31 64f6 70808801 jam 1 ,core_spid_txlen 64f7 6019008e hstoret 2 ,core_spid_rxlen 64f8 70800602 jam spid_start ,core_misc_ctrl 64f9 204064fc call wait_spid_done 64fa 680081fa fetch 1 ,mem_spid_rbuf 64fb 20600000 rtn wait_spid_done: 64fc 680140d6 fetch 2 ,mem_afh_error_total 64fd 1fe0fe01 increase 1 ,pdata 64fe 600140d6 store 2 ,mem_afh_error_total 64ff 6810812c hfetch 1 ,core_dma_status 6500 c301e4fc bbit0 spid_done ,wait_spid_done 6501 20600000 rtn spid_init_flash: 6502 70808640 jam 0x40 ,core_spid_ctrl 6503 70808700 jam 0x0 ,core_spid_delay 6504 68108081 hfetch 1 ,core_gpio_sel1 6505 793ffe00 set0 0 ,pdata 6506 79207e01 set1 1 ,pdata 6507 60108081 hstore 1 ,core_gpio_sel1 6508 58000000 setarg 0 6509 600201f5 store 4 ,mem_spid_tbuf 650a 20600000 rtn spid_unlock_flash: 650b 58000000 setarg 0 650c 6011008e hstore 2 ,core_spid_rxlen 650d 58000001 setarg 1 650e 60110088 hstore 2 ,core_spid_txlen 650f 580001f5 setarg mem_spid_tbuf 6510 6011008a hstore 2 ,core_spid_txaddr 6511 7001f506 jam 6 ,mem_spid_tbuf 6512 70800602 jam spid_start ,core_misc_ctrl 6513 202064fc branch wait_spid_done flash_write: 6514 78547c00 disable user 6515 1fe22400 copy pdata ,regb 6516 6800c239 fetch 1 ,mem_spi_write_flash_sm 6517 c1800000 rtnne flash_sm_no_buys 6518 78347c00 enable user 6519 1a427e00 copy regb ,pdata 651a 20206522 branch flash_write_start flash_write_spi_sm_timer: 651b 6800c239 fetch 1 ,mem_spi_write_flash_sm 651c c000e522 beq flash_sm_start ,flash_write_start 651d c0016528 beq flash_sm_erase_sector ,flash_erase_sector 651e c001e530 beq flash_sm_wait_erase_sector ,flash_wait_erase_sector 651f c0026537 beq flash_sm_write_data ,flash_write_data 6520 c002e53d beq flash_sm_wait_write_data ,flash_wait_write_data 6521 20600000 rtn flash_write_start: 6522 6001c232 store 3 ,mem_spi_write_addr 6523 1a227e00 copy rega ,pdata 6524 60014235 store 2 ,mem_spi_write_ptr 6525 60094237 storet 2 ,mem_spi_write_len 6526 70423902 jam flash_sm_erase_sector ,mem_spi_write_flash_sm 6527 20206502 branch spid_init_flash flash_erase_sector: 6528 20406502 call spid_init_flash 6529 70423903 jam flash_sm_wait_erase_sector ,mem_spi_write_flash_sm 652a 2040650b call spid_unlock_flash 652b da2001f5 arg mem_spid_tbuf ,rega 652c 6801c232 fetch 3 ,mem_spi_write_addr 652d 70808804 jam 4 ,core_spid_txlen 652e d8400020 arg flash_command_sector_erase ,temp 652f 20206556 branch spid_write_flash_common flash_wait_erase_sector: 6530 20406502 call spid_init_flash 6531 2040650b call spid_unlock_flash 6532 58000005 setarg flash_read_satus 6533 204064f3 call spid_read_reg 6534 c3800000 rtnbit1 flash_status_wip 6535 70423904 jam flash_sm_write_data ,mem_spi_write_flash_sm 6536 20600000 rtn flash_write_data: 6537 20406502 call spid_init_flash 6538 70423905 jam flash_sm_wait_write_data ,mem_spi_write_flash_sm 6539 2040650b call spid_unlock_flash 653a 2040654a call flash_data_preserve 653b 20406552 call spid_write_flash 653c 20206545 branch flash_data_recover flash_wait_write_data: 653d 20406502 call spid_init_flash 653e 2040650b call spid_unlock_flash 653f 58000005 setarg flash_read_satus 6540 204064f3 call spid_read_reg 6541 c3800000 rtnbit1 flash_status_wip 6542 70423900 jam flash_sm_no_buys ,mem_spi_write_flash_sm 6543 68014201 fetch 2 ,mem_cb_spi_flash_write_complate 6544 20207f9c branch callback_func flash_data_recover: 6545 68020aa2 fetch 4 ,mem_temp 6546 68094235 fetcht 2 ,mem_spi_write_ptr 6547 184085fc increase -4 ,temp 6548 e0420000 istore 4 ,temp 6549 20600000 rtn flash_data_preserve: 654a 68094235 fetcht 2 ,mem_spi_write_ptr 654b 18422200 copy temp ,rega 654c 184085fc increase -4 ,temp 654d e8420000 ifetch 4 ,temp 654e 60020aa2 store 4 ,mem_temp 654f 68094237 fetcht 2 ,mem_spi_write_len 6550 6801c232 fetch 3 ,mem_spi_write_addr 6551 20600000 rtn spid_write_flash: 6552 18408404 increase 4 ,temp 6553 60190088 hstoret 2 ,core_spid_txlen 6554 d8400002 arg flash_command_write_data ,temp 6555 1a20a3fc increase -4 ,rega spid_write_flash_common: 6556 e2288000 istoret 1 ,rega 6557 1ff10400 rshift16 pdata ,temp 6558 e0a88000 istoret 1 ,contw 6559 1fec8400 rshift8 pdata ,temp 655a e0a88000 istoret 1 ,contw 655b e0a08000 istore 1 ,contw 655c 1a227e00 deposit rega 655d 6011008a hstore 2 ,core_spid_txaddr 655e 58000000 setarg 0 655f 6011008e hstore 2 ,core_spid_rxlen 6560 70800602 jam spid_start ,core_misc_ctrl 6561 202064fc branch wait_spid_done spid_read_flash: 6562 6019008e hstoret 2 ,core_spid_rxlen 6563 1ff10400 rshift16 pdata ,temp 6564 600881f6 storet 1 ,mem_addr_hi 6565 1fec8400 rshift8 pdata ,temp 6566 600881f7 storet 1 ,mem_addr_mi 6567 600081f8 store 1 ,mem_addr_lo 6568 58000004 setarg 4 6569 60110088 hstore 2 ,core_spid_txlen 656a 7001f503 jam flash_command_read_data ,mem_spid_tbuf 656b 580001f5 setarg mem_spid_tbuf 656c 6011008a hstore 2 ,core_spid_txaddr 656d 1a227e00 deposit rega 656e 6011008c hstore 2 ,core_spid_rxaddr 656f 68108086 hfetch 1 ,core_spid_ctrl 6570 2a2c000f isolate0 15 ,rega 6571 7920fe06 setflag true ,6 ,pdata 6572 60108086 hstore 1 ,core_spid_ctrl 6573 70800602 jam spid_start ,core_misc_ctrl spi_read_flash_wait: 6574 6810812c hfetch 1 ,core_dma_status 6575 c283e574 bbit1 7 ,spi_read_flash_wait 6576 d8e00003 arg spid_done ,queue 6577 202064fc branch wait_spid_done spid_load_flash: 6578 6019008e hstoret 2 ,core_spid_rxlen 6579 58000004 setarg 4 657a 60110088 hstore 2 ,core_spid_txlen 657b 7001f503 jam 3 ,mem_spid_tbuf 657c 580001f5 setarg mem_spid_tbuf 657d 6011008a hstore 2 ,core_spid_txaddr 657e 1a227e00 deposit rega 657f 6011008c hstore 2 ,core_spid_rxaddr 6580 68108086 hfetch 1 ,core_spid_ctrl 6581 2a2c000f isolate0 15 ,rega 6582 7920fe06 setflag true ,6 ,pdata 6583 60108086 hstore 1 ,core_spid_ctrl 6584 70800602 jam spid_start ,core_misc_ctrl spi_load_flash_wait: 6585 6810812c hfetch 1 ,core_dma_status 6586 c283e585 bbit1 7 ,spi_load_flash_wait 6587 d8e00003 arg spid_done ,queue 6588 204064c0 call decrypt_code 6589 204064fc call wait_spid_done 658a 2feffe02 isolate1 spid_crcok ,pdata 658b 204064b9 call set_ucode_status 658c 680081f6 fetch 1 ,mem_addr_hi 658d 1ff02400 lshift16 pdata ,regb 658e 680081f7 fetch 1 ,mem_addr_mi 658f 1fed7e00 lshift8 pdata ,pdata 6590 9a41a400 ior regb ,regb 6591 680081f8 fetch 1 ,mem_addr_lo 6592 9a41fe00 ior regb ,pdata 6593 9840fe00 iadd temp ,pdata 6594 600081f8 store 1 ,mem_addr_lo 6595 1fecfe00 rshift8 pdata ,pdata 6596 600081f7 store 1 ,mem_addr_mi 6597 1fecfe00 rshift8 pdata ,pdata 6598 600081f6 store 1 ,mem_addr_hi 6599 20600000 rtn soft_reset_chip: 659a 70801001 jam 1 ,core_reset 659b 20600000 rtn iic_init_390k: 659c 7080910c jam 12 ,core_iicd_scl_low 659d 7080920d jam 13 ,core_iicd_scl_high 659e 7080930d jam 13 ,core_iicd_start_setup 659f 7080940d jam 13 ,core_iicd_start_hold 65a0 7080950d jam 13 ,core_iicd_stop_setup 65a1 7080960c jam 12 ,core_iicd_data_setup 65a2 202065a9 branch iicd_init_gpio iicd_init_12m: 65a3 70809105 jam 5 ,core_iicd_scl_low 65a4 70809207 jam 7 ,core_iicd_scl_high 65a5 70809307 jam 7 ,core_iicd_start_setup 65a6 70809407 jam 7 ,core_iicd_start_hold 65a7 70809507 jam 7 ,core_iicd_stop_setup 65a8 70809605 jam 5 ,core_iicd_data_setup iicd_init_gpio: 65a9 6810807b hfetch 1 ,core_gpio_pu3 65aa 1fe1fec0 or_into 0xc0 ,pdata 65ab 6010807b hstore 1 ,core_gpio_pu3 65ac 68108081 hfetch 1 ,core_gpio_sel1 65ad 1fe1fe10 or_into 0x10 ,pdata 65ae 60108081 hstore 1 ,core_gpio_sel1 65af 20600000 rtn wait_iicd_done: 65b0 6810812c hfetch 1 ,core_dma_status 65b1 c302e5b0 bbit0 iicd_done ,wait_iicd_done 65b2 20600000 rtn iicd_read_data: 65b3 60110098 hstore 2 ,core_iicd_txlen 65b4 1a227e00 deposit rega 65b5 6011009a hstore 2 ,core_iicd_txaddr 65b6 1a427e00 deposit regb 65b7 6011009c hstore 2 ,core_iicd_rxaddr 65b8 18427e00 deposit temp 65b9 6011009e hstore 2 ,core_iicd_rxlen 65ba d8400001 arg 1 ,temp 65bb 7d3a0401 nsetflag blank ,1 ,temp 65bc 60108090 hstore 1 ,core_iicd_ctrl 65bd 70800604 jam iicd_start ,core_misc_ctrl 65be 202065b0 branch wait_iicd_done set_eeprom_size_2k: 65bf 79200028 set1 mark_eeprom_size ,mark 65c0 70421108 jam 0x08 ,mem_eeprom_block_size 65c1 20600000 rtn clear_eeprom_size_2k: 65c2 793f8028 set0 mark_eeprom_size ,mark 65c3 70421120 jam 0x20 ,mem_eeprom_block_size 65c4 20600000 rtn iicd_read_eep_data_size_2k: 65c5 6800c203 fetch 1 ,mem_eeprom_base 65c6 9a40fe00 iadd regb ,pdata 65c7 600081f7 store 1 ,mem_addr_mi 65c8 202065cc branch iicd_read_eep_size_2k iicd_read_eep_size_2k_lcadcode: 65c9 680101f7 fetch 2 ,mem_addr_mi 65ca 1ff0fe00 byteswap pdata ,pdata 65cb 600081f7 store 1 ,mem_addr_mi iicd_read_eep_size_2k: 65cc 58000003 setarg 3 65cd 60110098 hstore 2 ,core_iicd_txlen 65ce 7001f6a0 jam 0xa0 ,mem_iicd_tbuf 65cf 7001f8a1 jam 0xa1 ,mem_iicd_tbuf + 2 65d0 202065eb branch iicd_read_eep_common iicd_write_protect_eep_data: 65d1 60090aa2 storet 2 ,mem_temp 65d2 204065d6 call iicd_eeprom_write_enable 65d3 68090aa2 fetcht 2 ,mem_temp 65d4 20406606 call iicd_write_eep_data 65d5 202065dd branch iicd_eeprom_write_disable iicd_eeprom_write_enable: 65d6 6800c23a fetch 1 ,mem_eeprom_wp_gpio 65d7 c17f8000 rtneq gpio_disable 65d8 c30365db bbit0 6 ,iicd_wp_gpio_output_low 65d9 580249f0 setarg 150000 65da 20402a8f call sleep iicd_wp_gpio_output_low: 65db 6808c23a fetcht 1 ,mem_eeprom_wp_gpio 65dc 20206829 branch gpio_out_active iicd_eeprom_write_disable: 65dd 6808c23a fetcht 1 ,mem_eeprom_wp_gpio 65de 20206825 branch gpio_out_inactive iicd_read_eep_data: 65df 47484032 bpatchx patch32_0 ,mem_patch32 65e0 c51465c5 bmark1 mark_eeprom_size ,iicd_read_eep_data_size_2k 65e1 68014203 fetch 2 ,mem_eeprom_base 65e2 9a40fe00 iadd regb ,pdata 65e3 1ff0fe00 byteswap pdata ,pdata 65e4 600101f7 store 2 ,mem_addr_mi iicd_read_eep: 65e5 4748c032 bpatchx patch32_1 ,mem_patch32 65e6 c51465c9 bmark1 mark_eeprom_size ,iicd_read_eep_size_2k_lcadcode 65e7 58000004 setarg 4 65e8 60110098 hstore 2 ,core_iicd_txlen 65e9 7001f6a0 jam 0xa0 ,mem_iicd_tbuf 65ea 7001f9a1 jam 0xa1 ,mem_iicd_tbuf + 3 iicd_read_eep_common: 65eb 580001f6 setarg mem_iicd_tbuf 65ec 6011009a hstore 2 ,core_iicd_txaddr 65ed 6019009e hstoret 2 ,core_iicd_rxlen 65ee 1a227e00 deposit rega 65ef 6011009c hstore 2 ,core_iicd_rxaddr 65f0 58000002 setarg 2 65f1 2a2c000f isolate0 15 ,rega 65f2 7920fe00 setflag true ,0 ,pdata 65f3 60108090 hstore 1 ,core_iicd_ctrl 65f4 70800604 jam iicd_start ,core_misc_ctrl 65f5 d8e00005 arg iicd_done ,queue 65f6 204064c0 call decrypt_code 65f7 204065b0 call wait_iicd_done 65f8 2feffe04 isolate1 iicd_crcok ,pdata 65f9 204064b9 call set_ucode_status 65fa c5146601 bmark1 mark_eeprom_size ,iicd_read_eep_load_code_size_2k 65fb 680101f7 fetch 2 ,mem_addr_mi 65fc 1ff0fe00 byteswap pdata ,pdata 65fd 9840fe00 iadd temp ,pdata 65fe 1ff0fe00 byteswap pdata ,pdata 65ff 600101f7 store 2 ,mem_addr_mi 6600 20600000 rtn iicd_read_eep_load_code_size_2k: 6601 680081f7 fetch 1 ,mem_addr_mi 6602 9840fe00 iadd temp ,pdata 6603 1ff0fe00 byteswap pdata ,pdata 6604 600101f7 store 2 ,mem_addr_mi 6605 20600000 rtn iicd_write_eep_data: 6606 68014203 fetch 2 ,mem_eeprom_base 6607 9a40fe00 iadd regb ,pdata iicd_write_ota_data: 6608 60010a9a store 2 ,mem_pdatatemp 6609 47494032 bpatchx patch32_2 ,mem_patch32 660a 60090aa2 storet 2 ,mem_temp 660b 1a227e00 copy rega ,pdata 660c 60010ab9 store 2 ,mem_contr iicd_write_eep_loop: 660d 2040661d call iicd_eep_transparency 660e 68090ab2 fetcht 2 ,mem_regb 660f 68010ab9 fetch 2 ,mem_contr 6610 1fe22200 copy pdata ,rega 6611 68010a9a fetch 2 ,mem_pdatatemp 6612 2040663d call iicd_write_eep 6613 68010ab2 fetch 2 ,mem_regb 6614 68090ab9 fetcht 2 ,mem_contr 6615 98408400 iadd temp ,temp 6616 60090ab9 storet 2 ,mem_contr 6617 68090a9a fetcht 2 ,mem_pdatatemp 6618 98408400 iadd temp ,temp 6619 60090a9a storet 2 ,mem_pdatatemp 661a 68010aa2 fetch 2 ,mem_temp 661b 243a660d nbranch iicd_write_eep_loop ,blank 661c 20600000 rtn iicd_eep_transparency: 661d 4749c032 bpatchx patch32_3 ,mem_patch32 661e 6800c211 fetch 1 ,mem_eeprom_block_size 661f 1fe0ffff increase -1 ,pdata 6620 68090a9a fetcht 2 ,mem_pdatatemp 6621 9841fe00 ior temp ,pdata 6622 1fe0fe01 increase 1 ,pdata 6623 60018ab6 store 3 ,mem_regc 6624 68010aa2 fetch 2 ,mem_temp 6625 9840fe00 iadd temp ,pdata 6626 68098ab6 fetcht 3 ,mem_regc 6627 98467e00 isub temp ,pdata 6628 2421662f nbranch iicd_eep_deal_short_packet ,positive 6629 60010aa2 store 2 ,mem_temp 662a 68018ab6 fetch 3 ,mem_regc 662b 68090a9a fetcht 2 ,mem_pdatatemp 662c 98467e00 isub temp ,pdata 662d 60010ab2 store 2 ,mem_regb 662e 20600000 rtn iicd_eep_deal_short_packet: 662f 68010aa2 fetch 2 ,mem_temp 6630 60010ab2 store 2 ,mem_regb 6631 58000000 setarg 0 6632 60010aa2 store 2 ,mem_temp 6633 20600000 rtn iicd_write_eep_size_2k: 6634 18408402 increase 2 ,temp 6635 60190098 hstoret 2 ,core_iicd_txlen 6636 1a20a3fe increase -2 ,rega 6637 ea298000 ifetcht 3 ,rega 6638 18422400 copy temp ,regb 6639 d84000a0 arg 0xa0 ,temp 663a e2288000 istoret 1 ,rega 663b e0a08000 istore 1 ,contw 663c 2020664a branch iicd_write_eep_common iicd_write_eep: 663d 1fe22400 copy pdata ,regb 663e 474a4032 bpatchx patch32_4 ,mem_patch32 663f c5146634 bmark1 mark_eeprom_size ,iicd_write_eep_size_2k 6640 1a427e00 copy regb ,pdata 6641 18408403 increase 3 ,temp 6642 60190098 hstoret 2 ,core_iicd_txlen 6643 1a20a3fd increase -3 ,rega 6644 ea298000 ifetcht 3 ,rega 6645 18422400 copy temp ,regb 6646 d84000a0 arg 0xa0 ,temp 6647 e2288000 istoret 1 ,rega 6648 1ff0fe00 byteswap pdata ,pdata 6649 e0a10000 istore 2 ,contw iicd_write_eep_common: 664a 1a227e00 deposit rega 664b 6011009a hstore 2 ,core_iicd_txaddr 664c 58000000 setarg 0 664d 6011009e hstore 2 ,core_iicd_rxlen 664e 70809001 jam 1 ,core_iicd_ctrl 664f 70800604 jam iicd_start ,core_misc_ctrl 6650 204065b0 call wait_iicd_done 6651 1a427e00 copy regb ,pdata 6652 e2218000 istore 3 ,rega iic_check_eeprom_standby: 6653 474ac032 bpatchx patch32_5 ,mem_patch32 6654 7001f900 jam 0 ,mem_iicd_tbuf + 3 iic_check_eeprom_standby_wait: 6655 58000001 setarg 1 6656 60110098 hstore 2 ,core_iicd_txlen 6657 7001f6a0 jam 0xa0 ,mem_iicd_tbuf 6658 580001f6 setarg mem_iicd_tbuf 6659 6011009a hstore 2 ,core_iicd_txaddr 665a 58000000 setarg 0 665b 6011009e hstore 2 ,core_iicd_rxlen 665c 6011009c hstore 2 ,core_iicd_rxaddr 665d 58000003 setarg 3 665e 60108090 hstore 1 ,core_iicd_ctrl 665f 70800604 jam iicd_start ,core_misc_ctrl 6660 204065b0 call wait_iicd_done 6661 6810812c hfetch 1 ,core_dma_status 6662 c4030000 rtnbit0 iicd_ack 6663 200005dc nop 1500 6664 680081f9 fetch 1 ,mem_iicd_tbuf + 3 6665 1fe0fe01 increase 1 ,pdata 6666 600081f9 store 1 ,mem_iicd_tbuf + 3 6667 1fe67c28 sub pdata ,40 ,null 6668 24610000 nrtn positive 6669 20206655 branch iic_check_eeprom_standby_wait otp_enable_chgpump: 666a 70897370 jam 0x70 ,rfen_chgpump 666b 20000bb8 nop param_chgpump_delay 666c 20600000 rtn otp_disable_chgpump: 666d 70897330 jam 0x30 ,rfen_chgpump 666e 20600000 rtn otp_set_addr: 666f 1fe9fe00 lshift3 pdata ,pdata 6670 60110045 hstore 2 ,core_otp_addr 6671 70804b00 jam 0 ,core_otpd_ctrl 6672 20600000 rtn otp_write: 6673 2040666f call otp_set_addr 6674 204066a0 call otp_ce otp_program: 6675 ea288000 ifetcht 1 ,rega 6676 1a20a201 increase 1 ,rega 6677 18000e00 force 0 ,queue otp_program_bit: 6678 a84c0000 qisolate0 temp 6679 2020e697 branch otp_skip_0 ,true 667a 68108046 hfetch 1 ,core_otp_din 667b 79207e06 set1 6 ,pdata 667c 79207e07 set1 7 ,pdata 667d 60108046 hstore 1 ,core_otp_din 667e 70804702 jam 0x02 ,core_otp_ctrl 667f 70804782 jam 0x82 ,core_otp_ctrl 6680 793ffe07 set0 7 ,pdata 6681 60108046 hstore 1 ,core_otp_din 6682 7080478a jam 0x8a ,core_otp_ctrl 6683 2000000b nop 11 6684 708047ca jam 0xca ,core_otp_ctrl 6685 20000021 nop 33 6686 7080474a jam 0x4a ,core_otp_ctrl 6687 2000002c nop 44 6688 708047ca jam 0xca ,core_otp_ctrl 6689 20000016 nop 22 668a 7080478a jam 0x8a ,core_otp_ctrl 668b 20000021 nop 33 668c 70804782 jam 0x82 ,core_otp_ctrl 668d 20000001 nop 1 668e 70804792 jam 0x92 ,core_otp_ctrl 668f 2000000a nop 10 6690 708047b2 jam 0xb2 ,core_otp_ctrl 6691 68108007 hfetch 1 ,core_otp_rdata 6692 70804792 jam 0x92 ,core_otp_ctrl 6693 20000001 nop 1 6694 70804782 jam 0x82 ,core_otp_ctrl 6695 afec0000 qisolate0 pdata 6696 2020e678 branch otp_program_bit ,true otp_skip_0: 6697 68110045 hfetch 2 ,core_otp_addr 6698 1fe0fe01 increase 1 ,pdata 6699 60110045 hstore 2 ,core_otp_addr 669a 18e08e01 increase 1 ,queue 669b 28e01e08 compare 8 ,queue ,0xf 669c 2420e678 nbranch otp_program_bit ,true 669d c2006675 loop otp_program 669e 70804783 jam 0x83 ,core_otp_ctrl 669f 20600000 rtn otp_ce: 66a0 70804782 jam 0x82 ,core_otp_ctrl 66a1 2000000c nop 12 66a2 70804780 jam 0x80 ,core_otp_ctrl 66a3 70804782 jam 0x82 ,core_otp_ctrl 66a4 20000096 nop 150 66a5 20600000 rtn otpd_read_init: 66a6 204066a0 call otp_ce 66a7 708047a2 jam 0xa2 ,core_otp_ctrl 66a8 1a227e00 deposit rega 66a9 60110048 hstore 2 ,core_otpd_addr 66aa 7920040b set1 11 ,temp 66ab 2fec000f isolate0 15 ,pdata 66ac 7920840f setflag true ,15 ,temp 66ad 6019004a hstoret 2 ,core_otpd_len 66ae 70800601 jam otpd_start ,core_misc_ctrl 66af 20600000 rtn otpd_wait_end: 66b0 6810812c hfetch 1 ,core_dma_status 66b1 c300e6b0 bbit0 otpd_done ,otpd_wait_end 66b2 20600000 rtn otpd_read_data: 66b3 2040666f call otp_set_addr 66b4 204066a6 call otpd_read_init 66b5 204066b0 call otpd_wait_end 66b6 70804783 jam 0x83 ,core_otp_ctrl 66b7 20600000 rtn otpd_read_code: 66b8 68110124 hfetch 2 ,core_current_otp_addr 66b9 60110045 hstore 2 ,core_otp_addr 66ba 204066a6 call otpd_read_init 66bb d8e00001 arg otpd_done ,queue 66bc 204064c0 call decrypt_code 66bd 204066b0 call otpd_wait_end 66be 2feffe00 isolate1 otpd_crcok ,pdata 66bf 204064b9 call set_ucode_status 66c0 70804783 jam 0x83 ,core_otp_ctrl 66c1 20600000 rtn uartd_prepare_tx: 66c2 6811005e hfetch 2 ,core_uart_twptr 66c3 98001400 iforce contwu 66c4 20600000 rtn uartd_send: 66c5 19427e00 deposit contwu 66c6 6011005e hstore 2 ,core_uart_twptr 66c7 20600000 rtn uartd_rxdone: 66c8 18627e00 deposit contru 66c9 60110058 hstore 2 ,core_uart_rrptr 66ca 20600000 rtn uartd_prepare_rx: 66cb 68110058 hfetch 2 ,core_uart_rrptr 66cc 1fe20600 copy pdata ,contru 66cd 20600000 rtn uart_set_baud_by_mem: 66ce 68014243 fetch uart_baud_len ,mem_baud 66cf 60110052 hstore uart_baud_len ,core_uart_baud 66d0 20600000 rtn uart_copy_tx_bytes_fast: 66d1 1f227e00 deposit loopcnt 66d2 207a0000 rtn blank uart_copy_tx_bytes_fast_loop: 66d3 1f20f3f8 increase -8 ,loopcnt 66d4 204166de call uart_tx_8_bytes ,positive 66d5 20628000 rtn zero 66d6 202166d3 branch uart_copy_tx_bytes_fast_loop ,positive 66d7 1f20f208 increase 8 ,loopcnt uart_copy_tx_bytes_fast_loop_four: 66d8 1f20f3fc increase -4 ,loopcnt 66d9 204166e1 call uart_tx_4_bytes ,positive 66da 20628000 rtn zero 66db 202166d8 branch uart_copy_tx_bytes_fast_loop_four ,positive 66dc 1f20f204 increase 4 ,loopcnt 66dd 202066e4 branch uart_copy_tx_bytes uart_tx_8_bytes: 66de e8c40000 ifetch 8 ,contr 66df e1440000 istore 8 ,contwu 66e0 20600000 rtn uart_tx_4_bytes: 66e1 e8c20000 ifetch 4 ,contr 66e2 e1420000 istore 4 ,contwu 66e3 20600000 rtn uart_copy_tx_bytes: 66e4 1f227e00 deposit loopcnt 66e5 207a0000 rtn blank uart_copy_tx_bytes_loop: 66e6 e8c08000 ifetch 1 ,contr 66e7 e1408000 istore 1 ,contwu 66e8 c20066e6 loop uart_copy_tx_bytes_loop 66e9 20600000 rtn uart_copy_rx_bytes_fast: 66ea 1f227e00 deposit loopcnt 66eb 207a0000 rtn blank uart_copy_rx_bytes_fast_loop: 66ec 1f20f3f8 increase -8 ,loopcnt 66ed 204166f7 call uart_rx_8_bytes ,positive 66ee 20628000 rtn zero 66ef 202166ec branch uart_copy_rx_bytes_fast_loop ,positive 66f0 1f20f208 increase 8 ,loopcnt uart_copy_rx_bytes_fast_loop_four: 66f1 1f20f3fc increase -4 ,loopcnt 66f2 204166fa call uart_rx_4_bytes ,positive 66f3 20628000 rtn zero 66f4 202166f1 branch uart_copy_rx_bytes_fast_loop_four ,positive 66f5 1f20f204 increase 4 ,loopcnt 66f6 202066fd branch uart_copy_rx_bytes uart_rx_8_bytes: 66f7 e8640000 ifetch 8 ,contru 66f8 e0a40000 istore 8 ,contw 66f9 20600000 rtn uart_rx_4_bytes: 66fa e8620000 ifetch 4 ,contru 66fb e0a20000 istore 4 ,contw 66fc 20600000 rtn uart_copy_rx_bytes: 66fd 1f227e00 deposit loopcnt 66fe 207a0000 rtn blank uart_copy_rx_bytes_loop: 66ff e8608000 ifetch 1 ,contru 6700 e0a08000 istore 1 ,contw 6701 c20066ff loop uart_copy_rx_bytes_loop 6702 20600000 rtn uart_copy_rx2tx: 6703 1f227e00 deposit loopcnt 6704 207a0000 rtn blank uart_copy_rx2tx_loop: 6705 e8608000 ifetch 1 ,contru 6706 e1408000 istore 1 ,contwu 6707 c2006705 loop uart_copy_rx2tx_loop 6708 20600000 rtn app_store_nvram_event: 6709 700a993d jam bt_evt_store_nvram ,mem_fifo_temp 670a 20207d86 branch ui_ipc_send_event check_51cmd_store_reconn_info: check_51cmd_update_device_record: 670b 474b4032 bpatchx patch32_6 ,mem_patch32 670c 6800c217 fetch 1 ,mem_nv_data_number 670d 207a0000 rtn blank 670e 204067a3 call check_nvram 670f 2042e7a9 call init_device_list ,zero 6710 2040673e call nvram_find_addr_from_bd_list write_device_record: 6711 6800c217 fetch 1 ,mem_nv_data_number 6712 1fe22600 icopy regc 6713 68094215 fetcht 2 ,mem_nv_data_ptr 6714 6009018c storet 2 ,mem_list_item_ptr write_device_loop_find: 6715 1a627e00 copy regc ,pdata 6716 203a6709 branch app_store_nvram_event ,blank 6717 1a60a7ff increase -1 ,regc 6718 18422200 copy temp ,rega 6719 ea208000 ifetch 1 ,rega 671a 68088184 fetcht 1 ,mem_select_list_item 671b 98467c00 isub temp ,null 671c 2042e725 call set_index_finded_device ,zero 671d 20216721 branch write_device_loop_find0 ,positive 671e ea208000 ifetch 1 ,rega 671f 1fe0fe01 increase 1 ,pdata 6720 e2208000 istore 1 ,rega write_device_loop_find0: 6721 6809018c fetcht 2 ,mem_list_item_ptr 6722 18408422 increase nv_data_len ,temp 6723 6009018c storet 2 ,mem_list_item_ptr 6724 20206715 branch write_device_loop_find set_index_finded_device: 6725 58000000 setarg 0 6726 e2208000 istore 1 ,rega 6727 68008185 fetch 1 ,mem_temp_reconn_record 6728 e0a08000 istore 1 ,contw 6729 c099e733 bne rec_3_mode ,set_index_finded_device_ble_mode 672a da4041be arg mem_link_key ,regb set_index_find_device_master_addr: 672b e8c30000 ifetch 6 ,contr 672c e0a40000 istore 8 ,contw 672d 58000000 setarg 0 672e e0a40000 istore 8 ,contw 672f 1a420c00 copy regb ,contr store_rec_data_common: 6730 20407ebf call memcpy16 6731 18007c01 force 1 ,null 6732 20600000 rtn set_index_finded_device_ble_mode: 6733 c01b6737 beq rec_4_mode_random_resolvable_private_address ,set_index_finded_device_irk 6734 c01be73b beq rec_4_mode_random_non_resolvable_private_address ,set_index_finded_device_ediv 6735 da404419 arg mem_le_ltk ,regb 6736 2020672b branch set_index_find_device_master_addr set_index_finded_device_irk: 6737 d8c044d5 arg mem_le_irk ,contr 6738 20407ebf call memcpy16 store_ble_rec_data_common: 6739 d8c04419 arg mem_le_ltk ,contr 673a 20206730 branch store_rec_data_common set_index_finded_device_ediv: 673b d8c044cd arg mem_le_rand ,contr 673c 20407ebf call memcpy16 673d 20206739 branch store_ble_rec_data_common nvram_find_addr_from_bd_list: 673e 20407fe9 call disable_user 673f 6800c217 fetch 1 ,mem_nv_data_number 6740 207a0000 rtn blank 6741 68014682 fetch 2 ,mem_ui_state_map 6742 c2806754 bbit1 ui_state_bt_connected ,find_addr_from_bd_list_spp_mode find_addr_from_bd_list_ble_mode: 6743 474bc032 bpatchx patch32_7 ,mem_patch32 6744 6800c48e fetch 1 ,mem_le_conn_peer_addr_type 6745 c000674d beq master_public_addr ,find_addr_from_bd_list_static_addr 6746 68008454 fetch 1 ,mem_le_plap + 5 6747 2fe180c0 compare 0xc0 ,pdata ,0xc0 6748 2020e74d branch find_addr_from_bd_list_static_addr ,true 6749 2fe18040 compare 0x40 ,pdata ,0xc0 674a 2020e752 branch find_addr_from_bd_list_random_addr ,true 674b 2fe18000 compare 0x00 ,pdata ,0xc0 674c 2020e750 branch find_addr_from_bd_list_random_non_resolvable_private_address ,true find_addr_from_bd_list_static_addr: 674d 70018535 jam rec_4_mode_static_address ,mem_temp_reconn_record 674e 6803044f fetch 6 ,mem_le_plap 674f 20206757 branch find_addr_from_bd_list_common find_addr_from_bd_list_random_non_resolvable_private_address: 6750 70018537 jam rec_4_mode_random_non_resolvable_private_address ,mem_temp_reconn_record 6751 20206757 branch find_addr_from_bd_list_common find_addr_from_bd_list_random_addr: 6752 70018536 jam rec_4_mode_random_resolvable_private_address ,mem_temp_reconn_record 6753 20206757 branch find_addr_from_bd_list_common find_addr_from_bd_list_spp_mode: 6754 474c4033 bpatchx patch33_0 ,mem_patch33 6755 70018533 jam rec_3_mode ,mem_temp_reconn_record 6756 68030040 fetch 6 ,mem_plap find_addr_from_bd_list_common: 6757 60030186 store 6 ,mem_temp_reconn_record + 1 6758 68014215 fetch 2 ,mem_nv_data_ptr 6759 efe88000 ifetcht 1 ,pdata 675a 1fe0fe01 pincrease 1 675b 6001018c store 2 ,mem_list_item_ptr 675c 60088184 storet 1 ,mem_select_list_item 675d 6800c217 fetch 1 ,mem_nv_data_number 675e 1fe22600 icopy regc nvram_find_addr_from_list: 675f 6801018c fetch 2 ,mem_list_item_ptr 6760 1fe22200 copy pdata ,rega 6761 2040676f call nvram_find_addr_from_list_compare 6762 20740000 rtn user 6763 6809018c fetcht 2 ,mem_list_item_ptr 6764 18408422 increase nv_data_len ,temp 6765 6009018c storet 2 ,mem_list_item_ptr 6766 184085ff increase -1 ,temp 6767 e8408000 ifetch 1 ,temp 6768 60008184 store 1 ,mem_select_list_item 6769 1a60a7ff increase -1 ,regc 676a 2422e75f nbranch nvram_find_addr_from_list ,zero 676b 6800c217 fetch 1 ,mem_nv_data_number 676c 1fe0ffff pincrease decreased_one 676d 60008184 store 1 ,mem_select_list_item 676e 20600000 rtn nvram_find_addr_from_list_compare: 676f 68008185 fetch 1 ,mem_temp_reconn_record 6770 c099e776 bne rec_3_mode ,find_addr_from_list_compare_ble_mode find_master_addr_from_list_compare: 6771 da400185 arg mem_temp_reconn_record ,regb 6772 df200007 arg 7 ,loopcnt 6773 20407f88 call string_compare 6774 2022ffe7 branch enable_user ,zero 6775 20600000 rtn find_addr_from_list_compare_ble_mode: 6776 c01b6779 beq rec_4_mode_random_resolvable_private_address ,find_irk_form_list_compare 6777 c01be794 beq rec_4_mode_random_non_resolvable_private_address ,find_ediv_form_list_compare 6778 20206771 branch find_master_addr_from_list_compare find_irk_form_list_compare: 6779 ea288000 ifetcht 1 ,rega 677a 98467c00 isub temp ,null 677b 24628000 nrtn zero 677c d8a00ac2 arg mem_le_prand ,contw 677d df200010 arg 16 ,loopcnt 677e 20407ed4 call clear_mem 677f 68018452 fetch 3 ,mem_le_plap + 3 6780 60018ac2 store 3 ,mem_le_prand 6781 2040678b call genernate_master_macaddress 6782 68010adf fetch 2 ,mem_le_aes_128 + 13 6783 1ff0fe00 byteswap pdata ,pdata 6784 1fed0400 lshift8 pdata ,temp 6785 e8c08000 ifetch 1 ,contr 6786 9840fe00 iadd temp ,pdata 6787 6809844f fetcht 3 ,mem_le_plap 6788 98467c00 isub temp ,null 6789 2022ffe7 branch enable_user ,zero 678a 20600000 rtn genernate_master_macaddress: 678b d8c00ac2 arg mem_le_prand ,contr 678c 20407486 call load_data128 678d ea208000 ifetch 1 ,rega 678e 20407487 call load_regext 678f 18006c38 force 0x38 ,aes_ctrl 6790 18006c00 force 0x0 ,aes_ctrl 6791 2040741d call wait_aes 6792 d8a00ad2 arg mem_le_aes_128 ,contw 6793 20207497 branch store_aes_result find_ediv_form_list_compare: 6794 ea288000 ifetcht 1 ,rega 6795 98467c00 isub temp ,null 6796 24628000 nrtn zero 6797 18c22200 copy contr ,rega 6798 18c0a608 add contr ,8 ,regc 6799 da4044cd arg mem_le_rand ,regb 679a df200008 arg 8 ,loopcnt 679b 20407f88 call string_compare 679c 2022ffe7 branch enable_user ,zero 679d 1a622200 copy regc ,rega 679e da4044d5 arg mem_le_irk ,regb 679f df200008 arg 8 ,loopcnt 67a0 20407f88 call string_compare 67a1 2022ffe7 branch enable_user ,zero 67a2 20600000 rtn check_nvram: 67a3 68014215 fetch 2 ,mem_nv_data_ptr 67a4 efe88000 ifetcht 1 ,pdata 67a5 1fe0fe22 pincrease nv_data_len 67a6 efe08000 ifetch 1 ,pdata 67a7 98467c00 isub temp ,null 67a8 20600000 rtn init_device_list: 67a9 6800c217 fetch 1 ,mem_nv_data_number 67aa 1fe27200 icopy loopcnt 67ab 68094215 fetcht 2 ,mem_nv_data_ptr 67ac 58000000 setarg 0 init_device_list_loop: 67ad e0408000 istore 1 ,temp 67ae 18408422 increase nv_data_len ,temp 67af 1fe0fe01 pincrease 1 67b0 c20067ad loop init_device_list_loop 67b1 20600000 rtn load_device_list: 67b2 474cc033 bpatchx patch33_1 ,mem_patch33 67b3 2040673e call nvram_find_addr_from_bd_list 67b4 68008030 fetch 1 ,mem_state 67b5 79347e06 setflag user ,state_combkey ,pdata 67b6 60008030 store 1 ,mem_state 67b7 243467bc nbranch clear_key_exists ,user 67b8 1a208c0a add rega ,10 ,contr 67b9 d8a041be arg mem_link_key ,contw 67ba 20407ebf call memcpy16 67bb 202067d7 branch check_link_key_load clear_key_exists: 67bc 7041bd00 jam 0 ,mem_link_key_exists 67bd 20600000 rtn load_device_list_mode_4: 67be 6804c4cb fetch 9 ,mem_le_ediv 67bf 203a67ca branch clear_ltk_exists ,blank 67c0 2040673e call nvram_find_addr_from_bd_list 67c1 243467ca nbranch clear_ltk_exists ,user 67c2 6801018c fetch 2 ,mem_list_item_ptr 67c3 1fe08c01 add pdata ,1 ,contr 67c4 d8a044d5 arg mem_le_irk ,contw 67c5 20407ebf call memcpy16 67c6 d8a04419 arg mem_le_ltk ,contw 67c7 20407ebf call memcpy16 67c8 70442901 jam 1 ,mem_ltk_exists 67c9 20600000 rtn clear_ltk_exists: 67ca 70442900 jam 0 ,mem_ltk_exists 67cb 20600000 rtn eeprom_store_le_reconn_info: 67cc 6803044f fetch 6 ,mem_le_plap 67cd 60030186 store 6 ,mem_temp_lap 67ce 70018534 jam rec_4_mode ,mem_record_bt_mode 67cf 202067d3 branch eeprom_store_reconn_info eeprom_store_bd_reconn_info: 67d0 68030040 fetch 6 ,mem_plap 67d1 60030186 store 6 ,mem_temp_lap 67d2 70018533 jam rec_3_mode ,mem_record_bt_mode eeprom_store_reconn_info: 67d3 6800c092 fetch 1 ,mem_device_option 67d4 c005670b beq dvc_op_module ,check_51cmd_update_device_record 67d5 c28342da bbit1 dvc_op_mouse ,mouse_store_remote_bdaddr 67d6 20600000 rtn check_link_key_load: 67d7 680441be fetch 8 ,mem_link_key 67d8 680c41c6 fetcht 8 ,mem_link_key + 8 67d9 9841fe00 ior temp ,pdata 67da 207a0000 rtn blank 67db 7041bd01 jam 1 ,mem_link_key_exists 67dc 20600000 rtn gpio_set_wake_by_current_state: 67dd 474d4033 bpatchx patch33_2 ,mem_patch33 67de 79200407 set1 7 ,temp 67df 2040681d call gpio_get_bit 67e0 7d208407 nsetflag true ,7 ,temp gpio_set_wake: 67e1 474dc033 bpatchx patch33_3 ,mem_patch33 67e2 18467cff sub temp ,ui_button_gpio_disable ,null 67e3 20628000 rtn zero 67e4 284c0007 isolate0 7 ,temp 67e5 18410e1f and temp ,0x1f ,queue 67e6 680200a1 fetch 4 ,mem_gpio_wakeup_low 67e7 f920fe00 qsetflag true ,pdata 67e8 600200a1 store 4 ,mem_gpio_wakeup_low 67e9 680200a5 fetch 4 ,mem_gpio_wakeup_high 67ea fd20fe00 nqsetflag true ,pdata 67eb 600200a5 store 4 ,mem_gpio_wakeup_high 67ec 20600000 rtn gpio_clr_wake: 67ed 474e4033 bpatchx patch33_4 ,mem_patch33 67ee 18467cff sub temp ,ui_button_gpio_disable ,null 67ef 20628000 rtn zero 67f0 284c0007 isolate0 7 ,temp 67f1 18410e1f and temp ,0x1f ,queue 67f2 680200a1 fetch 4 ,mem_gpio_wakeup_low 67f3 f93ffe00 qset0 pdata 67f4 600200a1 store 4 ,mem_gpio_wakeup_low 67f5 680200a5 fetch 4 ,mem_gpio_wakeup_high 67f6 f93ffe00 qset0 pdata 67f7 600200a5 store 4 ,mem_gpio_wakeup_high 67f8 20600000 rtn gpio_config_input_nowake: 67f9 204067ed call gpio_clr_wake 67fa 202067fe branch gpio_config_input_without_wake gpio_config_input: 67fb 18467cff sub temp ,ui_button_gpio_disable ,null 67fc 20628000 rtn zero 67fd 2455e7e1 ncall gpio_set_wake ,wake gpio_config_input_without_wake: 67fe d8a0807c arg core_gpio_pd0 ,contw 67ff 20406830 call gpio_set_bit 6800 79400407 setflip gpio_active_bit ,temp 6801 d8a08078 arg core_gpio_pu0 ,contw 6802 20406830 call gpio_set_bit 6803 793f8407 set0 gpio_active_bit ,temp 6804 d8a08070 arg core_gpio_oe0 ,contw 6805 20206830 branch gpio_set_bit gpio_set_high_impedance: 6806 d8a0807c arg core_gpio_pd0 ,contw 6807 20406830 call gpio_set_bit 6808 793f8407 set0 gpio_active_bit ,temp 6809 d8a08078 arg core_gpio_pu0 ,contw 680a 20406830 call gpio_set_bit 680b 793f8407 set0 gpio_active_bit ,temp 680c d8a08070 arg core_gpio_oe0 ,contw 680d 20206830 branch gpio_set_bit gpio_config_output: 680e 18467cff sub temp ,ui_button_gpio_disable ,null 680f 20628000 rtn zero 6810 79400407 setflip gpio_active_bit ,temp 6811 2040682f call gpio_out gpio_config_output0: 6812 79200407 set1 gpio_active_bit ,temp 6813 d8a08070 arg core_gpio_oe0 ,contw 6814 20206830 branch gpio_set_bit gpio_common: 6815 18410e07 and temp ,0x07 ,queue 6816 18497e00 rshift3 temp ,pdata 6817 1fe17e03 and_into 3 ,pdata 6818 98a08a00 iadd contw ,contw 6819 e8a08000 ifetch 1 ,contw 681a 20600000 rtn gpio_check_active: 681b d8a08074 arg core_gpio_out0 ,contw 681c 2020681e branch get_bit_common gpio_get_bit: 681d d8a0811c arg core_gpio_in ,contw get_bit_common: 681e 20406815 call gpio_common 681f 284ffe07 isolate1 gpio_active_bit ,temp 6820 2020e823 branch gpio_get_bit_reverse ,true 6821 afec0000 qisolate0 pdata 6822 20600000 rtn gpio_get_bit_reverse: 6823 afefffff qisolate1 pdata 6824 20600000 rtn gpio_out_inactive: 6825 18467cff sub temp ,ui_button_gpio_disable ,null 6826 20628000 rtn zero 6827 2fcffe07 isolate1 7 ,null 6828 2020682c branch gpio_out_flag gpio_out_active: 6829 18467cff sub temp ,ui_button_gpio_disable ,null 682a 20628000 rtn zero 682b 2fcc0007 isolate0 7 ,null gpio_out_flag: 682c 58000000 setarg 0 682d 7d20fe07 nsetflag true ,gpio_active_bit ,pdata 682e 98428400 ixor temp ,temp gpio_out: 682f d8a08074 arg core_gpio_out0 ,contw gpio_set_bit: 6830 20406815 call gpio_common 6831 284ffe07 isolate1 gpio_active_bit ,temp 6832 f920fe00 qsetflag true ,pdata 6833 e0a08000 istore 1 ,contw 6834 20600000 rtn gpio_set_before_lpm_common: 6835 da3fffff arg -1 ,rega 6836 68108081 hfetch 1 ,core_gpio_sel1 6837 2fe00602 compare 0x02 ,pdata ,0x03 6838 2040e878 call neglact4_from_23_pin ,true 6839 2fe00601 compare 0x01 ,pdata ,0x03 683a 2040e87a call neglact2_form_25_pin ,true 683b 2fe00603 compare 0x03 ,pdata ,0x03 683c 2040e87a call neglact2_form_25_pin ,true 683d 2feffe02 isolate1 2 ,pdata 683e 2040e874 call neglect2_from_6_pin ,true 683f 2feffe03 isolate1 3 ,pdata 6840 2040e876 call neglect4_from_9_pin ,true 6841 2feffe04 isolate1 4 ,pdata 6842 2040e87c call neglact2_form_30_pin ,true 6843 2feffe06 isolate1 6 ,pdata 6844 7d20a204 nsetflag true ,04 ,rega 6845 2feffe07 isolate1 7 ,pdata 6846 7d20a205 nsetflag true ,05 ,rega 6847 68108082 hfetch 1 ,core_gpio_sel2 6848 2feffe00 isolate1 0 ,pdata 6849 7d20a21b nsetflag true ,27 ,rega 684a 2feffe01 isolate1 1 ,pdata 684b 7d20a21c nsetflag true ,28 ,rega 684c 2feffe02 isolate1 2 ,pdata 684d 7d20a203 nsetflag true ,03 ,rega 684e 2feffe03 isolate1 3 ,pdata 684f 7d20a208 nsetflag true ,08 ,rega 6850 2feffe04 isolate1 4 ,pdata 6851 7d20a214 nsetflag true ,20 ,rega 6852 2feffe05 isolate1 5 ,pdata 6853 7d20a215 nsetflag true ,21 ,rega 6854 2feffe06 isolate1 6 ,pdata 6855 7d20a216 nsetflag true ,22 ,rega 6856 2feffe07 isolate1 7 ,pdata 6857 7d20a217 nsetflag true ,23 ,rega 6858 68108080 hfetch 1 ,core_gpio_sel 6859 2feffe00 isolate1 0 ,pdata 685a 7d20a205 nsetflag true ,05 ,rega 685b 2feffe01 isolate1 1 ,pdata 685c 7d20a206 nsetflag true ,06 ,rega 685d 2feffe02 isolate1 2 ,pdata 685e 7d20a207 nsetflag true ,07 ,rega 685f 2feffe03 isolate1 3 ,pdata 6860 7d20a212 nsetflag true ,18 ,rega 6861 2feffe04 isolate1 4 ,pdata 6862 7d20a213 nsetflag true ,19 ,rega 6863 2feffe05 isolate1 5 ,pdata 6864 7d20a214 nsetflag true ,20 ,rega 6865 2feffe06 isolate1 6 ,pdata 6866 7d20a215 nsetflag true ,21 ,rega 6867 2feffe07 isolate1 7 ,pdata 6868 7d20a216 nsetflag true ,22 ,rega 6869 68108062 hfetch 1 ,core_uart_ctrl 686a 2feffe04 isolate1 4 ,pdata 686b 2040e87e call neglact2_form_2_pin ,true 686c 474ec033 bpatchx patch33_5 ,mem_patch33 686d 68120078 hfetch 4 ,core_gpio_pu0 686e 681a007c hfetcht 4 ,core_gpio_pd0 686f 9841fe00 ior temp ,pdata 6870 1fe47e00 invert pdata ,pdata 6871 9a217e00 iand rega ,pdata 6872 60120070 hstore 4 ,core_gpio_oe0 6873 20600000 rtn neglect2_from_6_pin: 6874 d8e00006 arg 6 ,queue 6875 20206884 branch neglect_2_pin neglect4_from_9_pin: 6876 d8e00009 arg 9 ,queue 6877 20206882 branch neglact_4_pin neglact4_from_23_pin: 6878 d8e00017 arg 23 ,queue 6879 20206882 branch neglact_4_pin neglact2_form_25_pin: 687a d8e00019 arg 25 ,queue 687b 20206884 branch neglect_2_pin neglact2_form_30_pin: 687c d8e0001e arg 30 ,queue 687d 20206884 branch neglect_2_pin neglact2_form_2_pin: 687e d8e00002 arg 2 ,queue 687f 20206884 branch neglect_2_pin neglact_1_pin: 6880 df200001 arg 1 ,loopcnt 6881 20206885 branch neglect_pin_loop neglact_4_pin: 6882 df200004 arg 4 ,loopcnt 6883 20206885 branch neglect_pin_loop neglect_2_pin: 6884 df200002 arg 2 ,loopcnt neglect_pin_loop: 6885 f93fa200 qset0 rega 6886 18e08e01 increase 1 ,queue 6887 c2006885 loop neglect_pin_loop 6888 20600000 rtn gpio_cfg_uart_tx_output: 6889 20406895 call gpio_uart2gpio 688a d8400006 arg uart_wakeup_tx ,temp 688b 2020680e branch gpio_config_output gpio_pu_uart_tx: 688c 20406889 call gpio_cfg_uart_tx_output 688d d8400006 arg uart_wakeup_tx ,temp 688e 20206825 branch gpio_out_inactive gpio_rx_config_input_with_pu: 688f 20406895 call gpio_uart2gpio 6890 68108078 hfetch 1 ,core_gpio_pu0 6891 79207e07 set1 uart_wakeup_rx ,pdata 6892 60108078 hstore 1 ,core_gpio_pu0 6893 d8400007 arg uart_wakeup_rx ,temp 6894 202067fb branch gpio_config_input gpio_uart2gpio: 6895 68108081 hfetch 1 ,core_gpio_sel1 6896 1fe17efb and_into 0xfb ,pdata 6897 60108081 hstore 1 ,core_gpio_sel1 6898 20600000 rtn gpio_check_uart_state: 6899 68108081 hfetch 1 ,core_gpio_sel1 689a 2feffe02 isolate1 2 ,pdata 689b 20600000 rtn load_chip_option: 689c 2040666a call otp_enable_chgpump 689d 580007e0 setarg otp_chip_functions 689e da204150 arg mem_chip_functions ,rega 689f d8400002 arg 0x02 ,temp 68a0 204066b3 call otpd_read_data 68a1 2020666d branch otp_disable_chgpump load_adc_init: 68a2 2040666a call otp_enable_chgpump 68a3 580007e2 setarg otp_adc_io_0_5v_addr 68a4 da20421d arg mem_0_5_adc_io_data ,rega 68a5 d840000e arg 14 ,temp 68a6 204066b3 call otpd_read_data 68a7 2020666d branch otp_disable_chgpump adc_init_data: 68a8 474f4033 bpatchx patch33_6 ,mem_patch33 68a9 204068a2 call load_adc_init 68aa 6800c22d fetch 1 ,mem_adc_config_flag 68ab c00068af beq adc_config_vinlpm ,adc_init_data_vinlpm 68ac c000e8c3 beq adc_config_hvin ,adc_init_data_hvin 68ad c00168d7 beq adc_config_gpio ,adc_init_data_io 68ae 20600000 rtn adc_init_data_vinlpm: 68af 68094229 fetcht 2 ,mem_otp_adc_flag 68b0 5800aa55 setarg otp_adc_flag 68b1 98467c00 isub temp ,null 68b2 2022e8b8 branch adc_check_data_vinlpm ,zero 68b3 58004dfa setarg 0x4dfa 68b4 60014227 store 2 ,mem_3v_adc_vinlpm_data 68b5 58004894 setarg 0x4894 68b6 60014221 store 2 ,mem_2v_adc_vinlpm_data 68b7 202068c0 branch set_vdd_reference_voltage_1v adc_check_data_vinlpm: 68b8 68014227 fetch 2 ,mem_3v_adc_vinlpm_data 68b9 243a68bc nbranch adc_check_2v_vinlpm ,blank 68ba 58004dfa setarg 0x4dfa 68bb 60014227 store 2 ,mem_3v_adc_vinlpm_data adc_check_2v_vinlpm: 68bc 68014221 fetch 2 ,mem_2v_adc_vinlpm_data 68bd 243a68c0 nbranch set_vdd_reference_voltage_1v ,blank 68be 58004894 setarg 0x4894 68bf 60014221 store 2 ,mem_2v_adc_vinlpm_data set_vdd_reference_voltage_1v: 68c0 58000064 setarg 100 68c1 6001422b store 2 ,mem_reference_voltage 68c2 20600000 rtn adc_init_data_hvin: 68c3 68094229 fetcht 2 ,mem_otp_adc_flag 68c4 5800aa55 setarg otp_adc_flag 68c5 98467c00 isub temp ,null 68c6 2022e8cc branch adc_check_data_hvin ,zero 68c7 58005932 setarg 0x5932 68c8 60014225 store 2 ,mem_5v_adc_hvin_data 68c9 58004323 setarg 0x4323 68ca 6001421f store 2 ,mem_1v_adc_hvin_data 68cb 202068d4 branch set_vdd_reference_voltage_4v adc_check_data_hvin: 68cc 68014225 fetch 2 ,mem_5v_adc_hvin_data 68cd 243a68d0 nbranch adc_check_1v_hvin ,blank 68ce 58005932 setarg 0x5932 68cf 60014225 store 2 ,mem_5v_adc_hvin_data adc_check_1v_hvin: 68d0 6801421f fetch 2 ,mem_1v_adc_hvin_data 68d1 243a68d4 nbranch set_vdd_reference_voltage_4v ,blank 68d2 58004323 setarg 0x4323 68d3 6001421f store 2 ,mem_1v_adc_hvin_data set_vdd_reference_voltage_4v: 68d4 58000190 setarg 400 68d5 6001422b store 2 ,mem_reference_voltage 68d6 20600000 rtn adc_init_data_io: 68d7 68094229 fetcht 2 ,mem_otp_adc_flag 68d8 5800aa55 setarg otp_adc_flag 68d9 98467c00 isub temp ,null 68da 2022e8e0 branch adc_check_data_io ,zero 68db 58006946 setarg 0x6946 68dc 60014223 store 2 ,mem_1v_adc_io_data 68dd 58005377 setarg 0x5377 68de 6001421d store 2 ,mem_0_5_adc_io_data 68df 202068e8 branch set_vdd_reference_voltage_0_5v adc_check_data_io: 68e0 68014223 fetch 2 ,mem_1v_adc_io_data 68e1 243a68e4 nbranch adc_check_0_5v_io ,blank 68e2 58006946 setarg 0x6946 68e3 60014223 store 2 ,mem_1v_adc_io_data adc_check_0_5v_io: 68e4 6801421d fetch 2 ,mem_0_5_adc_io_data 68e5 243a68e8 nbranch set_vdd_reference_voltage_0_5v ,blank 68e6 58005377 setarg 0x5377 68e7 6001421d store 2 ,mem_0_5_adc_io_data set_vdd_reference_voltage_0_5v: 68e8 58000032 setarg 50 68e9 6001422b store 2 ,mem_reference_voltage 68ea 20600000 rtn adc_set_mode: 68eb 6800c22d fetch 1 ,mem_adc_config_flag 68ec c00068f0 beq adc_config_vinlpm ,adc_check_vinlpm 68ed c000e8f2 beq adc_config_hvin ,adc_check_hvin 68ee c00168f4 beq adc_config_gpio ,adc_check_gpio 68ef 20600000 rtn adc_check_vinlpm: 68f0 708971bf jam 0xbf ,rf_adc_mode 68f1 202068f8 branch read_adc adc_check_hvin: 68f2 708971af jam 0xaf ,rf_adc_mode 68f3 202068f8 branch read_adc adc_check_gpio: 68f4 7089718f jam 0x8f ,rf_adc_mode 68f5 6800c22e fetch 1 ,mem_adc_channel 68f6 60108973 hstore 1 ,rf_adc_ch 68f7 202068f8 branch read_adc read_adc: 68f8 474fc033 bpatchx patch33_7 ,mem_patch33 68f9 68108053 hfetch 1 ,core_uart_baud + 1 68fa 79207e07 set1 7 ,pdata 68fb 60108053 hstore 1 ,core_uart_baud + 1 68fc 68108973 hfetch 1 ,rf_adc_ch 68fd 1fe1fe30 or_into 0x30 ,pdata 68fe 60108973 hstore 1 ,rf_adc_ch 68ff 7089067c jam 0x7c ,rfen_adc 6900 708972aa jam 0xaa ,rf_adc_gc 6901 20001388 nop 5000 6902 68190150 hfetcht 2 ,core_adc_sum 6903 68108053 hfetch 1 ,core_uart_baud + 1 6904 793ffe07 set0 7 ,pdata 6905 60108053 hstore 1 ,core_uart_baud + 1 6906 6009422f storet 2 ,mem_adc_current_value 6907 20600000 rtn vdd_calculate_by_mode: 6908 47504034 bpatchx patch34_0 ,mem_patch34 6909 6800c22d fetch 1 ,mem_adc_config_flag 690a c000690e beq adc_config_vinlpm ,vdd_calculate_vinlpm 690b c000e912 beq adc_config_hvin ,vdd_calculate_hvin 690c c0016916 beq adc_config_gpio ,vdd_calculate_io 690d 20600000 rtn vdd_calculate_vinlpm: 690e 68014227 fetch 2 ,mem_3v_adc_vinlpm_data 690f 68094221 fetcht 2 ,mem_2v_adc_vinlpm_data 6910 da6000c8 arg 200 ,regc 6911 2020691a branch vdd_calculate vdd_calculate_hvin: 6912 68014225 fetch 2 ,mem_5v_adc_hvin_data 6913 6809421f fetcht 2 ,mem_1v_adc_hvin_data 6914 da600064 arg 100 ,regc 6915 2020691a branch vdd_calculate vdd_calculate_io: 6916 68014223 fetch 2 ,mem_1v_adc_io_data 6917 6809421d fetcht 2 ,mem_0_5_adc_io_data 6918 da600032 arg 50 ,regc 6919 2020691a branch vdd_calculate vdd_calculate: 691a 98462200 isub temp ,rega 691b 6801422f fetch 2 ,mem_adc_current_value 691c 98467e00 isub temp ,pdata 691d 24216927 nbranch vdd_calculate1 ,positive 691e 6809422b fetcht 2 ,mem_reference_voltage 691f 984fa400 imul32 temp ,regb 6920 1a627e00 copy regc ,pdata 6921 9a2ffe00 imul32 rega ,pdata 6922 9a40fe00 iadd regb ,pdata vdd_calculate2: 6923 9a26fc00 idiv rega 6924 20407f86 call wait_div_end 6925 1807fe00 quotient pdata 6926 20600000 rtn vdd_calculate1: 6927 18427e00 copy temp ,pdata 6928 6809422f fetcht 2 ,mem_adc_current_value 6929 98467e00 isub temp ,pdata 692a 6809422b fetcht 2 ,mem_reference_voltage 692b 984fa400 imul32 temp ,regb 692c 1a627e00 copy regc ,pdata 692d 9a2ffe00 imul32 rega ,pdata 692e 9a467e00 isub regb ,pdata 692f 20206923 branch vdd_calculate2 adc_bat_percent_lowpower_out: 6930 ea240000 ifetch 8 ,rega 6931 60040a9a store 8 ,mem_pdatatemp 6932 68010a9a fetch 2 ,mem_pdatatemp 6933 68090a9c fetcht 2 ,mem_pdatatemp + 2 6934 98462200 isub temp ,rega 6935 68010aa0 fetch 2 ,mem_pdatatemp + 6 6936 98462400 isub temp ,regb 6937 68090a9e fetcht 2 ,mem_pdatatemp + 4 6938 98467c00 isub temp ,null 6939 24416940 ncall adc_set_low_power_flag ,positive 693a 1a4ffe64 mul32 regb ,100 ,pdata 693b 9a26fc00 idiv rega 693c 20407f86 call wait_div_end 693d 1807fe00 quotient pdata 693e 205a6944 call adc_set_no_power_flag ,blank 693f 20600000 rtn adc_set_low_power_flag: 6940 6800c231 fetch 1 ,mem_adc_power_flag 6941 79207e00 set1 0 ,pdata 6942 6000c231 store 1 ,mem_adc_power_flag 6943 20600000 rtn adc_set_no_power_flag: 6944 6808c231 fetcht 1 ,mem_adc_power_flag 6945 79200401 set1 1 ,temp 6946 6008c231 storet 1 ,mem_adc_power_flag 6947 20600000 rtn keyscan_key_init: 6948 6801423d fetch 2 ,mem_key_num_ptr 6949 efe08000 ifetch 1 ,pdata keyscan_key_init_next: 694a 207a0000 rtn blank 694b 1fe27200 copy pdata ,loopcnt 694c 6801423d fetch 2 ,mem_keyscan_ptr 694d 1fe0fe03 increase 3 ,pdata 694e 1fe22200 copy pdata ,rega keyscan_key_init_lp1: 694f ea288000 ifetcht 1 ,rega 6950 204067fb call gpio_config_input 6951 1a20a201 increase key_conf_struct_len ,rega 6952 c200694f loop keyscan_key_init_lp1 keyscan_key_init_end: 6953 20600000 rtn keyscan_scan_key: 6954 6801423d fetch 2 ,mem_keyscan_ptr 6955 1fe0fe03 increase 3 ,pdata 6956 1fe22200 copy pdata ,rega 6957 18002400 force 0 ,regb 6958 700b1200 jam 0 ,mem_key_value_temp keyscan_scan_key_lp1: 6959 ea288000 ifetcht 1 ,rega 695a 2040681d call gpio_get_bit 695b 4750c034 bpatchx patch34_1 ,mem_patch34 695c 68010b12 fetch 2 ,mem_key_value_temp 695d 1a420e00 copy regb ,queue 695e f920fe00 qsetflag true ,pdata 695f 60010b12 store 2 ,mem_key_value_temp 6960 1a20a201 increase key_conf_struct_len ,rega 6961 1a40a401 increase 1 ,regb 6962 6801423d fetch 2 ,mem_key_num_ptr 6963 efe08000 ifetch 1 ,pdata keyscan_scan_key_lp1_next: 6964 9a42fc00 ixor regb ,null 6965 2422e959 nbranch keyscan_scan_key_lp1 ,zero 6966 68010b12 fetch 2 ,mem_key_value_temp 6967 68090b14 fetcht 2 ,mem_key_value 6968 9842fc00 ixor temp ,null 6969 20628000 rtn zero 696a 78347c00 enable user 696b 20600000 rtn keyscan_process_lpm_before: 696c 6801423d fetch 2 ,mem_key_num_ptr 696d efe08000 ifetch 1 ,pdata keyscan_process_lpm_before_next: 696e 207a0000 rtn blank 696f 1fe27200 copy pdata ,loopcnt 6970 6801423d fetch 2 ,mem_keyscan_ptr 6971 1fe0fe03 increase 3 ,pdata 6972 1fe22200 copy pdata ,rega keyscan_process_lpm_before_lp1: 6973 ea288000 ifetcht 1 ,rega 6974 204067dd call gpio_set_wake_by_current_state 6975 1a20a201 increase key_conf_struct_len ,rega 6976 c2006973 loop keyscan_process_lpm_before_lp1 keyscan_process_lpm_before_end: 6977 20600000 rtn keyscan_key_process: 6978 d8e00009 arg key_scan_timer ,queue 6979 20407f16 call timer_check 697a 247a0000 nrtn blank 697b 58000020 setarg 0x20 697c d8e00009 arg key_scan_timer ,queue 697d 20407f08 call timer_init 697e 78547c00 disable user 697f 2040696c call keyscan_process_lpm_before 6980 47514034 bpatchx patch34_2 ,mem_patch34 6981 6801423d fetch 2 ,mem_key_num_ptr 6982 efe08000 ifetch 1 ,pdata keyscan_key_process_next: 6983 207a0000 rtn blank 6984 20406954 call keyscan_scan_key 6985 24347d02 nbranch lpm_button_clean_wake_lock ,user 6986 20407d00 call lpm_button_get_wake_lock 6987 78547c00 disable user 6988 68010b12 fetch 2 ,mem_key_value_temp 6989 60010b19 store 2 ,mem_key_value_temp4 698a 700b1b00 jam 0 ,mem_key_value_temp6 698b 18000e00 force 0 ,queue keyscan_key_lp1: 698c 68010b14 fetch 2 ,mem_key_value 698d 1fe30400 rshift pdata ,temp 698e 60090b14 storet 2 ,mem_key_value 698f 1fe17e01 and pdata ,0x01 ,pdata 6990 68090b19 fetcht 2 ,mem_key_value_temp4 6991 18412201 and temp ,0x01 ,rega 6992 18430400 rshift temp ,temp 6993 60090b19 storet 2 ,mem_key_value_temp4 6994 9a22fc00 ixor rega ,null 6995 2442e9a1 ncall keyscan_send_key_data ,zero 6996 6801423d fetch 2 ,mem_key_num_ptr 6997 efe08000 ifetch 1 ,pdata keyscan_key_lp1_next: 6998 68088b1b fetcht 1 ,mem_key_value_temp6 6999 18408401 increase 1 ,temp 699a 60088b1b storet 1 ,mem_key_value_temp6 699b 18420e00 copy temp ,queue 699c 98e2fc00 ixor queue ,null 699d 2422e98c nbranch keyscan_key_lp1 ,zero 699e 68010b12 fetch 2 ,mem_key_value_temp 699f 60010b14 store 2 ,mem_key_value 69a0 20600000 rtn keyscan_send_key_data: 69a1 4751c034 bpatchx patch34_3 ,mem_patch34 69a2 6801423d fetch 2 ,mem_keyscan_ptr 69a3 1fe0fe01 increase 1 ,pdata 69a4 efe10000 ifetch 2 ,pdata 69a5 20207f9c branch callback_func pwm_init: 69a6 68108042 hfetch 1 ,core_clksel 69a7 9a21fe00 ior rega ,pdata 69a8 60108042 hstore 1 ,core_clksel 69a9 68110050 hfetch 2 ,core_clkoff 69aa 793ffe0d set0 clock_off_pwm ,pdata 69ab 60110050 hstore 2 ,core_clkoff 69ac 20000064 nop 100 69ad 20600000 rtn pwm_out_set: 69ae 68098a9c fetcht 3 ,mem_pdatatemp + 2 69af 58b71b00 setarg pwm_12mhz 69b0 9846fc00 idiv temp 69b1 20407f86 call wait_div_end 69b2 18078400 quotient temp 69b3 68008a9f fetch 1 ,mem_pdatatemp + 5 69b4 984ffe00 imul32 temp ,pdata 69b5 1fe6fc64 div pdata ,100 69b6 20407f86 call wait_div_end 69b7 1807a200 quotient rega 69b8 18427e00 copy temp ,pdata 69b9 9a262400 isub rega ,regb 69ba 68008a9b fetch 1 ,mem_pdatatemp + 1 69bb 204069be call pwm_duty_cycle_set 69bc 68008a9a fetch 1 ,mem_pdatatemp 69bd 202069d5 branch pwm_enable pwm_duty_cycle_set: 69be c00069c4 beq 0 ,pwm_pwm0_duty_set 69bf c000e9c6 beq 1 ,pwm_pwm1_duty_set 69c0 c00169c8 beq 2 ,pwm_pwm2_duty_set 69c1 c001e9ca beq 3 ,pwm_pwm3_duty_set 69c2 c00269cc beq 4 ,pwm_pwm4_duty_set 69c3 c002e9ce beq 5 ,pwm_pwm5_duty_set pwm_pwm0_duty_set: 69c4 d8a080a0 arg core_pwm_pcnt0 ,contw 69c5 202069d0 branch pwm_set_pncnt pwm_pwm1_duty_set: 69c6 d8a080a4 arg core_pwm_pcnt1 ,contw 69c7 202069d0 branch pwm_set_pncnt pwm_pwm2_duty_set: 69c8 d8a080a8 arg core_pwm_pcnt2 ,contw 69c9 202069d0 branch pwm_set_pncnt pwm_pwm3_duty_set: 69ca d8a08064 arg core_pwm_pcnt3 ,contw 69cb 202069d0 branch pwm_set_pncnt pwm_pwm4_duty_set: 69cc d8a08068 arg core_pwm_pcnt4 ,contw 69cd 202069d0 branch pwm_set_pncnt pwm_pwm5_duty_set: 69ce d8a0806c arg core_pwm_pcnt5 ,contw 69cf 202069d0 branch pwm_set_pncnt pwm_set_pncnt: 69d0 1a227e00 copy rega ,pdata 69d1 e0a10000 istore 2 ,contw 69d2 1a427e00 copy regb ,pdata 69d3 e0a10000 istore 2 ,contw 69d4 20600000 rtn pwm_enable: 69d5 78347c00 enable user 69d6 202069d8 branch pwm_gpio_set pwm_disable: 69d7 78547c00 disable user pwm_gpio_set: 69d8 c00269e3 beq 4 ,pwm_gpio4_set 69d9 c002e9e5 beq 5 ,pwm_gpio5_set 69da c00de9e7 beq 27 ,pwm_gpio27_set 69db c00e69e9 beq 28 ,pwm_gpio28_set 69dc c001e9eb beq 3 ,pwm_gpio3_set 69dd c00469ed beq 8 ,pwm_gpio8_set 69de c00a69ef beq 20 ,pwm_gpio20_set 69df c00ae9f1 beq 21 ,pwm_gpio21_set 69e0 c00b69f3 beq 22 ,pwm_gpio22_set 69e1 c00be9f5 beq 23 ,pwm_gpio23_set 69e2 20600000 rtn pwm_gpio4_set: 69e3 d8e00006 arg 6 ,queue 69e4 202069ff branch pwm_one_set_select pwm_gpio5_set: 69e5 d8e00007 arg 7 ,queue 69e6 202069ff branch pwm_one_set_select pwm_gpio27_set: 69e7 d8e00008 arg 8 ,queue 69e8 202069ff branch pwm_one_set_select pwm_gpio28_set: 69e9 d8e00009 arg 9 ,queue 69ea 202069ff branch pwm_one_set_select pwm_gpio3_set: 69eb d8e0000a arg 10 ,queue 69ec 202069ff branch pwm_one_set_select pwm_gpio8_set: 69ed d8e0000b arg 11 ,queue 69ee 202069ff branch pwm_one_set_select pwm_gpio20_set: 69ef d8e0000c arg 12 ,queue 69f0 20206a01 branch pwm_tw0_set_select pwm_gpio21_set: 69f1 d8e0000d arg 13 ,queue 69f2 20206a01 branch pwm_tw0_set_select pwm_gpio22_set: 69f3 d8e0000e arg 14 ,queue 69f4 20206a01 branch pwm_tw0_set_select pwm_gpio23_set: 69f5 d8e0000f arg 15 ,queue 69f6 20206a01 branch pwm_tw0_set_select pwm_set_select: 69f7 68110081 hfetch 2 ,core_gpio_sel1 69f8 f9347e00 qsetflag user ,pdata 69f9 60110081 hstore 2 ,core_gpio_sel1 69fa 1a220e00 copy rega ,queue 69fb 68108085 hfetch 1 ,core_gpio_key2 69fc f9347e00 qsetflag user ,pdata 69fd 60108085 hstore 1 ,core_gpio_key2 69fe 20600000 rtn pwm_one_set_select: 69ff 18e0a3fc add queue ,-4 ,rega 6a00 202069f7 branch pwm_set_select pwm_tw0_set_select: 6a01 18e0a3f6 add queue ,-10 ,rega 6a02 202069f7 branch pwm_set_select rfcomm_init: 6a03 20758000 rtn wake 6a04 70456700 jam 0 ,mem_rfcomm_send_more_pkt 6a05 7004ed03 jam bits9600 ,memremoterpnbitrate 6a06 7004ee03 jam databits8 ,memremoteprndatabits 6a07 7004f211 jam 0x11 ,memremoteprnxon 6a08 7004f313 jam 0x13 ,memremoteprnxoff 6a09 58000000 setarg 0 6a0a 600184ef store 3 ,memremoteprnstopbit 6a0b 6000c254 store 1 ,mem_spp_state 6a0c 70468100 jam 0 ,memui_reconnect_mode rfcomm_init_spp: 6a0d 47524034 bpatchx patch34_4 ,mem_patch34 6a0e 58000000 setarg 0 6a0f 6000c254 store 1 ,mem_spp_state 6a10 6000c564 store 1 ,mem_remote_spp_channel 6a11 6000c55d store 1 ,mem_pn_dlci 6a12 6800c56b fetch 1 ,mem_credit_flag 6a13 c000ea16 beq credit_enable ,rfcomm_init_spp_with_credit 6a14 70456950 jam 0x50 ,mem_credit_given 6a15 20600000 rtn rfcomm_init_spp_with_credit: 6a16 70456900 jam 0x00 ,mem_credit_given 6a17 20600000 rtn set_cr_bit: 6a18 18418402 or_into 0x02 ,temp 6a19 20600000 rtn rfcomm_calculate_fcs_sabm: 6a1a 18427e00 copy temp ,pdata 6a1b 1fedfe00 reverse pdata ,pdata 6a1c 6000c562 store 1 ,memfcstemp3 6a1d 18007e3f force ini_tx_sabm ,pdata 6a1e 1fedfe00 reverse pdata ,pdata 6a1f 6000c561 store 1 ,memfcstemp2 6a20 18007e01 force 0x01 ,pdata 6a21 1fedfe00 reverse pdata ,pdata 6a22 6000c560 store 1 ,memfcstemp1 6a23 20406a50 call caculate_fcs 6a24 18427e00 copy temp ,pdata 6a25 20600000 rtn rfcomm_calculate_fcs_ua: 6a26 1fedfe00 reverse pdata ,pdata 6a27 6000c562 store 1 ,memfcstemp3 6a28 18007e73 force rsp_tx_ua ,pdata 6a29 1fedfe00 reverse pdata ,pdata 6a2a 6000c561 store 1 ,memfcstemp2 6a2b 18007e01 force 0x01 ,pdata 6a2c 1fedfe00 reverse pdata ,pdata 6a2d 6000c560 store 1 ,memfcstemp1 6a2e 20206a50 branch caculate_fcs rfcomm_calculate_fcs_dlci0: 6a2f 6800c563 fetch 1 ,mem_rfcomm_initiator 6a30 203a6a33 branch rfcomm_calculate_fcs_dlci0_res ,blank 6a31 58000070 setarg 0x70 6a32 20600000 rtn rfcomm_calculate_fcs_dlci0_res: 6a33 580000aa setarg 0xaa 6a34 20600000 rtn rfcomm_save_fcs_uih: 6a35 1fedfe00 reverse pdata ,pdata 6a36 6000c562 store 1 ,memfcstemp3 6a37 18007eef force rsp_rx_uih ,pdata 6a38 20406a44 call caculate_uihdata_fcs 6a39 680904f7 fetcht 2 ,mem_contw_temp 6a3a 18420a00 copy temp ,contw 6a3b e0a08000 istore 1 ,contw 6a3c 18a20400 copy contw ,temp 6a3d 600904f7 storet 2 ,mem_contw_temp 6a3e 18007eff force rsp_rx_uih_wdata ,pdata 6a3f 20406a44 call caculate_uihdata_fcs 6a40 680904f7 fetcht 2 ,mem_contw_temp 6a41 18420a00 copy temp ,contw 6a42 e0a08000 istore 1 ,contw 6a43 20600000 rtn caculate_uihdata_fcs: 6a44 1fedfe00 reverse pdata ,pdata 6a45 6000c561 store 1 ,memfcstemp2 6a46 68014561 fetch 2 ,memfcstemp2 6a47 1fed7e00 lshift8 pdata ,pdata 6a48 600184f4 store 3 ,mem_mod2div_temp 6a49 da200107 arg 0x107 ,rega 6a4a da40000f arg 0xf ,regb 6a4b 20406a5d call mod2div 6a4c 1fe2fed7 xor_into 0xd7 ,pdata 6a4d 1fe47e00 invert pdata ,pdata 6a4e 1fedfe00 reverse pdata ,pdata 6a4f 20600000 rtn caculate_fcs: 6a50 6801c560 fetch 3 ,memfcstemp1 6a51 600184f4 store 3 ,mem_mod2div_temp 6a52 da200107 arg 0x107 ,rega 6a53 da40000f arg 0xf ,regb 6a54 20406a5d call mod2div 6a55 1fed7e00 lshift8 pdata ,pdata 6a56 da400007 arg 0x7 ,regb 6a57 20406a5d call mod2div 6a58 1fe2fe2b xor_into 0x2b ,pdata 6a59 1fe47e00 invert pdata ,pdata 6a5a 1fedfe00 reverse pdata ,pdata 6a5b 1fe20400 copy pdata ,temp 6a5c 20600000 rtn mod2div: 6a5d da600000 arg 0 ,regc 6a5e 1a427200 copy regb ,loopcnt 6a5f 20407e71 call right_shift_n 6a60 1fe20400 icopy temp mod2div_loop: 6a61 18427e00 copy temp ,pdata 6a62 1a63a600 lshift regc ,regc 6a63 c3046a66 bbit0 8 ,mod2div_not_enough_reduction 6a64 9a228400 ixor rega ,temp 6a65 1a60a601 increase 1 ,regc mod2div_not_enough_reduction: 6a66 18438400 lshift temp ,temp 6a67 680184f4 fetch 3 ,mem_mod2div_temp 6a68 1a40a5ff increase -1 ,regb 6a69 2a41feff compare 0xff ,regb ,0xff 6a6a 2020ea70 branch mod2div_end ,true 6a6b 1a427200 copy regb ,loopcnt 6a6c 20407e71 call right_shift_n 6a6d 2feffe00 isolate1 0 ,pdata 6a6e 79208400 setflag true ,0 ,temp 6a6f 20206a61 branch mod2div_loop mod2div_end: 6a70 18437e00 rshift temp ,pdata 6a71 20600000 rtn get_rfcomm_snd_adss: 6a72 6808c55d fetcht 1 ,mem_pn_dlci dlci_to_address_cmd: 6a73 184b8400 lshift2 temp ,temp 6a74 79200400 set1 rfcomm_address_ext_len ,temp 6a75 6800c563 fetch 1 ,mem_rfcomm_initiator 6a76 245a6a18 ncall set_cr_bit ,blank 6a77 6008850d storet 1 ,mem_rfcomm_send_adss 6a78 20600000 rtn channel_to_dlci: 6a79 18438400 lshift temp ,temp 6a7a 6800c563 fetch 1 ,mem_rfcomm_initiator 6a7b 793a0400 setflag blank ,0 ,temp 6a7c 20600000 rtn rfcomm_rx_process_dlci0_sabm: 6a7d 680884fc fetcht 1 ,mem_current_channel 6a7e 7004fed7 jam 0xd7 ,mem_current_fcs 6a7f 20406bb6 call rfcomm_send_ua 6a80 6800c251 fetch 1 ,mem_rfcomm_state 6a81 79207e06 set1 l2cap_channel_rfcomm_only_sabm ,pdata 6a82 79207e07 set1 l2cap_channel_rfcomm_only_ua ,pdata 6a83 6000c251 store 1 ,mem_rfcomm_state 6a84 70456300 jam 0 ,mem_rfcomm_initiator 6a85 20206b97 branch rfcomm_rx_process_end rfcomm_rx_process_dlci0_ua: 6a86 6800c251 fetch 1 ,mem_rfcomm_state 6a87 79207e07 set1 l2cap_channel_rfcomm_only_ua ,pdata 6a88 6000c251 store 1 ,mem_rfcomm_state 6a89 20206b97 branch rfcomm_rx_process_end rfcomm_rx_process: 6a8a 4752c034 bpatchx patch34_5 ,mem_patch34 6a8b 6800c681 fetch 1 ,memui_reconnect_mode 6a8c c0006a8e beq no_reconnection ,rfcomm_rx_process_remote_page 6a8d 20206b4c branch rfcomm_rx_process_reconn rfcomm_rx_process_remote_page: 6a8e 68010264 fetch 2 ,mem_l2cap_payload_ptr 6a8f 1fe20c00 copy pdata ,contr 6a90 20406ab8 call get_rfcomm_head_struct 6a91 680084fc fetch 1 ,mem_current_channel 6a92 c0006a94 beq 0 ,parse_dlci0_rp 6a93 20206b18 branch parse_uih_rp parse_dlci0_rp: 6a94 47534034 bpatchx patch34_6 ,mem_patch34 6a95 680084fd fetch 1 ,mem_current_frame_type 6a96 c01fea7d beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm 6a97 c039ea86 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua 6a98 c077ea9b beq rfcomm_frame_type_uih ,parse_dlci0_rp_uih 6a99 c029eb44 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn_send_event 6a9a 20600000 rtn parse_dlci0_rp_uih: 6a9b 68010501 fetch 2 ,mem_rfcomm_uih_payload_ptr 6a9c 1fe20c00 copy pdata ,contr 6a9d 20406ac3 call get_rfcomm_uih_head_struct 6a9e 68008503 fetch 1 ,mem_uih_cmd_type 6a9f c020eaa5 beq uih_param_neg_cmd ,parse_dlci0_rp_uih_pn_cmd 6aa0 c0206aad beq uih_param_neg_res ,parse_dlci0_rp_uih_pn_res 6aa1 c038eae6 beq uih_modem_status_cmd ,parse_dlci0_rp_uih_ms_cmd 6aa2 c0386af2 beq uih_modem_status_res ,parse_dlci0_rp_uih_ms_res 6aa3 c024eafd beq uih_param_cmd_remove_port ,parse_dlci0_rp_uih_cmd_port 6aa4 20206b97 branch rfcomm_rx_process_end parse_dlci0_rp_uih_pn_cmd: 6aa5 20406aaf call parse_dlci0_rp_uih_pn_res_common 6aa6 20206aa7 branch parse_dlci0_rp_uih_pn_cmd_spp parse_dlci0_rp_uih_pn_cmd_spp: 6aa7 6800c254 fetch 1 ,mem_spp_state 6aa8 79207e00 set1 rfcomm_channel_state_pn_cmd ,pdata 6aa9 79207e01 set1 rfcomm_channel_state_pn_res ,pdata 6aaa 6000c254 store 1 ,mem_spp_state 6aab 20406be0 call rfcomm_send_param_neg_res 6aac 20206b97 branch rfcomm_rx_process_end parse_dlci0_rp_uih_pn_res: 6aad 20406aaf call parse_dlci0_rp_uih_pn_res_common 6aae 20206b97 branch rfcomm_rx_process_end parse_dlci0_rp_uih_pn_res_common: 6aaf 20406acb call get_param_payload_ptr 6ab0 20206ad7 branch get_rfcomm_prarmer_negotiation get_rfcomm_param_modem_status: 6ab1 20406acb call get_param_payload_ptr 6ab2 e8c08000 ifetch 1 ,contr 6ab3 1fe97e00 rshift3 pdata ,pdata 6ab4 6000c56a store 1 ,mem_ms_channel 6ab5 e8c08000 ifetch 1 ,contr 6ab6 60008508 store 1 ,mem_ms_param 6ab7 20600000 rtn get_rfcomm_head_struct: 6ab8 e8c08000 ifetch 1 ,contr 6ab9 600084fb store 1 ,mem_current_adss 6aba 1fe97e00 rshift3 pdata ,pdata 6abb 600084fc store 1 ,mem_current_channel 6abc e8c08000 ifetch 1 ,contr 6abd 600084fd store 1 ,mem_current_frame_type get_rfcomm_current_length: 6abe 20406ace call get_rfcomm_length_common 6abf 600904ff storet 2 ,mem_current_length 6ac0 18c27e00 copy contr ,pdata 6ac1 60010501 store 2 ,mem_rfcomm_uih_payload_ptr 6ac2 20600000 rtn get_rfcomm_uih_head_struct: 6ac3 e8c08000 ifetch 1 ,contr 6ac4 1fe37e00 rshift pdata ,pdata 6ac5 60008503 store 1 ,mem_uih_cmd_type 6ac6 20406ace call get_rfcomm_length_common 6ac7 60090504 storet 2 ,mem_uih_length 6ac8 18c27e00 copy contr ,pdata 6ac9 60010506 store 2 ,mem_param_payload_ptr 6aca 20600000 rtn get_param_payload_ptr: 6acb 68010506 fetch 2 ,mem_param_payload_ptr 6acc 1fe20c00 copy pdata ,contr 6acd 20600000 rtn get_rfcomm_length_common: 6ace e8c08000 ifetch 1 ,contr 6acf 1fe20400 copy pdata ,temp 6ad0 18430400 rshift temp ,temp 6ad1 c3800000 rtnbit1 0 6ad2 e8c08000 ifetch 1 ,contr 6ad3 1fe9fe00 lshift3 pdata ,pdata 6ad4 1ff27e00 lshift4 pdata ,pdata 6ad5 98408400 iadd temp ,temp 6ad6 20600000 rtn get_rfcomm_prarmer_negotiation: 6ad7 e8c08000 ifetch 1 ,contr 6ad8 6000c55d store 1 ,mem_pn_dlci 6ad9 e8c08000 ifetch 1 ,contr 6ada 60008509 store 1 ,mem_pn_credit_flow_type_info 6adb e8c08000 ifetch 1 ,contr 6adc 6000850a store 1 ,mem_pn_priority 6add e8c08000 ifetch 1 ,contr 6ade 6000850b store 1 ,mem_pn_acknowledg_timer 6adf e8c10000 ifetch 2 ,contr 6ae0 6001455e store 2 ,mem_pn_max_frame_size 6ae1 e8c08000 ifetch 1 ,contr 6ae2 6000850c store 1 ,mem_pn_max_retrans 6ae3 e8c08000 ifetch 1 ,contr 6ae4 6000c568 store 1 ,mem_remote_credits 6ae5 20600000 rtn parse_dlci0_rp_uih_ms_cmd: 6ae6 20406ab1 call get_rfcomm_param_modem_status 6ae7 20206ae8 branch parse_dlci0_rp_uih_ms_cmd_spp parse_dlci0_rp_uih_ms_cmd_spp: 6ae8 6800c254 fetch 1 ,mem_spp_state 6ae9 79207e05 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata 6aea 79207e06 set1 rfcomm_channel_state_snd_ms_res ,pdata 6aeb 6000c254 store 1 ,mem_spp_state 6aec 6808c55d fetcht 1 ,mem_pn_dlci 6aed 184b8400 lshift2 temp ,temp 6aee 18418403 or_into 3 ,temp 6aef 20406c11 call rfcomm_send_modem_status_res 6af0 70456703 jam more_pkt_msc_cmd_spp ,mem_rfcomm_send_more_pkt 6af1 20206b97 branch rfcomm_rx_process_end parse_dlci0_rp_uih_ms_res: 6af2 700a9908 jam bt_evt_spp_connected ,mem_fifo_temp 6af3 20407d86 call ui_ipc_send_event 6af4 20406ab1 call get_rfcomm_param_modem_status 6af5 6800c56a fetch 1 ,mem_ms_channel 6af6 1fe67c01 sub pdata ,1 ,null 6af7 2022eaf9 branch parse_dlci0_rp_uih_ms_res_spp ,zero 6af8 20202a8c branch assert parse_dlci0_rp_uih_ms_res_spp: 6af9 6800c254 fetch 1 ,mem_spp_state 6afa 79207e07 set1 rfcomm_channel_state_rcv_ms_res ,pdata 6afb 6000c254 store 1 ,mem_spp_state 6afc 20206b97 branch rfcomm_rx_process_end parse_dlci0_rp_uih_cmd_port: 6afd 20406acb call get_param_payload_ptr 6afe e8c08000 ifetch 1 ,contr 6aff 60008ac2 store 1 ,mem_rpn_dlci 6b00 204052d2 call l2cap_malloc_rfcomm_channel 6b01 204052e0 call l2cap_get_rfcomm_tx_buff 6b02 5800000e setarg 0x000e 6b03 e0a10000 istore 2 ,contw 6b04 6801424a fetch 2 ,mem_rfcomm_remote_cid 6b05 e0a10000 istore 2 ,contw 6b06 6800c563 fetch 1 ,mem_rfcomm_initiator 6b07 1fe3fe00 lshift pdata ,pdata 6b08 79207e00 set1 0 ,pdata 6b09 e0a08000 istore 1 ,contw 6b0a 4753c034 bpatchx patch34_7 ,mem_patch34 6b0b 580015ef setarg 0x15ef 6b0c e0a10000 istore 2 ,contw 6b0d 58001191 setarg 0x1191 6b0e e0a10000 istore 2 ,contw 6b0f 68008ac2 fetch 1 ,mem_rpn_dlci 6b10 e0a08000 istore 1 ,contw 6b11 58000007 setarg 0x000007 6b12 e0a28000 istore 5 ,contw 6b13 58000001 setarg 0x01 6b14 e0a10000 istore 2 ,contw 6b15 20406a2f call rfcomm_calculate_fcs_dlci0 6b16 e0a08000 istore 1 ,contw 6b17 20600000 rtn parse_uih_rp: 6b18 20206b19 branch parse_uih_rp_spp parse_uih_rp_spp: 6b19 47544035 bpatchx patch35_0 ,mem_patch35 6b1a 680084fd fetch 1 ,mem_current_frame_type 6b1b c039eb21 beq rfcomm_frame_type_ua ,parse_uih_rp_spp_ua 6b1c c01feb25 beq rfcomm_frame_type_sabm ,parse_uih_rp_spp_sabm 6b1d c077eb3f beq rfcomm_frame_type_uih ,parse_uih_spp_uih 6b1e c07feb37 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits 6b1f c029eb46 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn 6b20 20600000 rtn parse_uih_rp_spp_ua: 6b21 6800c254 fetch 1 ,mem_spp_state 6b22 79207e03 set1 rfcomm_channel_state_ua ,pdata 6b23 6000c254 store 1 ,mem_spp_state 6b24 20206b97 branch rfcomm_rx_process_end parse_uih_rp_spp_sabm: 6b25 6800c254 fetch 1 ,mem_spp_state 6b26 79207e03 set1 rfcomm_channel_state_ua ,pdata 6b27 79207e02 set1 rfcomm_channel_state_sabm ,pdata 6b28 6000c254 store 1 ,mem_spp_state 6b29 680084fb fetch 1 ,mem_current_adss 6b2a 20406a26 call rfcomm_calculate_fcs_ua 6b2b 600084fe store 1 ,mem_current_fcs 6b2c 20406bb6 call rfcomm_send_ua 6b2d 680084fb fetch 1 ,mem_current_adss 6b2e 1feb7e00 rshift2 pdata ,pdata 6b2f 6000c55d store 1 ,mem_pn_dlci 6b30 1febfe00 lshift2 pdata ,pdata 6b31 793ffe01 set0 rfcomm_address_cr ,pdata 6b32 79207e00 set1 rfcomm_address_ext_len ,pdata 6b33 d8404565 arg mem_hiufcs_spp ,temp 6b34 600904f7 storet 2 ,mem_contw_temp 6b35 20406a35 call rfcomm_save_fcs_uih 6b36 20206b97 branch rfcomm_rx_process_end parse_uih_spp_uih_credits: 6b37 68010501 fetch 2 ,mem_rfcomm_uih_payload_ptr 6b38 1fe20c00 copy pdata ,contr 6b39 1fe0fe01 increase 1 ,pdata 6b3a 60010501 store 2 ,mem_rfcomm_uih_payload_ptr 6b3b e8c08000 ifetch 1 ,contr 6b3c 6808c568 fetcht 1 ,mem_remote_credits 6b3d 9840fe00 iadd temp ,pdata 6b3e 6000c568 store 1 ,mem_remote_credits parse_uih_spp_uih: 6b3f 20406c42 call rfcomm_increase_credit_given parse_uih_spp_uih_cont: 6b40 20406a72 call get_rfcomm_snd_adss 6b41 20406c28 call rfcomm_send_uih_without_payload 6b42 20406c4b call spp_process_rx_data 6b43 20206b97 branch rfcomm_rx_process_end parse_uih_rp_spp_disconn_send_event: 6b44 700a9909 jam bt_evt_spp_disconnected ,mem_fifo_temp 6b45 20407d86 call ui_ipc_send_event parse_uih_rp_spp_disconn: 6b46 20406a0d call rfcomm_init_spp 6b47 680084fb fetch 1 ,mem_current_adss 6b48 20406a26 call rfcomm_calculate_fcs_ua 6b49 600084fe store 1 ,mem_current_fcs 6b4a 20406bb6 call rfcomm_send_ua 6b4b 20206b97 branch rfcomm_rx_process_end rfcomm_rx_process_reconn: 6b4c 68010264 fetch 2 ,mem_l2cap_payload_ptr 6b4d 1fe20c00 copy pdata ,contr 6b4e 20406ab8 call get_rfcomm_head_struct 6b4f 680084fc fetch 1 ,mem_current_channel 6b50 c0006b52 beq 0 ,parse_dlci0_reconn 6b51 20206b86 branch parse_uih_reconn parse_dlci0_reconn: 6b52 4754c035 bpatchx patch35_1 ,mem_patch35 6b53 680084fd fetch 1 ,mem_current_frame_type 6b54 c01fea7d beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm 6b55 c039ea86 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua 6b56 c077eb58 beq rfcomm_frame_type_uih ,parse_dlci0_reconn_uih 6b57 20206b97 branch rfcomm_rx_process_end parse_dlci0_reconn_uih: 6b58 68010501 fetch 2 ,mem_rfcomm_uih_payload_ptr 6b59 1fe20c00 copy pdata ,contr 6b5a 20406ac3 call get_rfcomm_uih_head_struct 6b5b 68008503 fetch 1 ,mem_uih_cmd_type 6b5c c020eb61 beq uih_param_neg_cmd ,parse_dlci0_reconn_uih_pn_cmd 6b5d c0206b61 beq uih_param_neg_res ,parse_dlci0_reconn_uih_pn_cmd 6b5e c038eb6c beq uih_modem_status_cmd ,parse_dlci0_reconn_uih_ms_cmd 6b5f c0386b7c beq uih_modem_status_res ,parse_dlci0_reconn_uih_ms_res 6b60 20206b97 branch rfcomm_rx_process_end parse_dlci0_reconn_uih_pn_cmd: 6b61 20406aaf call parse_dlci0_rp_uih_pn_res_common 6b62 6800c55d fetch 1 ,mem_pn_dlci 6b63 1fe37e00 rshift pdata ,pdata 6b64 6808c564 fetcht 1 ,mem_remote_spp_channel 6b65 98467c00 isub temp ,null 6b66 2022eb68 branch parse_dlci0_reconn_uih_pn_cmd_spp ,zero 6b67 20202a8c branch assert parse_dlci0_reconn_uih_pn_cmd_spp: 6b68 6800c254 fetch 1 ,mem_spp_state 6b69 79207e01 set1 rfcomm_channel_state_pn_res ,pdata 6b6a 6000c254 store 1 ,mem_spp_state 6b6b 20206b97 branch rfcomm_rx_process_end parse_dlci0_reconn_uih_ms_cmd: 6b6c 20406ab1 call get_rfcomm_param_modem_status 6b6d 6800c56a fetch 1 ,mem_ms_channel 6b6e 6808c564 fetcht 1 ,mem_remote_spp_channel 6b6f 98467c00 isub temp ,null 6b70 2022eb73 branch parse_dlci0_reconn_uih_ms_cmd_spp ,zero 6b71 20202a8c branch assert 6b72 20206b97 branch rfcomm_rx_process_end parse_dlci0_reconn_uih_ms_cmd_spp: 6b73 6800c254 fetch 1 ,mem_spp_state 6b74 79207e05 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata 6b75 79207e06 set1 rfcomm_channel_state_snd_ms_res ,pdata 6b76 6000c254 store 1 ,mem_spp_state 6b77 6808c55d fetcht 1 ,mem_pn_dlci 6b78 184b8400 lshift2 temp ,temp 6b79 18418403 or_into 3 ,temp 6b7a 20406c11 call rfcomm_send_modem_status_res 6b7b 20206b97 branch rfcomm_rx_process_end parse_dlci0_reconn_uih_ms_res: 6b7c 20406ab1 call get_rfcomm_param_modem_status 6b7d 6800c56a fetch 1 ,mem_ms_channel 6b7e 6808c564 fetcht 1 ,mem_remote_spp_channel 6b7f 98467c00 isub temp ,null 6b80 2022eb82 branch parse_dlci0_reconn_uih_ms_res_spp ,zero 6b81 20202a8c branch assert parse_dlci0_reconn_uih_ms_res_spp: 6b82 6800c254 fetch 1 ,mem_spp_state 6b83 79207e07 set1 rfcomm_channel_state_rcv_ms_res ,pdata 6b84 6000c254 store 1 ,mem_spp_state 6b85 20206b97 branch rfcomm_rx_process_end parse_uih_reconn: 6b86 680084fc fetch 1 ,mem_current_channel 6b87 6808c564 fetcht 1 ,mem_remote_spp_channel 6b88 98467c00 isub temp ,null 6b89 2022eb8c branch parse_uih_reconn_spp ,zero 6b8a 20202a8c branch assert 6b8b 20206b97 branch rfcomm_rx_process_end parse_uih_reconn_spp: 6b8c 680084fd fetch 1 ,mem_current_frame_type 6b8d c039eb91 beq rfcomm_frame_type_ua ,parse_uih_reconn_spp_ua 6b8e c077eb3f beq rfcomm_frame_type_uih ,parse_uih_spp_uih 6b8f c07feb37 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits 6b90 c029eb96 beq rfcomm_frame_type_disconn ,parse_uih_reconn_spp_disconn parse_uih_reconn_spp_ua: 6b91 6800c254 fetch 1 ,mem_spp_state 6b92 79207e03 set1 rfcomm_channel_state_ua ,pdata 6b93 6000c254 store 1 ,mem_spp_state 6b94 20206b97 branch rfcomm_rx_process_end parse_uih_reconn_spp_sabm: 6b95 20206b95 branch parse_uih_reconn_spp_sabm parse_uih_reconn_spp_disconn: 6b96 20206b46 branch parse_uih_rp_spp_disconn rfcomm_rx_process_end: 6b97 20600000 rtn rfcomm_send_more_pkt: 6b98 6800c567 fetch 1 ,mem_rfcomm_send_more_pkt 6b99 207a0000 rtn blank 6b9a c001eb9c beq more_pkt_msc_cmd_spp ,rfcomm_send_more_pkt_msc_cmd_spp 6b9b 20202a8c branch assert rfcomm_send_more_pkt_msc_cmd_spp: 6b9c 70456700 jam 0 ,mem_rfcomm_send_more_pkt 6b9d 204052d2 call l2cap_malloc_rfcomm_channel 6b9e d8400001 arg spp_slave_channel ,temp 6b9f 6808c55d fetcht 1 ,mem_pn_dlci 6ba0 184b8400 lshift2 temp ,temp rfcomm_send_more_pkt_msc_cmd_spp0: 6ba1 18418403 or_into 0x03 ,temp 6ba2 da2000aa arg 0xaa ,rega 6ba3 20406bfc call rfcomm_send_modem_status_cmd 6ba4 204052e0 call l2cap_get_rfcomm_tx_buff 6ba5 18a20c00 copy contw ,contr 6ba6 e8c10000 ifetch 2 ,contr 6ba7 203a2a8c branch assert ,blank 6ba8 20600000 rtn rfcomm_send_sabm: 6ba9 204052e0 call l2cap_get_rfcomm_tx_buff 6baa 58000004 setarg 0x0004 6bab e0a10000 istore 2 ,contw 6bac 6801424a fetch 2 ,mem_rfcomm_remote_cid 6bad e0a10000 istore 2 ,contw 6bae 680084fb fetch 1 ,mem_current_adss 6baf e0a08000 istore 1 ,contw 6bb0 47554035 bpatchx patch35_2 ,mem_patch35 6bb1 5800013f setarg 0x013f 6bb2 e0a10000 istore 2 ,contw 6bb3 680084fe fetch 1 ,mem_current_fcs 6bb4 e0a08000 istore 1 ,contw 6bb5 20600000 rtn rfcomm_send_ua: 6bb6 204052d2 call l2cap_malloc_rfcomm_channel 6bb7 204052e0 call l2cap_get_rfcomm_tx_buff 6bb8 58000004 setarg 0x0004 6bb9 e0a10000 istore 2 ,contw 6bba 6801424a fetch 2 ,mem_rfcomm_remote_cid 6bbb e0a10000 istore 2 ,contw 6bbc 680084fb fetch 1 ,mem_current_adss 6bbd e0a08000 istore 1 ,contw 6bbe 4755c035 bpatchx patch35_3 ,mem_patch35 6bbf 58000173 setarg 0x0173 6bc0 e0a10000 istore 2 ,contw 6bc1 680084fe fetch 1 ,mem_current_fcs 6bc2 e0a08000 istore 1 ,contw 6bc3 20600000 rtn rfcomm_send_param_neg_cmd: 6bc4 204052e0 call l2cap_get_rfcomm_tx_buff 6bc5 5800000e setarg 0x000e 6bc6 e0a10000 istore 2 ,contw 6bc7 6801424a fetch 2 ,mem_rfcomm_remote_cid 6bc8 e0a10000 istore 2 ,contw 6bc9 6800c563 fetch 1 ,mem_rfcomm_initiator 6bca 1fe3fe00 lshift pdata ,pdata 6bcb 79207e00 set1 0 ,pdata 6bcc e0a08000 istore 1 ,contw 6bcd 47564035 bpatchx patch35_4 ,mem_patch35 6bce 580015ef setarg 0x15ef 6bcf e0a10000 istore 2 ,contw 6bd0 58001183 setarg 0x1183 6bd1 e0a10000 istore 2 ,contw 6bd2 18427e00 copy temp ,pdata 6bd3 e0a08000 istore 1 ,contw 6bd4 580000f0 setarg 0x0000f0 6bd5 e0a18000 istore 3 ,contw 6bd6 5800007f setarg rfcomm_max_frame_size 6bd7 e0a10000 istore 2 ,contw 6bd8 58000000 setarg 0 6bd9 e0a08000 istore 1 ,contw 6bda 58000001 setarg 0x01 6bdb e0a08000 istore 1 ,contw 6bdc 20406a2f call rfcomm_calculate_fcs_dlci0 6bdd e0a08000 istore 1 ,contw 6bde 70456910 jam 0x10 ,mem_credit_given 6bdf 20600000 rtn rfcomm_send_param_neg_res: 6be0 204052d2 call l2cap_malloc_rfcomm_channel 6be1 204052e0 call l2cap_get_rfcomm_tx_buff 6be2 5800000e setarg 0x000e 6be3 e0a10000 istore 2 ,contw 6be4 6801424a fetch 2 ,mem_rfcomm_remote_cid 6be5 e0a10000 istore 2 ,contw 6be6 6800c563 fetch 1 ,mem_rfcomm_initiator 6be7 1fe3fe00 lshift pdata ,pdata 6be8 79207e00 set1 0 ,pdata 6be9 e0a08000 istore 1 ,contw 6bea 4756c035 bpatchx patch35_5 ,mem_patch35 6beb 580015ef setarg 0x15ef 6bec e0a10000 istore 2 ,contw 6bed 58001181 setarg 0x1181 6bee e0a10000 istore 2 ,contw 6bef 6800c55d fetch 1 ,mem_pn_dlci 6bf0 e0a08000 istore 1 ,contw 6bf1 580000e0 setarg 0x0000e0 6bf2 e0a18000 istore 3 ,contw 6bf3 6801456c fetch 2 ,mem_rfcomm_max_frame_size 6bf4 e0a10000 istore 2 ,contw 6bf5 58000000 setarg 0x00 6bf6 e0a08000 istore 1 ,contw 6bf7 6800c56e fetch 1 ,mem_rfcomm_credit_init_data 6bf8 e0a08000 istore 1 ,contw 6bf9 20406a2f call rfcomm_calculate_fcs_dlci0 6bfa e0a08000 istore 1 ,contw 6bfb 20600000 rtn rfcomm_send_modem_status_cmd: 6bfc 204052e0 call l2cap_get_rfcomm_tx_buff 6bfd 58000008 setarg 0x0008 6bfe e0a10000 istore 2 ,contw 6bff 6801424a fetch 2 ,mem_rfcomm_remote_cid 6c00 e0a10000 istore 2 ,contw 6c01 6800c563 fetch 1 ,mem_rfcomm_initiator 6c02 1fe3fe00 lshift pdata ,pdata 6c03 79207e00 set1 0 ,pdata 6c04 e0a08000 istore 1 ,contw 6c05 47574035 bpatchx patch35_6 ,mem_patch35 6c06 580009ef setarg 0x09ef 6c07 e0a10000 istore 2 ,contw 6c08 580005e3 setarg 0x05e3 6c09 e0a10000 istore 2 ,contw 6c0a 18427e00 copy temp ,pdata 6c0b e0a08000 istore 1 ,contw 6c0c 5800008d setarg 0x8d 6c0d e0a08000 istore 1 ,contw 6c0e 20406a2f call rfcomm_calculate_fcs_dlci0 6c0f e0a08000 istore 1 ,contw 6c10 20600000 rtn rfcomm_send_modem_status_res: 6c11 204052d2 call l2cap_malloc_rfcomm_channel 6c12 204052e0 call l2cap_get_rfcomm_tx_buff 6c13 58000008 setarg 0x0008 6c14 e0a10000 istore 2 ,contw 6c15 6801424a fetch 2 ,mem_rfcomm_remote_cid 6c16 e0a10000 istore 2 ,contw 6c17 18421600 copy temp ,timeup 6c18 6800c563 fetch 1 ,mem_rfcomm_initiator 6c19 1fe3fe00 lshift pdata ,pdata 6c1a 79207e00 set1 0 ,pdata 6c1b e0a08000 istore 1 ,contw 6c1c 4757c035 bpatchx patch35_7 ,mem_patch35 6c1d 580009ef setarg 0x09ef 6c1e e0a10000 istore 2 ,contw 6c1f 580005e1 setarg 0x05e1 6c20 e0a10000 istore 2 ,contw 6c21 19627e00 copy timeup ,pdata 6c22 e0a08000 istore 1 ,contw 6c23 5800008d setarg 0x8d 6c24 e0a08000 istore 1 ,contw 6c25 20406a2f call rfcomm_calculate_fcs_dlci0 6c26 e0a08000 istore 1 ,contw 6c27 20600000 rtn rfcomm_send_uih_without_payload: 6c28 47584036 bpatchx patch36_0 ,mem_patch36 6c29 6800c569 fetch 1 ,mem_credit_given 6c2a 207a0000 rtn blank 6c2b 68110112 hfetch 2 ,core_uart_rxitems 6c2c 247a0000 nrtn blank 6c2d 1a227e00 copy rega ,pdata 6c2e 60008a9b store 1 ,mem_pdatatemp + 1 6c2f 60088a9a storet 1 ,mem_pdatatemp 6c30 2040526e call l2cap_malloc_is_fifo_full 6c31 247a0000 nrtn blank 6c32 204052d2 call l2cap_malloc_rfcomm_channel 6c33 204052e0 call l2cap_get_rfcomm_tx_buff 6c34 58000005 setarg 0x05 6c35 e0a10000 istore 2 ,contw 6c36 6801424a fetch 2 ,mem_rfcomm_remote_cid 6c37 e0a10000 istore 2 ,contw 6c38 6800850d fetch 1 ,mem_rfcomm_send_adss 6c39 e0a08000 istore 1 ,contw 6c3a 580001ff setarg 0x01ff 6c3b e0a10000 istore 2 ,contw 6c3c 6800c569 fetch 1 ,mem_credit_given 6c3d e0a08000 istore 1 ,contw 6c3e 6800c566 fetch 1 ,mem_hiufcs_spp_wcredits 6c3f e0a08000 istore 1 ,contw 6c40 70456900 jam 0 ,mem_credit_given 6c41 20600000 rtn rfcomm_increase_credit_given: 6c42 4758c036 bpatchx patch36_1 ,mem_patch36 6c43 6800c56b fetch 1 ,mem_credit_flag 6c44 c1008000 rtneq credit_enable 6c45 680104ff fetch 2 ,mem_current_length 6c46 207a0000 rtn blank 6c47 6800c569 fetch 1 ,mem_credit_given 6c48 1fe0fe01 increase 1 ,pdata 6c49 6000c569 store 1 ,mem_credit_given 6c4a 20600000 rtn spp_process_rx_data: 6c4b 6801456f fetch 2 ,mem_cb_receive_spp_data 6c4c 20207f9c branch callback_func spp_tx_rfcomm_packet: 6c4d 47594036 bpatchx patch36_2 ,mem_patch36 6c4e 6800c568 fetch 1 ,mem_remote_credits 6c4f 207a0000 rtn blank 6c50 1fe0ffff increase -1 ,pdata 6c51 6000c568 store 1 ,mem_remote_credits 6c52 6801455e fetch 2 ,mem_pn_max_frame_size 6c53 6809469f fetcht 2 ,mem_current_packet_length 6c54 98467c00 isub temp ,null 6c55 20216c57 branch ssp_tx_rfcomm_from_uart ,positive 6c56 6001469f store 2 ,mem_current_packet_length ssp_tx_rfcomm_from_uart: 6c57 6800c569 fetch 1 ,mem_credit_given 6c58 203a6c5f branch ssp_tx_rfcomm_from_uart_without_credit ,blank 6c59 70051001 jam 1 ,mem_rfcomm_send_offset 6c5a 6800c566 fetch 1 ,mem_hiufcs_spp_wcredits 6c5b 6000850f store 1 ,mem_rfcomm_send_fcs 6c5c 580000ff setarg rsp_rx_uih_wdata 6c5d 6000850e store 1 ,mem_rfcomm_send_frame_type 6c5e 20206c64 branch ssp_tx_rfcomm_from_uart_common ssp_tx_rfcomm_from_uart_without_credit: 6c5f 70051000 jam 0 ,mem_rfcomm_send_offset 6c60 6800c565 fetch 1 ,mem_hiufcs_spp 6c61 6000850f store 1 ,mem_rfcomm_send_fcs 6c62 580000ef setarg rsp_tx_uih 6c63 6000850e store 1 ,mem_rfcomm_send_frame_type ssp_tx_rfcomm_from_uart_common: 6c64 4759c036 bpatchx patch36_3 ,mem_patch36 6c65 6801469f fetch 2 ,mem_current_packet_length 6c66 1fe67c7f sub pdata ,127 ,null 6c67 20216c6b branch ssp_tx_rfcomm_from_uart_common0 ,positive 6c68 68008510 fetch 1 ,mem_rfcomm_send_offset 6c69 1fe0fe01 increase 1 ,pdata 6c6a 60008510 store 1 ,mem_rfcomm_send_offset ssp_tx_rfcomm_from_uart_common0: 6c6b 20406a72 call get_rfcomm_snd_adss 6c6c 6801469f fetch 2 ,mem_current_packet_length 6c6d 1fe0fe08 increase 8 ,pdata 6c6e 68088510 fetcht 1 ,mem_rfcomm_send_offset 6c6f 9840a200 iadd temp ,rega 6c70 20405240 call l2cap_malloc 6c71 60010277 store 2 ,mem_rfcomm_tx_buff_ptr 6c72 1fe0fe04 increase 4 ,pdata 6c73 60010279 store 2 ,mem_rfcomm_tx_payload_ptr 6c74 1fe20a00 copy pdata ,contw 6c75 6800850d fetch 1 ,mem_rfcomm_send_adss 6c76 e0a08000 istore 1 ,contw 6c77 6800850e fetch 1 ,mem_rfcomm_send_frame_type 6c78 e0a08000 istore 1 ,contw 6c79 20406c95 call ssp_tx_write_length 6c7a 20406ca6 call ssp_tx_write_given_credit 6c7b 475a4036 bpatchx patch36_4 ,mem_patch36 6c7c 68014571 fetch 2 ,mem_nl_rx_data_src 6c7d 1fe20600 copy pdata ,contru 6c7e 6801469f fetch 2 ,mem_current_packet_length 6c7f 1fe27200 copy pdata ,loopcnt 6c80 204066ea call uart_copy_rx_bytes_fast 6c81 18a20400 copy contw ,temp 6c82 18627e00 copy contru ,pdata 6c83 60014571 store 2 ,mem_nl_rx_data_src 6c84 18420a00 copy temp ,contw 6c85 6800850f fetch 1 ,mem_rfcomm_send_fcs 6c86 e0a08000 istore 1 ,contw 6c87 68010277 fetch 2 ,mem_rfcomm_tx_buff_ptr 6c88 1fe20a00 copy pdata ,contw 6c89 6801469f fetch 2 ,mem_current_packet_length 6c8a 68088510 fetcht 1 ,mem_rfcomm_send_offset 6c8b 9840fe00 iadd temp ,pdata 6c8c 1fe0fe04 increase 4 ,pdata 6c8d e0a10000 istore 2 ,contw 6c8e 6801424a fetch 2 ,mem_rfcomm_remote_cid 6c8f e0a10000 istore 2 ,contw 6c90 70456900 jam 0 ,mem_credit_given 6c91 68014573 fetch 2 ,mem_nl_rx_len_all 6c92 c0003a97 beq 0 ,module_hci_command_tx_spp_tx_complete 6c93 700b0500 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet 6c94 20600000 rtn ssp_tx_write_length: 6c95 475ac036 bpatchx patch36_5 ,mem_patch36 6c96 6801469f fetch 2 ,mem_current_packet_length 6c97 1fe67c7f sub pdata ,0x7f ,null 6c98 24216c9d nbranch ssp_tx_write_long_packet ,positive 6c99 1fe3fe00 lshift pdata ,pdata 6c9a 79207e00 set1 0 ,pdata 6c9b e0a08000 istore 1 ,contw 6c9c 20600000 rtn ssp_tx_write_long_packet: 6c9d 6801469f fetch 2 ,mem_current_packet_length 6c9e 1fe97e00 rshift3 pdata ,pdata 6c9f 1ff18400 rshift4 pdata ,temp 6ca0 1fe17e7f and_into 0x7f ,pdata 6ca1 1fe3fe00 lshift pdata ,pdata 6ca2 793ffe00 set0 0 ,pdata 6ca3 e0a08000 istore 1 ,contw 6ca4 e0a88000 istoret 1 ,contw 6ca5 20600000 rtn ssp_tx_write_given_credit: 6ca6 6800c569 fetch 1 ,mem_credit_given 6ca7 207a0000 rtn blank 6ca8 e0a08000 istore 1 ,contw 6ca9 20600000 rtn scheduler_process: 6caa 475b4036 bpatchx patch36_6 ,mem_patch36 6cab 20407d9c call check_51cmd 6cac 204032f6 call app_process_bb_event 6cad 2040631b call process_conn_sm 6cae 475bc036 bpatchx patch36_7 ,mem_patch36 6caf 204076dc call sp_calc_sequence 6cb0 204076b5 call simple_pairing_sequence 6cb1 204076c6 call master_simple_paring_sequence 6cb2 2040526e call l2cap_malloc_is_fifo_full 6cb3 247a0000 nrtn blank 6cb4 20404da9 call l2cap_call_proc_sigal_pending 6cb5 2040526e call l2cap_malloc_is_fifo_full 6cb6 247a0000 nrtn blank 6cb7 475c4037 bpatchx patch37_0 ,mem_patch37 6cb8 20406cf5 call process_upper_sm 6cb9 20404f64 call l2cap_send_config_req 6cba 20406b98 call rfcomm_send_more_pkt scheduler_process0: 6cbb 20406cbe call scheduler_tx_disconnect_hid 6cbc 475cc037 bpatchx patch37_1 ,mem_patch37 6cbd 202032f2 branch app_process_bt scheduler_tx_disconnect_hid: 6cbe 6800827f fetch 1 ,mem_control_tasks 6cbf c2805087 bbit1 l2cap_disconnect_interrupt ,l2cap_disconnect_interrupt_req 6cc0 c283d091 bbit1 l2cap_disconnect_control ,l2cap_disconnect_control_req 6cc1 20600000 rtn scheduler_tx_l2cap_pkt: 6cc2 475d4037 bpatchx patch37_2 ,mem_patch37 6cc3 20405274 call l2cap_malloc_is_fifo_empty 6cc4 207a0000 rtn blank 6cc5 6800804b fetch 1 ,mem_op 6cc6 c3830000 rtnbit1 op_txl2cap 6cc7 20405258 call l2cap_malloc_fifo_out 6cc8 6001016f store 2 ,mem_txptr 6cc9 1fe20c00 copy pdata ,contr 6cca e8c10000 ifetch 2 ,contr 6ccb 1fe0fe04 increase 4 ,pdata 6ccc 600141dc store 2 ,mem_tx_len 6ccd 7041db06 jam 6 ,mem_tx_lch 6cce 475dc037 bpatchx patch37_3 ,mem_patch37 6ccf 68014246 fetch 2 ,mem_l2cap_tx_multi_offset 6cd0 203a6cdd branch scheduler_tx_l2cap_start_pkt ,blank 6cd1 6800804b fetch 1 ,mem_op 6cd2 c4038000 rtnbit0 op_pkt_comp 6cd3 793ffe07 set0 op_pkt_comp ,pdata 6cd4 6000804b store 1 ,mem_op 6cd5 7041db05 jam 5 ,mem_tx_lch 6cd6 68094246 fetcht 2 ,mem_l2cap_tx_multi_offset 6cd7 6801016f fetch 2 ,mem_txptr 6cd8 9840fe00 iadd temp ,pdata 6cd9 6001016f store 2 ,mem_txptr 6cda 680141dc fetch 2 ,mem_tx_len 6cdb 98467e00 isub temp ,pdata 6cdc 600141dc store 2 ,mem_tx_len scheduler_tx_l2cap_start_pkt: 6cdd 475e4037 bpatchx patch37_4 ,mem_patch37 6cde 680141dc fetch 2 ,mem_tx_len 6cdf 203a2a8c branch assert ,blank 6ce0 d8400104 arg l2cap_max_pkt_len ,temp 6ce1 98467e00 isub temp ,pdata 6ce2 24216ce9 nbranch scheduler_tx_l2cap_last_pkt ,positive 6ce3 475ec037 bpatchx patch37_5 ,mem_patch37 6ce4 600941dc storet 2 ,mem_tx_len 6ce5 68014246 fetch 2 ,mem_l2cap_tx_multi_offset 6ce6 9840fe00 iadd temp ,pdata 6ce7 60014246 store 2 ,mem_l2cap_tx_multi_offset 6ce8 20206ceb branch scheduler_tx_l2cap_pkt_end scheduler_tx_l2cap_last_pkt: 6ce9 58000000 setarg 0 6cea 60014246 store 2 ,mem_l2cap_tx_multi_offset scheduler_tx_l2cap_pkt_end: 6ceb 6800804b fetch 1 ,mem_op 6cec 79207e06 set1 op_txl2cap ,pdata 6ced 6000804b store 1 ,mem_op 6cee 20600000 rtn scheduler_start_upper_sm: 6cef 6800c684 fetch 1 ,mem_ui_profile_supported 6cf0 c2806cf3 bbit1 support_hid ,scheduler_start_upper_sm_hid 6cf1 70028701 jam uppersm_reconn_sdp_conn ,mem_upper_sm_reconn 6cf2 20600000 rtn scheduler_start_upper_sm_hid: 6cf3 7002870f jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn 6cf4 20600000 rtn process_upper_sm: 6cf5 6800c681 fetch 1 ,memui_reconnect_mode 6cf6 243a6cfb nbranch process_upper_sm_reconn ,blank process_upper_sm_remote_page: 6cf7 68008286 fetch 1 ,mem_upper_sm_remote_page 6cf8 207a0000 rtn blank 6cf9 70028600 jam 0 ,mem_upper_sm_remote_page process_upper_sm_rp_wait: 6cfa 20600000 rtn process_upper_sm_reconn: 6cfb 475f4037 bpatchx patch37_6 ,mem_patch37 6cfc 68008287 fetch 1 ,mem_upper_sm_reconn 6cfd 207a0000 rtn blank 6cfe c000ed1b beq uppersm_reconn_sdp_conn ,process_upper_sm_reconn_sdp_conn 6cff c0016d74 beq uppersm_reconn_sdp_conn_wait ,process_upper_sm_reconn_sdp_conn_wait 6d00 c001ed21 beq uppersm_reconn_sdp_cfg ,process_upper_sm_reconn_sdp_cfg 6d01 c0026d78 beq uppersm_reconn_sdp_cfg_wait ,process_upper_sm_reconn_sdp_cfg_wait 6d02 c01ded2b beq uppersm_reconn_ss_spp ,process_upper_sm_reconn_ss_spp 6d03 c01e6d7b beq uppersm_reconn_ss_spp_wait ,process_upper_sm_reconn_ss_spp_wait 6d04 c006ed30 beq uppersm_reconn_sdp_disconn ,process_upper_sm_reconn_sdp_disconn 6d05 c0076d80 beq uppersm_reconn_sdp_disconn_wait ,process_upper_sm_reconn_sdp_disconn_wait 6d06 c007ed33 beq uppersm_reconn_hid_ctrl_conn ,process_upper_sm_reconn_hid_ctrl_conn 6d07 c0086d86 beq uppersm_reconn_hid_ctrl_conn_wait ,process_upper_sm_reconn_hid_ctrl_conn_wait 6d08 c008ed39 beq uppersm_reconn_hid_ctrl_cfg ,process_upper_sm_reconn_hid_ctrl_cfg 6d09 c0096d8a beq uppersm_reconn_hid_ctrl_cfg_wait ,process_upper_sm_reconn_hid_ctrl_cfg_wait 6d0a c009ed3f beq uppersm_reconn_hid_int_conn ,process_upper_sm_reconn_hid_int_conn 6d0b c00a6d8e beq uppersm_reconn_hid_int_conn_wait ,process_upper_sm_reconn_hid_int_conn_wait 6d0c c00aed45 beq uppersm_reconn_hid_int_cfg ,process_upper_sm_reconn_hid_int_cfg 6d0d c00b6d92 beq uppersm_reconn_hid_int_cfg_wait ,process_upper_sm_reconn_hid_int_cfg_wait 6d0e c00bed4b beq uppersm_reconn_rfcomm_conn ,process_upper_sm_reconn_rfcomm_conn 6d0f c00c6d97 beq uppersm_reconn_rfcomm_conn_wait ,process_upper_sm_reconn_rfcomm_conn_wait 6d10 c00ced51 beq uppersm_reconn_rfcomm_cfg ,process_upper_sm_reconn_rfcomm_cfg 6d11 c00d6d9b beq uppersm_reconn_rfcomm_cfg_wait ,process_upper_sm_reconn_rfcomm_cfg_wait 6d12 c00ded57 beq uppersm_reconn_rfcomm_sabm ,process_upper_sm_reconn_rfcomm_sabm 6d13 c00e6d9f beq uppersm_reconn_rfcomm_sabm_wait ,process_upper_sm_reconn_rfcomm_sabm_wait 6d14 c00eed5d beq uppersm_reconn_spp_cmd_pn ,process_upper_sm_reconn_spp_cmd_pn 6d15 c00f6da4 beq uppersm_reconn_spp_cmd_pn_wait ,process_upper_sm_reconn_spp_cmd_pn_wait 6d16 c00fed63 beq uppersm_reconn_spp_sabm ,process_upper_sm_reconn_spp_sabm 6d17 c0106da8 beq uppersm_reconn_spp_sabm_wait ,process_upper_sm_reconn_spp_sabm_wait 6d18 c010ed6e beq uppersm_reconn_spp_cmd_ms ,process_upper_sm_reconn_spp_cmd_ms 6d19 c0116dac beq uppersm_reconn_spp_cmd_ms_wait ,process_upper_sm_reconn_spp_cmd_ms_wait process_upper_sm_reconn_wait: 6d1a 20600000 rtn process_upper_sm_reconn_sdp_conn: 6d1b 20406db7 call upper_sm_send_sdp_conn 6d1c 70028702 jam uppersm_reconn_sdp_conn_wait ,mem_upper_sm_reconn 6d1d 6800c250 fetch 1 ,mem_sdp_state 6d1e 79207e00 set1 l2cap_channel_state_conn_req ,pdata 6d1f 6000c250 store 1 ,mem_sdp_state 6d20 20600000 rtn process_upper_sm_reconn_sdp_cfg: 6d21 70028704 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn 6d22 6800c250 fetch 1 ,mem_sdp_state 6d23 c3810000 rtnbit1 l2cap_channel_state_snd_cfg_req 6d24 70028703 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn 6d25 20406dbe call upper_sm_send_sdp_cfg 6d26 70028704 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn 6d27 6800c250 fetch 1 ,mem_sdp_state 6d28 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata 6d29 6000c250 store 1 ,mem_sdp_state 6d2a 20600000 rtn process_upper_sm_reconn_ss_spp: 6d2b 20405274 call l2cap_malloc_is_fifo_empty 6d2c 247a0000 nrtn blank 6d2d 20406dcd call upper_sm_send_ss_spp 6d2e 7002873c jam uppersm_reconn_ss_spp_wait ,mem_upper_sm_reconn 6d2f 20600000 rtn process_upper_sm_reconn_sdp_disconn: 6d30 20406dc3 call upper_sm_send_sdp_disconn 6d31 7002870e jam uppersm_reconn_sdp_disconn_wait ,mem_upper_sm_reconn 6d32 20600000 rtn process_upper_sm_reconn_hid_ctrl_conn: 6d33 20406ddd call upper_sm_send_hid_ctrl_conn 6d34 70028710 jam uppersm_reconn_hid_ctrl_conn_wait ,mem_upper_sm_reconn 6d35 6800c252 fetch 1 ,mem_hid_control_state 6d36 79207e00 set1 l2cap_channel_state_conn_req ,pdata 6d37 6000c252 store 1 ,mem_hid_control_state 6d38 20600000 rtn process_upper_sm_reconn_hid_ctrl_cfg: 6d39 20406de4 call upper_sm_send_hid_ctrl_cfg 6d3a 70028712 jam uppersm_reconn_hid_ctrl_cfg_wait ,mem_upper_sm_reconn 6d3b 6800c252 fetch 1 ,mem_hid_control_state 6d3c 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata 6d3d 6000c252 store 1 ,mem_hid_control_state 6d3e 20600000 rtn process_upper_sm_reconn_hid_int_conn: 6d3f 20406de9 call upper_sm_send_hid_int_conn 6d40 70028714 jam uppersm_reconn_hid_int_conn_wait ,mem_upper_sm_reconn 6d41 6800c253 fetch 1 ,mem_hid_interrupt_state 6d42 79207e00 set1 l2cap_channel_state_conn_req ,pdata 6d43 6000c253 store 1 ,mem_hid_interrupt_state 6d44 20600000 rtn process_upper_sm_reconn_hid_int_cfg: 6d45 20406df0 call upper_sm_send_hid_int_cfg 6d46 70028716 jam uppersm_reconn_hid_int_cfg_wait ,mem_upper_sm_reconn 6d47 6800c253 fetch 1 ,mem_hid_interrupt_state 6d48 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata 6d49 6000c253 store 1 ,mem_hid_interrupt_state 6d4a 20600000 rtn process_upper_sm_reconn_rfcomm_conn: 6d4b 20406dd1 call upper_sm_send_rfcomm_conn 6d4c 70028718 jam uppersm_reconn_rfcomm_conn_wait ,mem_upper_sm_reconn 6d4d 6800c251 fetch 1 ,mem_rfcomm_state 6d4e 79207e00 set1 l2cap_channel_state_conn_req ,pdata 6d4f 6000c251 store 1 ,mem_rfcomm_state 6d50 20600000 rtn process_upper_sm_reconn_rfcomm_cfg: 6d51 20406dd8 call upper_sm_send_rfcomm_cfg 6d52 7002871a jam uppersm_reconn_rfcomm_cfg_wait ,mem_upper_sm_reconn 6d53 6800c251 fetch 1 ,mem_rfcomm_state 6d54 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata 6d55 6000c251 store 1 ,mem_rfcomm_state 6d56 20600000 rtn process_upper_sm_reconn_rfcomm_sabm: 6d57 20406df5 call upper_sm_send_rfcomm_sabm 6d58 7002871c jam uppersm_reconn_rfcomm_sabm_wait ,mem_upper_sm_reconn 6d59 6800c251 fetch 1 ,mem_rfcomm_state 6d5a 79207e06 set1 l2cap_channel_rfcomm_only_sabm ,pdata 6d5b 6000c251 store 1 ,mem_rfcomm_state 6d5c 20600000 rtn process_upper_sm_reconn_spp_cmd_pn: 6d5d 20406dfc call upper_sm_send_spp_cmd_pn 6d5e 6800c254 fetch 1 ,mem_spp_state 6d5f 79207e00 set1 rfcomm_channel_state_pn_cmd 6d60 6000c254 store 1 ,mem_spp_state 6d61 7002871e jam uppersm_reconn_spp_cmd_pn_wait ,mem_upper_sm_reconn 6d62 20600000 rtn process_upper_sm_reconn_spp_sabm: 6d63 20406e02 call upper_sm_send_spp_sabm 6d64 6800c254 fetch 1 ,mem_spp_state 6d65 79207e02 set1 rfcomm_channel_state_sabm 6d66 6000c254 store 1 ,mem_spp_state 6d67 70028720 jam uppersm_reconn_spp_sabm_wait ,mem_upper_sm_reconn 6d68 6800c564 fetch 1 ,mem_remote_spp_channel 6d69 1fe9fe00 lshift3 pdata ,pdata 6d6a 1fe1fe03 or_into 3 ,pdata 6d6b d8404565 arg mem_hiufcs_spp ,temp 6d6c 600904f7 storet 2 ,mem_contw_temp 6d6d 20206a35 branch rfcomm_save_fcs_uih process_upper_sm_reconn_spp_cmd_ms: 6d6e 20406e0c call upper_sm_send_spp_cmd_ms 6d6f 6800c254 fetch 1 ,mem_spp_state 6d70 79207e04 set1 rfcomm_channel_state_snd_ms_cmd 6d71 6000c254 store 1 ,mem_spp_state 6d72 70028722 jam uppersm_reconn_spp_cmd_ms_wait ,mem_upper_sm_reconn 6d73 20600000 rtn process_upper_sm_reconn_sdp_conn_wait: 6d74 6800c250 fetch 1 ,mem_sdp_state 6d75 c4008000 rtnbit0 l2cap_channel_state_conn_res 6d76 70028703 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn 6d77 20206cfb branch process_upper_sm_reconn process_upper_sm_reconn_sdp_cfg_wait: 6d78 6800c250 fetch 1 ,mem_sdp_state 6d79 c19f8000 rtnne l2cap_channel_setup_complete 6d7a 7002873b jam uppersm_reconn_ss_spp ,mem_upper_sm_reconn process_upper_sm_reconn_ss_spp_wait: 6d7b 68008285 fetch 1 ,mem_message_to_uppersm 6d7c c18b8000 rtnne recieve_ss_reasult_hf 6d7d 70028500 jam 0 ,mem_message_to_uppersm 6d7e 7002870d jam uppersm_reconn_sdp_disconn ,mem_upper_sm_reconn 6d7f 20206cfb branch process_upper_sm_reconn process_upper_sm_reconn_sdp_disconn_wait: 6d80 6800c250 fetch 1 ,mem_sdp_state 6d81 247a0000 nrtn blank 6d82 6800c684 fetch 1 ,mem_ui_profile_supported 6d83 c2806daf bbit1 support_hid ,process_upper_sm_reconn_setup_hid 6d84 c2836db1 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm 6d85 20206db5 branch process_upper_sm_reconn_termination process_upper_sm_reconn_hid_ctrl_conn_wait: 6d86 6800c252 fetch 1 ,mem_hid_control_state 6d87 c4008000 rtnbit0 l2cap_channel_state_conn_res 6d88 70028711 jam uppersm_reconn_hid_ctrl_cfg ,mem_upper_sm_reconn 6d89 20206cfb branch process_upper_sm_reconn process_upper_sm_reconn_hid_ctrl_cfg_wait: 6d8a 6800c252 fetch 1 ,mem_hid_control_state 6d8b c19f8000 rtnne l2cap_channel_setup_complete 6d8c 70028713 jam uppersm_reconn_hid_int_conn ,mem_upper_sm_reconn 6d8d 20206cfb branch process_upper_sm_reconn process_upper_sm_reconn_hid_int_conn_wait: 6d8e 6800c253 fetch 1 ,mem_hid_interrupt_state 6d8f c4008000 rtnbit0 l2cap_channel_state_conn_res 6d90 70028715 jam uppersm_reconn_hid_int_cfg ,mem_upper_sm_reconn 6d91 20206cfb branch process_upper_sm_reconn process_upper_sm_reconn_hid_int_cfg_wait: 6d92 6800c253 fetch 1 ,mem_hid_interrupt_state 6d93 c19f8000 rtnne l2cap_channel_setup_complete 6d94 6800c684 fetch 1 ,mem_ui_profile_supported 6d95 c2836db1 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm 6d96 20206db5 branch process_upper_sm_reconn_termination process_upper_sm_reconn_rfcomm_conn_wait: 6d97 6800c251 fetch 1 ,mem_rfcomm_state 6d98 c4008000 rtnbit0 l2cap_channel_state_conn_res 6d99 70028719 jam uppersm_reconn_rfcomm_cfg ,mem_upper_sm_reconn 6d9a 20206cfb branch process_upper_sm_reconn process_upper_sm_reconn_rfcomm_cfg_wait: 6d9b 6800c251 fetch 1 ,mem_rfcomm_state 6d9c c19f8000 rtnne l2cap_channel_setup_complete 6d9d 7002871b jam uppersm_reconn_rfcomm_sabm ,mem_upper_sm_reconn 6d9e 20206cfb branch process_upper_sm_reconn process_upper_sm_reconn_rfcomm_sabm_wait: 6d9f 6800c251 fetch 1 ,mem_rfcomm_state 6da0 c1ff8000 rtnne l2cap_channel_rfcomm_dlci0_opened 6da1 6800c684 fetch 1 ,mem_ui_profile_supported 6da2 c2836db3 bbit1 support_spp ,process_upper_sm_reconn_setup_spp 6da3 20206db5 branch process_upper_sm_reconn_termination process_upper_sm_reconn_spp_cmd_pn_wait: 6da4 6800c254 fetch 1 ,mem_spp_state 6da5 c4008000 rtnbit0 rfcomm_channel_state_pn_res 6da6 7002871f jam uppersm_reconn_spp_sabm ,mem_upper_sm_reconn 6da7 20206cfb branch process_upper_sm_reconn process_upper_sm_reconn_spp_sabm_wait: 6da8 6800c254 fetch 1 ,mem_spp_state 6da9 c4018000 rtnbit0 rfcomm_channel_state_ua 6daa 70028721 jam uppersm_reconn_spp_cmd_ms ,mem_upper_sm_reconn 6dab 20206cfb branch process_upper_sm_reconn process_upper_sm_reconn_spp_cmd_ms_wait: 6dac 6800c254 fetch 1 ,mem_spp_state 6dad c1ff8000 rtnne rfcomm_channel_setup_complete 6dae 20206db5 branch process_upper_sm_reconn_termination process_upper_sm_reconn_setup_hid: 6daf 7002870f jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn 6db0 20206cfb branch process_upper_sm_reconn process_upper_sm_reconn_setup_rfcomm: 6db1 70028717 jam uppersm_reconn_rfcomm_conn ,mem_upper_sm_reconn 6db2 20206cfb branch process_upper_sm_reconn process_upper_sm_reconn_setup_spp: 6db3 7002871d jam uppersm_reconn_spp_cmd_pn ,mem_upper_sm_reconn 6db4 20206cfb branch process_upper_sm_reconn process_upper_sm_reconn_termination: 6db5 70028700 jam 0 ,mem_upper_sm_reconn 6db6 20600000 rtn upper_sm_send_sdp_conn: 6db7 475fc037 bpatchx patch37_7 ,mem_patch37 6db8 204052b8 call l2cap_malloc_signal_channel 6db9 58000001 setarg psm_sdp 6dba 1fe20400 copy pdata ,temp 6dbb 58000050 setarg l2cap_sdp_channel 6dbc 1fe21600 copy pdata ,timeup 6dbd 202050a8 branch ml2cap_send_signal_connect_req upper_sm_send_sdp_cfg: 6dbe 47604038 bpatchx patch38_0 ,mem_patch38 6dbf 204052b8 call l2cap_malloc_signal_channel 6dc0 68014248 fetch 2 ,mem_sdp_remote_cid 6dc1 1fe20400 copy pdata ,temp 6dc2 202050b7 branch ml2cap_send_signal_config_req upper_sm_send_sdp_disconn: 6dc3 4760c038 bpatchx patch38_1 ,mem_patch38 6dc4 204052b8 call l2cap_malloc_signal_channel 6dc5 68014248 fetch 2 ,mem_sdp_remote_cid 6dc6 1fe20400 copy pdata ,temp 6dc7 d9600050 arg l2cap_sdp_channel ,timeup 6dc8 204050cc call ml2cap_send_signal_disconn_req 6dc9 6800c250 fetch 1 ,mem_sdp_state 6dca 793ffe05 set0 l2cap_channel_state_rcv_cfg_res ,pdata 6dcb 6000c250 store 1 ,mem_sdp_state 6dcc 20600000 rtn upper_sm_send_ss_spp: 6dcd 47614038 bpatchx patch38_2 ,mem_patch38 6dce 204052c5 call l2cap_malloc_sdp_channel 6dcf 20407138 call sdp_send_spp_request 6dd0 202050e7 branch msdp_send_req_done upper_sm_send_rfcomm_conn: 6dd1 4761c038 bpatchx patch38_3 ,mem_patch38 6dd2 204052b8 call l2cap_malloc_signal_channel 6dd3 58000003 setarg psm_rfcomm 6dd4 1fe20400 copy pdata ,temp 6dd5 58000051 setarg l2cap_rfcomm_channel 6dd6 1fe21600 copy pdata ,timeup 6dd7 202050a8 branch ml2cap_send_signal_connect_req upper_sm_send_rfcomm_cfg: 6dd8 47624038 bpatchx patch38_4 ,mem_patch38 6dd9 204052b8 call l2cap_malloc_signal_channel 6dda 6801424a fetch 2 ,mem_rfcomm_remote_cid 6ddb 1fe20400 copy pdata ,temp 6ddc 202050b7 branch ml2cap_send_signal_config_req upper_sm_send_hid_ctrl_conn: 6ddd 4762c038 bpatchx patch38_5 ,mem_patch38 6dde 204052b8 call l2cap_malloc_signal_channel 6ddf 58000011 setarg psm_hid_control 6de0 1fe20400 copy pdata ,temp 6de1 58000052 setarg l2cap_hid_control_channel 6de2 1fe21600 copy pdata ,timeup 6de3 202050a8 branch ml2cap_send_signal_connect_req upper_sm_send_hid_ctrl_cfg: 6de4 47634038 bpatchx patch38_6 ,mem_patch38 6de5 204052b8 call l2cap_malloc_signal_channel 6de6 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 6de7 1fe20400 copy pdata ,temp 6de8 202050b7 branch ml2cap_send_signal_config_req upper_sm_send_hid_int_conn: 6de9 4763c038 bpatchx patch38_7 ,mem_patch38 6dea 204052b8 call l2cap_malloc_signal_channel 6deb 58000013 setarg psm_hid_interrupt 6dec 1fe20400 copy pdata ,temp 6ded 58000053 setarg l2cap_hid_interrupt_channel 6dee 1fe21600 copy pdata ,timeup 6def 202050a8 branch ml2cap_send_signal_connect_req upper_sm_send_hid_int_cfg: 6df0 47644039 bpatchx patch39_0 ,mem_patch39 6df1 204052b8 call l2cap_malloc_signal_channel 6df2 6801424e fetch 2 ,mem_hid_int_remote_cid 6df3 1fe20400 copy pdata ,temp 6df4 202050b7 branch ml2cap_send_signal_config_req upper_sm_send_rfcomm_sabm: 6df5 4764c039 bpatchx patch39_1 ,mem_patch39 6df6 204052d2 call l2cap_malloc_rfcomm_channel 6df7 7004fb03 jam 3 ,mem_current_adss 6df8 7004fe1c jam 0x1c ,mem_current_fcs 6df9 20406ba9 call rfcomm_send_sabm 6dfa 70456301 jam 1 ,mem_rfcomm_initiator 6dfb 20600000 rtn upper_sm_send_spp_cmd_pn: 6dfc 47654039 bpatchx patch39_2 ,mem_patch39 6dfd 204052d2 call l2cap_malloc_rfcomm_channel 6dfe 6808c564 fetcht 1 ,mem_remote_spp_channel 6dff 20406a79 call channel_to_dlci 6e00 6008c55d storet 1 ,mem_pn_dlci 6e01 20206bc4 branch rfcomm_send_param_neg_cmd upper_sm_send_spp_sabm: 6e02 4765c039 bpatchx patch39_3 ,mem_patch39 6e03 204052d2 call l2cap_malloc_rfcomm_channel 6e04 6808c55d fetcht 1 ,mem_pn_dlci 6e05 20406a73 call dlci_to_address_cmd 6e06 20406a1a call rfcomm_calculate_fcs_sabm 6e07 600084fe store 1 ,mem_current_fcs 6e08 6808c55d fetcht 1 ,mem_pn_dlci 6e09 20406a73 call dlci_to_address_cmd 6e0a 600884fb storet 1 ,mem_current_adss 6e0b 20206ba9 branch rfcomm_send_sabm upper_sm_send_spp_cmd_ms: 6e0c 47664039 bpatchx patch39_4 ,mem_patch39 6e0d 204052d2 call l2cap_malloc_rfcomm_channel 6e0e 6808c55d fetcht 1 ,mem_pn_dlci 6e0f 20406a73 call dlci_to_address_cmd 6e10 20206bfc branch rfcomm_send_modem_status_cmd sdp_process: 6e11 4766c039 bpatchx patch39_5 ,mem_patch39 6e12 68010264 fetch 2 ,mem_l2cap_payload_ptr 6e13 98000c00 iforce contr 6e14 e8c08000 ifetch 1 ,contr 6e15 1fe22400 copy pdata ,regb 6e16 6000851b store 1 ,mem_sdp_pduid 6e17 e8c10000 ifetch 2 ,contr 6e18 6001051c store 2 ,mem_sdp_transactionid 6e19 e8c08000 ifetch 1 ,contr 6e1a 1fed1600 lshift8 pdata ,timeup 6e1b e8c08000 ifetch 1 ,contr 6e1c 99609600 iadd timeup ,timeup 6e1d 47674039 bpatchx patch39_6 ,mem_patch39 6e1e 18c20400 copy contr ,temp 6e1f df200004 arg 4 ,loopcnt 6e20 d8a0052a arg mem_sdp_handle_list ,contw 6e21 20407ec6 call memset0 6e22 18420c00 copy temp ,contr 6e23 1a427e00 deposit regb 6e24 c000efba beq sdp_error_res ,sdp_process_error_res 6e25 c0016e2c beq sdp_search_req ,sdp_process_ss_req 6e26 c001efba beq sdp_search_res ,sdp_process_ss_res 6e27 c0026e54 beq sdp_attribute_req ,sdp_process_sa_req 6e28 c002efba beq sdp_attribute_res ,sdp_process_sa_res 6e29 c0036f02 beq sdp_searchattrib_req ,sdp_process_ssa_req 6e2a c003efba beq sdp_searchattrib_res ,sdp_process_ssa_res 6e2b 20206fc1 branch sdp_insufficient_resource sdp_process_ss_req: 6e2c 4767c039 bpatchx patch39_7 ,mem_patch39 6e2d 20406fd0 call ask_serviceclassid 6e2e 2841fe01 compare 1 ,temp ,0xff 6e2f 2020f040 branch ss_empty_rsp ,true 6e30 2841feff compare 0xff ,temp ,0xff 6e31 2020efc4 branch sdp_invalid_request_syntax ,true 6e32 e8c10000 ifetch 2 ,contr 6e33 60010522 store 2 ,mem_sdp_record_maxcnt 6e34 196097fe increase -2 ,timeup 6e35 196097ff increase -1 ,timeup 6e36 2422efbe nbranch sdp_invalid_pdu_size ,zero 6e37 d9600511 arg mem_sdp_uuid_search_ptr ,timeup 6e38 e9610000 ifetch 2 ,timeup 6e39 207a0000 rtn blank 6e3a 20407082 call search_all_uuid 6e3b 204052d0 call l2cap_get_sdp_tx_payload 6e3c 18007e03 force 3 ,pdata 6e3d e0a08000 istore 1 ,contw 6e3e 6801051c fetch 2 ,mem_sdp_transactionid 6e3f e0a10000 istore 2 ,contw 6e40 18ebfe00 lshift2 queue ,pdata 6e41 1fe0fe05 add pdata ,5 ,pdata 6e42 1fe0a605 add pdata ,5 ,regc 6e43 1ff0fe00 byteswap pdata ,pdata 6e44 e0a10000 istore 2 ,contw 6e45 18e27e00 deposit queue 6e46 1ff0fe00 byteswap pdata ,pdata 6e47 e0a10000 istore 2 ,contw 6e48 e0a10000 istore 2 ,contw 6e49 d8c0052a arg mem_sdp_handle_list ,contr 6e4a 18e27200 copy queue ,loopcnt 6e4b 2022ee4f branch ss_req_blank ,zero ss_req_loop: 6e4c e8c20000 ifetch 4 ,contr 6e4d e0a20000 istore 4 ,contw 6e4e c2006e4c loop ss_req_loop ss_req_blank: 6e4f 18007e00 force 0 ,pdata 6e50 e0a08000 istore 1 ,contw 6e51 1a627e00 deposit regc 6e52 60010275 store 2 ,mem_sdp_tx_pkt_length 6e53 20600000 rtn sdp_process_sa_req: 6e54 4768403a bpatchx patch3a_0 ,mem_patch3a 6e55 e8c20000 ifetch 4 ,contr 6e56 60020524 store 4 ,mem_sdp_record_handle 6e57 196097fc increase -4 ,timeup 6e58 20406f2e call sdp_store_maxbyte 6e59 60010520 store 2 ,mem_sdp_attribute_maxbyte 6e5a 196097fe increase -2 ,timeup 6e5b 20407028 call dataelementtype6 6e5c 2022efc4 branch sdp_invalid_request_syntax ,zero 6e5d 2a21fe05 compare 5 ,rega ,0xff 6e5e 2020ee62 branch sa_judge_wholerange ,true sa_isnot_wholerange: 6e5f d8a0052a arg mem_sdp_attrib_list ,contw 6e60 18000e00 force 0 ,queue 6e61 20206e71 branch sa_req_loop sa_judge_wholerange: 6e62 e8c08000 ifetch 1 ,contr 6e63 c0856fc4 bne sdp_attribute_range ,sdp_invalid_request_syntax 6e64 e8c10000 ifetch 2 ,contr 6e65 243a6e6f nbranch sa_judge_wholerange_false1 ,blank 6e66 e8c08000 ifetch 1 ,contr 6e67 c0ffee6d bne 0xff ,sa_judge_wholerange_false2 6e68 e8c08000 ifetch 1 ,contr 6e69 c0ffee6b bne 0xff ,sa_judge_wholerange_false3 6e6a 20206eb8 branch sa_req_all sa_judge_wholerange_false3: 6e6b 18c08dfb increase -5 ,contr 6e6c 20206e5f branch sa_isnot_wholerange sa_judge_wholerange_false2: 6e6d 18c08dfc increase -4 ,contr 6e6e 20206e5f branch sa_isnot_wholerange sa_judge_wholerange_false1: 6e6f 18c08dfd increase -3 ,contr 6e70 20206e5f branch sa_isnot_wholerange sa_req_loop: 6e71 e8c08000 ifetch 1 ,contr 6e72 c004ee86 beq sdp_attribute_id ,sa_req_one_id 6e73 c0056e74 beq sdp_attribute_range ,sa_req_range sa_req_range: 6e74 e8c10000 ifetch 2 ,contr 6e75 e0a10000 istore 2 ,contw 6e76 18e08e01 increase 1 ,queue 6e77 1ff0a400 byteswap pdata ,regb 6e78 e8c10000 ifetch 2 ,contr 6e79 1ff0fe00 byteswap pdata ,pdata sa_req_range_id_increase: 6e7a 1a40a401 increase 1 ,regb 6e7b 9a467c00 isub regb ,null 6e7c 24216e83 nbranch sa_req_range_id_finish ,positive 6e7d 1fe22600 copy pdata ,regc 6e7e 1a50fe00 byteswap regb ,pdata 6e7f e0a10000 istore 2 ,contw 6e80 18e08e01 increase 1 ,queue 6e81 1a627e00 copy regc ,pdata 6e82 20206e7a branch sa_req_range_id_increase sa_req_range_id_finish: 6e83 196097fb increase -5 ,timeup 6e84 1a20a3fb increase -5 ,rega 6e85 20206e8b branch sa_req_check_next_id sa_req_one_id: 6e86 e8c10000 ifetch 2 ,contr 6e87 e0a10000 istore 2 ,contw 6e88 18e08e01 increase 1 ,queue 6e89 196097fd increase -3 ,timeup 6e8a 1a20a3fd increase -3 ,rega sa_req_check_next_id: 6e8b 24216fc4 nbranch sdp_invalid_request_syntax ,positive 6e8c 2422ee71 nbranch sa_req_loop ,zero 6e8d 196097ff increase -1 ,timeup 6e8e 2422efc4 nbranch sdp_invalid_request_syntax ,zero 6e8f 204052d0 call l2cap_get_sdp_tx_payload 6e90 18a08a0a increase 10 ,contw 6e91 da20052a arg mem_sdp_attrib_list ,rega sa_req_handle_attributelist_next: 6e92 18e27e00 copy queue ,pdata 6e93 203a6ea5 branch sa_req_handle_attributelist_end ,blank 6e94 ea210000 ifetch 2 ,rega 6e95 203a6ea5 branch sa_req_handle_attributelist_end ,blank 6e96 98002400 iforce regb 6e97 68020524 fetch 4 ,mem_sdp_record_handle 6e98 98000400 iforce temp 6e99 204070e7 call search_handle_attrib 6e9a 18c27e00 copy contr ,pdata 6e9b 203a6ea2 branch sa_req_handle_attributelist_notfound ,blank 6e9c 18c08dfd increase -3 ,contr 6e9d e8c18000 ifetch 3 ,contr 6e9e e0a18000 istore 3 ,contw 6e9f 2040705b call sdp_data_len 6ea0 98007200 iforce loopcnt 6ea1 20407f01 call memcpy sa_req_handle_attributelist_notfound: 6ea2 1a20a202 increase 2 ,rega 6ea3 18e08fff increase -1 ,queue 6ea4 20206e92 branch sa_req_handle_attributelist_next sa_req_handle_attributelist_end: 6ea5 da200005 arg sdp_attribute_res ,rega 6ea6 20406f84 call ssa_req_range_lastfreg_common 6ea7 68010275 fetch 2 ,mem_sdp_tx_pkt_length 6ea8 c005f043 beq 11 ,sa_empty_rsp 6ea9 20206f9a branch ssa_req_range_attrbutes_length_no_continue sdp_store_continue_common: 6eaa e8c08000 ifetch 1 ,contr 6eab c0006eae beq 0 ,sdp_store_continue_0byte 6eac c000eeb0 beq 1 ,sdp_store_continue_1byte 6ead c0016eb3 beq 2 ,sdp_store_continue_2byte sdp_store_continue_0byte: 6eae 196097ff increase -1 ,timeup 6eaf 20206eb6 branch sdp_store_continue_end sdp_store_continue_1byte: 6eb0 e8c08000 ifetch 1 ,contr 6eb1 196097fe increase -2 ,timeup 6eb2 20206eb6 branch sdp_store_continue_end sdp_store_continue_2byte: 6eb3 e8c10000 ifetch 2 ,contr 6eb4 1ff0fe00 byteswap pdata ,pdata 6eb5 196097fd increase -3 ,timeup sdp_store_continue_end: 6eb6 60010519 store 2 ,mem_sdp_continue_byte 6eb7 20600000 rtn sa_req_all: 6eb8 196097fb increase -5 ,timeup 6eb9 20406eaa call sdp_store_continue_common 6eba 2422efbe nbranch sdp_invalid_pdu_size ,zero 6ebb 680a0524 fetcht 4 ,mem_sdp_record_handle 6ebc 204070b1 call search_handle 6ebd 2422efbb nbranch sdp_invalid_service_record_handle ,zero 6ebe 18c22200 copy contr ,rega 6ebf 204052d0 call l2cap_get_sdp_tx_payload 6ec0 1a220c00 copy rega ,contr 6ec1 18a08a03 increase 3 ,contw 6ec2 18c21600 copy contr ,timeup 6ec3 20407062 call sdp_get_data 6ec4 1fe22200 copy pdata ,rega 6ec5 68010519 fetch 2 ,mem_sdp_continue_byte 6ec6 1fe22400 copy pdata ,regb 6ec7 1a227e00 copy rega ,pdata 6ec8 9a462400 isub regb ,regb 6ec9 68010520 fetch 2 ,mem_sdp_attribute_maxbyte 6eca 9a467c00 isub regb ,null 6ecb 24216ee7 nbranch sa_req_all_fragment_sdp ,positive 6ecc 78547c00 disable user 6ecd 68010519 fetch 2 ,mem_sdp_continue_byte 6ece 203a6eda branch sa_req_all_fisrt_fragment ,blank 6ecf 99608c00 iadd timeup ,contr 6ed0 1a40a403 increase 3 ,regb 6ed1 1a427200 copy regb ,loopcnt 6ed2 1f227e00 copy loopcnt ,pdata 6ed3 1fe0fe03 increase 3 ,pdata 6ed4 1ff0fe00 byteswap pdata ,pdata 6ed5 e0a10000 istore 2 ,contw 6ed6 1f227e00 copy loopcnt ,pdata 6ed7 1ff0fe00 byteswap pdata ,pdata 6ed8 e0a10000 istore 2 ,contw 6ed9 20206ef5 branch sa_req_all_answer_attributelist_full_loop sa_req_all_fisrt_fragment: 6eda 1a20f206 add rega ,6 ,loopcnt 6edb 20346ede branch sa_req_all_parlength_continue_byte ,user 6edc 1f30fe00 byteswap loopcnt ,pdata 6edd 20206ee1 branch sa_req_all_parlength_continue_byte_end sa_req_all_parlength_continue_byte: 6ede 1f227e00 copy loopcnt ,pdata 6edf 1fe0fe02 increase 2 ,pdata 6ee0 1ff0fe00 byteswap pdata ,pdata sa_req_all_parlength_continue_byte_end: 6ee1 e0a10000 istore 2 ,contw 6ee2 1f20f3fd increase -3 ,loopcnt 6ee3 1f30fe00 byteswap loopcnt ,pdata 6ee4 e0a10000 istore 2 ,contw 6ee5 19620c00 copy timeup ,contr 6ee6 20206ef5 branch sa_req_all_answer_attributelist_full_loop sa_req_all_fragment_sdp: 6ee7 78347c00 enable user 6ee8 68010520 fetch 2 ,mem_sdp_attribute_maxbyte 6ee9 1fe22200 copy pdata ,rega 6eea 1a227200 copy rega ,loopcnt 6eeb 68010519 fetch 2 ,mem_sdp_continue_byte 6eec 203a6eda branch sa_req_all_fisrt_fragment ,blank 6eed 99608c00 iadd timeup ,contr 6eee 1a227e00 copy rega ,pdata 6eef 1fe0fe05 increase 5 ,pdata 6ef0 1ff0fe00 byteswap pdata ,pdata 6ef1 e0a10000 istore 2 ,contw 6ef2 1a227e00 copy rega ,pdata 6ef3 1ff0fe00 byteswap pdata ,pdata 6ef4 e0a10000 istore 2 ,contw sa_req_all_answer_attributelist_full_loop: 6ef5 20407f01 call memcpy 6ef6 24346efe nbranch sa_req_all_last_frag_continue ,user 6ef7 18007e02 force 2 ,pdata 6ef8 e0a08000 istore 1 ,contw 6ef9 18c27e00 copy contr ,pdata 6efa 99667e00 isub timeup ,pdata 6efb 1ff0fe00 byteswap pdata ,pdata 6efc e0a10000 istore 2 ,contw 6efd 20206f00 branch sa_req_all_frag_end sa_req_all_last_frag_continue: 6efe 18007e00 force 0 ,pdata 6eff e0a08000 istore 1 ,contw sa_req_all_frag_end: 6f00 da200005 arg sdp_attribute_res ,rega 6f01 20206fb0 branch ssa_req_range_common sdp_process_ssa_req: 6f02 4768c03a bpatchx patch3a_1 ,mem_patch3a 6f03 20406fd0 call ask_serviceclassid 6f04 2841feff compare 0xff ,temp ,0xff 6f05 2020efc4 branch sdp_invalid_request_syntax ,true 6f06 20406f2e call sdp_store_maxbyte 6f07 60010520 store 2 ,mem_sdp_attribute_maxbyte 6f08 196097fe increase -2 ,timeup 6f09 20407028 call dataelementtype6 6f0a d8a0052a arg mem_sdp_attrib_list ,contw 6f0b 18000e00 force 0 ,queue ssa_req_loop: 6f0c e8c08000 ifetch 1 ,contr 6f0d c0056f36 beq sdp_attribute_range ,ssa_req_range 6f0e e8c10000 ifetch 2 ,contr 6f0f e0a10000 istore 2 ,contw 6f10 18e08e01 increase 1 ,queue 6f11 196097fd increase -3 ,timeup 6f12 1a20a3fd increase -3 ,rega 6f13 24216fc4 nbranch sdp_invalid_request_syntax ,positive 6f14 2422ef0c nbranch ssa_req_loop ,zero 6f15 196097ff increase -1 ,timeup 6f16 2422efc4 nbranch sdp_invalid_request_syntax ,zero 6f17 204052d0 call l2cap_get_sdp_tx_payload 6f18 18a08a0d increase 13 ,contw 6f19 68010511 fetch 2 ,mem_sdp_uuid_search_ptr 6f1a 98002600 iforce regc 6f1b da20052a arg mem_sdp_attrib_list ,rega ssa_req_attributelist_next: 6f1c ea210000 ifetch 2 ,rega 6f1d 203a6f29 branch ssa_req_attributelist_end ,blank 6f1e 98002400 iforce regb 6f1f 204070c6 call search_attrib 6f20 203a6f27 branch ssa_req_attributelist_notfound ,blank 6f21 18c08dfd increase -3 ,contr 6f22 e8c18000 ifetch 3 ,contr 6f23 e0a18000 istore 3 ,contw 6f24 2040705b call sdp_data_len 6f25 98007200 iforce loopcnt 6f26 20407f01 call memcpy ssa_req_attributelist_notfound: 6f27 1a20a202 increase 2 ,rega 6f28 20206f1c branch ssa_req_attributelist_next ssa_req_attributelist_end: 6f29 20406f83 call ssa_req_range_lastfreg 6f2a 68010275 fetch 2 ,mem_sdp_tx_pkt_length 6f2b c0077046 beq 14 ,ssa_empty_rsp 6f2c 20406f9a call ssa_req_range_attrbutes_length_no_continue 6f2d 20206f9a branch ssa_req_range_attrbutes_length_no_continue sdp_store_maxbyte: 6f2e e8c10000 ifetch 2 ,contr 6f2f 1ff0fe00 byteswap pdata ,pdata 6f30 1fe0fffd increase -3 ,pdata 6f31 d84000c8 arg 200 ,temp 6f32 98467c00 isub temp ,null 6f33 24610000 nrtn positive 6f34 580000c8 setarg 200 6f35 20600000 rtn ssa_req_range: 6f36 18c08c04 increase 4 ,contr 6f37 196097fb increase -5 ,timeup 6f38 1a20a3fb increase -5 ,rega 6f39 2422efc4 nbranch sdp_invalid_request_syntax ,zero 6f3a 20406eaa call sdp_store_continue_common 6f3b 2422efbe nbranch sdp_invalid_pdu_size ,zero 6f3c d9600511 arg mem_sdp_uuid_search_ptr ,timeup 6f3d 20407082 call search_all_uuid 6f3e 18e27e00 deposit queue 6f3f 203a7046 branch ssa_empty_rsp ,blank 6f40 6000854e store 1 ,mem_handle_humber 6f41 1a427e00 copy regb ,pdata 6f42 6001054c store 2 ,mem_sdp_all_length 6f43 d8e00000 arg 0 ,queue 6f44 da200000 arg 0 ,rega 6f45 204052d0 call l2cap_get_sdp_tx_payload 6f46 18a08a0a increase 10 ,contw ssa_req_range_find_handle: 6f47 20406f6c call ssa_req_range_get_length 6f48 24342a8c nbranch assert ,user 6f49 18c21600 copy contr ,timeup 6f4a 1fe22600 copy pdata ,regc 6f4b 9a20a200 iadd rega ,rega 6f4c 68010519 fetch 2 ,mem_sdp_continue_byte 6f4d 1fe22400 copy pdata ,regb 6f4e 203a6f75 branch ssa_req_range_first_freg ,blank ssa_req_range_later_freg_with_continue: 6f4f 1a227e00 copy rega ,pdata 6f50 9a462400 isub regb ,regb 6f51 2022ef67 branch ssa_req_range_next_handle ,zero 6f52 24216f67 nbranch ssa_req_range_next_handle ,positive 6f53 68010520 fetch 2 ,mem_sdp_attribute_maxbyte 6f54 9a467c00 isub regb ,null 6f55 2022ef5e branch ssa_req_range_maxbyte_with_continue ,zero 6f56 24216f5e nbranch ssa_req_range_maxbyte_with_continue ,positive ssa_req_range_send_not_maxbyte: 6f57 1a427200 copy regb ,loopcnt 6f58 20406f61 call ssa_req_range_maxbyte_with_continue_cpy 6f59 6800854e fetch 1 ,mem_handle_humber 6f5a 18e08e01 increase 1 ,queue 6f5b 98e67c00 isub queue ,null 6f5c 2022ef83 branch ssa_req_range_lastfreg ,zero 6f5d 20206fa0 branch ssa_req_range_freg_with_continue ssa_req_range_maxbyte_with_continue: 6f5e 1fe27200 copy pdata ,loopcnt 6f5f 20406f61 call ssa_req_range_maxbyte_with_continue_cpy 6f60 20206fa0 branch ssa_req_range_freg_with_continue ssa_req_range_maxbyte_with_continue_cpy: 6f61 18a08bfd increase -3 ,contw 6f62 1f220400 copy loopcnt ,temp 6f63 1a627e00 copy regc ,pdata 6f64 9a467e00 isub regb ,pdata 6f65 99608c00 iadd timeup ,contr 6f66 20207f01 branch memcpy ssa_req_range_next_handle: 6f67 6800854e fetch 1 ,mem_handle_humber 6f68 18e08e01 increase 1 ,queue 6f69 98e67c00 isub queue ,null 6f6a 20628000 rtn zero 6f6b 20206f47 branch ssa_req_range_find_handle ssa_req_range_get_length: 6f6c 20407fe9 call disable_user 6f6d d8c0052a arg mem_sdp_handle_list ,contr 6f6e 18ebfe00 lshift2 queue ,pdata 6f6f 98c08c00 iadd contr ,contr 6f70 e8ca0000 ifetcht 4 ,contr 6f71 204070b1 call search_handle 6f72 24628000 nrtn zero 6f73 2040705b call sdp_data_len 6f74 20207fe7 branch enable_user ssa_req_range_first_freg: 6f75 68010520 fetch 2 ,mem_sdp_attribute_maxbyte 6f76 9a267c00 isub rega ,null 6f77 24216f8f nbranch ssa_req_range_firstfreg_maxbyte_with_continue ,positive 6f78 1a227200 copy rega ,loopcnt 6f79 1f220400 copy loopcnt ,temp 6f7a 19620c00 copy timeup ,contr 6f7b 20407f01 call memcpy 6f7c 6801054c fetch 2 ,mem_sdp_all_length 6f7d 9a267c00 isub rega ,null 6f7e 2022ef81 branch ssa_req_range_freg_no_continue ,zero ssa_req_range_firstfreg_not_maxbyte_with_continue: 6f7f 20406fa0 call ssa_req_range_freg_with_continue 6f80 20206f94 branch ssa_req_range_attrbutes_length ssa_req_range_freg_no_continue: 6f81 20406f83 call ssa_req_range_lastfreg 6f82 20206f94 branch ssa_req_range_attrbutes_length ssa_req_range_lastfreg: 6f83 da200007 arg sdp_searchattrib_res ,rega ssa_req_range_lastfreg_common: 6f84 18007e00 force 0 ,pdata 6f85 e0a08000 istore 1 ,contw 6f86 20406fb0 call ssa_req_range_common 6f87 68090275 fetcht 2 ,mem_sdp_tx_pkt_length 6f88 184085fb increase -5 ,temp 6f89 1850fe00 byteswap temp ,pdata 6f8a e0a10000 istore 2 ,contw 6f8b 184085fd increase -3 ,temp 6f8c 1850fe00 byteswap temp ,pdata 6f8d e0a10000 istore 2 ,contw 6f8e 20600000 rtn ssa_req_range_firstfreg_maxbyte_with_continue: 6f8f 1fe27200 copy pdata ,loopcnt 6f90 1f220400 copy loopcnt ,temp 6f91 19620c00 copy timeup ,contr 6f92 20407f01 call memcpy 6f93 20406fa0 call ssa_req_range_freg_with_continue ssa_req_range_attrbutes_length: 6f94 58000036 setarg 0x36 6f95 e0a08000 istore 1 ,contw 6f96 6801054c fetch 2 ,mem_sdp_all_length 6f97 1ff0fe00 byteswap pdata ,pdata 6f98 e0a10000 istore 2 ,contw 6f99 20600000 rtn ssa_req_range_attrbutes_length_no_continue: 6f9a 58000036 setarg 0x36 6f9b e0a08000 istore 1 ,contw 6f9c 184085fd increase -3 ,temp 6f9d 1850fe00 byteswap temp ,pdata 6f9e e0a10000 istore 2 ,contw 6f9f 20600000 rtn ssa_req_range_freg_with_continue: 6fa0 da200007 arg sdp_searchattrib_res ,rega 6fa1 58000002 setarg 2 6fa2 e0a08000 istore 1 ,contw 6fa3 68010519 fetch 2 ,mem_sdp_continue_byte 6fa4 98408400 iadd temp ,temp 6fa5 1850fe00 byteswap temp ,pdata 6fa6 e0a10000 istore 2 ,contw 6fa7 20406fb0 call ssa_req_range_common 6fa8 68090275 fetcht 2 ,mem_sdp_tx_pkt_length 6fa9 184085fb increase -5 ,temp 6faa 1850fe00 byteswap temp ,pdata 6fab e0a10000 istore 2 ,contw 6fac 184085fb increase -5 ,temp 6fad 1850fe00 byteswap temp ,pdata 6fae e0a10000 istore 2 ,contw 6faf 20600000 rtn ssa_req_range_common: 6fb0 68010273 fetch 2 ,mem_sdp_tx_payload_ptr 6fb1 98a67e00 isub contw ,pdata 6fb2 1fe67e00 sub pdata ,0 ,pdata 6fb3 60010275 store 2 ,mem_sdp_tx_pkt_length 6fb4 204052d0 call l2cap_get_sdp_tx_payload 6fb5 1a227e00 copy rega ,pdata 6fb6 e0a08000 istore 1 ,contw 6fb7 6801051c fetch 2 ,mem_sdp_transactionid 6fb8 e0a10000 istore 2 ,contw 6fb9 20600000 rtn sdp_process_ssa_res: sdp_process_ss_res: sdp_process_sa_res: sdp_process_error_res: 6fba 20600000 rtn sdp_invalid_service_record_handle: 6fbb 58000200 setarg 0x0200 6fbc 6001054a store 2 ,mem_sdp_error_code 6fbd 20206fc6 branch sdp_error_response sdp_invalid_pdu_size: 6fbe 58000400 setarg 0x0400 6fbf 6001054a store 2 ,mem_sdp_error_code 6fc0 20206fc6 branch sdp_error_response sdp_insufficient_resource: 6fc1 58000600 setarg 0x0600 6fc2 6001054a store 2 ,mem_sdp_error_code 6fc3 20206fc6 branch sdp_error_response sdp_invalid_request_syntax: 6fc4 58000300 setarg 0x0300 6fc5 6001054a store 2 ,mem_sdp_error_code sdp_error_response: 6fc6 204052d0 call l2cap_get_sdp_tx_payload 6fc7 e0a08000 istore 1 ,contw 6fc8 6801051c fetch 2 ,mem_sdp_transactionid 6fc9 e0a10000 istore 2 ,contw 6fca 58000200 setarg 0x0200 6fcb e0a10000 istore 2 ,contw 6fcc 6801054a fetch 2 ,mem_sdp_error_code 6fcd e0a10000 istore 2 ,contw 6fce 70027507 jam 7 ,mem_sdp_tx_pkt_length 6fcf 20600000 rtn ask_serviceclassid: 6fd0 da400000 arg 0 ,regb 6fd1 18000400 force 0 ,temp 6fd2 d8a00511 arg mem_sdp_uuid_search_ptr ,contw 6fd3 20407028 call dataelementtype6 6fd4 2022f026 branch asksrv_error ,zero classidloop: 6fd5 1a40a401 increase 1 ,regb 6fd6 e8c08000 ifetch 1 ,contr 6fd7 1a20a3ff increase -1 ,rega 6fd8 196097ff increase -1 ,timeup 6fd9 2fe1f018 compare 0x18 ,pdata ,0xf8 6fda 2420f026 nbranch asksrv_error ,true 6fdb 2fe00e04 compare 0x04 ,pdata ,0x07 6fdc 2420eff3 nbranch cmp032 ,true 6fdd 18000401 force 1 ,temp skip2bytes: 6fde e8c08000 ifetch 1 ,contr 6fdf 1a20a3ff increase -1 ,rega 6fe0 196097ff increase -1 ,timeup 6fe1 c0806fe7 bne 0x00 ,frstbwrong 6fe2 e8c08000 ifetch 1 ,contr 6fe3 1a20a3ff increase -1 ,rega 6fe4 196097ff increase -1 ,timeup 6fe5 c0006ff8 beq 0x00 ,cmpuuid 6fe6 20206fea branch scndbwrong frstbwrong: 6fe7 18c08c01 increase 1 ,contr 6fe8 1a20a3ff increase -1 ,rega 6fe9 196097ff increase -1 ,timeup scndbwrong: 6fea 18c08c02 increase 2 ,contr 6feb 1a20a3fe increase -2 ,rega 6fec 196097fe increase -2 ,timeup 6fed 2841fe00 compare 0x00 ,temp ,0xff 6fee 2020f020 branch loopornot ,true 6fef 18c08c0c increase 12 ,contr 6ff0 1a20a3f4 increase -12 ,rega 6ff1 196097f4 increase -12 ,timeup 6ff2 20207020 branch loopornot cmp032: 6ff3 2fe00e02 compare 0x02 ,pdata ,0x07 6ff4 2420eff6 nbranch cmp016 ,true 6ff5 20206fde branch skip2bytes cmp016: 6ff6 2fe00e01 compare 0x01 ,pdata ,0x07 6ff7 2420f026 nbranch asksrv_error ,true cmpuuid: 6ff8 1a20a3fe increase -2 ,rega 6ff9 196097fe increase -2 ,timeup 6ffa e8c10000 ifetch 2 ,contr 6ffb 1a467c04 sub regb ,4 ,null 6ffc 2022effe branch uuidsize ,zero 6ffd e0a10000 istore 2 ,contw uuidsize: 6ffe 2841fe00 compare 0x00 ,temp ,0xff 6fff 2020f020 branch loopornot ,true 7000 18c20400 copy contr ,temp 7001 e8c08000 ifetch 1 ,contr 7002 c0807019 bne 0x00 ,wrong12b 7003 e8c08000 ifetch 1 ,contr 7004 c0807019 bne 0x00 ,wrong12b 7005 e8c08000 ifetch 1 ,contr 7006 c0887019 bne 0x10 ,wrong12b 7007 e8c08000 ifetch 1 ,contr 7008 c0807019 bne 0x00 ,wrong12b 7009 e8c08000 ifetch 1 ,contr 700a c0c07019 bne 0x80 ,wrong12b 700b e8c08000 ifetch 1 ,contr 700c c0807019 bne 0x00 ,wrong12b 700d e8c08000 ifetch 1 ,contr 700e c0807019 bne 0x00 ,wrong12b 700f e8c08000 ifetch 1 ,contr 7010 c0c07019 bne 0x80 ,wrong12b 7011 e8c08000 ifetch 1 ,contr 7012 c0aff019 bne 0x5f ,wrong12b 7013 e8c08000 ifetch 1 ,contr 7014 c0cdf019 bne 0x9b ,wrong12b 7015 e8c08000 ifetch 1 ,contr 7016 c09a7019 bne 0x34 ,wrong12b 7017 e8c08000 ifetch 1 ,contr 7018 c07df01e beq 0xfb ,chck12dn wrong12b: 7019 18420c00 copy temp ,contr wrong12b1: 701a 18c08c0c increase 12 ,contr 701b 18000e00 force 0x00 ,queue 701c 18000400 force 0x00 ,temp 701d 2020701e branch chck12dn chck12dn: 701e 196097f4 increase -12 ,timeup 701f 1a20a3f4 increase -12 ,rega loopornot: 7020 18000400 force 0x00 ,temp 7021 2a21fe00 compare 0x00 ,rega ,0xff 7022 2420efd5 nbranch classidloop ,true 7023 18007e00 force 0 ,pdata 7024 e0a10000 istore 2 ,contw 7025 20600000 rtn asksrv_error: 7026 d84000ff arg 0xff ,temp 7027 20600000 rtn dataelementtype6: 7028 476a403a bpatchx patch3a_4 ,mem_patch3a 7029 e8c08000 ifetch 1 ,contr 702a 196097ff increase -1 ,timeup 702b 2fe1f030 compare 0x30 ,pdata ,0xf8 702c 2420f03e nbranch dsize_error ,true 702d 2fe00e07 compare 0x07 ,pdata ,0x07 702e 2020f037 branch dsize32 ,true 702f 2fe00e06 compare 0x06 ,pdata ,0x07 7030 2020f039 branch dsize16 ,true 7031 2fe00e05 compare 0x05 ,pdata ,0x07 7032 2420f03e nbranch dsize_error ,true 7033 e8c08000 ifetch 1 ,contr 7034 1fe22200 copy pdata ,rega 7035 196097ff increase -1 ,timeup 7036 2020703c branch dsize dsize32: 7037 18c08c02 increase 2 ,contr 7038 196097fe increase -2 ,timeup dsize16: 7039 e8c10000 ifetch 2 ,contr 703a 1ff0a200 byteswap pdata ,rega 703b 196097fe increase -2 ,timeup dsize: 703c 18007e01 force 0x01 ,pdata 703d 20600000 rtn dsize_error: 703e 18007e00 force 0x00 ,pdata 703f 20600000 rtn ss_empty_rsp: 7040 58000003 setarg sdp_search_res 7041 6000851b store 1 ,mem_sdp_pduid 7042 20207048 branch empty_response sa_empty_rsp: 7043 58000005 setarg sdp_attribute_res 7044 6000851b store 1 ,mem_sdp_pduid 7045 20207048 branch empty_response ssa_empty_rsp: 7046 58000007 setarg sdp_searchattrib_res 7047 6000851b store 1 ,mem_sdp_pduid empty_response: 7048 204052d0 call l2cap_get_sdp_tx_payload 7049 6800851b fetch 1 ,mem_sdp_pduid 704a 1fe22400 copy pdata ,regb 704b e0a08000 istore 1 ,contw 704c 6801051c fetch 2 ,mem_sdp_transactionid 704d e0a10000 istore 2 ,contw 704e 58000500 setarg 0x0500 704f e0a10000 istore 2 ,contw 7050 2a41fe05 compare sdp_attribute_res ,regb ,0xff 7051 2020f057 branch fullsearch ,true 7052 2a41fe07 compare sdp_searchattrib_res ,regb ,0xff 7053 2020f057 branch fullsearch ,true 7054 58000000 setarg 0x000000 7055 e0a28000 istore 5 ,contw 7056 20207059 branch outempty fullsearch: 7057 58350200 setarg 0x350200 7058 e0a28000 istore 5 ,contw outempty: 7059 7002750a jam 10 ,mem_sdp_tx_pkt_length 705a 20600000 rtn sdp_data_len: 705b 20407ea2 call store_contw 705c 20407ea5 call store_contr 705d 20407062 call sdp_get_data 705e 20407e9c call get_contw 705f 20407e9f call get_contr 7060 18427e00 copy temp ,pdata 7061 20600000 rtn sdp_get_data: 7062 e8c08000 ifetch 1 ,contr 7063 1fe17207 and pdata ,0x7 ,loopcnt 7064 1fe97e00 rshift3 pdata ,pdata 7065 c080706c bne 0 ,sdp_get_data_type_not0 sdp_get_data_type0: 7066 18007e01 force 1 ,pdata 7067 18000401 force 1 ,temp 7068 20600000 rtn sdp_get_data_type_not0_sizeindex01234: 7069 20407e76 call left_shift_n 706a 1fe08401 add pdata ,1 ,temp 706b 20600000 rtn sdp_get_data_type_not0: 706c 1f227e00 deposit loopcnt 706d 1fe67c04 sub pdata ,4 ,null 706e 20217069 branch sdp_get_data_type_not0_sizeindex01234 ,positive 706f c002f073 beq 5 ,sdp_get_data_type_not0_sizeindex5 7070 c0037076 beq 6 ,sdp_get_data_type_not0_sizeindex6 7071 c003f07a beq 7 ,sdp_get_data_type_not0_sizeindex7 7072 20600000 rtn sdp_get_data_type_not0_sizeindex5: 7073 e8c08000 ifetch 1 ,contr 7074 1fe08402 add pdata ,2 ,temp 7075 20600000 rtn sdp_get_data_type_not0_sizeindex6: 7076 e8c10000 ifetch 2 ,contr 7077 1ff0fe00 byteswap pdata ,pdata 7078 1fe08403 add pdata ,3 ,temp 7079 20600000 rtn sdp_get_data_type_not0_sizeindex7: 707a e8c10000 ifetch 2 ,contr 707b 1ff0fe00 byteswap pdata ,pdata 707c e8c90000 ifetcht 2 ,contr 707d 18508400 byteswap temp ,temp 707e 18500400 lshift16 temp ,temp 707f 9840fe00 iadd temp ,pdata 7080 1fe08405 add pdata ,5 ,temp 7081 20600000 rtn search_all_uuid: 7082 476ac03a bpatchx patch3a_5 ,mem_patch3a 7083 18000e00 force 0 ,queue 7084 da400000 arg 0 ,regb 7085 d8a0052a arg mem_sdp_handle_list ,contw search_all_uuid_llop: 7086 e9610000 ifetch 2 ,timeup 7087 207a0000 rtn blank 7088 2040708d call search_uuid 7089 18e27e00 copy queue ,pdata 708a c1038000 rtneq sdp_max_handle_number 708b 19609602 increase 2 ,timeup 708c 20207086 branch search_all_uuid_llop search_uuid: 708d 98002600 iforce regc 708e 68014575 fetch 2 ,mem_ui_uuid_table 708f 98000c00 iforce contr search_uuid_next: 7090 18e27e00 copy queue ,pdata 7091 c1038000 rtneq sdp_max_handle_number 7092 78547c00 disable user 7093 e8c08000 ifetch 1 ,contr 7094 207a0000 rtn blank 7095 98007200 iforce loopcnt search_uuid_loop: 7096 e8c10000 ifetch 2 ,contr 7097 9a667c00 isub regc ,null 7098 2422f09a nbranch search_uuid_not_found ,zero 7099 78347c00 enable user search_uuid_not_found: 709a c2007096 loop search_uuid_loop 709b e8ca0000 ifetcht 4 ,contr 709c 18c22200 copy contr ,rega 709d 243470ad nbranch search_uuid_nomatch ,user 709e d8c0052a arg mem_sdp_handle_list ,contr 709f df200007 arg sdp_max_handle_number ,loopcnt search_uuid_check_same_handle: 70a0 e8c20000 ifetch 4 ,contr 70a1 203a70a6 branch search_uuid_store_handle ,blank 70a2 98467c00 isub temp ,null 70a3 2022f0ad branch search_uuid_nomatch ,zero 70a4 c20070a0 loop search_uuid_check_same_handle 70a5 20600000 rtn search_uuid_store_handle: 70a6 e0aa0000 istoret 4 ,contw 70a7 18e08e01 increase 1 ,queue 70a8 1a220c00 copy rega ,contr 70a9 2040705b call sdp_data_len 70aa 9a40a400 iadd regb ,regb 70ab 98c08c00 iadd contr ,contr 70ac 20207090 branch search_uuid_next search_uuid_nomatch: 70ad 1a220c00 copy rega ,contr 70ae 20407062 call sdp_get_data 70af 98c08c00 iadd contr ,contr 70b0 20207090 branch search_uuid_next search_handle: 70b1 476b403a bpatchx patch3a_6 ,mem_patch3a 70b2 68014575 fetch 2 ,mem_ui_uuid_table 70b3 98000c00 iforce contr search_handle_loop: 70b4 e8c08000 ifetch 1 ,contr 70b5 203a7fe3 branch disable_zero ,blank 70b6 1fe3fe00 lshift pdata ,pdata 70b7 98c08c00 iadd contr ,contr 70b8 e8c20000 ifetch 4 ,contr 70b9 98467c00 isub temp ,null 70ba 20628000 rtn zero 70bb 18a27e00 deposit contw 70bc 60010abb store 2 ,mem_contw 70bd 600c0aa2 storet 8 ,mem_temp 70be 20407062 call sdp_get_data 70bf 98c08c00 iadd contr ,contr 70c0 18c27e00 copy contr ,pdata 70c1 68090abb fetcht 2 ,mem_contw 70c2 18420a00 copy temp ,contw 70c3 680c0aa2 fetcht 8 ,mem_temp 70c4 1fe20c00 copy pdata ,contr 70c5 202070b4 branch search_handle_loop search_attrib: 70c6 476bc03a bpatchx patch3a_7 ,mem_patch3a 70c7 68014575 fetch 2 ,mem_ui_uuid_table 70c8 98000c00 iforce contr search_attrib_next: 70c9 e8c08000 ifetch 1 ,contr 70ca 203a70e4 branch search_attrib_end ,blank 70cb 98007200 iforce loopcnt search_attrib_loop: 70cc e8c10000 ifetch 2 ,contr 70cd 9a667c00 isub regc ,null 70ce 2022f0d4 branch search_attrib_found_uuid ,zero 70cf c20070cc loop search_attrib_loop 70d0 18c08c04 increase 4 ,contr 70d1 20407062 call sdp_get_data 70d2 98c08c00 iadd contr ,contr 70d3 202070c9 branch search_attrib_next search_attrib_found_uuid: 70d4 1f20f3ff increase -1 ,loopcnt 70d5 1f23fe00 lshift loopcnt ,pdata 70d6 98c08c00 iadd contr ,contr 70d7 18c08c04 increase 4 ,contr 70d8 20407062 call sdp_get_data 70d9 98c09600 iadd contr ,timeup search_attrib_loop_attribs: 70da 18c08c01 increase 1 ,contr 70db e8c10000 ifetch 2 ,contr 70dc 9a467c00 isub regb ,null 70dd 2022ffef branch disable_blank ,zero 70de 2040705b call sdp_data_len 70df 98c08c00 iadd contr ,contr 70e0 19627e00 deposit timeup 70e1 98c67c00 isub contr ,null 70e2 2022f0e4 branch search_attrib_end ,zero 70e3 202070da branch search_attrib_loop_attribs search_attrib_end: 70e4 18000c00 force 0 ,contr 70e5 18007e00 force 0 ,pdata 70e6 20600000 rtn search_handle_attrib: 70e7 476c403b bpatchx patch3b_0 ,mem_patch3b 70e8 68014575 fetch 2 ,mem_ui_uuid_table 70e9 98000c00 iforce contr search_handle_attrib_next: 70ea e8c08000 ifetch 1 ,contr 70eb 203a7100 branch search_handle_attrib_end ,blank 70ec 1fe3fe00 lshift pdata ,pdata 70ed 98c08c00 iadd contr ,contr 70ee e8c20000 ifetch 4 ,contr 70ef 98467c00 isub temp ,null 70f0 2022f0f4 branch search_handl_attrib_found_handle ,zero 70f1 20407062 call sdp_get_data 70f2 98c08c00 iadd contr ,contr 70f3 202070ea branch search_handle_attrib_next search_handl_attrib_found_handle: 70f4 20407062 call sdp_get_data 70f5 98c09600 iadd contr ,timeup search_handle_attrib_loop_attribs: 70f6 18c08c01 increase 1 ,contr 70f7 e8c10000 ifetch 2 ,contr 70f8 9a467c00 isub regb ,null 70f9 20628000 rtn zero 70fa 2040705b call sdp_data_len 70fb 98c08c00 iadd contr ,contr 70fc 19627e00 deposit timeup 70fd 98c67c00 isub contr ,null 70fe 2022f100 branch search_handle_attrib_end ,zero 70ff 202070f6 branch search_handle_attrib_loop_attribs search_handle_attrib_end: 7100 18000c00 force 0 ,contr 7101 20600000 rtn search_rfcomm_cn: 7102 da400400 arg 0x0400 ,regb 7103 204070f4 call search_handl_attrib_found_handle 7104 da400300 arg 0x0300 ,regb 7105 2040710d call search_uuid_in_data 7106 24740000 nrtn user 7107 1a267c03 sub rega ,3 ,null 7108 20217fe9 branch disable_user ,positive 7109 e8c08000 ifetch 1 ,contr 710a c0847fe9 bne 0x08 ,disable_user 710b e8c08000 ifetch 1 ,contr 710c 20600000 rtn search_uuid_in_data: 710d 476cc03b bpatchx patch3b_1 ,mem_patch3b 710e 20407062 call sdp_get_data 710f 1fe22200 copy pdata ,rega search_uuid_in_data_loop: 7110 e8c08000 ifetch 1 ,contr 7111 1fe17207 and pdata ,0x7 ,loopcnt 7112 1fe97e00 rshift3 pdata ,pdata 7113 1fe67c03 sub pdata ,3 ,null 7114 2022f129 branch search_uuid_in_data_found_uuid ,zero 7115 1f227e00 copy loopcnt ,pdata 7116 c002f120 beq 5 ,search_uuid_in_data_found_element_index5 7117 c0037123 beq 6 ,search_uuid_in_data_found_element_index6 7118 c003f126 beq 7 ,search_uuid_in_data_found_element_index7 7119 18c08dff increase -1 ,contr 711a 20407062 call sdp_get_data 711b 98c08c00 iadd contr ,contr 711c 1a227e00 copy rega ,pdata 711d 98462200 isub temp ,rega 711e 2022ffe9 branch disable_user ,zero 711f 20207110 branch search_uuid_in_data_loop search_uuid_in_data_found_element_index5: 7120 1a20a3fe increase -2 ,rega 7121 18c08c01 increase 1 ,contr 7122 20207110 branch search_uuid_in_data_loop search_uuid_in_data_found_element_index6: 7123 1a20a3fd increase -3 ,rega 7124 18c08c02 increase 2 ,contr 7125 20207110 branch search_uuid_in_data_loop search_uuid_in_data_found_element_index7: 7126 1a20a3fb increase -5 ,rega 7127 18c08c04 increase 4 ,contr 7128 20207110 branch search_uuid_in_data_loop search_uuid_in_data_found_uuid: 7129 1a20a3ff increase -1 ,rega 712a 1f227e00 copy loopcnt ,pdata 712b c000f132 beq 1 ,search_uuid_in_data_type_uuid_16 712c c0017130 beq 2 ,search_uuid_in_data_type_uuid_32 712d c002712f beq 4 ,search_uuid_in_data_type_uuid_128 712e 20207fe9 branch disable_user search_uuid_in_data_type_uuid_128: 712f 1a20a3f4 increase -12 ,rega search_uuid_in_data_type_uuid_32: 7130 e8c10000 ifetch 2 ,contr 7131 1a20a3fe increase -2 ,rega search_uuid_in_data_type_uuid_16: 7132 e8c10000 ifetch 2 ,contr 7133 9a467c00 isub regb ,null 7134 2022ffe7 branch enable_user ,zero 7135 1a20a3fe increase -2 ,rega 7136 2022ffe9 branch disable_user ,zero 7137 20207110 branch search_uuid_in_data_loop sdp_send_spp_request: 7138 204052d0 call l2cap_get_sdp_tx_payload 7139 1fe20a00 copy pdata ,contw 713a 58000006 setarg 6 713b e0a08000 istore 1 ,contw 713c 5800006e setarg sdp_tid_spp 713d e0a10000 istore 2 ,contw 713e 58000f00 setarg 0x0f00 713f e0a10000 istore 2 ,contw 7140 581a0535 setarg 0x1a0535 7141 e0a18000 istore 3 ,contw 7142 58000111 setarg 0x0111 7143 1ff07e00 lshift16 pdata ,pdata 7144 e0a20000 istore 4 ,contw 7145 58002600 setarg 0x2600 7146 e0a10000 istore 2 ,contw 7147 58000335 setarg 0x0335 7148 e0a10000 istore 2 ,contw 7149 58000009 setarg 0x0009 714a e0a10000 istore 2 ,contw 714b 58000004 setarg 0x0004 714c e0a10000 istore 2 ,contw 714d 70027514 jam 0x14 ,mem_sdp_tx_pkt_length 714e 20600000 rtn function_g2: 714f 476d403b bpatchx patch3b_2 ,mem_patch3b 7150 7005e550 jam 80 ,mem_aes_cmac_data_length 7151 d8a005e6 arg memdat ,contw 7152 d8c0443a arg mem_le_srand ,contr 7153 20407ebf call memcpy16 7154 d8c045d2 arg mem_le_pubkey_local_x_256 ,contr 7155 20407ebd call memcpy32 7156 d8c009be arg mem_le_pubkey_remote_x_256 ,contr 7157 20407ebd call memcpy32 7158 2040720a call inverse_memdat 7159 d8c0042f arg mem_le_mrand ,contr 715a 20407205 call store_inverse_k 715b 204071d0 call function_aes_cmac 715c d8a00af2 arg mem_aes_cmac_temp ,contw 715d 20407201 call load_inverse_result 715e 580f4240 setarg 1000000 715f 1fe22200 copy pdata ,rega 7160 68020af2 fetch 4 ,mem_aes_cmac_temp 7161 9a26fc00 idiv rega 7162 20407f86 call wait_div_end 7163 18077e00 remainder pdata 7164 600209ba store 4 ,mem_gkey 7165 20600000 rtn function_f6_eb: 7166 7005e541 jam 65 ,mem_aes_cmac_data_length 7167 d8a005e6 arg memdat ,contw 7168 204071b5 call store_addr_common_a 7169 204071b0 call store_addr_common_b 716a 6801c454 fetch 3 ,mem_le_pres + 1 716b e0a18000 istore 3 ,contw 716c 20407176 call get_r 716d d8c0042f arg mem_le_mrand ,contr 716e 20407ebf call memcpy16 716f d8c0443a arg mem_le_srand ,contr 7170 20407ebf call memcpy16 7171 2040720a call inverse_memdat 7172 d8c00b12 arg mem_le_mackey ,contr 7173 d8a00ac2 arg mem_aes_cmac_k ,contw 7174 20407ebf call memcpy16 7175 202071d0 branch function_aes_cmac get_r: 7176 680244c7 fetch 4 ,mem_le_tk 7177 e0a20000 istore 4 ,contw 7178 20407ecd call memset0_4 7179 20207eca branch memset0_8 function_f6_ea: 717a 476dc03b bpatchx patch3b_3 ,mem_patch3b 717b 7005e541 jam 65 ,mem_aes_cmac_data_length 717c d8a005e6 arg memdat ,contw 717d 204071b0 call store_addr_common_b 717e 204071b5 call store_addr_common_a 717f 6801c44d fetch 3 ,mem_le_preq + 1 7180 e0a18000 istore 3 ,contw 7181 20407176 call get_r 7182 d8c0443a arg mem_le_srand ,contr 7183 20407ebf call memcpy16 7184 d8c0042f arg mem_le_mrand ,contr 7185 20407ebf call memcpy16 7186 2040720a call inverse_memdat 7187 d8c00b12 arg mem_le_mackey ,contr 7188 d8a00ac2 arg mem_aes_cmac_k ,contw 7189 20407ebf call memcpy16 718a 204071d0 call function_aes_cmac 718b d8a00af2 arg mem_aes_cmac_temp ,contw 718c 20207201 branch load_inverse_result function_f5: 718d 7005e520 jam 32 ,mem_aes_cmac_data_length 718e d8c009fe arg mem_le_dhkey_256 ,contr 718f d8a005e6 arg memdat ,contw 7190 20407ebd call memcpy32 7191 2040720a call inverse_memdat 7192 d8c0099e arg mem_le_slat ,contr 7193 20407205 call store_inverse_k 7194 204071d0 call function_aes_cmac 7195 d8a00ac2 arg mem_aes_cmac_k ,contw 7196 20407497 call store_aes_result 7197 d8400001 arg 1 ,temp 7198 2040719f call function_f5_common 7199 d8a04419 arg mem_le_ltk ,contw 719a 20407201 call load_inverse_result 719b d8400000 arg 0 ,temp 719c 2040719f call function_f5_common 719d d8a00b12 arg mem_le_mackey ,contw 719e 20207497 branch store_aes_result function_f5_common: 719f 476e403b bpatchx patch3b_4 ,mem_patch3b 71a0 7005e535 jam 53 ,mem_aes_cmac_data_length 71a1 58000100 setarg 0x100 71a2 600105e6 store 2 ,memdat 71a3 204071b0 call store_addr_common_b 71a4 204071b5 call store_addr_common_a 71a5 d8c0443a arg mem_le_srand ,contr 71a6 20407ebf call memcpy16 71a7 d8c0042f arg mem_le_mrand ,contr 71a8 20407ebf call memcpy16 71a9 58006c65 setarg 0x6c65 71aa e0a10000 istore 2 ,contw 71ab 58006274 setarg 0x6274 71ac e0a10000 istore 2 ,contw 71ad e0a88000 istoret 1 ,contw 71ae 2040720a call inverse_memdat 71af 202071d0 branch function_aes_cmac store_addr_common_b: 71b0 680344a0 fetch 6 ,mem_le_lap 71b1 e0a30000 istore 6 ,contw 71b2 6800c495 fetch 1 ,mem_le_conn_own_addr_type 71b3 e0a08000 istore 1 ,contw 71b4 20600000 rtn store_addr_common_a: 71b5 6803044f fetch 6 ,mem_le_plap 71b6 e0a30000 istore 6 ,contw 71b7 6800c48e fetch 1 ,mem_le_conn_peer_addr_type 71b8 e0a08000 istore 1 ,contw 71b9 20600000 rtn function_f4_ca: 71ba 7005e541 jam 65 ,mem_aes_cmac_data_length 71bb 6800c664 fetch 1 ,mem_passkey_1bit 71bc 600085e6 store 1 ,memdat 71bd d8c045d2 arg mem_le_pubkey_local_x_256 ,contr 71be 20407ebd call memcpy32 71bf d8c009be arg mem_le_pubkey_remote_x_256 ,contr 71c0 20407ebd call memcpy32 71c1 2040720a call inverse_memdat 71c2 d8c0042f arg mem_le_mrand ,contr 71c3 20407205 call store_inverse_k 71c4 202071d0 branch function_aes_cmac function_f4_cb: 71c5 7005e541 jam 65 ,mem_aes_cmac_data_length 71c6 6800c664 fetch 1 ,mem_passkey_1bit 71c7 600085e6 store 1 ,memdat 71c8 d8c009be arg mem_le_pubkey_remote_x_256 ,contr 71c9 20407ebd call memcpy32 71ca d8c045d2 arg mem_le_pubkey_local_x_256 ,contr 71cb 20407ebd call memcpy32 71cc 2040720a call inverse_memdat 71cd d8c0443a arg mem_le_srand ,contr 71ce 20407205 call store_inverse_k 71cf 202071d0 branch function_aes_cmac function_aes_cmac: 71d0 476ec03b bpatchx patch3b_5 ,mem_patch3b 71d1 2040721f call function_aes_cmac_generate_subkey 71d2 680085e5 fetch 1 ,mem_aes_cmac_data_length 71d3 1fe20400 copy pdata ,temp function_ceil16: 71d4 1fe0fe0f increase 15 ,pdata 71d5 1ff1fe00 rshift4 pdata ,pdata 71d6 1fe22400 copy pdata ,regb 71d7 203a71e2 branch function_aes_cmac_set_flag_0_balnk ,blank 71d8 18417e0f and temp ,0x0f ,pdata 71d9 243a71e5 nbranch function_aes_cmac_set_flag_0 ,blank 71da da600ad2 arg mem_aes_cmac_k1 ,regc 71db dfe005e6 arg memdat ,pdata 71dc 1fe0fff0 increase -16 ,pdata 71dd 9840a200 iadd temp ,rega 71de d8a00b02 arg mem_aes_cmac_m_last ,contw 71df df200004 arg 4 ,loopcnt 71e0 20407edd call xor_loop 71e1 202071f0 branch function_aes_cmac_aes function_aes_cmac_set_flag_0_balnk: 71e2 da400001 arg 1 ,regb 71e3 da200000 arg 0 ,rega 71e4 202071e6 branch function_aes_cmac_set_flag_0_common function_aes_cmac_set_flag_0: 71e5 1841220f and temp ,0x0f ,rega function_aes_cmac_set_flag_0_common: 71e6 dfe005e6 arg memdat ,pdata 71e7 9840fe00 iadd temp ,pdata 71e8 9a260c00 isub rega ,contr 71e9 d8a00af2 arg mem_aes_cmac_temp ,contw 71ea 20407245 call function_aes_cmac_padding 71eb da600ae2 arg mem_aes_cmac_k2 ,regc 71ec da200af2 arg mem_aes_cmac_temp ,rega 71ed d8a00b02 arg mem_aes_cmac_m_last ,contw 71ee df200004 arg 4 ,loopcnt 71ef 20407edd call xor_loop function_aes_cmac_aes: 71f0 20407491 call aes_clear_data 71f1 20407428 call aes_init 71f2 d8c005e6 arg memdat ,contr function_aes_cmac_aes_loop: 71f3 1a40a5ff increase -1 ,regb 71f4 1a427e00 deposit regb 71f5 203a71f9 branch function_aes_cmac_aes_loop_end ,blank 71f6 20407486 call load_data128 71f7 20407422 call do_aes_cbc 71f8 202071f3 branch function_aes_cmac_aes_loop function_aes_cmac_aes_loop_end: 71f9 d8a00af2 arg mem_aes_cmac_temp ,contw 71fa 20407497 call store_aes_result 71fb d8c00b02 arg mem_aes_cmac_m_last ,contr 71fc 20407486 call load_data128 71fd 20407428 call aes_init 71fe d8c00af2 arg mem_aes_cmac_temp ,contr 71ff 20407486 call load_data128 7200 20207422 branch do_aes_cbc load_inverse_result: 7201 18a22200 copy contw ,rega 7202 20407497 call store_aes_result 7203 df200010 arg 16 ,loopcnt 7204 20207ee5 branch inverse_data store_inverse_k: 7205 d8a00ac2 arg mem_aes_cmac_k ,contw 7206 20407ebf call memcpy16 inverse_k: 7207 df200010 arg 16 ,loopcnt 7208 da200ac2 arg mem_aes_cmac_k ,rega 7209 20207ee5 branch inverse_data inverse_memdat: 720a 680085e5 fetch 1 ,mem_aes_cmac_data_length 720b 1fe27200 copy pdata ,loopcnt 720c da2005e6 arg memdat ,rega 720d 20207ee5 branch inverse_data bn_lshift_0_inverse: 720e ea208000 ifetch 1 ,rega 720f 1fe3fe00 lshift pdata ,pdata 7210 2a6ffe00 isolate1 0 ,regc 7211 7920fe00 setflag true ,0 ,pdata 7212 2feffe08 isolate1 8 ,pdata 7213 7920a600 setflag true ,0 ,regc 7214 e2208000 istore 1 ,rega 7215 1a20a3ff increase -1 ,rega 7216 c200720e loop bn_lshift_0_inverse 7217 20600000 rtn function_aes_cmac_k1_inverse: 7218 da200ad2 arg mem_aes_cmac_k1 ,rega function_aes_cmac_inverse_common: 7219 1a20a20f increase 15 ,rega 721a 18007210 force 16 ,loopcnt 721b 18002600 force 0 ,regc 721c 2020720e branch bn_lshift_0_inverse function_aes_cmac_k2_inverse: 721d da200ae2 arg mem_aes_cmac_k2 ,rega 721e 20207219 branch function_aes_cmac_inverse_common function_aes_cmac_generate_subkey: 721f d8c00ac2 arg mem_aes_cmac_k ,contr 7220 20407484 call load_key 7221 18007008 force regidx_xor ,regext_index 7222 20407492 call aes_clear 7223 20407491 call aes_clear_data 7224 2040741f call do_aes_ocb 7225 d8a00ad2 arg mem_aes_cmac_k1 ,contw 7226 20407497 call store_aes_result function_aes_cmac_k1: 7227 476f403b bpatchx patch3b_6 ,mem_patch3b 7228 68008ad2 fetch 1 ,mem_aes_cmac_k1 7229 2feffe07 isolate1 7 ,pdata 722a 2420f230 nbranch function_aes_cmac_k1_0 ,true 722b 20407218 call function_aes_cmac_k1_inverse 722c da600ad2 arg mem_aes_cmac_k1 ,regc 722d d8a00ad2 arg mem_aes_cmac_k1 ,contw 722e 2040723a call function_aes_cmac_xor_rb 722f 20207231 branch function_aes_cmac_k2 function_aes_cmac_k1_0: 7230 20407218 call function_aes_cmac_k1_inverse function_aes_cmac_k2: 7231 d8c00ad2 arg mem_aes_cmac_k1 ,contr 7232 d8a00ae2 arg mem_aes_cmac_k2 ,contw 7233 20407ebf call memcpy16 7234 68008ae2 fetch 1 ,mem_aes_cmac_k2 7235 2feffe07 isolate1 7 ,pdata 7236 2420f21d nbranch function_aes_cmac_k2_inverse ,true 7237 2040721d call function_aes_cmac_k2_inverse 7238 da600ae2 arg mem_aes_cmac_k2 ,regc 7239 d8a00ae2 arg mem_aes_cmac_k2 ,contw function_aes_cmac_xor_rb: 723a df200003 arg 3 ,loopcnt function_aes_cmac_xor_rb_loop: 723b d8400000 arg 0 ,temp 723c 20407241 call function_aes_cmac_xor_loop_common 723d 1a60a604 increase 4 ,regc 723e c200723b loop function_aes_cmac_xor_rb_loop 723f d8408700 arg 0x8700 ,temp 7240 18500400 lshift16 temp ,temp function_aes_cmac_xor_loop_common: 7241 ea620000 ifetch 4 ,regc 7242 9842fe00 ixor temp ,pdata 7243 e0a20000 istore 4 ,contw 7244 20600000 rtn function_aes_cmac_padding: 7245 476fc03b bpatchx patch3b_7 ,mem_patch3b 7246 df200010 arg 16 ,loopcnt 7247 dfe00000 arg 0 ,pdata function_aes_cmac_padding_loop: 7248 9a267c00 isub rega ,null 7249 2022f250 branch function_aes_cmac_padding_beq_length ,zero 724a 20217253 branch function_aes_cmac_padding_big_length ,positive 724b e8c88000 ifetcht 1 ,contr 724c e0a88000 istoret 1 ,contw function_aes_cmac_padding_loop2: 724d 1fe0fe01 increase 1 ,pdata 724e c2007248 loop function_aes_cmac_padding_loop 724f 20600000 rtn function_aes_cmac_padding_beq_length: 7250 d8400080 arg 0x80 ,temp function_aes_cmac_padding_common: 7251 e0a88000 istoret 1 ,contw 7252 2020724d branch function_aes_cmac_padding_loop2 function_aes_cmac_padding_big_length: 7253 d8400000 arg 0 ,temp 7254 20207251 branch function_aes_cmac_padding_common generate_kinit: 7255 20407268 call function_e22 7256 d8c00592 arg mem_input_store ,contr 7257 d8a00582 arg mem_kinit ,contw 7258 20207ebf branch memcpy16 function_e21: 7259 78547c00 disable user 725a 2040735f call function_expand 725b d8c00562 arg mem_random_number ,contr 725c d8a005a2 arg mem_x ,contw 725d 1800720f force 15 ,loopcnt 725e 20407f01 call memcpy 725f e8c08000 ifetch 1 ,contr 7260 1fe2fe06 xor_into 6 ,pdata 7261 e0a08000 istore 1 ,contw 7262 580005b2 setarg mem_y 7263 600105d6 store 2 ,memp_ar_input 7264 580005a2 setarg mem_x 7265 600105d4 store 2 ,memp_ar_key 7266 79200012 set1 mark_ar2 ,mark 7267 202072a8 branch function_ar function_e22: 7268 6808c689 fetcht 1 ,mem_pin_length 7269 18002410 force 16 ,regb 726a 1840a606 add temp ,6 ,regc 726b 1a667c10 sub regc ,16 ,null 726c 2021726e branch function_e22_pin_init ,positive 726d 18002610 force 16 ,regc function_e22_pin_init: 726e d8a005a2 arg mem_x ,contw function_e22_genx_pin: 726f d8c0468a arg mem_pin ,contr 7270 18427200 copy temp ,loopcnt 7271 78547c00 disable user function_e22_genx_loop: 7272 e8c08000 ifetch 1 ,contr 7273 e0a08000 istore 1 ,contw 7274 1a40a5ff increase -1 ,regb 7275 2022f27c branch function_e22_genx_end ,zero 7276 c2007272 loop function_e22_genx_loop 7277 2034726f branch function_e22_genx_pin ,user 7278 78347c00 enable user 7279 18007206 force 6 ,loopcnt 727a 1a220c00 copy rega ,contr 727b 20207272 branch function_e22_genx_loop function_e22_genx_end: 727c d8c00562 arg mem_random_number ,contr 727d d8a005b2 arg mem_y ,contw 727e 20407ebf call memcpy16 727f 680085c1 fetch 1 ,mem_y15 7280 9a62fe00 ixor regc ,pdata 7281 600085c1 store 1 ,mem_y15 7282 580005b2 setarg mem_y 7283 600105d6 store 2 ,memp_ar_input 7284 580005a2 setarg mem_x 7285 600105d4 store 2 ,memp_ar_key 7286 79200012 set1 mark_ar2 ,mark 7287 202072a8 branch function_ar function_e1: 7288 78547c00 disable user 7289 2040735f call function_expand 728a 20207292 branch function_hash function_e3: 728b da200056 arg mem_aco ,rega 728c 78347c00 enable user 728d 2040735f call function_expand 728e 20407292 call function_hash 728f d8c00592 arg mem_input_store ,contr 7290 d8a00062 arg mem_kc ,contw 7291 20207ebf branch memcpy16 function_hash: 7292 58000562 setarg mem_random_number 7293 600105d6 store 2 ,memp_ar_input 7294 580041be setarg mem_link_key 7295 600105d4 store 2 ,memp_ar_key 7296 793f8012 set0 mark_ar2 ,mark 7297 204072a8 call function_ar 7298 da200592 arg mem_input_store ,rega 7299 da400562 arg mem_random_number ,regb 729a d8a005a2 arg mem_x ,contw 729b 20407352 call xor16 729c da2005a2 arg mem_x ,rega 729d da4005b2 arg mem_y ,regb 729e 1a420a00 copy regb ,contw 729f 78347c00 enable user 72a0 20407350 call add16 72a1 2040736a call key_offset 72a2 580005b2 setarg mem_y 72a3 600105d6 store 2 ,memp_ar_input 72a4 580005a2 setarg mem_x 72a5 600105d4 store 2 ,memp_ar_key 72a6 79200012 set1 mark_ar2 ,mark 72a7 202072a8 branch function_ar function_ar: 72a8 7005d800 jam 0 ,mem_ar_hround 72a9 680105d4 fetch 2 ,memp_ar_key 72aa 98000c00 iforce contr 72ab d8a005c2 arg mem_key_store ,contw 72ac 20407ebf call memcpy16 72ad 680105d6 fetch 2 ,memp_ar_input 72ae 98000c00 iforce contr 72af d8a00592 arg mem_input_store ,contw 72b0 20407ebf call memcpy16 function_ar_loop: 72b1 204072cf call key_scheduling 72b2 78547c00 disable user 72b3 c58972b9 bmark0 mark_ar2 ,function_ar_original 72b4 680085d8 fetch 1 ,mem_ar_hround 72b5 c08272b9 bne 4 ,function_ar_original 72b6 680105d6 fetch 2 ,memp_ar_input 72b7 98002400 iforce regb 72b8 20407301 call xor_mod32_ar2 function_ar_original: 72b9 20407300 call xor_mod32 72ba 20407313 call el_boxes 72bb 680085d8 fetch 1 ,mem_ar_hround 72bc 1fe0fe01 increase 1 ,pdata 72bd 600085d8 store 1 ,mem_ar_hround 72be 204072cf call key_scheduling 72bf 78347c00 enable user 72c0 20407300 call xor_mod32 72c1 20407322 call pht 72c2 20407331 call permute 72c3 20407322 call pht 72c4 20407331 call permute 72c5 20407322 call pht 72c6 20407331 call permute 72c7 20407322 call pht 72c8 680085d8 fetch 1 ,mem_ar_hround 72c9 1fe0fe01 increase 1 ,pdata 72ca 600085d8 store 1 ,mem_ar_hround 72cb c08872b1 bne 16 ,function_ar_loop 72cc 204072cf call key_scheduling 72cd 78547c00 disable user 72ce 20207300 branch xor_mod32 key_scheduling: 72cf 680085d8 fetch 1 ,mem_ar_hround 72d0 d8c005c2 arg mem_key_store ,contr 72d1 203a72f6 branch key_sched_zero ,blank 72d2 98002400 iforce regb 72d3 18007211 force 17 ,loopcnt 72d4 18c20a00 copy contr ,contw key_rotateloop: 72d5 e8c08000 ifetch 1 ,contr 72d6 1fe98400 lshift3 pdata ,temp 72d7 1feb7e00 rshift2 pdata ,pdata 72d8 1fe97e00 rshift3 pdata ,pdata 72d9 9841fe00 ior temp ,pdata 72da e0a08000 istore 1 ,contw 72db c20072d5 loop key_rotateloop 72dc 580005c2 setarg mem_key_store 72dd 9a408c00 iadd regb ,contr 72de 18007210 force 16 ,loopcnt 72df d8a00572 arg mem_round_key ,contw key_select_octet_loop: 72e0 e8c08000 ifetch 1 ,contr 72e1 e0a08000 istore 1 ,contw 72e2 28c1ffd3 compare mem_key_store_end ,contr ,0xff 72e3 2420f2e5 nbranch key_select_octet_nwrap ,true 72e4 18c08def increase -17 ,contr key_select_octet_nwrap: 72e5 c20072e0 loop key_select_octet_loop 72e6 18002200 force 0 ,rega 72e7 1a40a7ff add regb ,-1 ,regc 72e8 1a6ba600 lshift2 regc ,regc 72e9 1a6ba600 lshift2 regc ,regc 72ea 204074b9 call enable_authrom 72eb 58008400 setarg mem_b_box 72ec 9a60a600 iadd regc ,regc 72ed d8a00572 arg mem_round_key ,contw 72ee 18007210 force 16 ,loopcnt bias_round_key_loop: 72ef ea688000 ifetcht 1 ,regc 72f0 e8a08000 ifetch 1 ,contw 72f1 9840fe00 iadd temp ,pdata 72f2 e0a08000 istore 1 ,contw 72f3 1a60a601 increase 1 ,regc 72f4 c20072ef loop bias_round_key_loop 72f5 202074bd branch disable_authrom key_sched_zero: 72f6 18007210 force 16 ,loopcnt 72f7 18000400 force 0 ,temp create_byte_16_loop: 72f8 e8c08000 ifetch 1 ,contr 72f9 98428400 ixor temp ,temp 72fa c20072f8 loop create_byte_16_loop 72fb 18427e00 deposit temp 72fc e0c08000 istore 1 ,contr 72fd d8c005c2 arg mem_key_store ,contr 72fe d8a00572 arg mem_round_key ,contw 72ff 20207ebf branch memcpy16 xor_mod32: 7300 da400572 arg mem_round_key ,regb xor_mod32_ar2: 7301 18007210 force 16 ,loopcnt 7302 da200592 arg mem_input_store ,rega 7303 1a220a00 copy rega ,contw xor_mod32_loop: 7304 ea288000 ifetcht 1 ,rega 7305 ea408000 ifetch 1 ,regb 7306 9842e000 ixor temp ,alarm 7307 1f212603 and loopcnt ,3 ,regc 7308 2434730a nbranch xor_mod32_invert ,user 7309 1a62a603 xor_into 3 ,regc xor_mod32_invert: 730a 1a662601 sub regc ,1 ,regc 730b 2021730d branch xor_even ,positive 730c 9840e000 iadd temp ,alarm xor_even: 730d 1e027e00 deposit alarm 730e e0a08000 istore 1 ,contw 730f 1a20a201 increase 1 ,rega 7310 1a40a401 increase 1 ,regb 7311 c2007304 loop xor_mod32_loop 7312 20600000 rtn el_boxes: 7313 204074b9 call enable_authrom 7314 18007210 force 16 ,loopcnt 7315 da200592 arg mem_input_store ,rega el_box_loop: 7316 ea208000 ifetch 1 ,rega 7317 d8c08500 arg mem_e_box ,contr 7318 1f212603 and loopcnt ,3 ,regc 7319 1a667c01 sub regc ,1 ,null 731a 2021731c branch e_boxes ,positive 731b d8c08600 arg mem_l_box ,contr e_boxes: 731c 98c08c00 iadd contr ,contr 731d e8c08000 ifetch 1 ,contr 731e e2208000 istore 1 ,rega 731f 1a20a201 increase 1 ,rega 7320 c2007316 loop el_box_loop 7321 202074bd branch disable_authrom pht: 7322 18007208 force 8 ,loopcnt 7323 d8c00592 arg mem_input_store ,contr 7324 18c20a00 copy contr ,contw pht_loop: 7325 e8c08000 ifetch 1 ,contr 7326 98002200 iforce rega 7327 e8c08000 ifetch 1 ,contr 7328 98002400 iforce regb 7329 1a23fe00 lshift rega ,pdata 732a 9a40fe00 iadd regb ,pdata 732b e0a08000 istore 1 ,contw 732c 1a227e00 deposit rega 732d 9a40fe00 iadd regb ,pdata 732e e0a08000 istore 1 ,contw 732f c2007325 loop pht_loop 7330 20600000 rtn permute: 7331 588ae42c setarg 0x8ae42c 7332 98000400 iforce temp 7333 18007207 force 7 ,loopcnt 7334 20407340 call permute_exchange 7335 580d751b setarg 0xd751b 7336 98000400 iforce temp 7337 18007205 force 5 ,loopcnt 7338 20407340 call permute_exchange 7339 680085a1 fetch 1 ,mem_input_store + 15 733a 98002200 iforce rega 733b 68008595 fetch 1 ,mem_input_store + 3 733c 600085a1 store 1 ,mem_input_store + 15 733d 1a227e00 deposit rega 733e 60008595 store 1 ,mem_input_store + 3 733f 20600000 rtn permute_exchange: 7340 1841240f and temp ,0xf ,regb permute_loop: 7341 18417e0f and temp ,0xf ,pdata 7342 d8a00592 arg mem_input_store ,contw 7343 98a08a00 iadd contw ,contw 7344 e8a08000 ifetch 1 ,contw 7345 98002600 iforce regc 7346 1a227e00 deposit rega 7347 e0a08000 istore 1 ,contw 7348 1a622200 copy regc ,rega 7349 18518400 rshift4 temp ,temp 734a c2007341 loop permute_loop 734b 58000592 setarg mem_input_store 734c 9a408a00 iadd regb ,contw 734d 1a227e00 deposit rega 734e e0a08000 istore 1 ,contw 734f 20600000 rtn add16: 7350 78347c00 enable user 7351 20207353 branch xor_add16 xor16: 7352 78547c00 disable user xor_add16: 7353 18007210 force 16 ,loopcnt xoradd_loop: 7354 ea288000 ifetcht 1 ,rega 7355 ea408000 ifetch 1 ,regb 7356 20347359 branch xoradd_add ,user 7357 9842fe00 ixor temp ,pdata 7358 2020735a branch xoradd_store xoradd_add: 7359 9840fe00 iadd temp ,pdata xoradd_store: 735a e0a08000 istore 1 ,contw 735b 1a20a201 increase 1 ,rega 735c 1a40a401 increase 1 ,regb 735d c2007354 loop xoradd_loop 735e 20600000 rtn function_expand: 735f d8a005b2 arg mem_y ,contw 7360 ea230000 ifetch 6 ,rega 7361 e0a30000 istore 6 ,contw 7362 20347365 branch expand_12 ,user 7363 ea230000 ifetch 6 ,rega 7364 20207366 branch expand_cont expand_12: 7365 e8c30000 ifetch 6 ,contr expand_cont: 7366 e0a30000 istore 6 ,contw 7367 ea220000 ifetch 4 ,rega 7368 e0a20000 istore 4 ,contw 7369 20600000 rtn key_offset: 736a d8c041be arg mem_link_key ,contr 736b d8a005a2 arg mem_x ,contw 736c d8400000 arg 0 ,temp 736d 588395a7 setarg 0x8395a7 736e 2040738b call concatenate_temp24 736f 58b3c1df setarg 0xb3c1df 7370 2040738b call concatenate_temp24 7371 5800e5e9 setarg 0xe5e9 7372 2040738c call concatenate_temp16 7373 18422800 copy temp ,regab 7374 78547c00 disable user 7375 20407379 call key_addxor 7376 1a820400 copy regab ,temp 7377 78347c00 enable user 7378 20207379 branch key_addxor key_addxor: 7379 18007208 force 8 ,loopcnt key_addxor_loop: 737a e8c08000 ifetch 1 ,contr 737b 2f200201 compare 1 ,loopcnt ,1 737c 20347380 branch key_high ,user 737d 2020f381 branch key_xor ,true key_add: 737e 9840fe00 iadd temp ,pdata 737f 20207382 branch key_store key_high: 7380 2020f37e branch key_add ,true key_xor: 7381 9842fe00 ixor temp ,pdata key_store: 7382 e0a08000 istore 1 ,contw 7383 184c8400 rshift8 temp ,temp 7384 c200737a loop key_addxor_loop 7385 20600000 rtn copy_aco: 7386 68030596 fetch 6 ,mem_input_store + 4 7387 60030056 store 6 ,mem_aco 7388 e8c30000 ifetch 6 ,contr 7389 e0a30000 istore 6 ,contw 738a 20600000 rtn concatenate_temp24: 738b 184d0400 lshift8 temp ,temp concatenate_temp16: 738c 18500400 lshift16 temp ,temp 738d 98418400 ior temp ,temp 738e 20600000 rtn loop1: 738f 2020738f branch loop1 generate_stk: 7390 4770403c bpatchx patch3c_0 ,mem_patch3c 7391 2040742b call function_s1 7392 d8a04419 arg mem_le_ltk ,contw 7393 20207497 branch store_aes_result authenticate_rconfirm: 7394 d8a0443a arg mem_le_srand ,contw 7395 2034f397 branch authenticate_mconfirm ,master 7396 d8a0042f arg mem_le_mrand ,contw authenticate_mconfirm: 7397 18c22200 copy contr ,rega 7398 20407ebf call memcpy16 7399 20407440 call function_c1 739a d8c0442a arg mem_le_rconfirm ,contr 739b 202074b0 branch compare_res generate_confirm: 739c da20042f arg mem_le_mrand ,rega 739d 2034f39f branch generate_mrand ,master 739e da20443a arg mem_le_srand ,rega generate_mrand: 739f 1a220a00 copy rega ,contw 73a0 2040630c call generate_random 73a1 20207440 branch function_c1 generate_sk: 73a2 d8c044aa arg mem_le_skdm ,contr 73a3 20407486 call load_data128 73a4 d8c04419 arg mem_le_ltk ,contr 73a5 20407487 call load_regext 73a6 18006c38 force 0x38 ,aes_ctrl 73a7 18006c00 force 0x0 ,aes_ctrl 73a8 2040741d call wait_aes 73a9 d8a0047c arg mem_le_sk ,contw 73aa 20207497 branch store_aes_result first_block_counter: 73ab 18007e49 force 0x49 ,pdata 73ac 202073ae branch first_block first_block_data: 73ad 18007e01 force 1 ,pdata first_block: 73ae 18007000 force regidx_data ,regext_index 73af 184d5e00 lshift8 temp ,regext 73b0 9de1de00 ior regext ,regext 73b1 1f00f001 increase 1 ,regext_index 73b2 184cde00 rshift8 temp ,regext 73b3 1df15e00 rshift16 regext ,regext 73b4 68014411 fetch 2 ,mem_le_ivm 73b5 1ff07e00 lshift16 ,pdata ,pdata 73b6 9de1de00 ior regext ,regext 73b7 1f00f001 increase 1 ,regext_index 73b8 e8c20000 ifetch 4 ,contr 73b9 98005e00 iforce regext 73ba 1f00f001 increase 1 ,regext_index 73bb e8c10000 ifetch 2 ,contr 73bc 1a30de00 byteswap rega ,regext 73bd 1df05e00 lshift16 regext ,regext 73be 9de1de00 ior regext ,regext 73bf 1f00f001 increase 1 ,regext_index 73c0 20600000 rtn generate_mic: 73c1 1a608c01 add regc ,1 ,contr 73c2 e8c08000 ifetch 1 ,contr 73c3 98002200 iforce rega 73c4 204073ab call first_block_counter 73c5 2040741f call do_aes_ocb 73c6 18007000 force regidx_data ,regext_index 73c7 ea608000 ifetch 1 ,regc 73c8 1fe17e03 and_into 0x3 ,pdata 73c9 1ff05e00 lshift16 pdata ,regext 73ca 79205e08 set1 8 ,regext 73cb 2040748f call clear_hidata 73cc 20407422 call do_aes_cbc 73cd 1a227200 copy rega ,loopcnt 73ce 1a608c02 add regc ,2 ,contr 73cf 2040746e call padding_data generate_mic_loop: 73d0 20407478 call aes_load_data 73d1 20407422 call do_aes_cbc 73d2 1f227e00 deposit loopcnt 73d3 203a73d5 branch generate_mic_end ,blank 73d4 202073d0 branch generate_mic_loop generate_mic_end: 73d5 1800700c force regidx_result ,regext_index 73d6 1de27e00 deposit regext 73d7 60020417 store 4 ,mem_le_mic 73d8 20600000 rtn aes_crypt_data: 73d9 1a20a201 increase 1 ,rega 73da 204073ad call first_block_data 73db 1a620c00 copy regc ,contr 73dc 20407482 call aes_load_xor 73dd 20407425 call do_aes_ctr 73de 2040749e call store_enc_data 73df 1a60a610 increase 16 ,regc 73e0 1a40a5f0 increase -16 ,regb 73e1 202173d9 branch aes_crypt_data ,positive 73e2 20600000 rtn le_encrypt: 73e3 4770c03c bpatchx patch3c_1 ,mem_patch3c 73e4 da6043dc arg mem_le_txheader ,regc 73e5 680ac403 fetcht 5 ,mem_le_pcnt_tx 73e6 204073c1 call generate_mic 73e7 18007008 force regidx_xor ,regext_index 73e8 98005e00 iforce regext 73e9 18002200 force 0 ,rega 73ea 204073ad call first_block_data 73eb 20407425 call do_aes_ctr 73ec da6043de arg mem_le_txpayload ,regc 73ed 6800c3dd fetch 1 ,mem_le_txlen 73ee 1fe0a5ff add pdata ,-1 ,regb 73ef 9a608a00 iadd regc ,contw 73f0 1800700c force regidx_result ,regext_index 73f1 1de27e00 deposit regext 73f2 e0a20000 istore 4 ,contw 73f3 204073d9 call aes_crypt_data 73f4 6800c3dd fetch 1 ,mem_le_txlen 73f5 1fe0fe04 increase 4 ,pdata 73f6 6000c3dd store 1 ,mem_le_txlen 73f7 680ac403 fetcht 5 ,mem_le_pcnt_tx 73f8 18408401 increase 1 ,temp 73f9 600ac403 storet 5 ,mem_le_pcnt_tx 73fa 20600000 rtn le_decrypt: 73fb 4771403c bpatchx patch3c_2 ,mem_patch3c 73fc 680082da fetch 1 ,mem_le_rxbuf + 1 73fd 1fe67c14 sub pdata ,20 ,null 73fe 202173ff branch le_dec_cont ,positive le_dec_cont: 73ff da6002db arg mem_le_rxbuf + 2 ,regc 7400 1fe0a5ff add pdata ,-1 ,regb 7401 1fe0fffc increase -4 ,pdata 7402 600082da store 1 ,mem_le_rxbuf + 1 7403 9a608c00 iadd regc ,contr 7404 e8c20000 ifetch 4 ,contr 7405 18007008 force regidx_xor ,regext_index 7406 98005e00 iforce regext 7407 18002200 force 0 ,rega 7408 680ac408 fetcht 5 ,mem_le_pcnt_rx 7409 204073ad call first_block_data 740a 20407425 call do_aes_ctr 740b 1800700c force regidx_result ,regext_index 740c 1de27e00 deposit regext 740d 6002041b store 4 ,mem_le_peer_mic 740e 204073d9 call aes_crypt_data 740f da6002d9 arg mem_le_rxbuf ,regc 7410 204073c1 call generate_mic 7411 680a041b fetcht 4 ,mem_le_peer_mic 7412 98467e00 isub temp ,pdata 7413 247a0000 nrtn blank 7414 6802440d fetch 4 ,mem_le_last_mic 7415 98467e00 isub temp ,pdata 7416 207a0000 rtn blank 7417 600a440d storet 4 ,mem_le_last_mic 7418 6802c408 fetch 5 ,mem_le_pcnt_rx 7419 1fe0fe01 increase 1 ,pdata 741a 6002c408 store 5 ,mem_le_pcnt_rx 741b 18007e00 force 0 ,pdata 741c 20600000 rtn wait_aes: 741d 243bf41d nbranch wait_aes ,aes_ready 741e 20600000 rtn do_aes_ocb: 741f 18006c30 force 0x30 ,aes_ctrl 7420 18006c00 force 0x0 ,aes_ctrl 7421 2020741d branch wait_aes do_aes_cbc: 7422 18006c32 force 0x32 ,aes_ctrl 7423 18006c02 force 0x2 ,aes_ctrl 7424 2020741d branch wait_aes do_aes_ctr: 7425 18006c34 force 0x34 ,aes_ctrl 7426 18006c04 force 0x4 ,aes_ctrl 7427 2020741d branch wait_aes aes_init: 7428 18006c01 force 1 ,aes_ctrl 7429 18006c00 force 0 ,aes_ctrl 742a 20600000 rtn function_s1: 742b 18007000 force regidx_data ,regext_index 742c 6802042f fetch 4 ,mem_le_mrand 742d 98005e00 iforce regext 742e 1f00f001 increase 1 ,regext_index 742f e8c20000 ifetch 4 ,contr 7430 98005e00 iforce regext 7431 1f00f001 increase 1 ,regext_index 7432 6802443a fetch 4 ,mem_le_srand 7433 98005e00 iforce regext 7434 1f00f001 increase 1 ,regext_index 7435 e8c20000 ifetch 4 ,contr 7436 98005e00 iforce regext 7437 1f00f001 increase 1 ,regext_index 7438 20407492 call aes_clear 7439 1f00f1fc increase -4 ,regext_index 743a 680244c7 fetch 4 ,mem_le_tk 743b 1fe25e00 copy pdata ,regext 743c 1f00f004 increase 4 ,regext_index 743d 18006c38 force 0x38 ,aes_ctrl 743e 18006c08 force 0x8 ,aes_ctrl 743f 2020741d branch wait_aes function_c1: 7440 4771c03c bpatchx patch3c_3 ,mem_patch3c 7441 680344a0 fetch 6 ,mem_le_lap 7442 680b044f fetcht 6 ,mem_le_plap 7443 2034f446 branch function_c1_master ,master 7444 6803044f fetch 6 ,mem_le_plap 7445 680b44a0 fetcht 6 ,mem_le_lap function_c1_master: 7446 18007008 force regidx_xor ,regext_index 7447 18425e00 copy temp ,regext 7448 1f00f001 increase 1 ,regext_index 7449 184f5e00 rshift32 temp ,regext 744a 1ff07e00 lshift16 pdata ,pdata 744b 9de1de00 ior regext ,regext 744c 1f00f001 increase 1 ,regext_index 744d 1fef5e00 rshift32 pdata ,regext 744e 1f00f001 increase 1 ,regext_index 744f 18005e00 force 0 ,regext 7450 18007e00 force 0 ,pdata 7451 6800c48e fetch 1 ,mem_le_conn_peer_addr_type 7452 6808c485 fetcht 1 ,mem_le_adv_own_addr_type 7453 2434f456 nbranch function_c1_irat ,master 7454 6800c495 fetch 1 ,mem_le_conn_own_addr_type 7455 6808c48e fetcht 1 ,mem_le_conn_peer_addr_type function_c1_irat: 7456 6000c44a store 1 ,mem_le_iat 7457 6008c44b storet 1 ,mem_le_rat 7458 18007000 force regidx_data ,regext_index 7459 da40444a arg mem_le_iat ,regb 745a 18007204 force 4 ,loopcnt function_c1_loop1: 745b ea220000 ifetch 4 ,rega 745c ea4a0000 ifetcht 4 ,regb 745d 9842de00 ixor temp ,regext 745e 1f00f001 increase 1 ,regext_index 745f 1a20a204 increase 4 ,rega 7460 1a40a404 increase 4 ,regb 7461 c200745b loop function_c1_loop1 7462 20407492 call aes_clear 7463 1f00f1fc increase -4 ,regext_index 7464 680244c7 fetch 4 ,mem_le_tk 7465 1fe25e00 copy pdata ,regext 7466 1f00f004 increase 4 ,regext_index 7467 18006c38 force 0x38 ,aes_ctrl 7468 18006c0c force 0xc ,aes_ctrl 7469 2040741d call wait_aes 746a 20407491 call aes_clear_data 746b 18006c3a force 0x3a ,aes_ctrl 746c 18006c08 force 0x8 ,aes_ctrl 746d 2020741d branch wait_aes padding_data: 746e 2f200600 compare 0 ,loopcnt ,3 746f 20608000 rtn true 7470 18c27e00 deposit contr 7471 9f208a00 iadd loopcnt ,contw 7472 18007e00 force 0 ,pdata padding_loop: 7473 e0a08000 istore 1 ,contw 7474 1f20f201 increase 1 ,loopcnt 7475 2f200600 compare 0 ,loopcnt ,3 7476 20608000 rtn true 7477 20207473 branch padding_loop aes_load_data: 7478 18007000 force regidx_data ,regext_index load_data_loop: 7479 1f227e00 deposit loopcnt 747a 203a747d branch load_data_padding ,blank 747b e8c20000 ifetch 4 ,contr 747c 1f20f3fc increase -4 ,loopcnt load_data_padding: 747d 98005e00 iforce regext 747e 1f00f001 increase 1 ,regext_index 747f 2f001e04 compare regidx_key ,regext_index ,0xf 7480 20608000 rtn true 7481 20207479 branch load_data_loop aes_load_xor: 7482 18007008 force regidx_xor ,regext_index 7483 20207487 branch load_regext load_key: 7484 18007004 force regidx_key ,regext_index 7485 20207487 branch load_regext load_data128: 7486 18007000 force regidx_data ,regext_index load_regext: 7487 18007204 force 4 ,loopcnt load_regext_loop: 7488 e8c20000 ifetch 4 ,contr 7489 98005e00 iforce regext 748a 1f00f001 increase 1 ,regext_index 748b c2007488 loop load_regext_loop 748c 20600000 rtn load_sk: 748d d8c0047c arg mem_le_sk ,contr 748e 20207484 branch load_key clear_hidata: 748f 18007204 force 4 ,loopcnt 7490 20207494 branch clear_data_rest aes_clear_data: 7491 18007000 force regidx_data ,regext_index aes_clear: 7492 18007204 force 4 ,loopcnt clear_loop: 7493 18005e00 force 0 ,regext clear_data_rest: 7494 1f00f001 increase 1 ,regext_index 7495 c2007493 loop clear_loop 7496 20600000 rtn store_aes_result: 7497 1800700c force regidx_result ,regext_index 7498 18007204 force 4 ,loopcnt send_aes_result_loop: 7499 1de27e00 deposit regext 749a e0a20000 istore 4 ,contw 749b 1f00f001 increase 1 ,regext_index 749c c2007499 loop send_aes_result_loop 749d 20600000 rtn store_enc_data: 749e 1800700c force regidx_result ,regext_index 749f 1a620a00 copy regc ,contw 74a0 1a40f201 add regb ,1 ,loopcnt 74a1 1f267c0f sub loopcnt ,15 ,null 74a2 202174a4 branch store_enc_loop ,positive 74a3 18007210 force 16 ,loopcnt store_enc_loop: 74a4 1de27e00 deposit regext 74a5 1f267c03 sub loopcnt ,3 ,null 74a6 202174ac branch store_enc_byte ,positive 74a7 e0a20000 istore 4 ,contw 74a8 1f20f3fc increase -4 ,loopcnt 74a9 20628000 rtn zero 74aa 1f00f001 increase 1 ,regext_index 74ab 202074a4 branch store_enc_loop store_enc_byte: 74ac e0a08000 istore 1 ,contw 74ad 1fecfe00 rshift8 pdata ,pdata 74ae c20074ac loop store_enc_byte 74af 20600000 rtn compare_res: 74b0 1800700c force regidx_result ,regext_index 74b1 18007204 force 4 ,loopcnt compare_res_loop: 74b2 e8c20000 ifetch 4 ,contr 74b3 9de67c00 isub regext ,null 74b4 24628000 nrtn zero 74b5 1f00f001 increase 1 ,regext_index 74b6 c20074b2 loop compare_res_loop 74b7 18007c00 force 0 ,null 74b8 20600000 rtn enable_authrom: 74b9 68108050 hfetch 1 ,core_clkoff 74ba 793ffe00 set0 clock_off_auth_rom ,pdata 74bb 60108050 hstore 1 ,core_clkoff 74bc 20600000 rtn disable_authrom: 74bd 68108050 hfetch 1 ,core_clkoff 74be 79207e00 set1 clock_off_auth_rom ,pdata 74bf 60108050 hstore 1 ,core_clkoff 74c0 20600000 rtn init_memp: 74c1 d8a00886 arg mem_p ,contw 74c2 3803ffff setsect 0 ,0x3ffff 74c3 3807ffff setsect 1 ,0x3ffff 74c4 380bffff setsect 2 ,0x3ffff 74c5 380ffbff setsect 3 ,0x3fbff 74c6 e0a48000 istore 9 ,contw 74c7 3803ffff setsect 0 ,0x3ffff 74c8 3807ffff setsect 1 ,0x3ffff 74c9 380bffff setsect 2 ,0x3ffff 74ca 380fffff setsect 3 ,0x3ffff 74cb e0a48000 istore 9 ,contw 74cc 3803ffff setsect 0 ,0x3ffff 74cd 3807ffff setsect 1 ,0x3ffff 74ce 380bcfff setsect 2 ,0x3cfff 74cf 380fffff setsect 3 ,0x3ffff 74d0 e0a48000 istore 9 ,contw 74d1 3803ffff setsect 0 ,0x3ffff 74d2 3807ffff setsect 1 ,0x3ffff 74d3 380bffef setsect 2 ,0x3ffef 74d4 380fffff setsect 3 ,0x3ffff 74d5 e0a48000 istore 9 ,contw 74d6 3803ffff setsect 0 ,0x3ffff 74d7 3807ffff setsect 1 ,0x3ffff 74d8 380bffff setsect 2 ,0x3ffff 74d9 380fffff setsect 3 ,0x3ffff 74da e0a48000 istore 9 ,contw 74db 3803ffff setsect 0 ,0x3ffff 74dc 38066c7f setsect 1 ,0x26c7f 74dd 3808146b setsect 2 ,0x146b 74de 380f7bb3 setsect 3 ,0x37bb3 74df e0a48000 istore 9 ,contw 74e0 3801feb8 setsect 0 ,0x1feb8 74e1 38050c12 setsect 1 ,0x10c12 74e2 380ab722 setsect 2 ,0x2b722 74e3 380e9fa6 setsect 3 ,0x29fa6 74e4 e0a48000 istore 9 ,contw 74e5 3800e70f setsect 0 ,0xe70f 74e6 38056720 setsect 1 ,0x16720 74e7 3808519e setsect 2 ,0x519e 74e8 380d9084 setsect 3 ,0x19084 74e9 e0a48000 istore 9 ,contw 74ea 38031012 setsect 0 ,0x31012 74eb 380760bf setsect 1 ,0x360bf 74ec 380bf0af setsect 2 ,0x3f0af 74ed 380c03d3 setsect 3 ,0x3d3 74ee e0a48000 istore 9 ,contw 74ef 3803a188 setsect 0 ,0x3a188 74f0 38043ad0 setsect 1 ,0x3ad0 74f1 380bcbf2 setsect 2 ,0x3cbf2 74f2 380e43d9 setsect 3 ,0x243d9 74f3 e0a48000 istore 9 ,contw 74f4 3802b030 setsect 0 ,0x2b030 74f5 38076a03 setsect 1 ,0x36a03 74f6 38091188 setsect 2 ,0x11188 74f7 380de520 setsect 3 ,0x1e520 74f8 e0a48000 istore 9 ,contw 74f9 3803a11e setsect 0 ,0x3a11e 74fa 3804fe5d setsect 1 ,0xfe5d 74fb 3808dd57 setsect 2 ,0xdd57 74fc 380dac93 setsect 3 ,0x1ac93 74fd e0a48000 istore 9 ,contw 74fe 380011ed setsect 0 ,0x11ed 74ff 380618c4 setsect 1 ,0x218c4 7500 38088da7 setsect 2 ,0x8da7 7501 380e57ff setsect 3 ,0x257ff 7502 e0a48000 istore 9 ,contw 7503 3803192b setsect 0 ,0x3192b 7504 38074641 setsect 1 ,0x34641 7505 3809be0c setsect 2 ,0x1be0c 7506 380f66ad setsect 3 ,0x366ad 7507 e0a48000 istore 9 ,contw 7508 38001f83 setsect 0 ,0x1f83 7509 38055a23 setsect 1 ,0x15a23 750a 380bf9b0 setsect 2 ,0x3f9b0 750b 380c3949 setsect 3 ,0x3949 750c e0a48000 istore 9 ,contw 750d 38013a51 setsect 0 ,0x13a51 750e 380553fd setsect 1 ,0x153fd 750f 380b372a setsect 2 ,0x3372a 7510 380cf1bb setsect 3 ,0xf1bb 7511 e0a48000 istore 9 ,contw 7512 3803ae85 setsect 0 ,0x3ae85 7513 3805eed9 setsect 1 ,0x1eed9 7514 38089e66 setsect 2 ,0x9e66 7515 380c01a8 setsect 3 ,0x1a8 7516 e0a40000 istore 8 ,contw 7517 20600000 rtn init_memp_256: 7518 d8a0091e arg mem_p_256 ,contw 7519 3803ffff setsect 0 ,0x3ffff 751a 3807ffff setsect 1 ,0x3ffff 751b 380bffff setsect 2 ,0x3ffff 751c 380fffff setsect 3 ,0x3ffff 751d e0a48000 istore 9 ,contw 751e 3803ffff setsect 0 ,0x3ffff 751f 3804003f setsect 1 ,0x3f 7520 38080000 setsect 2 ,0x0 7521 380c0000 setsect 3 ,0x0 7522 e0a48000 istore 9 ,contw 7523 38000000 setsect 0 ,0x0 7524 38040000 setsect 1 ,0x0 7525 38081000 setsect 2 ,0x1000 7526 380c0000 setsect 3 ,0x0 7527 e0a48000 istore 9 ,contw 7528 3803ff00 setsect 0 ,0x3ff00 7529 3807ffff setsect 1 ,0x3ffff 752a 380bffcf setsect 2 ,0x3ffcf 752b 380fffff setsect 3 ,0x3ffff 752c e0a48000 istore 9 ,contw 752d 3803ffff setsect 0 ,0x3ffff 752e 3807ffff setsect 1 ,0x3ffff 752f 380bffff setsect 2 ,0x3ffff 7530 380c03ff setsect 3 ,0x3ff 7531 e0a48000 istore 9 ,contw 7532 38000000 setsect 0 ,0x0 7533 38040000 setsect 1 ,0x0 7534 38080000 setsect 2 ,0x0 7535 380c0000 setsect 3 ,0x0 7536 e0a48000 istore 9 ,contw 7537 38010000 setsect 0 ,0x10000 7538 38040000 setsect 1 ,0x0 7539 380bf000 setsect 2 ,0x3f000 753a 380fffff setsect 3 ,0x3ffff 753b e0a48000 istore 9 ,contw 753c 380296ff setsect 0 ,0x296ff 753d 38062630 setsect 1 ,0x22630 753e 380b945d setsect 2 ,0x3945d 753f 380fd284 setsect 3 ,0x3d284 7540 e0a48000 istore 9 ,contw 7541 380333a0 setsect 0 ,0x333a0 7542 38044b7a setsect 1 ,0x4b7a 7543 380837d8 setsect 2 ,0x37d8 7544 380fc9dc setsect 3 ,0x3c9dc 7545 e0a48000 istore 9 ,contw 7546 3803a440 setsect 0 ,0x3a440 7547 3805b958 setsect 1 ,0x1b958 7548 380b8bce setsect 2 ,0x38bce 7549 380d091f setsect 3 ,0x1091f 754a e0a48000 istore 9 ,contw 754b 3802e12c setsect 0 ,0x2e12c 754c 3805f47c setsect 1 ,0x1f47c 754d 380b56b1 setsect 2 ,0x356b1 754e 380efd47 setsect 3 ,0x2fd47 754f e0a48000 istore 9 ,contw 7550 38006837 setsect 0 ,0x6837 7551 3806ed90 setsect 1 ,0x2ed90 7552 3809ecec setsect 2 ,0x1ecec 7553 380dacc5 setsect 3 ,0x1acc5 7554 e0a48000 istore 9 ,contw 7555 38023357 setsect 0 ,0x23357 7556 38058af3 setsect 1 ,0x18af3 7557 3808f9e1 setsect 2 ,0xf9e1 7558 380d29f0 setsect 3 ,0x129f0 7559 e0a48000 istore 9 ,contw 755a 3802e7eb setsect 0 ,0x2e7eb 755b 3807e6e3 setsect 1 ,0x3e6e3 755c 380be1a7 setsect 2 ,0x3e1a7 755d 380d0b8b setsect 3 ,0x10b8b 755e e0a48000 istore 9 ,contw 755f 38024fe3 setsect 0 ,0x24fe3 7560 380420ef setsect 1 ,0x20ef 7561 3809b5a6 setsect 2 ,0x1b5a6 7562 380cdc2f setsect 3 ,0xdc2f 7563 e0a48000 istore 9 ,contw 7564 38013860 setsect 0 ,0x13860 7565 3806bd69 setsect 1 ,0x2bd69 7566 3808391a setsect 2 ,0x391a 7567 380db222 setsect 3 ,0x1b222 7568 e0a48000 istore 9 ,contw 7569 20600000 rtn publickey_init: 756a 6800c65a fetch 1 ,mem_ssp_enable 756b 243a757d nbranch sp_initialize ,blank 756c 20207a77 branch sp_initialize_256 sp_calc_sequence_256_check: 756d 4772403c bpatchx patch3c_4 ,mem_patch3c 756e 6800c65a fetch 1 ,mem_ssp_enable 756f 207a0000 rtn blank 7570 6800c5b1 fetch 1 ,mem_sp_local_key_invalid 7571 c1808000 rtnne sp_key_valid 7572 6800c4be fetch 1 ,mem_le_secure_connect_enable 7573 207a0000 rtn blank 7574 6800c4c3 fetch 1 ,mem_le_sc_local_key_invalid 7575 c1018000 rtneq sp_key_valid_256 7576 68014682 fetch 2 ,mem_ui_state_map 7577 c280757b bbit1 ui_state_bt_connected ,stop_publickey_calc_256 7578 6800c4c0 fetch 1 ,mem_le_sc_calc 7579 c0007a77 beq sp_calc_standby ,sp_initialize_256 757a 20600000 rtn stop_publickey_calc_256: 757b 7044c000 jam sp_calc_standby ,mem_le_sc_calc 757c 20600000 rtn sp_initialize: 757d 4772c03c bpatchx patch3c_5 ,mem_patch3c 757e 6800c65a fetch 1 ,mem_ssp_enable 757f 203a612b branch ssp_disable ,blank 7580 20406124 call ssp_enable 7581 20407583 call sp_clear_flags 7582 2020766d branch sp_pubkey_calc sp_clear_flags: 7583 58000000 setarg 0 7584 600409ae store 8 ,mem_sp_state_start 7585 600209b6 store 4 ,mem_sp_flag_start 7586 6003c65e store 7 ,mem_sp_iocap_remote 7587 20600000 rtn sp_generate_local_key: 7588 7009b001 jam sp_flag_commit ,mem_sp_flag 7589 2020758d branch sp_generate_local_key0 sp_master_generate_local_key: 758a 6800c5b1 fetch 1 ,mem_sp_local_key_invalid 758b c000f68a beq sp_key_valid ,sp_dhkey_calc 758c 20202a8c branch assert sp_generate_local_key0: 758d 6800c5b1 fetch 1 ,mem_sp_local_key_invalid 758e c000f590 beq sp_key_valid ,sp_start_send_pubkey 758f 2020766d branch sp_pubkey_calc sp_start_send_pubkey: 7590 2040768a call sp_dhkey_calc 7591 680089af fetch 1 ,mem_master_sp_state 7592 247a0000 nrtn blank 7593 7009ae03 jam sp_stat_key_send ,mem_sp_state 7594 20600000 rtn sp_calc_check_publickey_256: 7595 204075b0 call sp_calc_b256 7596 da2009de arg mem_le_pubkey_remote_y_256 ,rega 7597 d8a00866 arg mem_t7_256 ,contw 7598 20407c79 call bn_sqrmod_256 7599 da2009be arg mem_le_pubkey_remote_x_256 ,rega 759a d8a00826 arg mem_t2_256 ,contw 759b 20407c79 call bn_sqrmod_256 759c da200826 arg mem_t2_256 ,rega 759d da4009be arg mem_le_pubkey_remote_x_256 ,regb 759e d8a00826 arg mem_t2_256 ,contw 759f 20407be1 call bn_mulmod_256 75a0 da20093e arg mem_a_256 ,rega 75a1 da4009be arg mem_le_pubkey_remote_x_256 ,regb 75a2 d8a00846 arg mem_t3_256 ,contw 75a3 20407be1 call bn_mulmod_256 75a4 da200846 arg mem_t3_256 ,rega 75a5 da400826 arg mem_t2_256 ,regb 75a6 d8a00826 arg mem_t2_256 ,contw 75a7 20407c7d call bn_addmod_256 75a8 da200806 arg mem_t0_256 ,rega 75a9 da400826 arg mem_t2_256 ,regb 75aa d8a00806 arg mem_t0_256 ,contw 75ab 20407c7d call bn_addmod_256 75ac df200020 arg 32 ,loopcnt 75ad da200866 arg mem_t7_256 ,rega 75ae da400806 arg mem_t0_256 ,regb 75af 20207f88 branch string_compare sp_calc_b256: 75b0 da20097e arg mem_gy_256 ,rega 75b1 d8a00806 arg mem_t0_256 ,contw 75b2 20407c79 call bn_sqrmod_256 75b3 da20095e arg mem_gx_256 ,rega 75b4 d8a00826 arg mem_t2_256 ,contw 75b5 20407c79 call bn_sqrmod_256 75b6 da200826 arg mem_t2_256 ,rega 75b7 da40095e arg mem_gx_256 ,regb 75b8 d8a00826 arg mem_t2_256 ,contw 75b9 20407be1 call bn_mulmod_256 75ba da20093e arg mem_a_256 ,rega 75bb da40095e arg mem_gx_256 ,regb 75bc d8a00846 arg mem_t3_256 ,contw 75bd 20407be1 call bn_mulmod_256 75be da200846 arg mem_t3_256 ,rega 75bf da400826 arg mem_t2_256 ,regb 75c0 d8a00826 arg mem_t2_256 ,contw 75c1 20407c7d call bn_addmod_256 75c2 da200806 arg mem_t0_256 ,rega 75c3 da400826 arg mem_t2_256 ,regb 75c4 d8a00806 arg mem_t0_256 ,contw 75c5 20207c96 branch bn_submod_256 sp_calc_check_publickey: 75c6 204075e1 call sp_calc_b 75c7 da2009e6 arg mem_sp_pubkey_remote_y ,rega 75c8 d8a00866 arg mem_t7_256 ,contw 75c9 204077a8 call bn_sqrmod 75ca da2009c6 arg mem_sp_pubkey_remote_x ,rega 75cb d8a00826 arg mem_t2_256 ,contw 75cc 204077a8 call bn_sqrmod 75cd da200826 arg mem_t2_256 ,rega 75ce da4009c6 arg mem_sp_pubkey_remote_x ,regb 75cf d8a00826 arg mem_t2_256 ,contw 75d0 20407786 call bn_mulmod 75d1 da20089e arg mem_a ,rega 75d2 da4009c6 arg mem_sp_pubkey_remote_x ,regb 75d3 d8a00846 arg mem_t3_256 ,contw 75d4 20407786 call bn_mulmod 75d5 da200846 arg mem_t3_256 ,rega 75d6 da400826 arg mem_t2_256 ,regb 75d7 d8a00826 arg mem_t2_256 ,contw 75d8 20407755 call bn_addmod 75d9 da200806 arg mem_t0_256 ,rega 75da da400826 arg mem_t2_256 ,regb 75db d8a00806 arg mem_t0_256 ,contw 75dc 20407755 call bn_addmod 75dd df200018 arg 24 ,loopcnt 75de da200866 arg mem_t7_256 ,rega 75df da400806 arg mem_t0_256 ,regb 75e0 20207f88 branch string_compare sp_calc_b: 75e1 da2008e6 arg mem_gy ,rega 75e2 d8a00806 arg mem_t0_256 ,contw 75e3 204077a8 call bn_sqrmod 75e4 da2008ce arg mem_gx ,rega 75e5 d8a00826 arg mem_t2_256 ,contw 75e6 204077a8 call bn_sqrmod 75e7 da200826 arg mem_t2_256 ,rega 75e8 da4008ce arg mem_gx ,regb 75e9 d8a00826 arg mem_t2_256 ,contw 75ea 20407786 call bn_mulmod 75eb da20089e arg mem_a ,rega 75ec da4008ce arg mem_gx ,regb 75ed d8a00846 arg mem_t3_256 ,contw 75ee 20407786 call bn_mulmod 75ef da200846 arg mem_t3_256 ,rega 75f0 da400826 arg mem_t2_256 ,regb 75f1 d8a00826 arg mem_t2_256 ,contw 75f2 20407755 call bn_addmod 75f3 da200806 arg mem_t0_256 ,rega 75f4 da400826 arg mem_t2_256 ,regb 75f5 d8a00806 arg mem_t0_256 ,contw 75f6 20207758 branch bn_submod sp_calculate_commitment: 75f7 680089b2 fetch 1 ,mem_sp_calc 75f8 c0807615 bne sp_calc_standby ,sp_calculate_commitment_wait_dhkey_calc 75f9 20407612 call sp_local_random_key_generator 75fa d8a00a7e arg mem_sp_prarm_stack ,contw 75fb 58000a2e setarg mem_sp_random_local_end 75fc e0a10000 istore 2 ,contw 75fd 58004642 setarg mem_sp_pubkey_local_x_end 75fe e0a10000 istore 2 ,contw 75ff 580009de setarg mem_sp_pubkey_remote_x_end 7600 e0a10000 istore 2 ,contw 7601 20207609 branch sp_calculate_commitment0 master_sp_calculate_commitment: 7602 d8a00a7e arg mem_sp_prarm_stack ,contw 7603 58000a3e setarg mem_sp_random_remote_end 7604 e0a10000 istore 2 ,contw 7605 580009de setarg mem_sp_pubkey_remote_x_end 7606 e0a10000 istore 2 ,contw 7607 58004642 setarg mem_sp_pubkey_local_x_end 7608 e0a10000 istore 2 ,contw sp_calculate_commitment0: 7609 204079a0 call function_f1 760a 680089af fetch 1 ,mem_master_sp_state 760b c002760f beq sp_stat_commit_calc ,master_sp_calculate_commitment0 760c 7009b001 jam sp_flag_commit ,mem_sp_flag 760d 7009ae05 jam sp_stat_commit_send ,mem_sp_state 760e 20600000 rtn master_sp_calculate_commitment0: 760f 7009af14 jam sp_stat_commitment_compare ,mem_master_sp_state 7610 2040758a call sp_master_generate_local_key 7611 202076d8 branch master_set_mem_master_sp_flag sp_local_random_key_generator: 7612 d8a00a1e arg mem_sp_random_local ,contw 7613 18000e08 force 8 ,queue 7614 202076a2 branch random_generator sp_calculate_commitment_wait_dhkey_calc: 7615 7009b001 jam sp_flag_commit ,mem_sp_flag 7616 20600000 rtn sp_confirm_check: 7617 4773403c bpatchx patch3c_6 ,mem_patch3c 7618 d8a00727 arg mem_addr_value ,contw 7619 680340a0 fetch 6 ,mem_lap 761a e0a30000 istore 6 ,contw 761b 68030040 fetch 6 ,mem_plap 761c e0a30000 istore 6 ,contw 761d 6801c65e fetch 3 ,mem_sp_iocap_remote 761e e0a18000 istore 3 ,contw 761f 20407a0d call function_f3a 7620 da200a4e arg mem_sp_calc_result_high ,rega 7621 da400a5e arg mem_sp_check_result ,regb 7622 18000e04 force 4 ,queue 7623 204076a7 call compare4 7624 2420f631 nbranch sp_confirm_check_failed ,true 7625 20407628 call sp_confirm_check_success 7626 70007d41 jam lmp_dhkey_check ,mem_lmi_opcode2 7627 202062f8 branch tid_set_reply sp_confirm_check_success: 7628 680089af fetch 1 ,mem_master_sp_state 7629 c004f62e beq sp_stat_confirm_check ,sp_confirm_check_success_master 762a 7009ae0a jam sp_stat_confirm_calc ,mem_sp_state 762b 7009b001 jam sp_flag_commit ,mem_sp_flag 762c 70007c03 jam lmp_accepted ,mem_lmo_opcode2 762d 20600000 rtn sp_confirm_check_success_master: 762e 70007c03 jam lmp_accepted ,mem_lmo_opcode2 762f 7009af15 jam sp_state_end ,mem_master_sp_state 7630 202076d8 branch master_set_mem_master_sp_flag sp_confirm_check_failed: 7631 680089af fetch 1 ,mem_master_sp_state 7632 c004f637 beq sp_stat_confirm_check ,sp_confirm_check_failed_master 7633 7009ae00 jam sp_stat_null ,mem_sp_state 7634 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 7635 70007e05 jam authentication_failure_error ,mem_lmo_reason2 7636 20600000 rtn sp_confirm_check_failed_master: 7637 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 7638 7009af00 jam sp_stat_null ,mem_master_sp_state 7639 20600000 rtn sp_confirm_calc: 763a 680089b3 fetch 1 ,mem_sp_dh_ready 763b c000f63e beq sp_flag_commit ,sp_confirm_calc_ready 763c 7009af0a jam sp_stat_confirm_calc ,mem_master_sp_state 763d 202076d8 branch master_set_mem_master_sp_flag sp_confirm_calc_ready: 763e d8a00727 arg mem_addr_value ,contw 763f 68030040 fetch 6 ,mem_plap 7640 e0a30000 istore 6 ,contw 7641 680340a0 fetch 6 ,mem_lap 7642 e0a30000 istore 6 ,contw 7643 6801c65b fetch 3 ,mem_sp_iocap_local 7644 e0a18000 istore 3 ,contw 7645 20407a24 call function_f3b 7646 680089af fetch 1 ,mem_master_sp_state 7647 c005764b beq sp_stat_confirm_calc ,sp_confirm_calc_master 7648 7009ae0b jam sp_stat_confirm_send ,mem_sp_state 7649 7009b001 jam sp_flag_commit ,mem_sp_flag 764a 20600000 rtn sp_confirm_calc_master: 764b 7009af0b jam sp_stat_confirm_send ,mem_master_sp_state 764c 7009b101 jam sp_flag_commit ,mem_master_sp_flag 764d 20600000 rtn sp_master_key_prarm_push: 764e d8a00a7e arg mem_sp_prarm_stack ,contw 764f 68030040 fetch 6 ,mem_plap 7650 e0a30000 istore 6 ,contw 7651 680340a0 fetch 6 ,mem_lap 7652 e0a30000 istore 6 ,contw 7653 58000a2e setarg mem_sp_random_local_end 7654 e0a10000 istore 2 ,contw 7655 58000a3e setarg mem_sp_random_remote_end 7656 e0a10000 istore 2 ,contw 7657 20207662 branch sp_link_key_calc sp_link_key_prarm_push: 7658 7009ae0f jam sp_stat_done ,mem_sp_state 7659 d8a00a7e arg mem_sp_prarm_stack ,contw 765a 680340a0 fetch 6 ,mem_lap 765b e0a30000 istore 6 ,contw 765c 68030040 fetch 6 ,mem_plap 765d e0a30000 istore 6 ,contw 765e 58000a3e setarg mem_sp_random_remote_end 765f e0a10000 istore 2 ,contw 7660 58000a2e setarg mem_sp_random_local_end 7661 e0a10000 istore 2 ,contw sp_link_key_calc: 7662 d8a00727 arg mem_addr_value ,contw 7663 68030a7e fetch 6 ,mem_sp_prarm_stack 7664 e0a30000 istore 6 ,contw 7665 68030a84 fetch 6 ,mem_sp_prarm_stack + 6 7666 e0a30000 istore 6 ,contw 7667 204079d7 call function_f2 7668 7041bd01 jam 1 ,mem_link_key_exists 7669 d8a041be arg mem_link_key ,contw 766a d8c00a4e arg mem_sp_calc_result_high ,contr 766b 20407ebf call memcpy16 766c 202021c4 branch generate_linkkey_continue sp_pubkey_calc: 766d 4773c03c bpatchx patch3c_7 ,mem_patch3c 766e 6800c5b1 fetch 1 ,mem_sp_local_key_invalid 766f c1800000 rtnne sp_key_invalid 7670 680089b2 fetch 1 ,mem_sp_calc 7671 c1800000 rtnne sp_calc_standby 7672 d8a04612 arg mem_sp_private_key ,contw 7673 18000e0b force 11 ,queue 7674 204076a2 call random_generator 7675 180a7e00 random pdata 7676 1fe37e00 rshift pdata ,pdata 7677 e0a10000 istore 2 ,contw 7678 d8a006be arg mem_k ,contw 7679 d8c04612 arg mem_sp_private_key ,contr 767a 20407ebe call memcpy24 767b d8a005e6 arg mem_ax ,contw 767c d8c008ce arg mem_gx ,contr 767d 20407ebc call memcpy48 767e d8a00616 arg mem_az ,contw 767f 20407ec5 call bn_zero 7680 70061601 jam 1 ,mem_az 7681 20407a5d call eckp_calc_init 7682 7009b201 jam sp_calc_pubkey ,mem_sp_calc 7683 20600000 rtn sp_pubkey_generated: 7684 d8a0462a arg mem_sp_pubkey_local ,contw 7685 d8c0062e arg mem_bx ,contr 7686 20407ebc call memcpy48 7687 7045b101 jam sp_key_valid ,mem_sp_local_key_invalid 7688 7009b200 jam sp_calc_standby ,mem_sp_calc 7689 20600000 rtn sp_dhkey_calc: 768a 4774403d bpatchx patch3d_0 ,mem_patch3d 768b 680089b9 fetch 1 ,mem_sp_dhkey_invalid 768c c1800000 rtnne sp_key_invalid 768d 680089b2 fetch 1 ,mem_sp_calc 768e c1800000 rtnne sp_calc_standby 768f d8a006be arg mem_k ,contw 7690 d8c04612 arg mem_sp_private_key ,contr 7691 20407ebe call memcpy24 7692 d8a005e6 arg mem_ax ,contw 7693 d8c009c6 arg mem_sp_pubkey_remote ,contr 7694 20407ebc call memcpy48 7695 d8a00616 arg mem_az ,contw 7696 20407ec5 call bn_zero 7697 70061601 jam 1 ,mem_az 7698 20407a5d call eckp_calc_init 7699 7009b202 jam sp_calc_dhkey ,mem_sp_calc 769a 20600000 rtn sp_dhkey_generated: 769b 7009b301 jam sp_flag_commit ,mem_sp_dh_ready 769c d8a00a06 arg mem_sp_dhkey ,contw 769d d8c0062e arg mem_bx ,contr 769e 20407ebe call memcpy24 769f 7009b901 jam sp_key_valid ,mem_sp_dhkey_invalid 76a0 7009b200 jam sp_calc_standby ,mem_sp_calc 76a1 20600000 rtn random_generator: 76a2 18e08fff increase -1 ,queue 76a3 24610000 nrtn positive 76a4 180a7e00 random pdata 76a5 e0a10000 istore 2 ,contw 76a6 202076a2 branch random_generator compare4: 76a7 18e08fff increase -1 ,queue 76a8 242176b3 nbranch compare4_success ,positive 76a9 ea220000 ifetch 4 ,rega 76aa 1fe20400 copy pdata ,temp 76ab ea420000 ifetch 4 ,regb 76ac 9842fe00 iflip temp ,pdata 76ad 2422f6b1 nbranch compare4_failed ,zero 76ae 1a20a204 increase 4 ,rega 76af 1a40a404 increase 4 ,regb 76b0 202076a7 branch compare4 compare4_failed: 76b1 7840fc00 disable true 76b2 20600000 rtn compare4_success: 76b3 7820fc00 enable true 76b4 20600000 rtn simple_pairing_sequence: 76b5 4774c03d bpatchx patch3d_1 ,mem_patch3d 76b6 680089b0 fetch 1 ,mem_sp_flag 76b7 207a0000 rtn blank 76b8 204062bc call lmo_fifo_check 76b9 247a0000 nrtn blank 76ba 7009b000 jam sp_flag_standby ,mem_sp_flag 76bb 680089ae fetch 1 ,mem_sp_state 76bc c001e1fd beq sp_stat_key_send ,sp_send_lmp_encapsulated_header 76bd c002e21a beq sp_stat_commit_send ,sp_send_lmp_simple_pairing_comfirm 76be c003e225 beq sp_stat_random_send ,sp_send_lmp_simple_pairing_number 76bf c005e23a beq sp_stat_confirm_send ,sp_send_lmp_dhkey_check 76c0 c0017588 beq sp_stat_key_generate ,sp_generate_local_key 76c1 c00275f7 beq sp_stat_commit_calc ,sp_calculate_commitment 76c2 c004f617 beq sp_stat_confirm_check ,sp_confirm_check 76c3 c005763a beq sp_stat_confirm_calc ,sp_confirm_calc 76c4 c0067658 beq sp_stat_link_key_calc ,sp_link_key_prarm_push 76c5 20600000 rtn master_simple_paring_sequence: 76c6 4775403d bpatchx patch3d_2 ,mem_patch3d 76c7 680089b1 fetch 1 ,mem_master_sp_flag 76c8 207a0000 rtn blank 76c9 204062bc call lmo_fifo_check 76ca 247a0000 nrtn blank 76cb 7009b100 jam sp_flag_standby ,mem_master_sp_flag 76cc 680089af fetch 1 ,mem_master_sp_state 76cd c00961e0 beq sp_master_stat_start_skip ,sp_master_send_io_cap_get 76ce c009e1e5 beq sp_master_stat_start_done ,sp_master_send_io_cap_send 76cf c001e1e9 beq sp_stat_key_send ,sp_master_send_lmp_encapsulated_header 76d0 c0027602 beq sp_stat_commit_calc ,master_sp_calculate_commitment 76d1 c00a61ed beq sp_stat_commitment_compare ,sp_master_commitment_compare 76d2 c003e1fb beq sp_stat_random_send ,sp_master_send_lmp_simple_pairing_number 76d3 c005763a beq sp_stat_confirm_calc ,sp_confirm_calc 76d4 c005e239 beq sp_stat_confirm_send ,master_sp_send_lmp_dhkey_check 76d5 c004f617 beq sp_stat_confirm_check ,sp_confirm_check 76d6 c00ae233 beq sp_state_end ,master_sp_sm_end 76d7 20600000 rtn master_set_mem_master_sp_flag: 76d8 7009b101 jam sp_flag_commit ,mem_master_sp_flag 76d9 20600000 rtn master_clear_mem_master_sp_flag: 76da 7009b100 jam sp_flag_standby ,mem_master_sp_flag 76db 20600000 rtn sp_calc_sequence: 76dc 4775c03d bpatchx patch3d_3 ,mem_patch3d 76dd 6800c65a fetch 1 ,mem_ssp_enable 76de 207a0000 rtn blank 76df 680089b2 fetch 1 ,mem_sp_calc 76e0 207a0000 rtn blank 76e1 1fe0fe80 increase 0x80 ,pdata 76e2 600089b2 store 1 ,mem_sp_calc 76e3 c3838000 rtnbit1 7 76e4 680085e3 fetch 1 ,mem_ec_loopc 76e5 203a76e7 branch sp_calc_sequence_done ,blank 76e6 20207a68 branch eckp_calc sp_calc_sequence_done: 76e7 204078d3 call ecunmapz 76e8 680089b2 fetch 1 ,mem_sp_calc 76e9 c000f684 beq sp_calc_pubkey ,sp_pubkey_generated 76ea c001769b beq sp_calc_dhkey ,sp_dhkey_generated 76eb 20600000 rtn bn_testbit: 76ec 1fe10e07 and pdata ,7 ,queue 76ed 1fe97e00 rshift3 pdata ,pdata 76ee 98c08c00 iadd contr ,contr 76ef e8c08000 ifetch 1 ,contr 76f0 afec0000 qisolate0 pdata 76f1 20600000 rtn ec_copy: 76f2 20407ebe call memcpy24 76f3 20407ebe call memcpy24 76f4 20207ebe branch memcpy24 bn_eq_zero: 76f5 e8c40000 ifetch 8 ,contr 76f6 247a0000 nrtn blank 76f7 e8c40000 ifetch 8 ,contr 76f8 247a0000 nrtn blank 76f9 e8c40000 ifetch 8 ,contr 76fa 20600000 rtn bn_eq_0: 76fb ea220000 ifetch 4 ,rega 76fc 98000400 iforce temp 76fd ea420000 ifetch 4 ,regb 76fe 98467c00 isub temp ,null 76ff 24628000 nrtn zero 7700 1a20a204 increase 4 ,rega 7701 1a40a404 increase 4 ,regb 7702 c20076fb loop bn_eq_0 7703 20600000 rtn bn_bigeq: 7704 18007206 force 6 ,loopcnt 7705 1a20a214 increase 20 ,rega 7706 1a40a414 increase 20 ,regb bn_bigeq_0: 7707 ea420000 ifetch 4 ,regb 7708 98000400 iforce temp 7709 ea220000 ifetch 4 ,rega 770a 98467e00 isub temp ,pdata 770b 24610000 nrtn positive 770c 247a0000 nrtn blank 770d 1a20a3fc increase -4 ,rega 770e 1a40a5fc increase -4 ,regb 770f c2007707 loop bn_bigeq_0 7710 20600000 rtn bn_add: 7711 18007206 force 6 ,loopcnt 7712 18002600 force 0 ,regc bn_add_0: 7713 ea220000 ifetch 4 ,rega 7714 98000400 iforce temp 7715 ea420000 ifetch 4 ,regb 7716 9840fe00 iadd temp ,pdata 7717 9a60fe00 iadd regc ,pdata 7718 e0a20000 istore 4 ,contw 7719 2feffe20 isolate1 32 ,pdata 771a 7920a600 setflag true ,0 ,regc 771b 1a20a204 increase 4 ,rega 771c 1a40a404 increase 4 ,regb 771d c2007713 loop bn_add_0 771e 20600000 rtn bn_sub: 771f 18007206 force 6 ,loopcnt 7720 18002600 force 0 ,regc bn_sub_0: 7721 ea420000 ifetch 4 ,regb 7722 98000400 iforce temp 7723 ea220000 ifetch 4 ,rega 7724 98467e00 isub temp ,pdata 7725 9a667e00 isub regc ,pdata 7726 e0a20000 istore 4 ,contw 7727 2feffe20 isolate1 32 ,pdata 7728 7920a600 setflag true ,0 ,regc 7729 1a20a204 increase 4 ,rega 772a 1a40a404 increase 4 ,regb 772b c2007721 loop bn_sub_0 772c 20600000 rtn bn_rshift6: 772d 18007206 force 6 ,loopcnt 772e 1a20a214 increase 20 ,rega bn_rshift: 772f 18002600 force 0 ,regc bn_rshift_0: 7730 ea220000 ifetch 4 ,rega 7731 2feffe00 isolate1 0 ,pdata 7732 7920a601 setflag true ,1 ,regc 7733 1fe37e00 rshift pdata ,pdata 7734 2a6ffe00 isolate1 0 ,regc 7735 7920fe1f setflag true ,31 ,pdata 7736 e2220000 istore 4 ,rega 7737 1a20a3fc increase -4 ,rega 7738 1a632600 rshift regc ,regc 7739 c2007730 loop bn_rshift_0 773a 20600000 rtn bn_lshift: 773b 18007206 force 6 ,loopcnt 773c 18002600 force 0 ,regc bn_lshift_0: 773d ea220000 ifetch 4 ,rega 773e 2feffe1f isolate1 31 ,pdata 773f 7920a601 setflag true ,1 ,regc 7740 1fe3fe00 lshift pdata ,pdata 7741 2a6ffe00 isolate1 0 ,regc 7742 7920fe00 setflag true ,0 ,pdata 7743 e2220000 istore 4 ,rega 7744 1a20a204 increase 4 ,rega 7745 1a632600 rshift regc ,regc 7746 c200773d loop bn_lshift_0 7747 20600000 rtn bn_lshiftmod: 7748 2040773b call bn_lshift bn_lshiftmod_ismod: 7749 2a6ffe00 isolate1 0 ,regc 774a 2020f751 branch bn_lshiftmod_0 ,true 774b da400886 arg mem_p ,regb 774c 1a222600 copy rega ,regc 774d 1a20a3e8 increase -24 ,rega 774e 20407704 call bn_bigeq 774f 24610000 nrtn positive 7750 1a622200 copy regc ,rega bn_lshiftmod_0: 7751 1a20a3e8 increase -24 ,rega 7752 da400886 arg mem_p ,regb 7753 1a220a00 copy rega ,contw 7754 2020771f branch bn_sub bn_addmod: 7755 20407711 call bn_add 7756 18a22200 copy contw ,rega 7757 20207749 branch bn_lshiftmod_ismod bn_submod: 7758 2040771f call bn_sub 7759 2a6c0000 isolate0 0 ,regc 775a 20608000 rtn true 775b da400886 arg mem_p ,regb 775c 18a0a3e8 add contw ,-24 ,rega 775d 1a220a00 copy rega ,contw 775e 20207711 branch bn_add bn_p192mod: 775f 18a21600 copy contw ,timeup 7760 1a226000 copy rega ,alarm 7761 da400716 arg mem_tmp2 ,regb 7762 1a420a00 copy regb ,contw 7763 1a208c18 add rega ,24 ,contr 7764 e8c40000 ifetch 8 ,contr 7765 e0a40000 istore 8 ,contw 7766 e0a40000 istore 8 ,contw 7767 18007e00 force 0 ,pdata 7768 e0a40000 istore 8 ,contw 7769 19620a00 copy timeup ,contw 776a 20407755 call bn_addmod 776b da400716 arg mem_tmp2 ,regb 776c 1a420a00 copy regb ,contw 776d 18007e00 force 0 ,pdata 776e e0a40000 istore 8 ,contw 776f 1e008c20 add alarm ,32 ,contr 7770 e8c40000 ifetch 8 ,contr 7771 e0a40000 istore 8 ,contw 7772 e0a40000 istore 8 ,contw 7773 19622200 copy timeup ,rega 7774 1a220a00 copy rega ,contw 7775 20407755 call bn_addmod 7776 da400716 arg mem_tmp2 ,regb 7777 1a420a00 copy regb ,contw 7778 1e008c28 add alarm ,40 ,contr 7779 e8c40000 ifetch 8 ,contr 777a e0a40000 istore 8 ,contw 777b e0a40000 istore 8 ,contw 777c e0a40000 istore 8 ,contw 777d 19622200 copy timeup ,rega 777e 1a220a00 copy rega ,contw 777f 20207755 branch bn_addmod bn_load: 7780 18007206 force 6 ,loopcnt bn_load_0: 7781 e8c20000 ifetch 4 ,contr 7782 98005e00 iforce regext 7783 1f00f001 increase 1 ,regext_index 7784 c2007781 loop bn_load_0 7785 20600000 rtn bn_mulmod: 7786 18a21600 copy contw ,timeup 7787 d8a006e6 arg mem_tmp1 ,contw 7788 20407ec5 call bn_zero 7789 d8a006e6 arg mem_tmp1 ,contw 778a 1a220c00 copy rega ,contr 778b 18007000 force 0 ,regext_index 778c 20407780 call bn_load 778d 1a420c00 copy regb ,contr 778e 20407780 call bn_load 778f 18002400 force 0 ,regb bn_mulmod_1: 7790 18000400 force 0 ,temp 7791 18002606 force 6 ,regc bn_mulmod_0: 7792 e8a20000 ifetch 4 ,contw 7793 98002200 iforce rega 7794 1a427000 copy regb ,regext_index 7795 1de27e00 deposit regext 7796 1a627000 copy regc ,regext_index 7797 9deffe00 imul32 regext ,pdata 7798 9a20fe00 iadd rega ,pdata 7799 9840fe00 iadd temp ,pdata 779a e0a20000 istore 4 ,contw 779b 1fef0400 rshift32 pdata ,temp 779c 1a60a601 increase 1 ,regc 779d 2a61fe0c compare 12 ,regc ,0xff 779e 2420f792 nbranch bn_mulmod_0 ,true 779f 18427e00 deposit temp 77a0 e0a20000 istore 4 ,contw 77a1 18a08be8 increase -24 ,contw 77a2 1a40a401 increase 1 ,regb 77a3 2a41fe06 compare 6 ,regb ,0xff 77a4 2420f790 nbranch bn_mulmod_1 ,true 77a5 da2006e6 arg mem_tmp1 ,rega 77a6 19620a00 copy timeup ,contw 77a7 2020775f branch bn_p192mod bn_sqrmod: 77a8 1a222400 copy rega ,regb 77a9 20207786 branch bn_mulmod bn_rshifteven: 77aa 1a226000 copy rega ,alarm bn_rshifteven_1: 77ab 1e022200 copy alarm ,rega 77ac ea208000 ifetch 1 ,rega 77ad 2feffe00 isolate1 0 ,pdata 77ae 20608000 rtn true 77af 2040772d call bn_rshift6 77b0 ea408000 ifetch 1 ,regb 77b1 2fec0000 isolate0 0 ,pdata 77b2 2020f7ba branch bn_rshifteven_0 ,true 77b3 da200886 arg mem_p ,rega 77b4 1a420a00 copy regb ,contw 77b5 20407711 call bn_add 77b6 ea408000 ifetch 1 ,regb 77b7 9a60fe00 iadd regc ,pdata 77b8 e2408000 istore 1 ,regb 77b9 1a40a5e8 increase -24 ,regb bn_rshifteven_0: 77ba 1a40a218 add regb ,24 ,rega 77bb 18007207 force 7 ,loopcnt 77bc 2040772f call bn_rshift 77bd 202077ab branch bn_rshifteven_1 bn_invmod: 77be 18a21600 copy contw ,timeup 77bf d8a00746 arg mem_tmp0 ,contw 77c0 20407ec5 call bn_zero 77c1 18007e00 force 0 ,pdata 77c2 600206fe store 4 ,mem_tmp5 77c3 6002075e store 4 ,mem_t2 77c4 70074601 jam 1 ,mem_tmp0 77c5 d8a006e6 arg mem_tmp1 ,contw 77c6 20407ec5 call bn_zero 77c7 d8c00886 arg mem_p ,contr 77c8 d8a00716 arg mem_tmp2 ,contw 77c9 20407ebe call memcpy24 77ca 1a220c00 copy rega ,contr 77cb d8a0072e arg mem_tmp3 ,contw 77cc 20407ebe call memcpy24 bn_invmod_2: 77cd d8c0072e arg mem_tmp3 ,contr 77ce 204076f5 call bn_eq_zero 77cf 203a77f6 branch bn_invmod_0 ,blank 77d0 da20072e arg mem_tmp3 ,rega 77d1 da400746 arg mem_tmp0 ,regb 77d2 204077aa call bn_rshifteven 77d3 da200716 arg mem_tmp2 ,rega 77d4 da4006e6 arg mem_tmp1 ,regb 77d5 204077aa call bn_rshifteven 77d6 da20072e arg mem_tmp3 ,rega 77d7 da400716 arg mem_tmp2 ,regb 77d8 20407704 call bn_bigeq 77d9 202177e8 branch bn_invmod_1 ,positive 77da da200716 arg mem_tmp2 ,rega 77db da40072e arg mem_tmp3 ,regb 77dc 1a220a00 copy rega ,contw 77dd 2040771f call bn_sub 77de da200746 arg mem_tmp0 ,rega 77df da4006e6 arg mem_tmp1 ,regb 77e0 1a420a00 copy regb ,contw 77e1 20407711 call bn_add 77e2 ea208000 ifetch 1 ,rega 77e3 9a60a600 iadd regc ,regc 77e4 ea408000 ifetch 1 ,regb 77e5 9a60fe00 iadd regc ,pdata 77e6 e2408000 istore 1 ,regb 77e7 202077cd branch bn_invmod_2 bn_invmod_1: 77e8 da20072e arg mem_tmp3 ,rega 77e9 da400716 arg mem_tmp2 ,regb 77ea 1a220a00 copy rega ,contw 77eb 2040771f call bn_sub 77ec da2006e6 arg mem_tmp1 ,rega 77ed da400746 arg mem_tmp0 ,regb 77ee 1a420a00 copy regb ,contw 77ef 20407711 call bn_add 77f0 ea208000 ifetch 1 ,rega 77f1 9a60a600 iadd regc ,regc 77f2 ea408000 ifetch 1 ,regb 77f3 9a60fe00 iadd regc ,pdata 77f4 e2408000 istore 1 ,regb 77f5 202077cd branch bn_invmod_2 bn_invmod_0: 77f6 d8a00746 arg mem_tmp0 ,contw 77f7 20407ec5 call bn_zero 77f8 680086fe fetch 1 ,mem_tmp5 77f9 60008746 store 1 ,mem_tmp0 77fa 6000874e store 1 ,mem_tmp0a 77fb da200746 arg mem_tmp0 ,rega 77fc da4006e6 arg mem_tmp1 ,regb 77fd 1a420a00 copy regb ,contw 77fe 20407755 call bn_addmod 77ff da200886 arg mem_p ,rega 7800 da4006e6 arg mem_tmp1 ,regb 7801 19620a00 copy timeup ,contw 7802 20207758 branch bn_submod ecdbl: 7803 da2006a6 arg mem_cz ,rega 7804 d8a0075e arg mem_t2 ,contw 7805 204077a8 call bn_sqrmod 7806 da20075e arg mem_t2 ,rega 7807 d8a00776 arg mem_t3 ,contw 7808 204077a8 call bn_sqrmod 7809 da20089e arg mem_a ,rega 780a da400776 arg mem_t3 ,regb 780b d8a00776 arg mem_t3 ,contw 780c 20407786 call bn_mulmod 780d da200676 arg mem_cx ,rega 780e d8a0075e arg mem_t2 ,contw 780f 204077a8 call bn_sqrmod 7810 d8c0075e arg mem_t2 ,contr 7811 d8a0072e arg mem_t1 ,contw 7812 20407ebe call memcpy24 7813 da20072e arg mem_t1 ,rega 7814 20407748 call bn_lshiftmod 7815 da20075e arg mem_t2 ,rega 7816 da40072e arg mem_t1 ,regb 7817 d8a0075e arg mem_t2 ,contw 7818 20407755 call bn_addmod 7819 da20075e arg mem_t2 ,rega 781a da400776 arg mem_t3 ,regb 781b d8a0075e arg mem_t2 ,contw 781c 20407755 call bn_addmod 781d d8c00676 arg mem_cx ,contr 781e d8a0072e arg mem_t1 ,contw 781f 20407ebe call memcpy24 7820 da20068e arg mem_cy ,rega 7821 d8a00776 arg mem_t3 ,contw 7822 204077a8 call bn_sqrmod 7823 da20072e arg mem_t1 ,rega 7824 20407748 call bn_lshiftmod 7825 da20072e arg mem_t1 ,rega 7826 20407748 call bn_lshiftmod 7827 da20072e arg mem_t1 ,rega 7828 da400776 arg mem_t3 ,regb 7829 d8a0072e arg mem_t1 ,contw 782a 20407786 call bn_mulmod 782b da200776 arg mem_t3 ,rega 782c d8a00746 arg mem_t0 ,contw 782d 204077a8 call bn_sqrmod 782e da200746 arg mem_t0 ,rega 782f 20407748 call bn_lshiftmod 7830 da200746 arg mem_t0 ,rega 7831 20407748 call bn_lshiftmod 7832 da200746 arg mem_t0 ,rega 7833 20407748 call bn_lshiftmod 7834 d8c0068e arg mem_cy ,contr 7835 d8a00776 arg mem_t3 ,contw 7836 20407ebe call memcpy24 7837 da200776 arg mem_t3 ,rega 7838 20407748 call bn_lshiftmod 7839 da200776 arg mem_t3 ,rega 783a da4006a6 arg mem_cz ,regb 783b d8a006a6 arg mem_cz ,contw 783c 20407786 call bn_mulmod 783d da20075e arg mem_t2 ,rega 783e d8a00776 arg mem_t3 ,contw 783f 204077a8 call bn_sqrmod 7840 da200776 arg mem_t3 ,rega 7841 da40072e arg mem_t1 ,regb 7842 d8a00776 arg mem_t3 ,contw 7843 20407758 call bn_submod 7844 da200776 arg mem_t3 ,rega 7845 da40072e arg mem_t1 ,regb 7846 d8a00676 arg mem_cx ,contw 7847 20407758 call bn_submod 7848 da20072e arg mem_t1 ,rega 7849 da400676 arg mem_cx ,regb 784a d8a00776 arg mem_t3 ,contw 784b 20407758 call bn_submod 784c da200776 arg mem_t3 ,rega 784d da40075e arg mem_t2 ,regb 784e d8a00776 arg mem_t3 ,contw 784f 20407786 call bn_mulmod 7850 da200776 arg mem_t3 ,rega 7851 da400746 arg mem_t0 ,regb 7852 d8a0068e arg mem_cy ,contw 7853 20207758 branch bn_submod ecadd: 7854 da200616 arg mem_az ,rega 7855 d8a0078e arg mem_t7 ,contw 7856 204077a8 call bn_sqrmod 7857 da200676 arg mem_cx ,rega 7858 da40078e arg mem_t7 ,regb 7859 d8a00746 arg mem_t0 ,contw 785a 20407786 call bn_mulmod 785b da200616 arg mem_az ,rega 785c da40078e arg mem_t7 ,regb 785d d8a0078e arg mem_t7 ,contw 785e 20407786 call bn_mulmod 785f da20068e arg mem_cy ,rega 7860 da40078e arg mem_t7 ,regb 7861 d8a0072e arg mem_t1 ,contw 7862 20407786 call bn_mulmod 7863 da2006a6 arg mem_cz ,rega 7864 d8a0078e arg mem_t7 ,contw 7865 204077a8 call bn_sqrmod 7866 da2005e6 arg mem_ax ,rega 7867 da40078e arg mem_t7 ,regb 7868 d8a0075e arg mem_t2 ,contw 7869 20407786 call bn_mulmod 786a da2006a6 arg mem_cz ,rega 786b da40078e arg mem_t7 ,regb 786c d8a0078e arg mem_t7 ,contw 786d 20407786 call bn_mulmod 786e da2005fe arg mem_ay ,rega 786f da40078e arg mem_t7 ,regb 7870 d8a00776 arg mem_t3 ,contw 7871 20407786 call bn_mulmod 7872 da200746 arg mem_t0 ,rega 7873 da40075e arg mem_t2 ,regb 7874 d8a0078e arg mem_t7 ,contw 7875 20407758 call bn_submod 7876 da200746 arg mem_t0 ,rega 7877 da40075e arg mem_t2 ,regb 7878 d8a00746 arg mem_t0 ,contw 7879 20407755 call bn_addmod 787a da20072e arg mem_t1 ,rega 787b da400776 arg mem_t3 ,regb 787c d8a0075e arg mem_t2 ,contw 787d 20407758 call bn_submod 787e da20072e arg mem_t1 ,rega 787f da400776 arg mem_t3 ,regb 7880 d8a0072e arg mem_t1 ,contw 7881 20407755 call bn_addmod 7882 da20072e arg mem_t1 ,rega 7883 da40078e arg mem_t7 ,regb 7884 d8a0072e arg mem_t1 ,contw 7885 20407786 call bn_mulmod 7886 da2006a6 arg mem_cz ,rega 7887 da400616 arg mem_az ,regb 7888 d8a00776 arg mem_t3 ,contw 7889 20407786 call bn_mulmod 788a da200776 arg mem_t3 ,rega 788b da40078e arg mem_t7 ,regb 788c d8a006a6 arg mem_cz ,contw 788d 20407786 call bn_mulmod 788e da20078e arg mem_t7 ,rega 788f d8a0078e arg mem_t7 ,contw 7890 204077a8 call bn_sqrmod 7891 da20078e arg mem_t7 ,rega 7892 da400746 arg mem_t0 ,regb 7893 d8a00776 arg mem_t3 ,contw 7894 20407786 call bn_mulmod 7895 da20078e arg mem_t7 ,rega 7896 da40072e arg mem_t1 ,regb 7897 d8a0072e arg mem_t1 ,contw 7898 20407786 call bn_mulmod 7899 da20075e arg mem_t2 ,rega 789a d8a00676 arg mem_cx ,contw 789b 204077a8 call bn_sqrmod 789c da200676 arg mem_cx ,rega 789d da400776 arg mem_t3 ,regb 789e d8a00676 arg mem_cx ,contw 789f 20407758 call bn_submod 78a0 d8c00676 arg mem_cx ,contr 78a1 d8a0078e arg mem_t7 ,contw 78a2 20407ebe call memcpy24 78a3 da20078e arg mem_t7 ,rega 78a4 20407748 call bn_lshiftmod 78a5 da200776 arg mem_t3 ,rega 78a6 da40078e arg mem_t7 ,regb 78a7 d8a00776 arg mem_t3 ,contw 78a8 20407758 call bn_submod 78a9 da200776 arg mem_t3 ,rega 78aa da40075e arg mem_t2 ,regb 78ab d8a0075e arg mem_t2 ,contw 78ac 20407786 call bn_mulmod 78ad da20075e arg mem_t2 ,rega 78ae da40072e arg mem_t1 ,regb 78af d8a0068e arg mem_cy ,contw 78b0 20407758 call bn_submod 78b1 da20068e arg mem_cy ,rega 78b2 da400886 arg mem_p ,regb 78b3 d8a0068e arg mem_cy ,contw 78b4 18002600 force 0 ,regc 78b5 6800868e fetch 1 ,mem_cy 78b6 2feffe00 isolate1 0 ,pdata 78b7 2040f711 call bn_add ,true 78b8 1a626000 copy regc ,alarm 78b9 da20068e arg mem_cy ,rega 78ba 2040772d call bn_rshift6 78bb 680086a5 fetch 1 ,mem_cy5 78bc 2e0ffe00 isolate1 0 ,alarm 78bd 7920fe07 setflag true ,7 ,pdata 78be 600086a5 store 1 ,mem_cy5 78bf 20600000 rtn eckp_0: 78c0 680085e3 fetch 1 ,mem_ec_loopc 78c1 1fe0ffff increase -1 ,pdata 78c2 24610000 nrtn positive 78c3 600085e3 store 1 ,mem_ec_loopc 78c4 680085e2 fetch 1 ,mem_ec_infinite 78c5 205a7803 call ecdbl ,blank 78c6 680085e3 fetch 1 ,mem_ec_loopc 78c7 d8c006be arg mem_k ,contr 78c8 204076ec call bn_testbit 78c9 2020f8c0 branch eckp_0 ,true 78ca 680085e2 fetch 1 ,mem_ec_infinite 78cb 243a78ce nbranch eckp_1 ,blank 78cc 20407854 call ecadd 78cd 202078c0 branch eckp_0 eckp_1: 78ce 7005e200 jam 0 ,mem_ec_infinite 78cf d8c005e6 arg mem_ax ,contr 78d0 d8a00676 arg mem_cx ,contw 78d1 204076f2 call ec_copy 78d2 202078c0 branch eckp_0 ecunmapz: 78d3 da2006a6 arg mem_cz ,rega 78d4 d8a00776 arg mem_t3 ,contw 78d5 204077be call bn_invmod 78d6 da200776 arg mem_t3 ,rega 78d7 d8a0072e arg mem_t1 ,contw 78d8 204077a8 call bn_sqrmod 78d9 da200676 arg mem_cx ,rega 78da da40072e arg mem_t1 ,regb 78db d8a0062e arg mem_bx ,contw 78dc 20407786 call bn_mulmod 78dd da200776 arg mem_t3 ,rega 78de da40072e arg mem_t1 ,regb 78df d8a0075e arg mem_t2 ,contw 78e0 20407786 call bn_mulmod 78e1 da20068e arg mem_cy ,rega 78e2 da40075e arg mem_t2 ,regb 78e3 d8a00646 arg mem_by ,contw 78e4 20207786 branch bn_mulmod sha_endian_swap2: 78e5 e8c20000 ifetch 4 ,contr 78e6 18002204 force 4 ,rega 78e7 18a08a03 increase 3 ,contw sha_endian_loop: 78e8 e0a08000 istore 1 ,contw 78e9 1fecfe00 rshift8 pdata ,pdata 78ea 18a08bfe increase -2 ,contw 78eb 1a20a3ff increase -1 ,rega 78ec 2422f8e8 nbranch sha_endian_loop ,zero 78ed 18a08a05 increase 5 ,contw 78ee c20078e5 loop sha_endian_swap2 78ef 20600000 rtn sha_getw: 78f0 18ebfe00 lshift2 queue ,pdata 78f1 99608c00 iadd timeup ,contr 78f2 e8c20000 ifetch 4 ,contr 78f3 20600000 rtn sha_r: 78f4 18006010 force 16 ,alarm 78f5 d96005e6 arg memdat ,timeup sha_r_loop: 78f6 1e008ff9 add alarm ,-7 ,queue 78f7 204078f0 call sha_getw 78f8 98000400 iforce temp 78f9 1e008ff0 add alarm ,-16 ,queue 78fa 204078f0 call sha_getw 78fb 98408400 iadd temp ,temp 78fc 1e008ffe add alarm ,-2 ,queue 78fd 204078f0 call sha_getw 78fe 1fee7e01 shasx pdata ,1 ,pdata 78ff 98408400 iadd temp ,temp 7900 1e008ff1 add alarm ,-15 ,queue 7901 204078f0 call sha_getw 7902 1fee7e00 shasx pdata ,0 ,pdata 7903 98408400 iadd temp ,temp 7904 1e0bfe00 lshift2 alarm ,pdata 7905 99608a00 iadd timeup ,contw 7906 e0aa0000 istoret 4 ,contw 7907 1e00e001 increase 1 ,alarm 7908 2e01fe40 compare 64 ,alarm ,0xff 7909 2420f8f6 nbranch sha_r_loop ,true 790a 20600000 rtn sha_init: 790b d8c008fe arg memh0 ,contr 790c 18007007 force 7 ,regext_index sha_init_0: 790d e8c20000 ifetch 4 ,contr 790e 98005e00 iforce regext 790f 1f00f1ff increase -1 ,regext_index 7910 2021790d branch sha_init_0 ,positive 7911 20600000 rtn sha: 7912 4776403d bpatchx patch3d_4 ,mem_patch3d 7913 204078f4 call sha_r 7914 d8a006e6 arg memahbak ,contw 7915 18007000 force 0 ,regext_index sha_0: 7916 1de27e00 deposit regext 7917 e0a20000 istore 4 ,contw 7918 1f00f001 increase 1 ,regext_index 7919 2f01fe08 compare 8 ,regext_index ,0xff 791a 2420f916 nbranch sha_0 ,true 791b 204074b9 call enable_authrom 791c d9608700 arg memk ,timeup 791d de0005e6 arg memdat ,alarm 791e 18007240 force 64 ,loopcnt sha_loop: 791f ee0a0000 ifetcht 4 ,alarm 7920 e9620000 ifetch 4 ,timeup 7921 19609604 increase 4 ,timeup 7922 1e00e004 increase 4 ,alarm 7923 9840fe00 iadd temp ,pdata 7924 18007007 force 7 ,regext_index 7925 9de08400 iadd regext ,temp 7926 18007004 force 4 ,regext_index 7927 1dee7e03 shasx regext ,3 ,pdata 7928 98408400 iadd temp ,temp 7929 18007005 force 5 ,regext_index 792a 1de27e00 deposit regext 792b 18007006 force 6 ,regext_index 792c 9de2fe00 ixor regext ,pdata 792d 18007004 force 4 ,regext_index 792e 9de17e00 iand regext ,pdata 792f 18007006 force 6 ,regext_index 7930 9de2fe00 ixor regext ,pdata 7931 98408400 iadd temp ,temp 7932 18007007 force 7 ,regext_index 7933 18425e00 copy temp ,regext 7934 18007003 force 3 ,regext_index 7935 1de27e00 deposit regext 7936 9840de00 iadd temp ,regext 7937 18007000 force 0 ,regext_index 7938 1de27e00 deposit regext 7939 18007001 force 1 ,regext_index 793a 9de10400 iand regext ,temp 793b 9de1fe00 ior regext ,pdata 793c 18007002 force 2 ,regext_index 793d 9de17e00 iand regext ,pdata 793e 98418400 ior temp ,temp 793f 18007000 force 0 ,regext_index 7940 1dee7e02 shasx regext ,2 ,pdata 7941 9840fe00 iadd temp ,pdata 7942 18007007 force 7 ,regext_index 7943 9de0de00 iadd regext ,regext 7944 980efc00 regexrot 7945 c200791f loop sha_loop 7946 d8c006e6 arg memahbak ,contr 7947 18007000 force 0 ,regext_index sha_1: 7948 e8c20000 ifetch 4 ,contr 7949 9de0de00 iadd regext ,regext 794a 1f00f001 increase 1 ,regext_index 794b 2f01fe08 compare 8 ,regext_index ,0xff 794c 2420f948 nbranch sha_1 ,true 794d 202074bd branch disable_authrom sha_result: 794e d8a00a3e arg memresult ,contw 794f 18007007 force 7 ,regext_index sha_regext_save: 7950 1de27e00 deposit regext 7951 e0a20000 istore 4 ,contw 7952 1f00f1ff increase -1 ,regext_index 7953 20217950 branch sha_regext_save ,positive 7954 20600000 rtn pad_xor: 7955 d8a005e6 arg memdat ,contw 7956 18c08dfc increase -4 ,contr 7957 1f262210 sub loopcnt ,16 ,rega pad_xor_0: 7958 e8c20000 ifetch 4 ,contr 7959 9842fe00 ixor temp ,pdata 795a e0a20000 istore 4 ,contw 795b 18c08df8 increase -8 ,contr 795c c2007958 loop pad_xor_0 795d 1a227200 copy rega ,loopcnt 795e 18427e00 deposit temp pad_xor_1: 795f e0a20000 istore 4 ,contw 7960 c200795f loop pad_xor_1 7961 20600000 rtn g_noninit_number_confirm: 7962 20407967 call g_noninit0 7963 2040794e call sha_result 7964 2020798d branch g_common0 g_noninit: 7965 20407967 call g_noninit0 7966 2020798d branch g_common0 g_noninit0: 7967 d8c009de arg mem_sp_pubkey_remote_x_end ,contr 7968 d8a005e6 arg memdat ,contw 7969 18007206 force 6 ,loopcnt 796a 20407a71 call memcpy_dword_swap 796b d8c04642 arg mem_sp_pubkey_local_x_end ,contr 796c 18007206 force 6 ,loopcnt 796d 20407a71 call memcpy_dword_swap 796e d8c00a3e arg mem_sp_random_remote_end ,contr 796f 20407a70 call memcpy_dword_swap4 7970 2040790b call sha_init 7971 20407912 call sha 7972 d8c00a2e arg mem_sp_random_local_end ,contr 7973 d8a005e6 arg memdat ,contw 7974 20207984 branch g_common g_init: 7975 d8c04642 arg mem_sp_pubkey_local_x_end ,contr 7976 d8a005e6 arg memdat ,contw 7977 18007206 force 6 ,loopcnt 7978 20407a71 call memcpy_dword_swap 7979 d8c009de arg mem_sp_pubkey_remote_x_end ,contr 797a 18007206 force 6 ,loopcnt 797b 20407a71 call memcpy_dword_swap 797c d8c00a2e arg mem_sp_random_local_end ,contr 797d 20407a70 call memcpy_dword_swap4 797e 2040790b call sha_init 797f 20407912 call sha 7980 d8c00a3e arg mem_sp_random_remote_end ,contr 7981 d8a005e6 arg memdat ,contw 7982 20407984 call g_common 7983 2020798d branch g_common0 g_common: 7984 20407a70 call memcpy_dword_swap4 7985 58800000 setarg 0x800000 7986 1fed7e00 lshift8 pdata ,pdata 7987 e0a20000 istore 4 ,contw 7988 18007205 force 5 ,loopcnt 7989 20407ec6 call memset0 798a 58000280 setarg 640 798b e0a20000 istore 4 ,contw 798c 20207912 branch sha g_common0: 798d 68020a3e fetch 4 ,memresult 798e da2003e8 arg 1000 ,rega 798f 9a26fc00 idiv rega 7990 20407f86 call wait_div_end 7991 18077e00 remainder pdata 7992 600209ba store 4 ,mem_gkey 7993 1807fe00 quotient pdata 7994 da2003e8 arg 1000 ,rega 7995 9a26fc00 idiv rega 7996 20407f86 call wait_div_end 7997 18077e00 remainder pdata 7998 da2003e8 arg 1000 ,rega 7999 9a2ffe00 imul32 rega ,pdata 799a 680a09ba fetcht 4 ,mem_gkey 799b 9840fe00 iadd temp ,pdata 799c 600209ba store 4 ,mem_gkey 799d 20600000 rtn function_f1_no_key: 799e 70466400 jam 0 ,mem_passkey_1bit 799f 202079a2 branch function_f1_common function_f1: 79a0 6800c662 fetch 1 ,mem_ssp_mode_flag 79a1 c081799e bne ssp_mode_passkey_entry_flag ,function_f1_no_key function_f1_common: 79a2 4776c03d bpatchx patch3d_5 ,mem_patch3d 79a3 58363636 setarg 0x363636 79a4 1fed0400 lshift8 pdata ,temp 79a5 18418436 or_into 0x36 ,temp 79a6 68010a7e fetch 2 ,mem_sp_prarm_stack 79a7 1fe20c00 copy pdata ,contr 79a8 18007204 force 4 ,loopcnt 79a9 20407955 call pad_xor 79aa 2040790b call sha_init 79ab 20407912 call sha 79ac 68010a80 fetch 2 ,mem_sp_prarm_stack + 2 79ad 1fe20c00 copy pdata ,contr 79ae d8a005e6 arg memdat ,contw 79af 18007206 force 6 ,loopcnt 79b0 20407a71 call memcpy_dword_swap 79b1 68010a82 fetch 2 ,mem_sp_prarm_stack + 4 79b2 1fe20c00 copy pdata ,contr 79b3 18007206 force 6 ,loopcnt 79b4 20407a71 call memcpy_dword_swap 79b5 58800000 setarg 0x800000 79b6 e0a18000 istore 3 ,contw 79b7 6800c664 fetch 1 ,mem_passkey_1bit 79b8 e0a08000 istore 1 ,contw 79b9 18007e00 force 0 ,pdata 79ba e0a40000 istore 8 ,contw 79bb 58000388 setarg 0x0388 79bc e0a20000 istore 4 ,contw 79bd 20407912 call sha 79be 2040794e call sha_result 79bf d8c00a3e arg memresult ,contr 79c0 d8a00706 arg memahsave ,contw 79c1 20407ebd call memcpy32 79c2 585c5c5c setarg 0x5c5c5c 79c3 1fed0400 lshift8 pdata ,temp 79c4 1841845c or_into 0x5c ,temp 79c5 68010a7e fetch 2 ,mem_sp_prarm_stack 79c6 1fe20c00 copy pdata ,contr 79c7 18007204 force 4 ,loopcnt 79c8 20407955 call pad_xor 79c9 2040790b call sha_init 79ca 20407912 call sha 79cb d8c00726 arg memahsave_end ,contr 79cc d8a005e6 arg memdat ,contw 79cd 18007208 force 8 ,loopcnt 79ce 20407a71 call memcpy_dword_swap 79cf 58800000 setarg 0x800000 79d0 1fed7e00 lshift8 pdata ,pdata 79d1 e0a20000 istore 4 ,contw 79d2 20407ec5 call bn_zero 79d3 58000300 setarg 0x0300 79d4 e0a20000 istore 4 ,contw 79d5 20407912 call sha 79d6 2020794e branch sha_result function_f2: 79d7 58363636 setarg 0x363636 79d8 1fed0400 lshift8 pdata ,temp 79d9 18418436 or_into 0x36 ,temp 79da d8c00a1e arg mem_sp_dhkey_end ,contr 79db 18007206 force 6 ,loopcnt 79dc 20407955 call pad_xor 79dd 2040790b call sha_init 79de 20407912 call sha 79df 68010a8a fetch 2 ,mem_sp_prarm_stack + 12 79e0 1fe20c00 copy pdata ,contr 79e1 d8a005e6 arg memdat ,contw 79e2 20407a70 call memcpy_dword_swap4 79e3 68010a8c fetch 2 ,mem_sp_prarm_stack + 14 79e4 1fe20c00 copy pdata ,contr 79e5 20407a70 call memcpy_dword_swap4 79e6 5862746c setarg 0x62746c 79e7 1fed7e00 lshift8 pdata ,pdata 79e8 1fe1fe6b or_into 0x6b ,pdata 79e9 e0a20000 istore 4 ,contw 79ea d8c00733 arg mem_addr_value_end ,contr 79eb 18007203 force 3 ,loopcnt 79ec 20407a71 call memcpy_dword_swap 79ed 58800000 setarg 0x800000 79ee 1fed7e00 lshift8 pdata ,pdata 79ef e0a20000 istore 4 ,contw 79f0 18007e00 force 0 ,pdata 79f1 e0a40000 istore 8 ,contw 79f2 58000380 setarg 0x0380 79f3 e0a20000 istore 4 ,contw 79f4 20407912 call sha 79f5 2040794e call sha_result 79f6 d8c00a3e arg memresult ,contr 79f7 d8a00706 arg memahsave ,contw 79f8 20407ebd call memcpy32 79f9 585c5c5c setarg 0x5c5c5c 79fa 1fed0400 lshift8 pdata ,temp 79fb 1841845c or_into 0x5c ,temp 79fc d8c00a1e arg mem_sp_dhkey_end ,contr 79fd 18007206 force 6 ,loopcnt 79fe 20407955 call pad_xor 79ff 2040790b call sha_init 7a00 20407912 call sha 7a01 d8c00726 arg memahsave_end ,contr 7a02 d8a005e6 arg memdat ,contw 7a03 18007208 force 8 ,loopcnt 7a04 20407a71 call memcpy_dword_swap 7a05 58800000 setarg 0x800000 7a06 1fed7e00 lshift8 pdata ,pdata 7a07 e0a20000 istore 4 ,contw 7a08 20407ec5 call bn_zero 7a09 58000300 setarg 0x0300 7a0a e0a20000 istore 4 ,contw 7a0b 20407912 call sha 7a0c 2020794e branch sha_result function_f3a: 7a0d 6800c662 fetch 1 ,mem_ssp_mode_flag 7a0e c0817a1e bne ssp_mode_passkey_entry_flag ,function_f3a_no_pin function_f3a_common: 7a0f 4777403d bpatchx patch3d_6 ,mem_patch3d 7a10 58363636 setarg 0x363636 7a11 1fed0400 lshift8 pdata ,temp 7a12 18418436 or_into 0x36 ,temp 7a13 d8c00a1e arg mem_sp_dhkey_end ,contr 7a14 18007206 force 6 ,loopcnt 7a15 20407955 call pad_xor 7a16 2040790b call sha_init 7a17 20407912 call sha 7a18 d8c00a3e arg mem_sp_random_remote_end ,contr 7a19 d8a005e6 arg memdat ,contw 7a1a 20407a70 call memcpy_dword_swap4 7a1b d8c00a2e arg mem_sp_random_local_end ,contr 7a1c 20407a70 call memcpy_dword_swap4 7a1d 20207a33 branch function_f3_common function_f3a_no_pin: 7a1e 58000000 setarg 0 7a1f 6002468a store 4 ,mem_pin 7a20 20207a0f branch function_f3a_common function_f3b_no_pin: 7a21 58000000 setarg 0 7a22 6002468a store 4 ,mem_pin 7a23 20207a26 branch function_f3b_common function_f3b: 7a24 6800c662 fetch 1 ,mem_ssp_mode_flag 7a25 c0817a21 bne ssp_mode_passkey_entry_flag ,function_f3b_no_pin function_f3b_common: 7a26 58363636 setarg 0x363636 7a27 1fed0400 lshift8 pdata ,temp 7a28 18418436 or_into 0x36 ,temp 7a29 d8c00a1e arg mem_sp_dhkey_end ,contr 7a2a 18007206 force 6 ,loopcnt 7a2b 20407955 call pad_xor 7a2c 2040790b call sha_init 7a2d 20407912 call sha 7a2e d8c00a2e arg mem_sp_random_local_end ,contr 7a2f d8a005e6 arg memdat ,contw 7a30 20407a70 call memcpy_dword_swap4 7a31 d8c00a3e arg mem_sp_random_remote_end ,contr 7a32 20407a70 call memcpy_dword_swap4 function_f3_common: 7a33 58000000 setarg 0x0 7a34 e0a40000 istore 8 ,contw 7a35 e0a20000 istore 4 ,contw 7a36 6802468a fetch 4 ,mem_pin 7a37 e0a20000 istore 4 ,contw 7a38 18a20400 copy contw ,temp 7a39 70072680 jam 0x80 ,mem_addr_padding 7a3a 18420a00 copy temp ,contw 7a3b d8c00736 arg mem_addr_iocap_end ,contr 7a3c 20407a70 call memcpy_dword_swap4 7a3d 20407912 call sha 7a3e d8a005e6 arg memdat ,contw 7a3f 18007207 force 7 ,loopcnt 7a40 20407ec6 call memset0 7a41 e0a20000 istore 4 ,contw 7a42 580003f8 setarg 0x03F8 7a43 e0a20000 istore 4 ,contw 7a44 20407912 call sha 7a45 2040794e call sha_result 7a46 d8c00a3e arg memresult ,contr 7a47 d8a00706 arg memahsave ,contw 7a48 20407ebd call memcpy32 7a49 585c5c5c setarg 0x5c5c5c 7a4a 1fed0400 lshift8 pdata ,temp 7a4b 1841845c or_into 0x5c ,temp 7a4c d8c00a1e arg mem_sp_dhkey_end ,contr 7a4d 18007206 force 6 ,loopcnt 7a4e 20407955 call pad_xor 7a4f 2040790b call sha_init 7a50 20407912 call sha 7a51 d8c00726 arg memahsave_end ,contr 7a52 d8a005e6 arg memdat ,contw 7a53 18007208 force 8 ,loopcnt 7a54 20407a71 call memcpy_dword_swap 7a55 58800000 setarg 0x800000 7a56 1fed7e00 lshift8 pdata ,pdata 7a57 e0a20000 istore 4 ,contw 7a58 20407ec5 call bn_zero 7a59 58000300 setarg 0x0300 7a5a e0a20000 istore 4 ,contw 7a5b 20407912 call sha 7a5c 2020794e branch sha_result eckp_calc_init: 7a5d 7005e3c0 jam 192 ,mem_ec_loopc eckp_calc_init_1: 7a5e 680085e3 fetch 1 ,mem_ec_loopc 7a5f 207a0000 rtn blank 7a60 1fe0ffff increase -1 ,pdata 7a61 600085e3 store 1 ,mem_ec_loopc 7a62 d8c006be arg mem_k ,contr 7a63 204076ec call bn_testbit 7a64 2020fa5e branch eckp_calc_init_1 ,true 7a65 d8c005e6 arg mem_ax ,contr 7a66 d8a00676 arg mem_cx ,contw 7a67 202076f2 branch ec_copy eckp_calc: 7a68 20407803 call ecdbl 7a69 680085e3 fetch 1 ,mem_ec_loopc 7a6a 1fe0ffff increase -1 ,pdata 7a6b 600085e3 store 1 ,mem_ec_loopc 7a6c d8c006be arg mem_k ,contr 7a6d 204076ec call bn_testbit 7a6e 20608000 rtn true 7a6f 20207854 branch ecadd memcpy_dword_swap4: 7a70 18007204 force 4 ,loopcnt memcpy_dword_swap: 7a71 18c08dfc increase -4 ,contr memcpy_dword_swap_loop: 7a72 e8c20000 ifetch 4 ,contr 7a73 e0a20000 istore 4 ,contw 7a74 18c08df8 increase -8 ,contr 7a75 c2007a72 loop memcpy_dword_swap_loop 7a76 20600000 rtn sp_initialize_256: 7a77 4777c03d bpatchx patch3d_7 ,mem_patch3d 7a78 6800c4be fetch 1 ,mem_le_secure_connect_enable 7a79 203a5af0 branch le_secure_connection_disable ,blank 7a7a 20405aec call le_secure_connection_enable 7a7b 20407583 call sp_clear_flags 7a7c 20207a7d branch sp_pubkey_calc_256 sp_pubkey_calc_256: 7a7d 6800c4c3 fetch 1 ,mem_le_sc_local_key_invalid 7a7e c1800000 rtnne sp_key_invalid 7a7f 6800c4c0 fetch 1 ,mem_le_sc_calc 7a80 c1800000 rtnne sp_calc_standby 7a81 d8a045b2 arg mem_le_private_key_256 ,contw 7a82 18000e0f force 15 ,queue 7a83 204076a2 call random_generator 7a84 180a7e00 random pdata 7a85 1fe37e00 rshift pdata ,pdata 7a86 e0a10000 istore 2 ,contw 7a87 d8a00766 arg mem_k_256 ,contw 7a88 d8c045b2 arg mem_le_private_key_256 ,contr 7a89 20407ebd call memcpy32 7a8a d8a00646 arg mem_ax_256 ,contw 7a8b d8c0095e arg mem_gx_256 ,contr 7a8c 20407eb3 call memcpy64 7a8d d8a00686 arg mem_az_256 ,contw 7a8e 20407ed0 call clear_mem_256 7a8f 70068601 jam 1 ,mem_az_256 7a90 20407ac7 call eckp_calc_init_256 7a91 7044c003 jam sp_calc_pubkey_256 ,mem_le_sc_calc 7a92 20600000 rtn sp_pubkey_generated_256: 7a93 d8a045d2 arg mem_le_pubkey_local_x_256 ,contw 7a94 d8c006a6 arg mem_bx_256 ,contr 7a95 20407eb3 call memcpy64 7a96 7044c303 jam sp_key_valid_256 ,mem_le_sc_local_key_invalid 7a97 7044c000 jam sp_calc_standby ,mem_le_sc_calc 7a98 20600000 rtn sp_dhkey_calc_256: 7a99 680089b9 fetch 1 ,mem_sp_dhkey_invalid 7a9a c1800000 rtnne sp_key_invalid 7a9b 6800c4c0 fetch 1 ,mem_le_sc_calc 7a9c c1800000 rtnne sp_calc_standby 7a9d d8a00766 arg mem_k_256 ,contw 7a9e d8c045b2 arg mem_le_private_key_256 ,contr 7a9f 20407ebd call memcpy32 7aa0 d8a00646 arg mem_ax_256 ,contw 7aa1 d8c009be arg mem_le_pubkey_remote_x_256 ,contr 7aa2 20407eb3 call memcpy64 7aa3 d8a00686 arg mem_az_256 ,contw 7aa4 20407ed0 call clear_mem_256 7aa5 70068601 jam 1 ,mem_az_256 7aa6 20407ac7 call eckp_calc_init_256 7aa7 7044c004 jam sp_calc_dhkey_256 ,mem_le_sc_calc 7aa8 20600000 rtn sp_dhkey_generated_256: 7aa9 d8a009fe arg mem_le_dhkey_256 ,contw 7aaa d8c006a6 arg mem_bx_256 ,contr 7aab 20407ebd call memcpy32 7aac 7009b903 jam sp_key_valid_256 ,mem_sp_dhkey_invalid 7aad 7044c000 jam sp_calc_standby ,mem_le_sc_calc 7aae 20600000 rtn sp_calc_sequence_256: 7aaf 6800c4be fetch 1 ,mem_le_secure_connect_enable 7ab0 207a0000 rtn blank 7ab1 6800c4c0 fetch 1 ,mem_le_sc_calc 7ab2 207a0000 rtn blank 7ab3 1fe0fe80 increase 0x80 ,pdata 7ab4 6000c4c0 store 1 ,mem_le_sc_calc 7ab5 c3838000 rtnbit1 7 7ab6 680105e3 fetch 2 ,mem_ec_loopc 7ab7 203a7ab9 branch sp_calc_sequence_done_256 ,blank 7ab8 20207abf branch eckp_calc_256 sp_calc_sequence_done_256: 7ab9 4778403e bpatchx patch3e_0 ,mem_patch3e 7aba 20407ad4 call ecunmapz_256 7abb 6800c4c0 fetch 1 ,mem_le_sc_calc 7abc c001fa93 beq sp_calc_pubkey_256 ,sp_pubkey_generated_256 7abd c0027aa9 beq sp_calc_dhkey_256 ,sp_dhkey_generated_256 7abe 20600000 rtn eckp_calc_256: 7abf 20407ae6 call ecdbl_256 7ac0 680105e3 fetch 2 ,mem_ec_loopc 7ac1 1fe0ffff increase -1 ,pdata 7ac2 600105e3 store 2 ,mem_ec_loopc 7ac3 d8c00766 arg mem_k_256 ,contr 7ac4 204076ec call bn_testbit 7ac5 20608000 rtn true 7ac6 20207b37 branch ecadd_256 eckp_calc_init_256: 7ac7 4778c03e bpatchx patch3e_1 ,mem_patch3e 7ac8 58000100 setarg 256 ,pdata 7ac9 600105e3 store 2 ,mem_ec_loopc eckp_calc_init_256_1: 7aca 680105e3 fetch 2 ,mem_ec_loopc 7acb 207a0000 rtn blank 7acc 1fe0ffff increase -1 ,pdata 7acd 600105e3 store 2 ,mem_ec_loopc 7ace d8c00766 arg mem_k_256 ,contr 7acf 204076ec call bn_testbit 7ad0 2020faca branch eckp_calc_init_256_1 ,true 7ad1 d8c00646 arg mem_ax_256 ,contr 7ad2 d8a00706 arg mem_cx_256 ,contw 7ad3 20207eb2 branch memcpy96 ecunmapz_256: 7ad4 da200746 arg mem_cz_256 ,rega 7ad5 d8a00846 arg mem_t3_256 ,contw 7ad6 20407ba3 call bn_invmod_256 7ad7 da200846 arg mem_t3_256 ,rega 7ad8 d8a007e6 arg mem_t1_256 ,contw 7ad9 20407c79 call bn_sqrmod_256 7ada da200706 arg mem_cx_256 ,rega 7adb da4007e6 arg mem_t1_256 ,regb 7adc d8a006a6 arg mem_bx_256 ,contw 7add 20407be1 call bn_mulmod_256 7ade da200846 arg mem_t3_256 ,rega 7adf da4007e6 arg mem_t1_256 ,regb 7ae0 d8a00826 arg mem_t2_256 ,contw 7ae1 20407be1 call bn_mulmod_256 7ae2 da200726 arg mem_cy_256 ,rega 7ae3 da400826 arg mem_t2_256 ,regb 7ae4 d8a006c6 arg mem_by_256 ,contw 7ae5 20207be1 branch bn_mulmod_256 ecdbl_256: 7ae6 da200746 arg mem_cz_256 ,rega 7ae7 d8a00826 arg mem_t2_256 ,contw 7ae8 20407c79 call bn_sqrmod_256 7ae9 da200826 arg mem_t2_256 ,rega 7aea d8a00846 arg mem_t3_256 ,contw 7aeb 20407c79 call bn_sqrmod_256 7aec da20093e arg mem_a_256 ,rega 7aed da400846 arg mem_t3_256 ,regb 7aee d8a00846 arg mem_t3_256 ,contw 7aef 20407be1 call bn_mulmod_256 7af0 da200706 arg mem_cx_256 ,rega 7af1 d8a00826 arg mem_t2_256 ,contw 7af2 20407c79 call bn_sqrmod_256 7af3 d8c00826 arg mem_t2_256 ,contr 7af4 d8a007e6 arg mem_t1_256 ,contw 7af5 20407ebd call memcpy32 7af6 da2007e6 arg mem_t1_256 ,rega 7af7 20407c80 call bn_lshiftmod_256 7af8 da200826 arg mem_t2_256 ,rega 7af9 da4007e6 arg mem_t1_256 ,regb 7afa d8a00826 arg mem_t2_256 ,contw 7afb 20407c7d call bn_addmod_256 7afc da200826 arg mem_t2_256 ,rega 7afd da400846 arg mem_t3_256 ,regb 7afe d8a00826 arg mem_t2_256 ,contw 7aff 20407c7d call bn_addmod_256 7b00 d8c00706 arg mem_cx_256 ,contr 7b01 d8a007e6 arg mem_t1_256 ,contw 7b02 20407ebd call memcpy32 7b03 da200726 arg mem_cy_256 ,rega 7b04 d8a00846 arg mem_t3_256 ,contw 7b05 20407c79 call bn_sqrmod_256 7b06 da2007e6 arg mem_t1_256 ,rega 7b07 20407c80 call bn_lshiftmod_256 7b08 da2007e6 arg mem_t1_256 ,rega 7b09 20407c80 call bn_lshiftmod_256 7b0a da2007e6 arg mem_t1_256 ,rega 7b0b da400846 arg mem_t3_256 ,regb 7b0c d8a007e6 arg mem_t1_256 ,contw 7b0d 20407be1 call bn_mulmod_256 7b0e da200846 arg mem_t3_256 ,rega 7b0f d8a00806 arg mem_t0_256 ,contw 7b10 20407c79 call bn_sqrmod_256 7b11 da200806 arg mem_t0_256 ,rega 7b12 20407c80 call bn_lshiftmod_256 7b13 da200806 arg mem_t0_256 ,rega 7b14 20407c80 call bn_lshiftmod_256 7b15 da200806 arg mem_t0_256 ,rega 7b16 20407c80 call bn_lshiftmod_256 7b17 d8c00726 arg mem_cy_256 ,contr 7b18 d8a00846 arg mem_t3_256 ,contw 7b19 20407ebd call memcpy32 7b1a da200846 arg mem_t3_256 ,rega 7b1b 20407c80 call bn_lshiftmod_256 7b1c da200846 arg mem_t3_256 ,rega 7b1d da400746 arg mem_cz_256 ,regb 7b1e d8a00746 arg mem_cz_256 ,contw 7b1f 20407be1 call bn_mulmod_256 7b20 da200826 arg mem_t2_256 ,rega 7b21 d8a00846 arg mem_t3_256 ,contw 7b22 20407c79 call bn_sqrmod_256 7b23 da200846 arg mem_t3_256 ,rega 7b24 da4007e6 arg mem_t1_256 ,regb 7b25 d8a00846 arg mem_t3_256 ,contw 7b26 20407c96 call bn_submod_256 7b27 da200846 arg mem_t3_256 ,rega 7b28 da4007e6 arg mem_t1_256 ,regb 7b29 d8a00706 arg mem_cx_256 ,contw 7b2a 20407c96 call bn_submod_256 7b2b da2007e6 arg mem_t1_256 ,rega 7b2c da400706 arg mem_cx_256 ,regb 7b2d d8a00846 arg mem_t3_256 ,contw 7b2e 20407c96 call bn_submod_256 7b2f da200846 arg mem_t3_256 ,rega 7b30 da400826 arg mem_t2_256 ,regb 7b31 d8a00846 arg mem_t3_256 ,contw 7b32 20407be1 call bn_mulmod_256 7b33 da200846 arg mem_t3_256 ,rega 7b34 da400806 arg mem_t0_256 ,regb 7b35 d8a00726 arg mem_cy_256 ,contw 7b36 20207c96 branch bn_submod_256 ecadd_256: 7b37 da200686 arg mem_az_256 ,rega 7b38 d8a00866 arg mem_t7_256 ,contw 7b39 20407c79 call bn_sqrmod_256 7b3a da200706 arg mem_cx_256 ,rega 7b3b da400866 arg mem_t7_256 ,regb 7b3c d8a00806 arg mem_t0_256 ,contw 7b3d 20407be1 call bn_mulmod_256 7b3e da200686 arg mem_az_256 ,rega 7b3f da400866 arg mem_t7_256 ,regb 7b40 d8a00866 arg mem_t7_256 ,contw 7b41 20407be1 call bn_mulmod_256 7b42 da200726 arg mem_cy_256 ,rega 7b43 da400866 arg mem_t7_256 ,regb 7b44 d8a007e6 arg mem_t1_256 ,contw 7b45 20407be1 call bn_mulmod_256 7b46 da200746 arg mem_cz_256 ,rega 7b47 d8a00866 arg mem_t7_256 ,contw 7b48 20407c79 call bn_sqrmod_256 7b49 da200646 arg mem_ax_256 ,rega 7b4a da400866 arg mem_t7_256 ,regb 7b4b d8a00826 arg mem_t2_256 ,contw 7b4c 20407be1 call bn_mulmod_256 7b4d da200746 arg mem_cz_256 ,rega 7b4e da400866 arg mem_t7_256 ,regb 7b4f d8a00866 arg mem_t7_256 ,contw 7b50 20407be1 call bn_mulmod_256 7b51 da200666 arg mem_ay_256 ,rega 7b52 da400866 arg mem_t7_256 ,regb 7b53 d8a00846 arg mem_t3_256 ,contw 7b54 20407be1 call bn_mulmod_256 7b55 da400806 arg mem_t0_256 ,regb 7b56 da200826 arg mem_t2_256 ,rega 7b57 d8a00866 arg mem_t7_256 ,contw 7b58 20407c96 call bn_submod_256 7b59 da200806 arg mem_t0_256 ,rega 7b5a da400826 arg mem_t2_256 ,regb 7b5b d8a00806 arg mem_t0_256 ,contw 7b5c 20407c7d call bn_addmod_256 7b5d da4007e6 arg mem_t1_256 ,regb 7b5e da200846 arg mem_t3_256 ,rega 7b5f d8a00826 arg mem_t2_256 ,contw 7b60 20407c96 call bn_submod_256 7b61 da2007e6 arg mem_t1_256 ,rega 7b62 da400846 arg mem_t3_256 ,regb 7b63 d8a007e6 arg mem_t1_256 ,contw 7b64 20407c7d call bn_addmod_256 7b65 da2007e6 arg mem_t1_256 ,rega 7b66 da400866 arg mem_t7_256 ,regb 7b67 d8a007e6 arg mem_t1_256 ,contw 7b68 20407be1 call bn_mulmod_256 7b69 da200746 arg mem_cz_256 ,rega 7b6a da400686 arg mem_az_256 ,regb 7b6b d8a00846 arg mem_t3_256 ,contw 7b6c 20407be1 call bn_mulmod_256 7b6d da200846 arg mem_t3_256 ,rega 7b6e da400866 arg mem_t7_256 ,regb 7b6f d8a00746 arg mem_cz_256 ,contw 7b70 20407be1 call bn_mulmod_256 7b71 da200866 arg mem_t7_256 ,rega 7b72 d8a00866 arg mem_t7_256 ,contw 7b73 20407c79 call bn_sqrmod_256 7b74 da200866 arg mem_t7_256 ,rega 7b75 da400806 arg mem_t0_256 ,regb 7b76 d8a00846 arg mem_t3_256 ,contw 7b77 20407be1 call bn_mulmod_256 7b78 da200866 arg mem_t7_256 ,rega 7b79 da4007e6 arg mem_t1_256 ,regb 7b7a d8a007e6 arg mem_t1_256 ,contw 7b7b 20407be1 call bn_mulmod_256 7b7c da200826 arg mem_t2_256 ,rega 7b7d d8a00706 arg mem_cx_256 ,contw 7b7e 20407c79 call bn_sqrmod_256 7b7f da200706 arg mem_cx_256 ,rega 7b80 da400846 arg mem_t3_256 ,regb 7b81 d8a00706 arg mem_cx_256 ,contw 7b82 20407c96 call bn_submod_256 7b83 d8c00706 arg mem_cx_256 ,contr 7b84 d8a00866 arg mem_t7_256 ,contw 7b85 20407ebd call memcpy32 7b86 da200866 arg mem_t7_256 ,rega 7b87 20407c80 call bn_lshiftmod_256 7b88 da200846 arg mem_t3_256 ,rega 7b89 da400866 arg mem_t7_256 ,regb 7b8a d8a00846 arg mem_t3_256 ,contw 7b8b 20407c96 call bn_submod_256 7b8c da200846 arg mem_t3_256 ,rega 7b8d da400826 arg mem_t2_256 ,regb 7b8e d8a00826 arg mem_t2_256 ,contw 7b8f 20407be1 call bn_mulmod_256 7b90 da200826 arg mem_t2_256 ,rega 7b91 da4007e6 arg mem_t1_256 ,regb 7b92 d8a00726 arg mem_cy_256 ,contw 7b93 20407c96 call bn_submod_256 7b94 da200726 arg mem_cy_256 ,rega 7b95 da40091e arg mem_p_256 ,regb 7b96 d8a00726 arg mem_cy_256 ,contw 7b97 18002600 force 0 ,regc 7b98 68008726 fetch 1 ,mem_cy_256 7b99 2feffe00 isolate1 0 ,pdata 7b9a 2040fc7b call bn_add_256 ,true 7b9b 1a626000 copy regc ,alarm 7b9c da200726 arg mem_cy_256 ,rega 7b9d 20407cab call bn_rshift_256 7b9e 68008745 fetch 1 ,mem_cy5_256 7b9f 2e0ffe00 isolate1 0 ,alarm 7ba0 7920fe07 setflag true ,7 ,pdata 7ba1 60008745 store 1 ,mem_cy5_256 7ba2 20600000 rtn bn_invmod_256: 7ba3 18a21600 copy contw ,timeup 7ba4 d8a00806 arg mem_tmp0_256 ,contw 7ba5 20407ed0 call clear_mem_256 7ba6 18007e00 force 0 ,pdata 7ba7 60020826 store 4 ,mem_t2_256 7ba8 70080601 jam 1 ,mem_tmp0_256 7ba9 d8a00786 arg mem_tmp1_256 ,contw 7baa 20407ed2 call clear_mem_512 7bab d8c0091e arg mem_p_256 ,contr 7bac d8a007c6 arg mem_tmp2_256 ,contw 7bad 20407ebd call memcpy32 7bae 1a220c00 copy rega ,contr 7baf d8a007e6 arg mem_tmp3_256 ,contw 7bb0 20407ebd call memcpy32 bn_invmod_256_2: 7bb1 d8c007e6 arg mem_tmp3_256 ,contr 7bb2 20407cb5 call bn_eq_zero_256 7bb3 203a7bda branch bn_invmod_256_0 ,blank 7bb4 da2007e6 arg mem_tmp3_256 ,rega 7bb5 da400806 arg mem_tmp0_256 ,regb 7bb6 20407cb8 call bn_rshifteven_256 7bb7 da2007c6 arg mem_tmp2_256 ,rega 7bb8 da400786 arg mem_tmp1_256 ,regb 7bb9 20407cb8 call bn_rshifteven_256 7bba da2007e6 arg mem_tmp3_256 ,rega 7bbb da4007c6 arg mem_tmp2_256 ,regb 7bbc 20407cb1 call bn_bigeq_256 7bbd 20217bcc branch bn_invmod_256_1 ,positive 7bbe da2007c6 arg mem_tmp2_256 ,rega 7bbf da4007e6 arg mem_tmp3_256 ,regb 7bc0 1a220a00 copy rega ,contw 7bc1 20407ca9 call bn_sub_256 7bc2 da200806 arg mem_tmp0_256 ,rega 7bc3 da400786 arg mem_tmp1_256 ,regb 7bc4 1a420a00 copy regb ,contw 7bc5 20407c7b call bn_add_256 7bc6 ea208000 ifetch 1 ,rega 7bc7 9a60a600 iadd regc ,regc 7bc8 ea408000 ifetch 1 ,regb 7bc9 9a60fe00 iadd regc ,pdata 7bca e2408000 istore 1 ,regb 7bcb 20207bb1 branch bn_invmod_256_2 bn_invmod_256_1: 7bcc da2007e6 arg mem_tmp3_256 ,rega 7bcd da4007c6 arg mem_tmp2_256 ,regb 7bce 1a220a00 copy rega ,contw 7bcf 20407ca9 call bn_sub_256 7bd0 da200786 arg mem_tmp1_256 ,rega 7bd1 da400806 arg mem_tmp0_256 ,regb 7bd2 1a420a00 copy regb ,contw 7bd3 20407c7b call bn_add_256 7bd4 ea208000 ifetch 1 ,rega 7bd5 9a60a600 iadd regc ,regc 7bd6 ea408000 ifetch 1 ,regb 7bd7 9a60fe00 iadd regc ,pdata 7bd8 e2408000 istore 1 ,regb 7bd9 20207bb1 branch bn_invmod_256_2 bn_invmod_256_0: 7bda da200786 arg mem_tmp1_256 ,rega 7bdb 19620a00 copy timeup ,contw 7bdc 20407c0a call bn_p256mod 7bdd da20091e arg mem_p_256 ,rega 7bde 19622400 copy timeup ,regb 7bdf 19620a00 copy timeup ,contw 7be0 20207c96 branch bn_submod_256 bn_mulmod_256: 7be1 18a21600 copy contw ,timeup 7be2 18007000 force 0 ,regext_index 7be3 d8a00786 arg mem_tmp1_256 ,contw 7be4 20407ed2 call clear_mem_512 7be5 d8a00ad2 arg mem_regext ,contw 7be6 20407ed2 call clear_mem_512 7be7 1a220c00 copy rega ,contr 7be8 700ad200 jam 0 ,mem_regext 7be9 58000000 setarg 0 7bea 20407c73 call bn_load_mem 7beb 1a420c00 copy regb ,contr 7bec 20407c77 call bn_load_256 7bed 18000e00 force 0 ,queue 7bee d8a00786 arg mem_tmp1_256 ,contw bn_mulmod_256_1: 7bef d8400ad2 arg mem_regext ,temp 7bf0 18e22400 copy queue ,regb 7bf1 1a4bfe00 lshift2 regb ,pdata 7bf2 9840a400 iadd temp ,regb 7bf3 18000400 force 0 ,temp 7bf4 18002600 force 0 ,regc bn_mulmod_256_0: 7bf5 e8a20000 ifetch 4 ,contw 7bf6 98002200 iforce rega 7bf7 ea420000 ifetch 4 ,regb 7bf8 1a627000 copy regc ,regext_index 7bf9 9deffe00 imul32 regext ,pdata 7bfa 9a20fe00 iadd rega ,pdata 7bfb 9840fe00 iadd temp ,pdata 7bfc e0a20000 istore 4 ,contw 7bfd 1fef0400 rshift32 pdata ,temp 7bfe 1a60a601 increase 1 ,regc 7bff 2a61fe08 compare 8 ,regc ,0xff 7c00 2420fbf5 nbranch bn_mulmod_256_0 ,true 7c01 18427e00 deposit temp 7c02 e0a20000 istore 4 ,contw 7c03 18a08be0 increase -32 ,contw 7c04 18e08e01 increase 1 ,queue 7c05 28e1fe08 compare 8 ,queue ,0xff 7c06 2420fbef nbranch bn_mulmod_256_1 ,true 7c07 da200786 arg mem_tmp1_256 ,rega 7c08 19620a00 copy timeup ,contw 7c09 20207c0a branch bn_p256mod bn_p256mod: 7c0a 4779403e bpatchx patch3e_2 ,mem_patch3e 7c0b 18a21600 copy contw ,timeup 7c0c 1a226000 copy rega ,alarm 7c0d da4007c6 arg mem_tmp2_256 ,regb 7c0e 1a420a00 copy regb ,contw 7c0f 20407ecd call memset0_4 7c10 e0a40000 istore 8 ,contw 7c11 1a208c2c add rega ,44 ,contr 7c12 20407eb9 call memcpy8 7c13 20407eb5 call memcpy12 7c14 1a422200 copy regb ,rega 7c15 20407c80 call bn_lshiftmod_256 7c16 da4007c6 arg mem_tmp2_256 ,regb 7c17 1e022200 copy alarm ,rega 7c18 19620a00 copy timeup ,contw 7c19 20407c7d call bn_addmod_256 7c1a da4007c6 arg mem_tmp2_256 ,regb 7c1b 1a420a00 copy regb ,contw 7c1c 20407ecd call memset0_4 7c1d e0a40000 istore 8 ,contw 7c1e 1e008c30 add alarm ,48 ,contr 7c1f 20407ebf call memcpy16 7c20 20407ecd call memset0_4 7c21 1a422200 copy regb ,rega 7c22 20407c80 call bn_lshiftmod_256 7c23 da4007c6 arg mem_tmp2_256 ,regb 7c24 19622200 copy timeup ,rega 7c25 1a220a00 copy rega ,contw 7c26 20407c7d call bn_addmod_256 7c27 da4007c6 arg mem_tmp2_256 ,regb 7c28 1a420a00 copy regb ,contw 7c29 1e008c20 add alarm ,32 ,contr 7c2a 20407eb5 call memcpy12 7c2b 20407ecd call memset0_4 7c2c e0a40000 istore 8 ,contw 7c2d 1e008c38 add alarm ,56 ,contr 7c2e 20407eb9 call memcpy8 7c2f 19622200 copy timeup ,rega 7c30 1a220a00 copy rega ,contw 7c31 20407c7d call bn_addmod_256 7c32 da4007c6 arg mem_tmp2_256 ,regb 7c33 1a420a00 copy regb ,contw 7c34 1e008c24 add alarm ,36 ,contr 7c35 20407eb5 call memcpy12 7c36 1e008c34 add alarm ,52 ,contr 7c37 20407eb5 call memcpy12 7c38 1e008c34 add alarm ,52 ,contr 7c39 20407eb6 call memcpy4 7c3a 1e008c20 add alarm ,32 ,contr 7c3b 20407eb6 call memcpy4 7c3c 19622200 copy timeup ,rega 7c3d 1a220a00 copy rega ,contw 7c3e 20407c7d call bn_addmod_256 7c3f da4007c6 arg mem_tmp2_256 ,regb 7c40 1a420a00 copy regb ,contw 7c41 1e008c2c add alarm ,44 ,contr 7c42 20407eb5 call memcpy12 7c43 20407ecd call memset0_4 7c44 e0a40000 istore 8 ,contw 7c45 1e008c20 add alarm ,32 ,contr 7c46 20407eb6 call memcpy4 7c47 1e008c28 add alarm ,40 ,contr 7c48 20407eb6 call memcpy4 7c49 19622200 copy timeup ,rega 7c4a 1a220a00 copy rega ,contw 7c4b 20407c96 call bn_submod_256 7c4c da4007c6 arg mem_tmp2_256 ,regb 7c4d 1a420a00 copy regb ,contw 7c4e 1e008c30 add alarm ,48 ,contr 7c4f 20407eb9 call memcpy8 7c50 20407eb9 call memcpy8 7c51 18007e00 force 0 ,pdata 7c52 e0a40000 istore 8 ,contw 7c53 1e008c24 add alarm ,36 ,contr 7c54 20407eb6 call memcpy4 7c55 1e008c2c add alarm ,44 ,contr 7c56 20407eb6 call memcpy4 7c57 19622200 copy timeup ,rega 7c58 1a220a00 copy rega ,contw 7c59 20407c96 call bn_submod_256 7c5a da4007c6 arg mem_tmp2_256 ,regb 7c5b 1a420a00 copy regb ,contw 7c5c 1e008c34 add alarm ,52 ,contr 7c5d 20407eb5 call memcpy12 7c5e 1e008c20 add alarm ,32 ,contr 7c5f 20407eb5 call memcpy12 7c60 20407ecd call memset0_4 7c61 1e008c30 add alarm ,48 ,contr 7c62 20407eb6 call memcpy4 7c63 19622200 copy timeup ,rega 7c64 1a220a00 copy rega ,contw 7c65 20407c96 call bn_submod_256 7c66 da4007c6 arg mem_tmp2_256 ,regb 7c67 1a420a00 copy regb ,contw 7c68 1e008c38 add alarm ,56 ,contr 7c69 20407eb9 call memcpy8 7c6a 20407ecd call memset0_4 7c6b 1e008c24 add alarm ,36 ,contr 7c6c 20407eb5 call memcpy12 7c6d 20407ecd call memset0_4 7c6e 1e008c34 add alarm ,52 ,contr 7c6f 20407eb6 call memcpy4 7c70 19622200 copy timeup ,rega 7c71 1a220a00 copy rega ,contw 7c72 20207c96 branch bn_submod_256 bn_load_mem: 7c73 18007220 force 32 ,loopcnt 7c74 d8a00ad2 arg mem_regext ,contw 7c75 98a08a00 iadd contw ,contw 7c76 20207f01 branch memcpy bn_load_256: 7c77 18007208 force 8 ,loopcnt 7c78 20207781 branch bn_load_0 bn_sqrmod_256: 7c79 1a222400 copy rega ,regb 7c7a 20207be1 branch bn_mulmod_256 bn_add_256: 7c7b 18007208 force 8 ,loopcnt 7c7c 20207712 branch bn_add + 1 bn_addmod_256: 7c7d 20407c7b call bn_add_256 7c7e 18a22200 copy contw ,rega 7c7f 20207c81 branch bn_lshiftmod_ismod_256 bn_lshiftmod_256: 7c80 20407cae call bn_lshift_256 bn_lshiftmod_ismod_256: 7c81 2a6ffe00 isolate1 0 ,regc 7c82 2020fc8a branch bn_lshiftmod_p_256 ,true 7c83 da40091e arg mem_p_256 ,regb 7c84 1a222600 copy rega ,regc 7c85 1a20a3e0 increase -32 ,rega 7c86 20407cb1 call bn_bigeq_256 7c87 24610000 nrtn positive 7c88 1a622200 copy regc ,rega 7c89 20207c92 branch sub_p2_256 bn_lshiftmod_p_256: 7c8a 20407c92 call sub_p2_256 7c8b 1a222600 copy rega ,regc 7c8c 1a20a3e0 increase -32 ,rega 7c8d da40091e arg mem_p_256 ,regb 7c8e 20407cb1 call bn_bigeq_256 7c8f 24610000 nrtn positive 7c90 1a622200 copy regc ,rega 7c91 20207c92 branch sub_p2_256 sub_p2_256: 7c92 1a20a3e0 increase -32 ,rega 7c93 da40091e arg mem_p_256 ,regb 7c94 1a220a00 copy rega ,contw 7c95 20207ca9 branch bn_sub_256 bn_submod_256: 7c96 20407ca9 call bn_sub_256 7c97 2020fca0 branch bn_submod_256_np ,true 7c98 18a0a3e0 add contw ,-32 ,rega 7c99 da40091e arg mem_p_256 ,regb 7c9a 20407cb1 call bn_bigeq_256 7c9b 24610000 nrtn positive 7c9c da40091e arg mem_p_256 ,regb 7c9d 18a0a3e0 add contw ,-32 ,rega 7c9e 1a220a00 copy rega ,contw 7c9f 20207ca9 branch bn_sub_256 bn_submod_256_np: 7ca0 18a0a3e0 add contw ,-32 ,rega 7ca1 da40091e arg mem_p_256 ,regb 7ca2 1a220a00 copy rega ,contw 7ca3 20407c7b call bn_add_256 7ca4 20608000 rtn true 7ca5 18a0a3e0 add contw ,-32 ,rega 7ca6 da40091e arg mem_p_256 ,regb 7ca7 1a220a00 copy rega ,contw 7ca8 20207c7b branch bn_add_256 bn_sub_256: 7ca9 18007208 force 8 ,loopcnt 7caa 20207720 branch bn_sub + 1 bn_rshift_256: 7cab 18007208 force 8 ,loopcnt 7cac 1a20a21c increase 28 ,rega 7cad 2020772f branch bn_rshift bn_lshift_256: 7cae 18007208 force 8 ,loopcnt 7caf 18002600 force 0 ,regc 7cb0 2020773d branch bn_lshift_0 bn_bigeq_256: 7cb1 18007208 force 8 ,loopcnt 7cb2 1a20a21c increase 28 ,rega 7cb3 1a40a41c increase 28 ,regb 7cb4 20207707 branch bn_bigeq_0 bn_eq_zero_256: 7cb5 e8c40000 ifetch 8 ,contr 7cb6 247a0000 nrtn blank 7cb7 202076f5 branch bn_eq_zero bn_rshifteven_256: 7cb8 1a226000 copy rega ,alarm bn_rshifteven_256_1: 7cb9 1e022200 copy alarm ,rega 7cba ea208000 ifetch 1 ,rega 7cbb 2feffe00 isolate1 0 ,pdata 7cbc 20608000 rtn true 7cbd 20407cab call bn_rshift_256 7cbe ea408000 ifetch 1 ,regb 7cbf 2fec0000 isolate0 0 ,pdata 7cc0 2020fcc8 branch bn_rshifteven_256_0 ,true 7cc1 da20091e arg mem_p_256 ,rega 7cc2 1a420a00 copy regb ,contw 7cc3 20407c7b call bn_add_256 7cc4 ea408000 ifetch 1 ,regb 7cc5 9a60fe00 iadd regc ,pdata 7cc6 e2408000 istore 1 ,regb 7cc7 1a40a5e0 increase -32 ,regb bn_rshifteven_256_0: 7cc8 1a40a220 add regb ,32 ,rega 7cc9 18007209 force 9 ,loopcnt 7cca 2040772f call bn_rshift 7ccb 20207cb9 branch bn_rshifteven_256_1 ui_init: 7ccc 20402c65 call lpm_disable_exen_output 7ccd 20758000 rtn wake 7cce 20407cd3 call ui_button_init 7ccf 20407d75 call ui_timer_init 7cd0 20207d08 branch ui_led_init_global ui_dispatch: 7cd1 20407d29 call ui_led_dispatch 7cd2 20207d64 branch ui_timer_check ui_button_init: 7cd3 6800c686 fetch 1 ,mem_ui_button_gpio 7cd4 c17f8000 rtneq ui_button_gpio_disable 7cd5 98000400 iforce temp 7cd6 2040680e call gpio_config_output 7cd7 6808c686 fetcht 1 ,mem_ui_button_gpio 7cd8 20406825 call gpio_out_inactive 7cd9 20000064 nop 100 7cda 6808c686 fetcht 1 ,mem_ui_button_gpio 7cdb 204067fb call gpio_config_input 7cdc 20207cdd branch ui_button_polling ui_button_polling: 7cdd 4779c03e bpatchx patch3e_3 ,mem_patch3e 7cde 6800c686 fetch 1 ,mem_ui_button_gpio 7cdf c17f8000 rtneq ui_button_gpio_disable 7ce0 1fe20400 copy pdata ,temp 7ce1 2040681d call gpio_get_bit 7ce2 2420fcef nbranch ui_button_up ,true ui_button_down: 7ce3 20407cf9 call ui_button_check_long_press 7ce4 68014682 fetch 2 ,mem_ui_state_map 7ce5 79207e0c set1 ui_state_btn_down 7ce6 60014682 store 2 ,mem_ui_state_map 7ce7 6800c679 fetch 1 ,mem_ui_button_last_state 7ce8 c1000000 rtneq ui_button_state_down 7ce9 70467900 jam ui_button_state_down ,mem_ui_button_last_state 7cea 6800c685 fetch 1 ,mem_ui_button_timeout 7ceb 6000c678 store 1 ,mem_ui_button_timer 7cec 20407d00 call lpm_button_get_wake_lock 7ced 700a992c jam bt_evt_button_down ,mem_fifo_temp 7cee 20207d86 branch ui_ipc_send_event ui_button_up: 7cef 68014682 fetch 2 ,mem_ui_state_map 7cf0 793ffe0c set0 ui_state_btn_down 7cf1 60014682 store 2 ,mem_ui_state_map 7cf2 6800c679 fetch 1 ,mem_ui_button_last_state 7cf3 c1008000 rtneq ui_button_state_up 7cf4 70467901 jam ui_button_state_up ,mem_ui_button_last_state 7cf5 70467800 jam 0 ,mem_ui_button_timer 7cf6 20407d02 call lpm_button_clean_wake_lock 7cf7 700a992d jam bt_evt_button_up ,mem_fifo_temp 7cf8 20207d86 branch ui_ipc_send_event ui_button_check_long_press: 7cf9 6800c678 fetch 1 ,mem_ui_button_timer 7cfa 207a0000 rtn blank 7cfb 1fe0ffff increase -1 ,pdata 7cfc 6000c678 store 1 ,mem_ui_button_timer 7cfd 247a0000 nrtn blank 7cfe 700a9910 jam bt_evt_button_long_pressed ,mem_fifo_temp 7cff 20207d86 branch ui_ipc_send_event lpm_button_get_wake_lock: 7d00 d8e00007 arg wake_lock_button ,queue 7d01 20202c32 branch lpm_get_wake_lock lpm_button_clean_wake_lock: 7d02 d8e00007 arg wake_lock_button ,queue 7d03 20202c36 branch lpm_put_wake_lock calc_curr_struct_prt: 7d04 6801421b fetch 2 ,mem_ui_led_struct_ptr 7d05 1a2fa40b mul32 rega ,led_offset_length ,regb 7d06 9a40a400 iadd regb ,regb 7d07 20600000 rtn ui_led_init_global: 7d08 6800c21a fetch 1 ,mem_ui_led_struct_num 7d09 207a0000 rtn blank 7d0a 1fe27200 copy pdata ,loopcnt 7d0b 6801421b fetch 2 ,mem_ui_led_struct_ptr 7d0c 1fe22400 copy pdata ,regb ui_led_init_loop: 7d0d 1a40a602 add regb ,led_offset_led_gpio ,regc 7d0e ea688000 ifetcht 1 ,regc 7d0f 2040680e call gpio_config_output 7d10 20407d32 call ui_led_off_static 7d11 1a40a40b increase led_offset_length ,regb 7d12 c2007d0d loop ui_led_init_loop 7d13 20600000 rtn ui_led_on_global: 7d14 20407d04 call calc_curr_struct_prt 7d15 58000002 setarg ui_led_state_lighting 7d16 e2408000 istore 1 ,regb 7d17 20407d5e call ui_led_stop_timer 7d18 20207d35 branch ui_led_on_static ui_led_blink_stop_global: ui_led_off_global: 7d19 20407d04 call calc_curr_struct_prt 7d1a 58000003 setarg ui_led_state_darking 7d1b e2408000 istore 1 ,regb 7d1c 20407d5e call ui_led_stop_timer 7d1d 20207d32 branch ui_led_off_static ui_led_blink_start_global: 7d1e 20407d04 call calc_curr_struct_prt 7d1f 58000001 setarg ui_led_state_blink_start 7d20 e2408000 istore 1 ,regb 7d21 580000ff setarg led_infinite_flash_num 7d22 e0a08000 istore 1 ,contw 7d23 20207d32 branch ui_led_off_static ui_led_set_style_global: 7d24 20407d04 call calc_curr_struct_prt 7d25 df20000b arg led_offset_length ,loopcnt 7d26 1a620c00 copy regc ,contr 7d27 1a420a00 copy regb ,contw 7d28 20207ef4 branch memcpy_fast ui_led_dispatch: 7d29 6800c21a fetch 1 ,mem_ui_led_struct_num 7d2a 207a0000 rtn blank 7d2b da200000 arg 0 ,rega ui_led_blink_polling: 7d2c 20407d38 call ui_led_change_style_by_type 7d2d 1a20a201 increase 1 ,rega 7d2e 6800c21a fetch 1 ,mem_ui_led_struct_num 7d2f 9a267c00 isub rega ,null 7d30 20628000 rtn zero 7d31 20207d2c branch ui_led_blink_polling ui_led_off_static: 7d32 1a40a602 add regb ,led_offset_led_gpio ,regc 7d33 ea688000 ifetcht 1 ,regc 7d34 20206825 branch gpio_out_inactive ui_led_on_static: 7d35 1a40a602 add regb ,led_offset_led_gpio ,regc 7d36 ea688000 ifetcht 1 ,regc 7d37 20206829 branch gpio_out_active ui_led_change_style_by_type: 7d38 1a208e0b add rega ,ui_led_blink ,queue 7d39 20407f16 call timer_check 7d3a 247a0000 nrtn blank 7d3b 20407d04 call calc_curr_struct_prt 7d3c ea408000 ifetch 1 ,regb 7d3d c0017d35 beq ui_led_state_lighting ,ui_led_on_static 7d3e c001fd32 beq ui_led_state_darking ,ui_led_off_static 7d3f c0007d32 beq ui_led_state_blink_stop ,ui_led_off_static 7d40 c002fd4c beq ui_led_state_blink_darking ,ui_led_blink_state_darking ui_led_blink_state_lighting: 7d41 20407d35 call ui_led_on_static 7d42 1a40a607 add regb ,led_offset_cb_ledon ,regc 7d43 20407e7c call push_stack 7d44 ea610000 ifetch 2 ,regc 7d45 20407f9c call callback_func 7d46 20407e8c call pop_stack 7d47 58000005 setarg ui_led_state_blink_darking 7d48 e2408000 istore 1 ,regb 7d49 1a40a603 add regb ,led_offset_on_time ,regc 7d4a ea610000 ifetch 2 ,regc 7d4b 20207d5c branch ui_led_blink_timer_start ui_led_blink_state_darking: 7d4c 20407d32 call ui_led_off_static 7d4d 1a40a609 add regb ,led_offset_cb_ledoff ,regc 7d4e 20407e7c call push_stack 7d4f ea610000 ifetch 2 ,regc 7d50 20407f9c call callback_func 7d51 20407e8c call pop_stack 7d52 1a40a601 add regb ,led_offset_blink_count ,regc 7d53 ea608000 ifetch 1 ,regc 7d54 c07ffd58 beq led_infinite_flash_num ,ui_led_blink_infinite 7d55 1fe0ffff increase -1 ,pdata 7d56 e2608000 istore 1 ,regc 7d57 203a7d19 branch ui_led_blink_stop_global ,blank ui_led_blink_infinite: 7d58 58000004 setarg ui_led_state_blink_lighting 7d59 e2408000 istore 1 ,regb 7d5a 1a40a605 add regb ,led_offset_off_time ,regc 7d5b ea610000 ifetch 2 ,regc ui_led_blink_timer_start: 7d5c 1a208e0b add rega ,ui_led_blink ,queue 7d5d 20207f08 branch timer_init ui_led_stop_timer: 7d5e 58000000 setarg 0 7d5f 20207d5c branch ui_led_blink_timer_start ui_timer_timeout: 7d60 58001000 setarg 0x1000 7d61 1ff07e00 lshift16 pdata ,pdata 7d62 9a40a400 iadd regb ,regb 7d63 20600000 rtn ui_timer_check: 7d64 477a403e bpatchx patch3e_4 ,mem_patch3e 7d65 da200000 arg 0 ,rega 7d66 680a467a fetcht 4 ,mem_ui_timer_last_btclk 7d67 1c422400 copy clkn_bt ,regb 7d68 1a427e00 copy regb ,pdata 7d69 98467c00 isub temp ,null 7d6a 24417d60 ncall ui_timer_timeout ,positive ui_timer_check_loop: 7d6b 1a427e00 copy regb ,pdata 7d6c 184084a0 increase 160 ,temp 7d6d 184084a0 increase 160 ,temp 7d6e 98467c00 isub temp ,null 7d6f 24217d78 nbranch ui_timer_check_end ,positive 7d70 1a20a201 increase 1 ,rega 7d71 1a217e0f and rega ,0x0f ,pdata 7d72 243a7d6b nbranch ui_timer_check_loop ,blank 7d73 da200000 arg 0 ,rega 7d74 20407d7f call ui_timer_check_send_evt ui_timer_init: 7d75 1c427e00 copy clkn_bt ,pdata 7d76 6002467a store 4 ,mem_ui_timer_last_btclk 7d77 20600000 rtn ui_timer_check_end: 7d78 477ac03e bpatchx patch3e_5 ,mem_patch3e 7d79 1a227e00 copy rega ,pdata 7d7a 207a0000 rtn blank 7d7b 18408560 increase -160 ,temp 7d7c 18408560 increase -160 ,temp 7d7d 793f841c set0 28 ,temp 7d7e 600a467a storet 4 ,mem_ui_timer_last_btclk ui_timer_check_send_evt: 7d7f 2020335f branch app_evt_timer ui_ipc_get_lock: 7d80 70466601 jam 1 ,mem_ipc_lock_bt ui_ipc_get_lock_wait: 7d81 6800c667 fetch 1 ,mem_ipc_lock_c51 7d82 243a7d81 nbranch ui_ipc_get_lock_wait ,blank 7d83 20600000 rtn ui_ipc_put_lock: 7d84 70466600 jam 0 ,mem_ipc_lock_bt 7d85 20600000 rtn ui_ipc_send_event: 7d86 477b403e bpatchx patch3e_6 ,mem_patch3e 7d87 20407d80 call ui_ipc_get_lock 7d88 1a227e00 copy rega ,pdata 7d89 60020a91 store 4 ,mem_ipc_rega_temp 7d8a da204668 arg mem_ipc_fifo_bt2c51 ,rega 7d8b 20407fb8 call fifo_in 7d8c 68020a91 fetch 4 ,mem_ipc_rega_temp 7d8d 1fe22200 copy pdata ,rega 7d8e 20207d84 branch ui_ipc_put_lock ui_ipc_send_cmd: 7d8f 477bc03e bpatchx patch3e_7 ,mem_patch3e 7d90 20407d80 call ui_ipc_get_lock 7d91 1a227e00 copy rega ,pdata 7d92 60020a91 store 4 ,mem_ipc_rega_temp 7d93 da204670 arg mem_ipc_fifo_c512bt ,rega 7d94 20407fb8 call fifo_in 7d95 68020a91 fetch 4 ,mem_ipc_rega_temp 7d96 1fe22200 copy pdata ,rega 7d97 20207d84 branch ui_ipc_put_lock ui_ipc_clean_all_fifo: 7d98 58000000 setarg 0 7d99 60044670 store util_fifo_len ,mem_ipc_fifo_c512bt 7d9a 60044668 store util_fifo_len ,mem_ipc_fifo_bt2c51 7d9b 20600000 rtn check_51cmd: 7d9c 477c403f bpatchx patch3f_0 ,mem_patch3f 7d9d 6800c1ce fetch 1 ,mem_hci_cmd 7d9e 247a0000 nrtn blank 7d9f da204670 arg mem_ipc_fifo_c512bt ,rega 7da0 20407fd0 call fifo_is_empty 7da1 207a0000 rtn blank 7da2 700a9000 jam ipc_continue_process ,mem_ipc_skip_continue_proc 7da3 20407da7 call check_51cmd_once 7da4 68008a90 fetch 1 ,mem_ipc_skip_continue_proc 7da5 203a7d9c branch check_51cmd ,blank 7da6 20600000 rtn check_51cmd_once: 7da7 20407d80 call ui_ipc_get_lock 7da8 da204670 arg mem_ipc_fifo_c512bt ,rega 7da9 20407fc4 call fifo_out 7daa 1fe20400 copy pdata ,temp 7dab 20407d84 call ui_ipc_put_lock 7dac 477cc03f bpatchx patch3f_1 ,mem_patch3f 7dad 18427e00 copy temp ,pdata 7dae 207a0000 rtn blank 7daf c000fddd beq bt_cmd_start_discovery ,check_51cmd_start_discovery 7db0 c0017de2 beq bt_cmd_stop_discovery ,check_51cmd_stop_discovery 7db1 c001fde8 beq bt_cmd_reconnect ,check_51cmd_reconnect 7db2 c003fded beq bt_cmd_enter_sniff_subrating ,check_51cmd_enter_sniff_subrating 7db3 c0047dee beq bt_cmd_exit_sniff_subrating ,check_51cmd_exit_sniff_subrating 7db4 c004fdef beq bt_cmd_sniff_test ,check_51cmd_sniff_test 7db5 c005fdf2 beq bt_cmd_start_inquiry ,check_51cmd_inq 7db6 c0067df3 beq bt_cmd_stop_inquiry ,check_51cmd_stop_inq 7db7 c006fdf4 beq bt_cmd_start_adv ,check_51cmd_adv 7db8 c0077dfa beq bt_cmd_stop_adv ,check_51cmd_stop_adv 7db9 c007fdff beq bt_cmd_start_direct_adv ,check_51cmd_direct_adv 7dba c0087e05 beq bt_cmd_stop_direct_adv ,check_51cmd_stop_direct_adv 7dbb c009fe0f beq bt_cmd_led_off ,check_51cmd_led_off 7dbc c00a7e11 beq bt_cmd_led_on ,check_51cmd_led_on 7dbd c00afe13 beq bt_cmd_led_blink ,check_51cmd_led_start_blink 7dbe c00b7e15 beq bt_cmd_le_start_conn ,check_51cmd_le_start_con 7dbf c00bfe18 beq bt_cmd_le_start_scan ,check_51cmd_start_scan 7dc0 c00c7e1a beq bt_cmd_le_stop_scan ,check_51cmd_stop_scan 7dc1 c00cfe1d beq bt_cmd_enter_hibernate ,check_51cmd_hibernate 7dc2 c00dfe25 beq bt_cmd_le_smp_security_request ,check_51cmd_le_smp_sec_req 7dc3 c00f7e2f beq bt_cmd_bb_reconn_cancel ,check_51cmd_bb_reconn_cancel 7dc4 60008a99 store 1 ,mem_fifo_temp 7dc5 477d403f bpatchx patch3f_2 ,mem_patch3f 7dc6 204062bc call lmo_fifo_check 7dc7 243a7ddb nbranch check_51cmd_restore ,blank check_51cmd_once_continue: 7dc8 68008a99 fetch 1 ,mem_fifo_temp 7dc9 c584fdd6 bmark0 mark_context ,check_51cmd_check_idle 7dca c0027dea beq bt_cmd_disconnect ,check_51cmd_disconnect 7dcb c002cd17 beq bt_cmd_enter_sniff ,cmd_in_sniff 7dcc c0034d26 beq bt_cmd_exit_sniff ,cmd_exit_sniff 7dcd c0057df0 beq bt_cmd_set_pin_code ,check_51cmd_pincode 7dce c008fe0a beq bt_cmd_le_disconnect ,check_51cmd_le_disconnect 7dcf c0097e0e beq bt_cmd_le_update_conn ,check_51cmd_ble_update_connect_param 7dd0 c00efe26 beq bt_cmd_role_switch ,check_51cmd_role_switch 7dd1 c00fe7cc beq bt_cmd_store_reconn_info_le ,eeprom_store_le_reconn_info 7dd2 c01067d0 beq bt_cmd_store_reconn_info_bt ,eeprom_store_bd_reconn_info 7dd3 c010fe31 beq bt_cmd_dhkey_not_accept ,check_51cmd_dhkey_not_accept 7dd4 c012e70b beq bt_cmd_store_reconn_info ,check_51cmd_store_reconn_info 7dd5 20600000 rtn check_51cmd_check_idle: 7dd6 60008a99 store 1 ,mem_fifo_temp 7dd7 20402252 call context_check_idle 7dd8 2022fddb branch check_51cmd_restore ,zero 7dd9 2040225a call context_search_plap 7dda 24628000 nrtn zero check_51cmd_restore: 7ddb 700a9001 jam ipc_skip_continue_process ,mem_ipc_skip_continue_proc 7ddc 20207d8f branch ui_ipc_send_cmd check_51cmd_start_discovery: 7ddd 68014682 fetch 2 ,mem_ui_state_map 7dde 79207e06 set1 ui_state_bt_discovery 7ddf 60014682 store 2 ,mem_ui_state_map 7de0 70409303 jam 3 ,mem_scan_mode 7de1 20600000 rtn check_51cmd_stop_discovery: 7de2 70468000 jam 0 ,mem_hid_handshake_timer_count 7de3 70409300 jam 0 ,mem_scan_mode 7de4 68014682 fetch 2 ,mem_ui_state_map 7de5 793ffe06 set0 ui_state_bt_discovery 7de6 60014682 store 2 ,mem_ui_state_map 7de7 20600000 rtn check_51cmd_reconnect: 7de8 7041ce05 jam hci_cmd_create_conn ,mem_hci_cmd 7de9 20600000 rtn check_51cmd_disconnect: 7dea 70007c07 jam lmp_detach ,mem_lmo_opcode2 7deb 7004ca13 jam other_end_terminated ,mem_disconn_reason_send 7dec 20600000 rtn check_51cmd_enter_sniff_subrating: 7ded 20600000 rtn check_51cmd_exit_sniff_subrating: 7dee 20600000 rtn check_51cmd_sniff_test: 7def 20600000 rtn check_51cmd_pincode: 7df0 7004d402 jam pincode_state_pincode_ready ,mem_pincode_state 7df1 20204d0a branch cmd_pair check_51cmd_inq: 7df2 20600000 rtn check_51cmd_stop_inq: 7df3 20600000 rtn check_51cmd_adv: 7df4 70436e01 jam on ,mem_le_adv_enable 7df5 70448400 jam adv_ind ,mem_le_adv_type 7df6 68014682 fetch 2 ,mem_ui_state_map 7df7 79207e0b set1 ui_state_ble_adv ,pdata 7df8 60014682 store 2 ,mem_ui_state_map 7df9 20600000 rtn check_51cmd_stop_adv: 7dfa 68014682 fetch 2 ,mem_ui_state_map 7dfb 793ffe0b set0 ui_state_ble_adv ,pdata 7dfc 60014682 store 2 ,mem_ui_state_map 7dfd 70436e00 jam off ,mem_le_adv_enable 7dfe 20600000 rtn check_51cmd_direct_adv: 7dff 70436e01 jam on ,mem_le_adv_enable 7e00 70448401 jam adv_direct_ind ,mem_le_adv_type 7e01 68014682 fetch 2 ,mem_ui_state_map 7e02 79207e0b set1 ui_state_ble_adv ,pdata 7e03 60014682 store 2 ,mem_ui_state_map 7e04 20600000 rtn check_51cmd_stop_direct_adv: 7e05 68014682 fetch 2 ,mem_ui_state_map 7e06 793ffe0b set0 ui_state_ble_adv ,pdata 7e07 60014682 store 2 ,mem_ui_state_map 7e08 70436e00 jam off ,mem_le_adv_enable 7e09 20600000 rtn check_51cmd_le_disconnect: 7e0a 58000014 setarg 20 7e0b 6001046d store 2 ,mem_le_superto 7e0c 600144ba store 2 ,mem_le_init_superto 7e0d 20205c92 branch le_send_terminate_ind_user_terminated check_51cmd_ble_update_connect_param: 7e0e 20205abf branch le_l2cap_tx_update_req check_51cmd_led_off: 7e0f da200000 arg 0 ,rega 7e10 20207d19 branch ui_led_off_global check_51cmd_led_on: 7e11 da200000 arg 0 ,rega 7e12 20207d14 branch ui_led_on_global check_51cmd_led_start_blink: 7e13 da200000 arg 0 ,rega 7e14 20207d1e branch ui_led_blink_start_global check_51cmd_le_start_con: 7e15 70436901 jam on ,mem_le_scan_enable 7e16 7041ce1b jam hci_cmd_le_create_conn ,mem_hci_cmd 7e17 20600000 rtn check_51cmd_start_scan: 7e18 70436901 jam on ,mem_le_scan_enable 7e19 20600000 rtn check_51cmd_stop_scan: 7e1a 70436900 jam off ,mem_le_scan_enable 7e1b 7041ce00 jam 0 ,mem_hci_cmd 7e1c 20600000 rtn check_51cmd_hibernate: 7e1d 680141eb fetch 2 ,mem_cb_before_hibernate 7e1e 20407f9c call callback_func 7e1f 6800c686 fetch 1 ,mem_ui_button_gpio 7e20 c07ffe23 beq ui_button_gpio_disable ,check_51cmd_hibernate_btn_disabled 7e21 1fe20400 copy pdata ,temp 7e22 204067fb call gpio_config_input check_51cmd_hibernate_btn_disabled: 7e23 20407d98 call ui_ipc_clean_all_fifo 7e24 20202b1f branch lpm_hibernate check_51cmd_le_smp_sec_req: 7e25 20205b02 branch le_send_smp_security_request check_51cmd_role_switch: 7e26 70007c34 jam lmp_slot_offset ,mem_lmo_opcode2 7e27 79200003 set1 mark_switch_initiated ,mark 7e28 24748000 nrtn master 7e29 70455b00 jam switch_flag_init ,mem_switch_flag 7e2a 70007c13 jam lmp_switch_req ,mem_lmo_opcode2 7e2b 6800816d fetch 1 ,mem_connection_options 7e2c 793ffe02 set0 connection_switch ,pdata 7e2d 6000816d store 1 ,mem_connection_options 7e2e 20600000 rtn check_51cmd_bb_reconn_cancel: 7e2f 18000e03 force page_length_timer ,queue 7e30 20207f07 branch timer_stop check_51cmd_dhkey_not_accept: 7e31 204062f8 call tid_set_reply 7e32 70007d41 jam lmp_dhkey_check ,mem_lmi_opcode2 7e33 20205f9d branch parse_lmp_dhkey_check_reject ui_check_paring_button: 7e34 6800c682 fetch 1 ,mem_ui_state_map 7e35 c4060000 rtnbit0 ui_state_btn_down 7e36 c4038000 rtnbit0 ui_state_bt_reconnect 7e37 20207e2f branch check_51cmd_bb_reconn_cancel queue_init: 7e38 68014218 fetch 2 ,mem_queue_ptr 7e39 1fe08a02 add pdata ,queue_offset_curr_num ,contw 7e3a 58000000 setarg 0 7e3b e0a18000 istore 3 ,contw 7e3c 20600000 rtn queue_push: 7e3d 20407fe9 call disable_user 7e3e 20407e69 call queue_full 7e3f 207a0000 rtn blank 7e40 68014218 fetch 2 ,mem_queue_ptr 7e41 1fe0a402 add pdata ,queue_offset_curr_num ,regb 7e42 ea488000 ifetcht 1 ,regb 7e43 18408401 increase 1 ,temp 7e44 e2488000 istoret 1 ,regb 7e45 efe88000 ifetcht 1 ,pdata 7e46 18427200 copy temp ,loopcnt 7e47 1fe0a404 add pdata ,queue_offset_write_ptr ,regb 7e48 ea408000 ifetch 1 ,regb 7e49 984ffe00 imul32 temp ,pdata 7e4a 98c08a00 iadd contr ,contw 7e4b 1a220c00 copy rega ,contr calc_queue_next_ptr: 7e4c 20407f01 call memcpy 7e4d 20407e6d call queue_get_size 7e4e 1fe0ffff pincrease -1 7e4f ea488000 ifetcht 1 ,regb 7e50 18408401 increase 1 ,temp 7e51 98410400 iand temp ,temp 7e52 e2488000 istoret 1 ,regb 7e53 20207fe7 branch enable_user queue_pop: 7e54 20407fe9 call disable_user 7e55 20407e65 call queue_empty 7e56 207a0000 rtn blank 7e57 68014218 fetch 2 ,mem_queue_ptr 7e58 1fe0a402 add pdata ,queue_offset_curr_num ,regb 7e59 ea488000 ifetcht 1 ,regb 7e5a 184085ff increase -1 ,temp 7e5b e2488000 istoret 1 ,regb 7e5c efe88000 ifetcht 1 ,pdata 7e5d 18427200 copy temp ,loopcnt 7e5e 1fe0a403 add pdata ,queue_offset_read_ptr ,regb 7e5f ea408000 ifetch 1 ,regb 7e60 984ffe00 imul32 temp ,pdata 7e61 98c08c00 iadd contr ,contr 7e62 18c08c01 increase 1 ,contr 7e63 1a220a00 copy rega ,contw 7e64 20207e4c branch calc_queue_next_ptr queue_empty: 7e65 68014218 fetch 2 ,mem_queue_ptr 7e66 1fe08c02 add pdata ,queue_offset_curr_num ,contr 7e67 e8c08000 ifetch 1 ,contr 7e68 20600000 rtn queue_full: 7e69 20407e6d call queue_get_size 7e6a e8c88000 ifetcht 1 ,contr 7e6b 98467e00 isub temp ,pdata 7e6c 20600000 rtn queue_get_size: 7e6d 68014218 fetch 2 ,mem_queue_ptr 7e6e 1fe08c01 add pdata ,queue_offset_length ,contr 7e6f e8c08000 ifetch 1 ,contr 7e70 20600000 rtn right_shift_n: 7e71 1f267c00 sub loopcnt ,0 ,null 7e72 20628000 rtn zero right_shift_n_loop: 7e73 1fe37e00 rshift pdata ,pdata 7e74 c2007e73 loop right_shift_n_loop 7e75 20600000 rtn left_shift_n: 7e76 18007e01 force 1 ,pdata 7e77 1f267c00 sub loopcnt ,0 ,null 7e78 20628000 rtn zero left_shift_n_loop: 7e79 1fe3fe00 lshift pdata ,pdata 7e7a c2007e79 loop left_shift_n_loop 7e7b 20600000 rtn push_stack: 7e7c 18a27e00 deposit contw 7e7d 60010abb store 2 ,mem_contw 7e7e 600c0aa2 storet 8 ,mem_temp 7e7f 19627e00 deposit timeup 7e80 60020aaa store 4 ,mem_timeup 7e81 20407e85 call push_stack_rega_b_c 7e82 18c27e00 deposit contr 7e83 60010ab9 store 2 ,mem_contr 7e84 20600000 rtn push_stack_rega_b_c: 7e85 1a227e00 deposit rega 7e86 60020aae store 4 ,mem_rega 7e87 1a427e00 deposit regb 7e88 60020ab2 store 4 ,mem_regb 7e89 1a627e00 deposit regc 7e8a 60018ab6 store 3 ,mem_regc 7e8b 20600000 rtn pop_stack: 7e8c 680c0aa2 fetcht 8 ,mem_temp 7e8d 68020aaa fetch 4 ,mem_timeup 7e8e 98001600 iforce timeup 7e8f 20407e95 call pop_stack_rega_b_c 7e90 68010abb fetch 2 ,mem_contw 7e91 98000a00 iforce contw 7e92 68010ab9 fetch 2 ,mem_contr 7e93 98000c00 iforce contr 7e94 20600000 rtn pop_stack_rega_b_c: 7e95 68020aae fetch 4 ,mem_rega 7e96 98002200 iforce rega 7e97 68020ab2 fetch 4 ,mem_regb 7e98 98002400 iforce regb 7e99 68018ab6 fetch 3 ,mem_regc 7e9a 98002600 iforce regc 7e9b 20600000 rtn get_contw: 7e9c 68010abb fetch 2 ,mem_contw 7e9d 1fe20a00 copy pdata ,contw 7e9e 20600000 rtn get_contr: 7e9f 68010ab9 fetch 2 ,mem_contr 7ea0 1fe20c00 copy pdata ,contr 7ea1 20600000 rtn store_contw: 7ea2 18a27e00 copy contw ,pdata 7ea3 60010abb store 2 ,mem_contw 7ea4 20600000 rtn store_contr: 7ea5 18c27e00 copy contr ,pdata 7ea6 60010ab9 store 2 ,mem_contr 7ea7 20600000 rtn save_cont_pointers: 7ea8 18a27e00 copy contw ,pdata 7ea9 60010a97 store 2 ,mem_hold_contw 7eaa 18c27e00 copy contr ,pdata 7eab 60010a95 store 2 ,mem_hold_contr 7eac 20600000 rtn load_cont_pointers: 7ead 68010a97 fetch 2 ,mem_hold_contw 7eae 1fe20a00 copy pdata ,contw 7eaf 68010a95 fetch 2 ,mem_hold_contr 7eb0 1fe20c00 copy pdata ,contr 7eb1 20600000 rtn memcpy96: 7eb2 20407ebd call memcpy32 memcpy64: 7eb3 20407ebd call memcpy32 7eb4 20207ebd branch memcpy32 memcpy12: 7eb5 20407eb9 call memcpy8 memcpy4: 7eb6 e8c20000 ifetch 4 ,contr 7eb7 e0a20000 istore 4 ,contw 7eb8 20600000 rtn memcpy8: 7eb9 e8c40000 ifetch 8 ,contr 7eba e0a40000 istore 8 ,contw 7ebb 20600000 rtn memcpy48: 7ebc 20407ebf call memcpy16 memcpy32: 7ebd 20407eb9 call memcpy8 memcpy24: 7ebe 20407eb9 call memcpy8 memcpy16: 7ebf 20407eb9 call memcpy8 7ec0 20207eb9 branch memcpy8 delay_10ms: 7ec1 df20000a arg 10 ,loopcnt delay_ms_wait: 7ec2 20002ee0 nop 12000 7ec3 c2007ec2 loop delay_ms_wait 7ec4 20600000 rtn bn_zero: 7ec5 18007203 force 3 ,loopcnt memset0: 7ec6 18007e00 force 0 ,pdata memset8: 7ec7 e0a40000 istore 8 ,contw 7ec8 c2007ec7 loop memset8 7ec9 20600000 rtn memset0_8: 7eca 18007e00 force 0 ,pdata 7ecb e0a40000 istore 8 ,contw 7ecc 20600000 rtn memset0_4: 7ecd 18007e00 force 0 ,pdata 7ece e0a20000 istore 4 ,contw 7ecf 20600000 rtn clear_mem_256: 7ed0 18007204 force 4 ,loopcnt 7ed1 20207ec6 branch memset0 clear_mem_512: 7ed2 18007208 force 8 ,loopcnt 7ed3 20207ec6 branch memset0 clear_mem: 7ed4 1f227e00 deposit loopcnt 7ed5 207a0000 rtn blank 7ed6 58000000 setarg 0 clear_mem_loop: 7ed7 e0a08000 istore 1 ,contw 7ed8 c2007ed7 loop clear_mem_loop 7ed9 20600000 rtn clear_temp_block: 7eda df200020 arg 32 ,loopcnt 7edb d8a00ac2 arg mem_temp_block0 ,contw 7edc 20207ed4 branch clear_mem xor_loop: 7edd ea620000 ifetch 4 ,regc 7ede ea2a0000 ifetcht 4 ,rega 7edf 9842fe00 ixor temp ,pdata 7ee0 e0a20000 istore 4 ,contw 7ee1 1a20a204 increase 4 ,rega 7ee2 1a60a604 increase 4 ,regc 7ee3 c2007edd loop xor_loop 7ee4 20600000 rtn inverse_data: 7ee5 477dc03f bpatchx patch3f_3 ,mem_patch3f 7ee6 1f227e00 copy loopcnt ,pdata 7ee7 1fe67c01 sub pdata ,1 ,null 7ee8 20610000 rtn positive 7ee9 9a20a400 iadd rega ,regb 7eea 1a40a5ff increase -1 ,regb 7eeb 1f237200 rshift loopcnt ,loopcnt inverse_loop: 7eec ea288000 ifetcht 1 ,rega 7eed ea408000 ifetch 1 ,regb 7eee e2208000 istore 1 ,rega 7eef e2488000 istoret 1 ,regb 7ef0 1a40a5ff increase -1 ,regb 7ef1 1a20a201 increase 1 ,rega 7ef2 c2007eec loop inverse_loop 7ef3 20600000 rtn memcpy_fast: 7ef4 1f227e00 deposit loopcnt 7ef5 207a0000 rtn blank memcpy_fast_loop: 7ef6 1f20f3f8 increase -8 ,loopcnt 7ef7 20417eb9 call memcpy8 ,positive 7ef8 20628000 rtn zero 7ef9 20217ef6 branch memcpy_fast_loop ,positive 7efa 1f20f208 increase 8 ,loopcnt memcpy_fast_loop_four: 7efb 1f20f3fc increase -4 ,loopcnt 7efc 20417eb6 call memcpy4 ,positive 7efd 20628000 rtn zero 7efe 20217efb branch memcpy_fast_loop_four ,positive 7eff 1f20f204 increase 4 ,loopcnt 7f00 20207f01 branch memcpy memcpy: 7f01 1f227e00 deposit loopcnt 7f02 207a0000 rtn blank memcpy_loop: 7f03 e8c08000 ifetch 1 ,contr 7f04 e0a08000 istore 1 ,contw 7f05 c2007f03 loop memcpy_loop 7f06 20600000 rtn timer_stop: 7f07 58000000 setarg 0 timer_init: 7f08 1c430400 rshift clkn_bt ,temp 7f09 600a4094 storet 4 ,mem_last_clkn 7f0a d8a0419d arg mem_timers ,contw 7f0b 98000400 iforce temp 7f0c 18e3fe00 lshift queue ,pdata 7f0d 98a08a00 iadd contw ,contw 7f0e e0a90000 istoret 2 ,contw 7f0f 477e403f bpatchx patch3f_4 ,mem_patch3f 7f10 20600000 rtn timer_check_timeout: 7f11 d9600800 arg 0x800 ,timeup 7f12 19701600 lshift16 timeup ,timeup 7f13 9960fe00 iadd timeup ,pdata 7f14 20600000 rtn timer_reinit: 7f15 d8e00000 arg 0 ,queue timer_check: 7f16 477ec03f bpatchx patch3f_5 ,mem_patch3f 7f17 680a4094 fetcht 4 ,mem_last_clkn 7f18 1c437e00 rshift clkn_bt ,pdata 7f19 60024094 store 4 ,mem_last_clkn 7f1a 98467c00 isub temp ,null 7f1b 24417f11 ncall timer_check_timeout ,positive 7f1c 98461600 isub temp ,timeup 7f1d 19620400 copy timeup ,temp 7f1e d8c0419d arg mem_timers ,contr 7f1f 18c20a00 copy contr ,contw 7f20 df200010 arg 16 ,loopcnt timer_loop: 7f21 e8c10000 ifetch 2 ,contr 7f22 98467e00 isub temp ,pdata 7f23 20217f25 branch timer_counting ,positive 7f24 18007e00 force 0 ,pdata timer_counting: 7f25 e0a10000 istore 2 ,contw 7f26 c2007f21 loop timer_loop 7f27 d8c0419d arg mem_timers ,contr 7f28 18e3fe00 lshift queue ,pdata 7f29 98c08c00 iadd contr ,contr 7f2a e8c10000 ifetch 2 ,contr 7f2b 20600000 rtn clk_add: 7f2c 98408400 iadd temp ,temp 7f2d 18427200 copy temp ,loopcnt 7f2e 58000ea6 setarg 3750 7f2f 9f267e00 isub loopcnt ,pdata 7f30 20610000 rtn positive 7f31 1fe67e00 sub pdata ,0 ,pdata 7f32 18510400 rshift16 temp ,temp 7f33 18408401 increase 1 ,temp 7f34 18500400 lshift16 temp ,temp 7f35 98418400 ior temp ,temp 7f36 20600000 rtn clk_diff_rt: 7f37 20407f39 call clk_diff 7f38 20207f43 branch clk2rt clk_diff: 7f39 78547c00 disable user 7f3a 98467e00 isub temp ,pdata 7f3b 20217f3e branch clk_diff_pos ,positive 7f3c 78347c00 enable user 7f3d 1fe67e00 sub pdata ,0 ,pdata clk_diff_pos: 7f3e c4078000 rtnbit0 15 7f3f d85f0ea6 arg -61786 ,temp 7f40 9840fe00 iadd temp ,pdata 7f41 793ffe40 set0 64 ,pdata 7f42 20600000 rtn clk2rt: 7f43 98000c00 iforce contr 7f44 1ff17e00 rshift16 pdata ,pdata 7f45 d8400ea6 arg 3750 ,temp 7f46 984ffe00 imul32 temp ,pdata 7f47 98c0fe00 iadd contr ,pdata 7f48 20600000 rtn clk2lpo: 7f49 1fed7e00 lshift8 pdata ,pdata 7f4a 1ff27e00 lshift4 pdata ,pdata 7f4b 6809c16f fetcht 3 ,mem_clks_per_lpo 7f4c 9846fc00 idiv temp 7f4d 20407f86 call wait_div_end 7f4e 18078400 quotient temp 7f4f 20600000 rtn clk2bt: 7f50 d8400ea6 arg 3750 ,temp 7f51 9846fc00 idiv temp 7f52 20407f86 call wait_div_end 7f53 1807fe00 quotient pdata 7f54 1ff07e00 lshift16 pdata ,pdata 7f55 18070400 remainder temp 7f56 98418400 ior temp ,temp 7f57 20600000 rtn string2dec_from_uart: 7f58 d8400000 arg 0 ,temp string2dec_from_uart_done: 7f59 18422600 copy temp ,regc 7f5a e8608000 ifetch 1 ,contru 7f5b 20407f64 call uchar2dialog 7f5c 1a620400 copy regc ,temp 7f5d 20407f95 call swap 7f5e da40000a arg 10 ,regb 7f5f 9a4ffe00 imul32 regb ,pdata 7f60 9840fe00 iadd temp ,pdata 7f61 1fe20400 copy pdata ,temp 7f62 c2007f59 loop string2dec_from_uart_done 7f63 20600000 rtn uchar2dialog: 7f64 d840003a arg 0x3a ,temp 7f65 98467c00 isub temp ,null 7f66 24217f6d nbranch uchar2dialog_number ,positive 7f67 d8400061 arg 0x61 ,temp 7f68 98467c00 isub temp ,null 7f69 20217f70 branch uchar2dialog_a2f ,positive 7f6a d8400037 arg 0x37 ,temp 7f6b 98467e00 isub temp ,pdata 7f6c 20600000 rtn uchar2dialog_number: 7f6d d8400030 arg 0x30 ,temp 7f6e 98467e00 isub temp ,pdata 7f6f 20600000 rtn uchar2dialog_a2f: 7f70 d8400057 arg 0x57 ,temp 7f71 98467e00 isub temp ,pdata 7f72 20600000 rtn pn9: 7f73 18426000 copy temp ,alarm 7f74 580001ff setarg 0x1ff 7f75 18002400 force 0 ,regb pn9_loop: 7f76 1fe92200 rshift3 pdata ,rega 7f77 1a232200 rshift rega ,rega 7f78 9a22a200 ixor rega ,rega 7f79 2a2ffe00 isolate1 0 ,rega 7f7a 7920fe09 setflag true ,9 ,pdata 7f7b 18430400 rshift temp ,temp 7f7c 2feffe00 isolate1 0 ,pdata 7f7d 79208407 setflag true ,7 ,temp 7f7e 1fe37e00 rshift pdata ,pdata 7f7f 1a40a401 increase 1 ,regb 7f80 2a400e00 compare 0 ,regb ,0x7 7f81 2420ff76 nbranch pn9_loop ,true 7f82 e0a88000 istoret 1 ,contw 7f83 c2007f76 loop pn9_loop 7f84 1e020400 copy alarm ,temp 7f85 20600000 rtn wait_div_end: 7f86 207a8000 rtn modone 7f87 20207f86 branch wait_div_end compare_loop: string_compare: 7f88 ea208000 ifetch 1 ,rega 7f89 ea488000 ifetcht 1 ,regb 7f8a 98467c00 isub temp ,null 7f8b 24628000 nrtn zero 7f8c 1a20a201 increase 1 ,rega 7f8d 1a40a401 increase 1 ,regb 7f8e c2007f88 loop string_compare 7f8f 18007c00 force 0 ,null 7f90 20600000 rtn ceiling: 7f91 98467c00 isub temp ,null 7f92 24610000 nrtn positive 7f93 18427e00 deposit temp 7f94 20600000 rtn swap: 7f95 9840fe00 iadd temp ,pdata 7f96 98460400 isub temp ,temp 7f97 98467e00 isub temp ,pdata 7f98 20600000 rtn clean_mem: 7f99 df200200 arg 0x200 ,loopcnt 7f9a d8a04000 arg 0x4000 ,contw 7f9b 20207ec6 branch memset0 callback_func: 7f9c 207a0000 rtn blank 7f9d 1fe27a00 copy pdata ,pc wait_uarttx: 7f9e 6811010e hfetch 2 ,core_uart_txitems 7f9f 243a7f9e nbranch wait_uarttx ,blank 7fa0 20600000 rtn ice_break: 7fa1 70820301 jam 0x1 ,core_ice_ctrl 7fa2 20600000 rtn ice_setbp: 7fa3 60110205 hstore 2 ,core_ice_break0 7fa4 68108203 hfetch 1 ,core_ice_ctrl 7fa5 79207e04 set1 4 ,pdata 7fa6 60108203 hstore 1 ,core_ice_ctrl 7fa7 20600000 rtn ice_setbp2: 7fa8 60110207 hstore 2 ,core_ice_break1 7fa9 68108203 hfetch 1 ,core_ice_ctrl 7faa 79207e06 set1 6 ,pdata 7fab 60108203 hstore 1 ,core_ice_ctrl 7fac 20600000 rtn ice_set_write_bp: 7fad 60110205 hstore 2 ,core_ice_break0 7fae 70820330 jam 0x30 ,core_ice_ctrl 7faf 20600000 rtn test_enable_white: 7fb0 68108043 hfetch 1 ,core_config 7fb1 793ffe04 set0 whiteoff_bit ,pdata 7fb2 60108043 hstore 1 ,core_config 7fb3 20600000 rtn check_uart_tx_buff: 7fb4 6811010e hfetch 2 ,core_uart_txitems 7fb5 d8400200 arg uart_air_control_threshold ,temp pdata_sub_temp: 7fb6 98467c00 isub temp ,null 7fb7 20600000 rtn fifo_in: 7fb8 477f403f bpatchx patch3f_6 ,mem_patch3f 7fb9 ea2c0000 ifetcht util_fifo_len ,rega 7fba 18417eff and temp ,0xff ,pdata 7fbb 243a7fbe nbranch fifo_in_push ,blank 7fbc 184cfe00 rshift8 temp ,pdata 7fbd e2240000 istore util_fifo_len ,rega fifo_in_push: 7fbe 1a20a207 increase util_fifo_len + util_fifo_offset ,rega 7fbf ea208000 ifetch 1 ,rega 7fc0 243a2a8c nbranch assert ,blank 7fc1 68008a99 fetch 1 ,mem_fifo_temp 7fc2 e2208000 istore 1 ,rega 7fc3 20600000 rtn fifo_out: 7fc4 477fc03f bpatchx patch3f_7 ,mem_patch3f 7fc5 df200008 arg util_fifo_len ,loopcnt 7fc6 ea240000 ifetch util_fifo_len ,rega 7fc7 207a0000 rtn blank fifo_out_loop: 7fc8 ea208000 ifetch 1 ,rega 7fc9 243a7fcd nbranch fifo_out_end ,blank 7fca 1a20a201 increase 1 ,rega 7fcb c2007fc8 loop fifo_out_loop 7fcc 20202a8c branch assert fifo_out_end: 7fcd d8400000 arg 0 ,temp 7fce e2288000 istoret 1 ,rega 7fcf 20600000 rtn fifo_is_empty: 7fd0 ea240000 ifetch util_fifo_len ,rega 7fd1 20600000 rtn fifo_is_full: 7fd2 ea208000 ifetch 1 ,rega 7fd3 20600000 rtn fifo_is_near_full: 7fd4 ea210000 ifetch 2 ,rega 7fd5 20600000 rtn fifo_content_count: 7fd6 d8400000 arg 0 ,temp fifo_content_count_loop: 7fd7 68008006 fetch 1 ,contr 7fd8 c2007fd7 loop fifo_content_count_loop ,blank 7fd9 18408401 increase 1 ,temp 7fda c2007fd7 loop fifo_content_count_loop 7fdb 18427e00 copy temp ,pdata 7fdc 20600000 rtn not_greater_than: 7fdd 98467c00 isub temp ,null 7fde 24610000 nrtn positive 7fdf 18427e00 copy temp ,pdata 7fe0 20600000 rtn disable_positive: 7fe1 18007dff force -1 ,null 7fe2 20600000 rtn enable_positive: disable_zero: 7fe3 18007c01 force 1 ,null 7fe4 20600000 rtn enable_zero: 7fe5 18007c00 force 0 ,null 7fe6 20600000 rtn enable_user: 7fe7 78347c00 enable user 7fe8 20600000 rtn disable_user: 7fe9 78547c00 disable user 7fea 20600000 rtn enable_user2: 7feb 78367c00 enable user2 7fec 20600000 rtn disable_user2: 7fed 78567c00 disable user2 7fee 20600000 rtn disable_blank: 7fef 58000001 setarg 1 7ff0 20600000 rtn enable_blank: 7ff1 58000000 setarg 0 7ff2 20600000 rtn reverse_byte: 7ff3 1f227e00 copy loopcnt ,pdata 7ff4 207a0000 rtn blank 7ff5 18c27e00 copy contr ,pdata 7ff6 9f20fe00 iadd loopcnt ,pdata 7ff7 1fe0ffff increase -1 ,pdata 7ff8 1fe20c00 copy pdata ,contr reverse_loop: 7ff9 e8c08000 ifetch 1 ,contr 7ffa 18c08dfe increase -2 ,contr 7ffb e0a08000 istore 1 ,contw 7ffc c2007ff9 loop reverse_loop 7ffd 20600000 rtn org 0x10001 z_entrance0: 10001 c0000005 beq zcode_00 ,z_page_wait_fhs_reply_ok 10002 c0008012 beq zcode_01 ,z_mouse_bb_disconnected 10003 c0010023 beq zcode_02 ,z_hid_rx_process 10004 20600000 rtn z_page_wait_fhs_reply_ok: 10005 6800800e fetch 1 ,mem_page_rcv_fhs 10006 1fe0fe01 increase 1 ,pdata 10007 6000800e store 1 ,mem_page_rcv_fhs 10008 20402435 call prepare_newconn z_master_newconn_loop: 10009 7920002c set1 mark_first_packet ,mark 1000a 204022f2 call master_newconn_once 1000b 202c0010 branch z_newconn_poll_responded ,sync 1000c 793f802c set0 mark_first_packet ,mark 1000d 20402455 call new_conn_timeout 1000e 243a0009 nbranch z_master_newconn_loop ,blank 1000f 202020fc branch page_restart z_newconn_poll_responded: 10010 793f802c set0 mark_first_packet ,mark 10011 2020215f branch newconn_poll_responded z_mouse_bb_disconnected: 10012 70480a00 jam 0 ,mem_mouse_enter_sniff_count 10013 7041e30e jam 0x0e ,mem_sniff_param_interval 10014 204041e7 call mouse_bb_discon_clear_stack 10015 68014208 fetch app_disc_rsn_size ,mem_app_disconn_reason 10016 c283c1f5 bbit1 app_disc_ble ,mouse4_0_event_bb_disconn 10017 c28033a9 bbit1 app_disc_by_button ,app_disconn_reason_clear 10018 c280801c bbit1 app_disc_after_pairing ,z_mouse_event_light_state_pairing 10019 c281001f bbit1 app_disc_after_reconn ,z_mouse_event_light_state_hibernate 1001a c281801f bbit1 app_disc_after_sniff ,z_mouse_event_light_state_hibernate 1001b 202042b0 branch mouse_start_discovery z_mouse_event_light_state_pairing: 1001c c282801f bbit1 app_disc_after_handshake ,z_mouse_event_light_state_hibernate 1001d c281801f bbit1 app_disc_after_sniff ,z_mouse_event_light_state_hibernate 1001e 202042b0 branch mouse_start_discovery z_mouse_event_light_state_hibernate: 1001f 68014682 fetch 2 ,mem_ui_state_map 10020 c28642b0 bbit1 ui_state_btn_down ,mouse_start_discovery 10021 204033a9 call app_disconn_reason_clear 10022 202033a7 branch app_bb_hibernate z_hid_rx_process: 10023 68010264 fetch 2 ,mem_l2cap_payload_ptr 10024 1fe20c00 copy pdata ,contr 10025 e8c08000 ifetch 1 ,contr 10026 6000cb04 store 1 ,mem_l2cap_rcv 10027 1fe1040f and pdata ,0x0f ,temp 10028 1ff1fe00 rshift4 pdata ,pdata 10029 c003802c beq hid_type_set_protocol ,z_hid_rx_set_protocol 1002a c0008033 beq hid_type_control ,z_hid_rx_process_hid_control 1002b 20204d39 branch hid_rx_process + 6 z_hid_rx_set_protocol: 1002c 20404d53 call hid_rx_process_handshake 1002d 704b0500 jam 0 ,mem_mouse_bt_boot_mode 1002e 6800cb04 fetch 1 ,mem_l2cap_rcv 1002f 2feffe00 isolate1 0 ,pdata 10030 20608000 rtn true 10031 704b0501 jam 1 ,mem_mouse_bt_boot_mode 10032 20600000 rtn z_hid_rx_process_hid_control: 10033 18427e00 copy temp ,pdata 10034 c0028036 beq hid_control_p_virtualcableunplug ,z_mouse_irtual_cable_unplug 10035 20204d41 branch hid_rx_process_hid_control + 2 z_mouse_irtual_cable_unplug: 10036 2040438e call mouse_irtual_cable_unplug 10037 202033a7 branch app_bb_hibernate org 0x20001 z_entrance1: 20001 c0080003 beq zcode_10 ,z_send_lmp 20002 20600000 rtn z_send_lmp: 20003 78547c00 disable user 20004 204062c1 call lmo_fifo_process 20005 68008048 fetch 1 ,mem_lmp_to_send 20006 207a0000 rtn blank 20007 c283800d bbit1 7 ,z_send_lmp_escape 20008 c0018024 beq lmp_accepted ,z_send_lmp_accepted 20009 c0188019 beq lmp_setup_complete ,z_send_lmp_setup_complete 2000a c00b801b beq lmp_sniff_req ,z_send_lmp_sniff_req 2000b c003801d beq lmp_detach ,z_send_lmp_detach 2000c 20206010 branch send_lmp0 z_send_lmp_escape: 2000d c0420010 beq lmp_ext_features_res ,z_send_lmpext_features_res 2000e c0418013 beq lmp_ext_features_req ,z_send_lmpext_features_req 2000f 2020603f branch send_lmp_escape z_send_lmpext_features_res: 20010 20400016 call z_check_ssp_enable 20011 68008048 fetch 1 ,mem_lmp_to_send 20012 20206099 branch send_lmpext_features_res z_send_lmpext_features_req: 20013 20400016 call z_check_ssp_enable 20014 68008048 fetch 1 ,mem_lmp_to_send 20015 2020610d branch send_lmpext_features_req z_check_ssp_enable: 20016 6800c65a fetch 1 ,mem_ssp_enable 20017 203a612b branch ssp_disable ,blank 20018 20206124 branch ssp_enable z_send_lmp_setup_complete: 20019 704b0301 jam 1 ,mem_bt_send_lmp_setup_complete 2001a 202061c3 branch send_lmp_setup_complete z_send_lmp_sniff_req: 2001b 704b0b04 jam 4 ,mem_mouse_bt_send_first_package_timer 2001c 202061a4 branch send_lmp_sniff_req z_send_lmp_detach: 2001d 20406152 call send_lmp_detach 2001e 6800cb57 fetch 1 ,mem_mouse_bt_reconnect_flag 2001f 207a0000 rtn blank 20020 6800804b fetch 1 ,mem_op 20021 793ffe03 set0 op_disconn ,pdata 20022 6000804b store 1 ,mem_op 20023 202002fe branch p_mouse_sensor_powerdown z_send_lmp_accepted: 20024 18007e02 force 2 ,pdata 20025 20406298 call msg_send_lmp 20026 68008049 fetch 1 ,mem_lmi_opcode 20027 e0a08000 istore 1 ,contw 20028 6000cafe store 1 ,mem_lmi_opcode_temp 20029 204062a7 call send_lmp_follow 2002a 6800cafe fetch 1 ,mem_lmi_opcode_temp 2002b c017002d beq lmp_max_slot_req ,z_send_lmp_accepted_max_slot_req 2002c 20206051 branch send_lmp_accepted + 7 z_send_lmp_accepted_max_slot_req: 2002d 6800cb01 fetch 1 ,mem_bt_rcvd_switch_req_accept 2002e 207a0000 rtn blank 2002f 704b0100 jam 0 ,mem_bt_rcvd_switch_req_accept 20030 6800cb03 fetch 1 ,mem_bt_send_lmp_setup_complete 20031 c1810000 rtnne 2 20032 704b0201 jam 1 ,mem_bt_send_max_slot_req_accept_after_switch 20033 1c427e00 copy clkn_bt ,pdata 20034 600204e9 store 4 ,mem_aurand_send_delay_time 20035 20600000 rtn org 0x40001 z_entrance3: 40001 c0180004 beq zcode_30 ,z_mouse_check_reconn_target 40002 c018802e beq zcode_31 ,z_mouse_load_flash_device_info 40003 20600000 rtn z_mouse_check_reconn_target: 40004 204002bf call p_mouse_tx_power_init 40005 704b5219 jam 25 ,mem_mouse_poweron_led_timer 40006 204004bb call p_mouse_adc_read 40007 da204721 arg mem_device1_type ,rega 40008 6800c720 fetch 1 ,mem_device_flag 40009 6808c703 fetcht 1 ,mem_24g_device_number 4000a 98467c00 isub temp ,null 4000b 2022836c branch p_mouse_start_24g_mode ,zero 4000c 6800c210 fetch 1 ,mem_xrecord_mode 4000d c0198010 beq rec_3_mode ,z_mouse3_0_check_reconn_target 4000e c01a0014 beq rec_4_mode ,z_mouse4_0_check_reconn_target 4000f 20600000 rtn z_mouse3_0_check_reconn_target: 40010 704b5701 jam 1 ,mem_mouse_bt_reconnect_flag 40011 680341d0 fetch 6 ,mem_hci_plap 40012 203a33eb branch app_bt_start_discovery_short ,blank 40013 20204274 branch mouse3_0_check_reconn_target + 3 z_mouse4_0_check_reconn_target: 40014 7047a101 jam 1 ,mem_mouse_le_reconnect_flag 40015 d840000a arg 10 ,temp 40016 6800cb65 fetch 1 ,mem_mouse_fast_conn_flag 40017 c07f8019 beq 0xff ,z_mouse4_0_reconn_target 40018 680946a8 fetcht 2 ,mem_mouse_direct_timeout z_mouse4_0_reconn_target: 40019 600946ae storet 2 ,mem_mouse_direct_timer 4001a 20403418 call app_lpm_mult_disable 4001b 6801cb6f fetch 3 ,mem_le_adv_direct_ind 4001c 6001c374 store 3 ,mem_le_adv_data + 4 4001d 20400023 call z3_le_check_adv_flag 4001e 58000004 setarg adv_flag_bredr_not_supported 4001f e0c08000 istore 1 ,contr 40020 d8c04390 arg mem_le_scan_data ,contr 40021 2040002a call z3_le_adv_data_update 40022 20207df4 branch check_51cmd_adv z3_le_check_adv_flag: 40023 da204370 arg mem_le_adv_data ,rega z3_le_check_adv_flag_loop: 40024 ea208000 ifetch 1 ,rega 40025 207a0000 rtn blank 40026 98c0a200 iadd contr ,rega 40027 e8c08000 ifetch 1 ,contr 40028 c1008000 rtneq 0x01 40029 20200024 branch z3_le_check_adv_flag_loop z3_le_adv_data_update: 4002a d8a0437b arg mem_le_adv_data + 11 ,contw 4002b df200013 arg 19 ,loopcnt 4002c 20407f01 call memcpy 4002d 202057b8 branch le_modified_name_adv z_mouse_load_flash_device_info: 4002e 2040034d call p_mouse_read_flash 4002f 20400365 call p_mouse_load_random_addr_increase_count 40030 2040431a call mouse_select_reconn_device 40031 6802477b fetch 4 ,mem_mouse_24g_addr 40032 60024c52 store 4 ,mem_24g_addr 40033 68034722 fetch 6 ,mem_device1_addr 40034 680b4b66 fetcht 6 ,mem_mouse_fast_conn_addr 40035 98467c00 isub temp ,null 40036 24228352 nbranch p_mouse_le_fast_conn_disable ,zero 40037 20400354 call p_mouse_fast_conn_init 40038 20600000 rtn org 0x50001 z_entrance4: 50001 c0200006 beq zcode_40 ,z_le_update_param 50002 c0208018 beq zcode_41 ,z_le_update_channel_map 50003 c0210025 beq zcode_42 ,z_le_mouse_bb_event_connect_complete 50004 c021802c beq zcode_43 ,z_quit_connection_cont 50005 20600000 rtn z_le_update_param: 50006 2040000e call z_mouse_le_conn_param_check 50007 2020557d branch le_update_param + 8 z_mouse_le_lpm_mult_reinit: 50008 6800c7c7 fetch 1 ,mem_lpm_mult_init 50009 6000c172 store 1 ,mem_lpm_mult z_mouse_le_conn_param_lpm_enable: 5000a 7047c600 jam le_lpm_enable ,mem_mouse_le_conn_param_reject 5000b 20600000 rtn z_mouse_le_conn_param_lpm_disable: 5000c 7047c601 jam le_lpm_disable ,mem_mouse_le_conn_param_reject 5000d 20600000 rtn z_mouse_le_conn_param_check: 5000e 6800c3d6 fetch 1 ,mem_le_new_conninterval 5000f 1fe67c0c sub pdata ,le_interval_15ms ,null 50010 2421000c nbranch z_mouse_le_conn_param_lpm_disable ,positive 50011 6800c3d8 fetch 1 ,mem_le_new_connslavelatency 50012 6808c7c7 fetcht 1 ,mem_lpm_mult_init 50013 98467c00 isub temp ,null 50014 20210008 branch z_mouse_le_lpm_mult_reinit ,positive 50015 6800c3d8 fetch 1 ,mem_le_new_connslavelatency 50016 6000c172 store 1 ,mem_lpm_mult 50017 2020000a branch z_mouse_le_conn_param_lpm_enable z_le_update_channel_map: 50018 6800843f fetch 1 ,mem_le_state 50019 c4030000 rtnbit0 lestate_update_map 5001a 2040001d call z_le_channel_map_overflow_check 5001b 24740000 nrtn user 5001c 202055a0 branch le_update_channel_map + 3 z_le_channel_map_overflow_check: 5001d 78347c00 enable user 5001e 6800845a fetch 1 ,mem_le_event_count + 1 5001f 1ff1fe00 rshift4 pdata ,pdata 50020 c1878000 rtnne 0x0f 50021 68008460 fetch 1 ,mem_le_instant + 1 50022 1ff1fe00 rshift4 pdata ,pdata 50023 c1800000 rtnne 0x00 50024 20207fe9 branch disable_user z_le_mouse_bb_event_connect_complete: 50025 6800c7a1 fetch 1 ,mem_mouse_le_reconnect_flag 50026 247a0000 nrtn blank 50027 68008478 fetch 1 ,mem_le_att_handle 50028 1fe67e1a sub pdata ,26 ,pdata 50029 24628000 nrtn zero 5002a 7046c600 jam 0 ,mem_le_start_encrypt_timer 5002b 20203d60 branch mouse_le_write_enable z_quit_connection_cont: 5002c 204033af call app_disconn_reason_collect_bt 5002d 204026e9 call sniff_exit 5002e 700a9902 jam bt_evt_bb_disconnected ,mem_fifo_temp 5002f 20407d86 call ui_ipc_send_event 50030 20405cf7 call init_lmp_work 50031 20404d6b call l2cap_init_work 50032 2020246e branch quit_connection_cont + 8 org 0x60001 z_entrance5: 60001 c0280003 beq zcode_50 ,z_mouse_start_discovery 60002 20600000 rtn z_mouse_start_discovery: 60003 704b5e00 jam 0 ,mem_mouse_discovery_blink_count 60004 204002bf call p_mouse_tx_power_init 60005 70479e00 jam 0 ,mem_mouse_clear_sensor_data_flag 60006 20400352 call p_mouse_le_fast_conn_disable 60007 68014682 fetch 2 ,mem_ui_state_map 60008 c2858011 bbit1 ui_state_ble_adv ,z_mouse_start_discovery_norandom 60009 20400365 call p_mouse_load_random_addr_increase_count 6000a 680947c4 fetcht 2 ,mem_random_addr_increase_count 6000b 18408401 increase 1 ,temp 6000c 600947c4 storet 2 ,mem_random_addr_increase_count 6000d 600944a1 storet 2 ,mem_le_lap + 1 6000e 20400326 call p_mouse_store_random_addr_increase_count 6000f 180a7e00 random pdata 60010 6000c4a0 store 1 ,mem_le_lap z_mouse_start_discovery_norandom: 60011 58ed8e0e setarg 0xed8e0e 60012 6001c4a3 store 3 ,mem_le_lap + 3 60013 20403418 call app_lpm_mult_disable 60014 68014687 fetch 2 ,mem_discovery_timeout 60015 600146ac store 2 ,mem_mouse_discovery_timer 60016 704b4905 jam 5 ,mem_mouse_bt_ble_led_timer 60017 70016d06 jam 6 ,mem_connection_options 60018 58000000 setarg 0 60019 600146b0 store 2 ,mem_mouse_no_data_timer 6001a 600146ae store 2 ,mem_mouse_direct_timer 6001b d8e00007 arg mouse_store_eeprom_flag ,queue 6001c 204043ce call mouse_enable_function_flag 6001d 204043ca call mouse_bt_discovery_button_down_disable 6001e 6800c092 fetch 1 ,mem_device_option 6001f 2feffe01 isolate1 mode_4_mouse ,pdata 60020 20408026 call z_check_51cmd_adv ,true 60021 6800c092 fetch 1 ,mem_device_option 60022 2feffe00 isolate1 mode_3_mouse ,pdata 60023 2040fddd call check_51cmd_start_discovery ,true 60024 704b5700 jam 0 ,mem_mouse_bt_reconnect_flag 60025 202042c4 branch mouse_start_discovery_norandom + 13 z_check_51cmd_adv: 60026 7047a100 jam 0 ,mem_mouse_le_reconnect_flag 60027 6801cb6c fetch 3 ,mem_le_adv_ind 60028 6001c374 store 3 ,mem_le_adv_data + 4 60029 2040002f call z5_le_check_adv_flag 6002a 58000005 setarg adv_flag_bredr_not_supported | adv_flag_limited_discoverable 6002b e0c08000 istore 1 ,contr 6002c d8c04b12 arg mem_le_adv_swift_pair ,contr 6002d 20400036 call z5_le_adv_data_update 6002e 20207df4 branch check_51cmd_adv z5_le_check_adv_flag: 6002f da204370 arg mem_le_adv_data ,rega z5_le_check_adv_flag_loop: 60030 ea208000 ifetch 1 ,rega 60031 207a0000 rtn blank 60032 98c0a200 iadd contr ,rega 60033 e8c08000 ifetch 1 ,contr 60034 c1008000 rtneq 0x01 60035 20200030 branch z5_le_check_adv_flag_loop z5_le_adv_data_update: 60036 d8a0437b arg mem_le_adv_data + 11 ,contw 60037 df200013 arg 19 ,loopcnt 60038 20407f01 call memcpy 60039 202057b8 branch le_modified_name_adv org 0x70001 z_entrance6: 70001 c0300004 beq zcode_60 ,z_g24_start_24g_mode 70002 c0308029 beq zcode_61 ,z_mouse_24g_attempt_fail 70003 20600000 rtn z_g24_start_24g_mode: 70004 793f8026 set0 mark_24g ,mark 70005 6800cb59 fetch 1 ,mem_24g_attempt_count 70006 1fe17e01 and pdata ,0x01 ,pdata 70007 245a001f ncall z_g24_fast_conn_all_powerful ,blank 70008 205a001c call z_g24_normal_connect ,blank 70009 6800cc3a fetch 1 ,mem_24g_pairing_sm 7000a c1ff8000 rtnne state_24g_pairing_success 7000b 204001a8 call p_g24_tx_attemp_data_prep z_g24_tx_attemp_dongle_loop: 7000c 200007d0 nop 2000 7000d 204004bb call p_mouse_adc_read 7000e 6800cc57 fetch 1 ,mem_24g_check_dongle_times 7000f c038018a beq 0x70 ,p_g24_stop_g24_mode 70010 20400170 call p_g24_transmit_receive_ack 70011 242c0024 nbranch z_g24_attemp_txdata_retry ,sync 70012 24378024 nbranch z_g24_attemp_txdata_retry ,user3 z_g24_tx_attemp_dongle_succ: 70013 79200026 set1 mark_24g ,mark 70014 58000000 setarg 0 70015 60014c57 store 2 ,mem_24g_check_dongle_times 70016 6000cb5f store 1 ,mem_mouse_24g_pair_timer 70017 6000cb59 store 1 ,mem_24g_attempt_count 70018 700a993c jam bt_evt_24g_attempt_success ,mem_fifo_temp 70019 20407d86 call ui_ipc_send_event z_g24_tx_attemp_dongle_loop_exit: 7001a 20400168 call p_g24_txbuf_clear 7001b 202003ad branch p_g24_transmit_by_interrupt_enable z_g24_normal_connect: 7001c 204002bf call p_mouse_tx_power_init 7001d 6802477b fetch 4 ,mem_mouse_24g_addr 7001e 20200021 branch z6_g24_ch_syncword_crc8_init z_g24_fast_conn_all_powerful: 7001f 7041de20 jam tx_power_pair ,mem_tx_power 70020 68024b53 fetch 4 ,mem_mouse_24g_addr_init z6_g24_ch_syncword_crc8_init: 70021 60024c52 store 4 ,mem_24g_addr 70022 204001c8 call p_g24_syncword_crc8 70023 202001e7 branch p_g24_ch z_g24_attemp_txdata_retry: 70024 68014c57 fetch 2 ,mem_24g_check_dongle_times 70025 1fe0fe01 increase 1 ,pdata 70026 60014c57 store 2 ,mem_24g_check_dongle_times 70027 204001e7 call p_g24_ch 70028 2020000c branch z_g24_tx_attemp_dongle_loop z_mouse_24g_attempt_fail: 70029 2040045f call p_mouse_sensor_powerdown_check 7002a 704b5800 jam 0 ,mem_retry_count 7002b 6800cb5f fetch 1 ,mem_mouse_24g_pair_timer 7002c 247a0000 nrtn blank 7002d 6800cb59 fetch 1 ,mem_24g_attempt_count 7002e 243a0035 nbranch z_mouse_24g_attempt_fail_again ,blank 7002f 704d6a00 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt 70030 204002bf call p_mouse_tx_power_init 70031 204001b1 call p_g24_check_51cmd_stop_24g 70032 7041bd00 jam 0 ,mem_link_key_exists 70033 20400297 call p_mouse_setgpio_hibernate 70034 2020340a branch app_enter_hibernate z_mouse_24g_attempt_fail_again: 70035 1fe0ffff increase -1 ,pdata 70036 6000cb59 store 1 ,mem_24g_attempt_count 70037 2020036c branch p_mouse_start_24g_mode org 0x80001 z_entrance7: 80001 c0380004 beq zcode_70 ,z_g24_auto_pair_start 80002 c0388032 beq zcode_71 ,z_mouse_24g_pairing_button 80003 20600000 rtn z_g24_auto_pair_start: 80004 793f8026 set0 mark_24g ,mark 80005 2040001f call z_g24_auto_pair_all_powerful 80006 204001a8 call p_g24_tx_attemp_data_prep z_g24_auto_pair_start_loop: 80007 200007d0 nop 2000 80008 6800cc58 fetch 1 ,mem_24g_check_dongle_times + 1 80009 c281018a bbit1 0x02 ,p_g24_stop_g24_mode 8000a 204004bb call p_mouse_adc_read 8000b 20400170 call p_g24_transmit_receive_ack 8000c 242c001b nbranch z_g24_auto_pair_retry ,sync 8000d 2437801b nbranch z_g24_auto_pair_retry ,user3 8000e 20400199 call p_g24_ackpayload_parse 8000f 204002bf call p_mouse_tx_power_init 80010 68024c52 fetch 4 ,mem_24g_addr 80011 680a4c36 fetcht 4 ,mem_24g_paring_addr 80012 98467c00 isub temp ,null 80013 20228029 branch z_g24_start_pairing_sm1 ,zero 80014 79200026 set1 mark_24g ,mark 80015 58000000 setarg 0 80016 60014c57 store 2 ,mem_24g_check_dongle_times 80017 700a993c jam bt_evt_24g_attempt_success ,mem_fifo_temp 80018 20407d86 call ui_ipc_send_event 80019 20400168 call p_g24_txbuf_clear 8001a 202003ad branch p_g24_transmit_by_interrupt_enable z_g24_auto_pair_retry: 8001b 68014c57 fetch 2 ,mem_24g_check_dongle_times 8001c 1fe0fe01 increase 1 ,pdata 8001d 60014c57 store 2 ,mem_24g_check_dongle_times 8001e 20200007 branch z_g24_auto_pair_start_loop z_g24_auto_pair_all_powerful: 8001f 7041de20 jam tx_power_pair ,mem_tx_power 80020 58000f0f setarg 0x0f0f 80021 60014c52 store 2 ,mem_24g_addr 80022 e0a10000 istore 2 ,contw z_g24_ch_syncword_crc8_init: 80023 204001c8 call p_g24_syncword_crc8 80024 202001e7 branch p_g24_ch z_g24_auto_pair_device_attemp: 80025 2040001f call z_g24_auto_pair_all_powerful 80026 20200007 branch z_g24_auto_pair_start_loop z_g24_auto_pair_pair_attemp: 80027 2040002d call z_g24_pair_init 80028 20200007 branch z_g24_auto_pair_start_loop z_g24_start_pairing_sm1: 80029 79200026 set1 mark_24g ,mark 8002a 2040002d call z_g24_pair_init z_g24_set_pairing_sm_1: 8002b 704c3a01 jam state_24g_pairing_1 ,mem_24g_pairing_sm 8002c 20600000 rtn z_g24_pair_init: 8002d 7041de20 jam tx_power_pair ,mem_tx_power 8002e 704c2900 jam 0 ,mem_24g_pid 8002f 704c344e jam g24_pair_ch ,mem_24g_ch 80030 68024c36 fetch 4 ,mem_24g_paring_addr 80031 202001c7 branch p_g24_update_addr_and_synccrc8 z_mouse_24g_pairing_button: 80032 d8e00003 arg mosue_24g_pairing_flag ,queue 80033 204043ce call mouse_enable_function_flag 80034 58000000 setarg 0 80035 600146ae store 2 ,mem_mouse_direct_timer 80036 6000c6b4 store 1 ,mem_mouse_send_blank_timer 80037 6000cb59 store 1 ,mem_24g_attempt_count 80038 60014c57 store 2 ,mem_24g_check_dongle_times 80039 704b5fc8 jam 200 ,mem_mouse_24g_pair_timer 8003a 204042ca call mouse_stop_discovery 8003b 20200029 branch z_g24_start_pairing_sm1 org 0x90001 z_entrance8: 90001 c0400009 beq zcode_80 ,z_mouse_setting_config 90002 20600000 rtn z_le_addr_random_config: 90003 204068a2 call load_adc_init 90004 6801421d fetch 2 ,mem_0_5_adc_io_data 90005 243a0007 nbranch z_le_otp_adc_empty ,blank 90006 58001122 setarg 0x1122 z_le_otp_adc_empty: 90007 600147c4 store 2 ,mem_random_addr_increase_count 90008 20600000 rtn z_mouse_setting_config: 90009 680240a0 fetch 4 ,mem_lap 9000a 60024c61 store 4 ,mem_24g_device_addr 9000b 20403e6e call mouse_gpio_init 9000c 6808cb45 fetcht 1 ,mem_flash_ncs_gpio 9000d 2040680e call gpio_config_output 9000e 20403e1e call mouse_param_init 9000f 2040001a call z_mouse_bt_sdp_update 90010 58000000 setarg 0 90011 60014154 store 2 ,mem_lpm_interval 90012 204068a2 call load_adc_init 90013 20403e54 call mouse_adc_init 90014 20405810 call le_set_config_fixed_ltk 90015 20405839 call le_set_justwork 90016 2040582c call le_set_fixed_ltk 90017 20405818 call le_set_config_read_authentication 90018 20400003 call z_le_addr_random_config 90019 20200313 branch p_mouse_load_flash_info_check z_mouse_bt_sdp_update: 9001a 204074b9 call enable_authrom 9001b d8c08c00 arg 0x8c00 ,contr 9001c d8a04878 arg mem_mouse_uuid_list ,contw 9001d df200171 arg 369 ,loopcnt 9001e 20407f01 call memcpy 9001f 580f0209 setarg 0x0f0209 90020 e0a18000 istore 3 ,contw 90021 58120009 setarg 0x120009 90022 e0a18000 istore 3 ,contw 90023 58100209 setarg 0x100209 90024 e0a18000 istore 3 ,contw 90025 58000009 setarg 0x000009 90026 e0a18000 istore 3 ,contw 90027 d8c08d71 arg 0x8d71 ,contr 90028 df200109 arg 265 ,loopcnt 90029 20407f01 call memcpy 9002a 70488f00 jam 0 ,mem_mouse_uuid_list + 23 9002b 7048876d jam 0x6d ,mem_mouse_uuid_list + 15 9002c 5800401f setarg 0x401f 9002d 600149dd store 2 ,mem_mouse_uuid_list + 357 9002e 58006d04 setarg 0x6d04 9002f 60014a46 store 2 ,mem_mouse_uuid_list + 462 90030 580016b0 setarg 0x16b0 90031 60014a4c store 2 ,mem_mouse_uuid_list + 468 90032 58004878 setarg mem_mouse_uuid_list 90033 60014575 store 2 ,mem_ui_uuid_table 90034 20600000 rtn org 0xa0001 z_entrance9: a0001 c0480005 beq zcode_90 ,z_g24_pairing_sm a0002 c048801f beq zcode_91 ,z_g24_paring_mode a0003 c049002f beq zcode_92 ,z_mouse_24g_pairing_complete a0004 20600000 rtn z_g24_pairing_sm: a0005 6800cc2f fetch 1 ,mem_24g_ensure a0006 c000ffe7 beq ensure_on_24g ,enable_user a0007 6800cc3a fetch 1 ,mem_24g_pairing_sm a0008 c000800c beq state_24g_pairing_1 ,z_g24_pairing_sm_1 a0009 c001000f beq state_24g_pairing_2 ,z_g24_pairing_sm_2 a000a c0018012 beq state_24g_pairing_3 ,z_g24_pairing_sm_3 a000b 20202a8c branch assert z_g24_pairing_sm_1: a000c 704c3a11 jam state_24g_pairing_1_waiting_ack ,mem_24g_pairing_sm a000d 70119eaa jam 0xaa ,mem_24g_common_temp a000e 20200014 branch z_g24_pairing_sm_common z_g24_pairing_sm_2: a000f 704c3a12 jam state_24g_pairing_2_waiting_ack ,mem_24g_pairing_sm a0010 70119e55 jam 0x55 ,mem_24g_common_temp a0011 20200014 branch z_g24_pairing_sm_common z_g24_pairing_sm_3: a0012 704c3a13 jam state_24g_pairing_3_waiting_ack ,mem_24g_pairing_sm a0013 70119e22 jam 0x22 ,mem_24g_common_temp z_g24_pairing_sm_common: a0014 6800cc2b fetch 1 ,mem_24g_data_type a0015 1fe17e07 and_into bits_data ,pdata a0016 6000919f store 1 ,mem_24g_common_temp + 1 a0017 68024c61 fetch 4 ,mem_24g_device_addr a0018 600211a0 store 4 ,mem_24g_common_temp + 2 z_g24_put_pairing_data_in_buff: a0019 7011a400 jam 0 ,mem_24g_common_temp + 6 a001a da20119e arg mem_24g_common_temp ,rega a001b d8400007 arg 7 ,temp a001c 204001b5 call p_g24_put_data_in_buff a001d 2040012d call p_g24_txdata_enable_tx a001e 20207fe7 branch enable_user z_g24_paring_mode: a001f 6800cc3a fetch 1 ,mem_24g_pairing_sm a0020 c17f8000 rtneq state_24g_pairing_success a0021 c0088025 beq state_24g_pairing_1_waiting_ack ,z_g24_pairing_sm_1_waiting_ack a0022 c0090027 beq state_24g_pairing_2_waiting_ack ,z_g24_pairing_sm_2_waiting_ack a0023 c0098029 beq state_24g_pairing_3_waiting_ack ,z_g24_pairing_sm_3_waiting_ack a0024 20600000 rtn z_g24_pairing_sm_1_waiting_ack: a0025 704c3a02 jam state_24g_pairing_2 ,mem_24g_pairing_sm a0026 2020015f branch p_g24_transmit_abandon z_g24_pairing_sm_2_waiting_ack: a0027 704c3a03 jam state_24g_pairing_3 ,mem_24g_pairing_sm a0028 2020015f branch p_g24_transmit_abandon z_g24_pairing_sm_3_waiting_ack: a0029 704c3aff jam state_24g_pairing_success ,mem_24g_pairing_sm a002a 700a9939 jam bt_evt_24g_pairing_complete ,mem_fifo_temp a002b 20407d86 call ui_ipc_send_event a002c 68024c0a fetch 4 ,mem_24g_rxpayload + 2 a002d 204001c7 call p_g24_update_addr_and_synccrc8 a002e 2020015f branch p_g24_transmit_abandon z_mouse_24g_pairing_complete: a002f 204002ce call p_mouse_init_sensor_reset a0030 20403f8d call mouse_no_data_timer_init a0031 70478b01 jam 1 ,mem_mouse_24g_enter_lpm_enable a0032 d8e00003 arg mosue_24g_pairing_flag ,queue a0033 204043d2 call mouse_disable_function_flag a0034 58000000 setarg 0 a0035 6000cb5f store 1 ,mem_mouse_24g_pair_timer a0036 6000cb59 store 1 ,mem_24g_attempt_count a0037 7046a700 jam 0 ,mem_mouse_move_flag a0038 2040405d call mouse_read_sensor_common a0039 204002bf call p_mouse_tx_power_init a003a 68024c52 fetch 4 ,mem_24g_addr a003b 6002477b store 4 ,mem_mouse_24g_addr a003c 20200321 branch p_mouse_store_flash_device_info org 0xb0001 z_entrancea: b0001 c0508006 beq zcode_a1 ,z_mouse_le_conn_param_update_rsp_recieved b0002 c0510019 beq zcode_a2 ,z_mouse_le_bb_disconnected b0003 c0518012 beq zcode_a3 ,z_mouse_bb_event_reconn_timeout b0004 c0520022 beq zcode_a4 ,z_mouse_before_hibernate b0005 20600000 rtn z_mouse_le_conn_param_update_rsp_recieved: b0006 68014509 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result b0007 c1000000 rtneq ble_signaling_connect_parameter_update_accepted b0008 68008441 fetch 1 ,mem_le_tsniff b0009 1feb7e00 rshift2 pdata ,pdata b000a 1fe67c0c sub pdata ,le_interval_15ms ,null b000b 20610000 rtn positive b000c 58000009 setarg le_interval_11_25ms b000d 60014496 store 2 ,mem_le_interval_min b000e 60014498 store 2 ,mem_le_interval_min + 2 b000f 20400446 call p_app_updata_le_param b0010 7047c601 jam le_lpm_disable ,mem_mouse_le_conn_param_reject b0011 20600000 rtn z_mouse_bb_event_reconn_timeout: z_mouse_bb_event_reconn_failed: b0012 68014682 fetch 2 ,mem_ui_state_map b0013 c3860000 rtnbit1 ui_state_btn_down b0014 c3830000 rtnbit1 ui_state_bt_discovery b0015 c3858000 rtnbit1 ui_state_ble_adv b0016 680246d3 fetch mouse_flag_len ,mem_mouse_flag b0017 c3828000 rtnbit1 mouse_bt_discovery_button_down_flag b0018 202033a7 branch app_bb_hibernate z_mouse_le_bb_disconnected: b0019 2040045f call p_mouse_sensor_powerdown_check b001a 58000007 setarg le_interval_8_75ms b001b 60014496 store 2 ,mem_le_interval_min b001c 60014498 store 2 ,mem_le_interval_min + 2 b001d 7047c600 jam le_lpm_enable ,mem_mouse_le_conn_param_reject b001e 70479e00 jam 0 ,mem_mouse_clear_sensor_data_flag b001f 204003d8 call p_mouse_data_init b0020 20405816 call le_clr_config_more_data b0021 202041d9 branch mouse_bb_disconnected z_mouse_before_hibernate: b0022 2040045f call p_mouse_sensor_powerdown_check b0023 78347c00 enable user b0024 68120138 hfetch 4 ,0x8138 b0025 79347e1a setflag user ,26 ,pdata b0026 6012004c hstore 4 ,core_lpm_reg b0027 20402c21 call lpm_write_ctrl b0028 204074bd call disable_authrom b0029 204003a6 call p_mouse_bt_led_off b002a 20400396 call p_mouse_24g_led_off b002b 20403e9f call mouse_before_hibernate_wheel_gpio_set b002c 20400297 call p_mouse_setgpio_hibernate b002d 2040035a call p_flash_deep_power_down b002e 68108081 hfetch 1 ,core_gpio_sel1 b002f 1fe17ef7 and pdata ,0xf7 ,pdata b0030 60108081 hstore 1 ,core_gpio_sel1 b0031 6810807e hfetch 1 ,core_gpio_pd2 b0032 79207e06 set1 6 ,pdata b0033 6010807e hstore 1 ,core_gpio_pd2 b0034 6810807f hfetch 1 ,core_gpio_pd3 b0035 79207e00 set1 0 ,pdata b0036 6010807f hstore 1 ,core_gpio_pd3 b0037 6808c6f3 fetcht 1 ,mem_sensor_data_gpio b0038 202067ed branch gpio_clr_wake org 0xc0001 z_entranceb: c0001 c0580007 beq zcode_b0 ,z_mouse_le_bb_event_connected c0002 c058800a beq zcode_b1 ,z_mouse_sniff_not_accept c0003 c0590010 beq zcode_b2 ,z_mouse_enter_sniff_check c0004 c0598015 beq zcode_b3 ,z_mouse_le_ll_start_encryt c0005 c05a001c beq zcode_b4 ,z_mouse_bb_event_disconnected c0006 20600000 rtn z_mouse_le_bb_event_connected: c0007 204002ce call p_mouse_init_sensor_reset c0008 204003d8 call p_mouse_data_init c0009 202041c3 branch mouse_le_bb_event_connected z_mouse_sniff_not_accept: c000a 6800c80a fetch 1 ,mem_mouse_enter_sniff_count c000b c1010000 rtneq 2 c000c 1fe0fe01 increase 1 ,pdata c000d 6000c80a store 1 ,mem_mouse_enter_sniff_count c000e 7041e312 jam 0x12 ,mem_sniff_param_interval c000f 2020340e branch app_bt_enter_sniff z_mouse_enter_sniff_check: c0010 6800c80a fetch 1 ,mem_mouse_enter_sniff_count c0011 c1810000 rtnne 2 c0012 70480a00 jam 0 ,mem_mouse_enter_sniff_count c0013 7041e30e jam 0x0e ,mem_sniff_param_interval c0014 2020340e branch app_bt_enter_sniff z_mouse_le_ll_start_encryt: c0015 6800c7a1 fetch 1 ,mem_mouse_le_reconnect_flag c0016 c0008018 beq 1 ,z_mouse_le_ll_reconn_start_encryt c0017 2020001a branch z_mouse_le_ll_enable_start_enc_flag z_mouse_le_ll_reconn_start_encryt: c0018 20400446 call p_app_updata_le_param c0019 7046c605 jam 5 ,mem_le_start_encrypt_timer z_mouse_le_ll_enable_start_enc_flag: c001a d8e00001 arg ll_start_enc_flag ,queue c001b 202041b9 branch mouse_le_enable_connect_flag z_mouse_bb_event_disconnected: c001c 2040045f call p_mouse_sensor_powerdown_check c001d 704b0100 jam 0 ,mem_bt_rcvd_switch_req_accept c001e 704b0300 jam 0 ,mem_bt_send_lmp_setup_complete c001f 704b0c00 jam 0 ,mem_mouse_bt_send_first_package_flag c0020 202041d9 branch mouse_bb_disconnected branch mouse_bb_disconnected